last executing test programs: 20m17.604186638s ago: executing program 32 (id=24): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000a80)=@gcm_128={{0x303}, "9ff3d6661480294c", "5fa3c0bf46782bbee21b09b7446edc75", "5bee93e1", "f11bb8cba3046ce3"}, 0x28) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 19m35.923534526s ago: executing program 33 (id=132): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x2, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="12e01b39"], 0x1000f) 19m30.424639238s ago: executing program 34 (id=147): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f00000002c0)=""/29, 0xfffffe19, 0x0, 0x0, 0x0) 19m26.872796697s ago: executing program 35 (id=158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 19m26.148512128s ago: executing program 36 (id=161): r0 = socket(0x1, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010000d042abd70f8ffffffffffffff00", @ANYRES32=r3, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010004"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[], 0xfd, 0x1d9, &(0x7f0000000500)="$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") r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x440}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r3, 0x13, 0x800}}}}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x50}}, 0x0) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000000)="2400000011005f0414f9f4070009040081000000490000000000000008000f0001000000", 0x24) 19m25.537007241s ago: executing program 37 (id=163): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000000)="270000001400030000000000120f0a0011000100f5fe0012ff000000078a151f750800390005", 0x26) 19m21.233225933s ago: executing program 38 (id=168): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @broadcast}}}, 0x84) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000240)=[0xffe7, 0x5, 0xdbb5, 0x40]) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153bdf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000010000085000000500000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x404c810) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000400)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 18m43.876129616s ago: executing program 39 (id=181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x68, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xac1e0100}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x5c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4064}, 0x4800) 18m32.264209214s ago: executing program 40 (id=213): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x3a322000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) add_key$keyring(&(0x7f00000101c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) recvmmsg(r0, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}, 0x60}], 0x1, 0x2000, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000001180)=ANY=[], 0x1, 0xa08, &(0x7f0000008280)="$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") mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 17m28.471481416s ago: executing program 41 (id=471): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[@ANYBLOB="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"], 0x5, 0x5505, &(0x7f0000000340)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x30160f8, 0x0, 0x81, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) write$6lowpan_enable(r0, &(0x7f0000000080)='0', 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000019, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000124c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 17m27.586503755s ago: executing program 42 (id=478): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 17m25.205158433s ago: executing program 43 (id=492): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f0000000540)) 16m38.429848035s ago: executing program 44 (id=693): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x81}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8020}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000ac0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200ebfb}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x8, 0x0, 0x0}}, 0x10) 16m13.686559693s ago: executing program 45 (id=796): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000040000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)='9', 0x1}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 15m47.160537755s ago: executing program 46 (id=924): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x3) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x42, 0xa, 0x400001, 0x4000009, 0x10}) 15m24.595548712s ago: executing program 47 (id=1048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9f0000000b060103004000000000000001000009340008800c000780981429fb5c4e0756180007801400170073797a5f74756e0000000000000000000c00078008000940000001050b00020073797a31000000000800094000000008050001000700000018000780060004404e220a000000000000000140e0000001090002dab78aba3100000000300007800800094000000006050003000000000008000840000000161400"], 0xb8}, 0x1, 0x0, 0x0, 0x4000005}, 0x24010000) 15m20.302457776s ago: executing program 48 (id=1068): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="400504", @ANYRES8=r1], 0x7) 14m44.368930504s ago: executing program 49 (id=1154): move_pages(0x0, 0x200000000000007d, &(0x7f0000000040)=[&(0x7f0000ffb000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) 14m28.633187348s ago: executing program 50 (id=1232): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) r3 = timerfd_create(0x1, 0x80000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=no=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 14m2.254757596s ago: executing program 51 (id=1263): socket(0x10, 0x3, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe68, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x2}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {0x0, 0x0, 0x0, 0xe54b}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x70}, {}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x2}, {0x5}, {}, {}, {}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000750200060030000008000100ac1414ff"], 0x24}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7m6.247072715s ago: executing program 8 (id=1791): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSND(r2, 0x8040451a, 0xffffffffffffffff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r4 = memfd_create(&(0x7f0000000440)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xff05) fchdir(0xffffffffffffffff) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m0.152589355s ago: executing program 8 (id=1796): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x6576204, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc010643a, &(0x7f0000000200)={0x4000000, 0x0, 0x6}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000700000004000000000000130200000000002e2e2e5f00"], 0x0, 0x2b, 0x0, 0x100001, 0x8000}, 0x28) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, 0x0, 0x0, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x40010000) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, 0x0) 6m56.677030419s ago: executing program 8 (id=1799): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x804000, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616f733d665c137266645dc23d8dd84bf8fc632cba119a6e4f8b1f1e26106e2ae29fd47ea39c2bc4915c4f662765a94238946794558f477f1d6b12c044e5ed65b784b7a2746114974950a342db36f471f410ac6e5dbdcd9955ac5f2e4e78d40f350a0e508d10a67dfb66b5cdc274a2dffbb61d61ece08e77c7874711", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=fscache,noextend,nodevmap,uname']) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711222000000000095000000000000006e222baccc273d3dbc7fa57b241ad5253a2bbab399dbdd8245202c28e286328fe4605928ad547bf50ad1c487edaee9a5c53d891a590d74868710fadea9f8aba7c3c6b3e98e45d375c7ba8dcf13bbec2448c7f863514ec85e90aa2cb482731befdbec1d89bce00dcd7cb29e4c4d592a0230d089674e7ea5537ca2db131f4f4d5753f3d2873e8f4094f1d384e4b3837c7ddcbd2b57fb2655dc36f85fff126bd13da3b810"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9f, 0xe, 0x5b, 0x40, 0x1235, 0x18, 0xf0ee, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa7, 0xdd, 0x2d}}]}}]}}, 0x0) ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000180)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @loopback, @loopback}, &(0x7f00000000c0)=0xc) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r2, 0x1, 0x6, @remote}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x24}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 6m54.267140419s ago: executing program 8 (id=1802): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f00000002c0)='ceph\x00', 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={r7, @in6={{0xa, 0x4e24, 0x800, @empty, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf5}, &(0x7f0000000480)=0x9c) r8 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20000023896) socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f00000000c0)=0x100000000, 0x12) syz_read_part_table(0x4030, &(0x7f0000004040)="$eJzszjFKw3AYxuE3avCPZBHchGAQHCVuTrlFLpAzODuYmziGHqDH6wFaKB0aCH2e9fte+IVN2k+75yRvXea+T0qShxNv/Vfqp3KXJsnP8Xlc1mgFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2bXrN/Dvku0nKY5K/+9RDW+Ul6T7Pz8dljUgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Kb9v2ce2iol6T4un4/LNaIAAAAAAAAAAAA4sAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MABCQAAAICg/6/bESgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwUgAAAP//1SYMTA==") fchown(0xffffffffffffffff, 0xee00, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x204051, &(0x7f0000000180), 0x8, 0x611, &(0x7f0000000200)="$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") r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, 0x0, 0x0) 6m44.404467495s ago: executing program 3 (id=1817): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) times(0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route(r6, 0x0, 0x0) preadv(r5, &(0x7f0000000600), 0x0, 0x1006c, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) 6m42.965538269s ago: executing program 3 (id=1818): socket(0x10, 0x803, 0x800000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) prctl$PR_MCE_KILL(0x29, 0x1, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r3, 0x1000000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="140000001600", 0x6}], 0x1}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) bind$alg(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) socket(0x10, 0x803, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) read$char_usb(r4, &(0x7f00000001c0)=""/4068, 0xfe4) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, 0x0) 6m42.926504149s ago: executing program 8 (id=1819): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x6576204, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc010643a, &(0x7f0000000200)={0x4000000, 0x0, 0x6}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000700000004000000000000130200000000002e2e2e5f00"], 0x0, 0x2b, 0x0, 0x100001, 0x8000}, 0x28) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r7, 0x0, 0x800) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, 0x0) 6m38.057729214s ago: executing program 3 (id=1825): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) times(0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route(r6, 0x0, 0x0) preadv(r5, &(0x7f0000000600), 0x0, 0x1006c, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) 6m36.259664417s ago: executing program 3 (id=1828): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) 6m27.447553179s ago: executing program 52 (id=1819): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x6576204, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc010643a, &(0x7f0000000200)={0x4000000, 0x0, 0x6}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000700000004000000000000130200000000002e2e2e5f00"], 0x0, 0x2b, 0x0, 0x100001, 0x8000}, 0x28) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r7, 0x0, 0x800) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, 0x0) 6m27.440786647s ago: executing program 3 (id=1840): bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) execve(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x8, 0x3, "d61418f3"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}]}}}]}]}], {0x14}}, 0xd0}}, 0x0) 6m26.211748196s ago: executing program 3 (id=1842): mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x1) socket$kcm(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x208000c9, 0x101002) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000040)=0xffffffff) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setns(r6, 0x66020000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) 6m10.530236996s ago: executing program 53 (id=1842): mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x1) socket$kcm(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x208000c9, 0x101002) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000040)=0xffffffff) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setns(r6, 0x66020000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) 5m52.498345263s ago: executing program 1 (id=1877): socket(0x10, 0x803, 0x800000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) prctl$PR_MCE_KILL(0x29, 0x1, 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="140000001600", 0x6}], 0x1}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) bind$alg(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) socket(0x10, 0x803, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) read$char_usb(r4, &(0x7f00000001c0)=""/4068, 0xfe4) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, 0x0) 5m48.477616844s ago: executing program 1 (id=1881): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x48, 0x0, 0x0, 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) r4 = getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2, r4}) rt_tgsigqueueinfo(0x0, r4, 0x26, &(0x7f0000000180)={0x2f, 0x3}) fcntl$notify(r3, 0x402, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r5, 0x6000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000012c0)={0x18}) fsopen(0x0, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) bpf$PROG_LOAD(0x5, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 5m45.034329883s ago: executing program 1 (id=1885): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0xff}, 0x1c) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x2, 0x8}, 0xffffffffffffff95) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}}, 0x0, 0x5}, 0x94) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@migrate={0xa0, 0x21, 0xd39, 0x0, 0x0, {{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in6=@empty, @in=@broadcast, @in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x3000000, 0x11, 0x2}]}]}, 0xa0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0), 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r6, &(0x7f0000000100)="11e5a68e291a6f297bca1e72499a1c0b73c1486bc5cd08a7132b5dc14cefffc62d", 0x21, 0x40, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) 5m42.307440982s ago: executing program 1 (id=1887): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") write(0xffffffffffffffff, &(0x7f0000000440)="0036f14148342fdb51507d8721930188a4647d8a213915127cbc64143a3eb1638da4d40c5946c0777dd101357d70aca581db519ab51f833eac0bb29dd0cfae2f592919b40e982515162524ee8f7a8533904fb12a66d5f56200d20873cdf465696bdd297eda37d5b65b491aee625da4", 0x6f) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3ffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) getpeername$inet6(r0, 0x0, &(0x7f0000000240)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@mcast2, 0x0, 0x0, 0x2, 0x3}, 0x5a76224c41b455c1) alarm(0x38) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_gettime(0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1182, 0x9b) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 5m40.641152588s ago: executing program 1 (id=1893): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x48, 0x0, 0x0, 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) r4 = getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2, r4}) ftruncate(0xffffffffffffffff, 0x6000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) fsopen(0x0, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 5m36.990757948s ago: executing program 1 (id=1897): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x20000cc, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5m21.35230015s ago: executing program 54 (id=1897): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x20000cc, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3m58.886831861s ago: executing program 5 (id=2018): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) mount$9p_virtio(0x0, 0x0, 0x0, 0x20000cc, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3m57.121747522s ago: executing program 5 (id=2021): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x191000, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x9d) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000700000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0x25) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r8, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_notify(r11, &(0x7f0000000200)={0x0, 0x8, 0x1}) mq_timedsend(r11, 0x0, 0x0, 0xa, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 3m54.396075199s ago: executing program 5 (id=2024): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0xff}, 0x1c) 3m47.168719416s ago: executing program 5 (id=2038): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x940d, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x46, 0x0, &(0x7f0000000240)="67b20c7b993c92ddffc4f60cf51aeaa026ac51a1a58a5af882b8219a914b281f6a448441ab76812af738df1d2f8dee3f4d2015041bda3b186c557549662f2717e8b3c67f1cce"}) 3m45.008602402s ago: executing program 5 (id=2041): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r1, &(0x7f00000005c0)=[{0x3, 0x4, 0x5, 0x1, @tick, {0x1, 0x10}, {0x4, 0x10}, @raw32={[0x4, 0x1, 0x81]}}, {0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}], 0x38) 3m43.111224526s ago: executing program 5 (id=2043): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) 3m27.732908885s ago: executing program 55 (id=2043): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) 1m34.750080643s ago: executing program 4 (id=2213): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYRES16=r4, @ANYBLOB="010026bd7000ffdbdf255a00000008000300", @ANYRESHEX=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) setrlimit(0x6, &(0x7f00000001c0)={0x6, 0x6}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)='S', 0x1}], 0x1) 1m32.776227283s ago: executing program 4 (id=2215): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x600008d0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x4, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x24d2, 0x33}, 0x0, @in=@loopback, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 1m29.220798432s ago: executing program 2 (id=2220): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="24000000760009ee"], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x4000000}, 0x0) socket$rds(0x15, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="048f9e06c80047c2f34343755e680300d43b0e00c1070000000c3621f95c9e07e6ff1a85789615a19144711b93b40b553b4c2d503ca9e5a0f10b5cc721a36c2e2fcd1b400c00c24d249c6c6c2f339d0fd4a99998bfea1c718855bb2f3aaca5d2c4cccaa124da8140a37f8b5b7e5e54d1830967bd8d1b14"], 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x1, 0x0) io_uring_setup(0x63c6, &(0x7f00000003c0)={0x0, 0x9678, 0x40, 0x1, 0x238}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x80000005, 0x3ff, 0x802, 0x1600, 0x1, 0x0, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadc, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) 1m27.165456567s ago: executing program 4 (id=2223): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1m27.119377212s ago: executing program 2 (id=2224): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYRES16=r4, @ANYBLOB="010026bd7000ffdbdf255a00000008000300", @ANYRESHEX=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)='S', 0x1}], 0x1) 1m26.553045795s ago: executing program 4 (id=2225): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x48, 0x0, 0x0, 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) r4 = getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2, r4}) rt_tgsigqueueinfo(0x0, r4, 0x26, &(0x7f0000000180)={0x2f, 0x3}) fcntl$notify(r3, 0x402, 0x5) ftruncate(0xffffffffffffffff, 0x6000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000012c0)={0x18}) fsopen(0x0, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) bpf$PROG_LOAD(0x5, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 1m25.074336579s ago: executing program 2 (id=2228): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x600008d0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x4, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x24d2, 0x33}, 0x0, @in=@loopback, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 1m18.02349547s ago: executing program 4 (id=2235): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x600008d0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x4, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x24d2, 0x33}, 0x0, @in=@loopback, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 1m14.019055736s ago: executing program 2 (id=2242): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x6576204, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc010643a, &(0x7f0000000200)={0x4000000, 0x0, 0x6}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000700000004000000000000130200000000002e2e2e5f00"], 0x0, 0x2b, 0x0, 0x100001, 0x8000}, 0x28) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, 0x0, 0x0, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x40010000) sendmsg$NL80211_CMD_FRAME(r7, 0x0, 0x800) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, 0x0) 1m11.729507557s ago: executing program 2 (id=2246): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x74}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) pipe(0x0) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000000c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x70bd25, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES16=r5, @ANYBLOB="010026ca7000fbdbdf2505000000280001800d0001007564703a73797a320000000014000280080003"], 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r6, 0x3, 0x1) 1m8.869977151s ago: executing program 4 (id=2249): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 1m7.137399818s ago: executing program 2 (id=2252): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x600008d0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 53.301775347s ago: executing program 56 (id=2249): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 51.955764296s ago: executing program 57 (id=2252): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x600008d0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 24.534982841s ago: executing program 7 (id=2304): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x600008d0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x4, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x24d2, 0x33}, 0x0, @in=@loopback, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 19.021803543s ago: executing program 6 (id=2307): syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x6576204, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc010643a, &(0x7f0000000200)={0x4000000, 0x0, 0x6}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x40010000) sendmsg$NL80211_CMD_FRAME(r6, 0x0, 0x800) 16.92251051s ago: executing program 6 (id=2308): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x600008d0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 16.812493747s ago: executing program 9 (id=2309): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x48, 0x0, 0x0, 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) getpgrp(0x0) ftruncate(0xffffffffffffffff, 0x6000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) fsopen(0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 15.035063458s ago: executing program 7 (id=2310): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) getpriority(0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = openat$qrtrtun(0xffffff9c, &(0x7f0000000240), 0x801) mmap$qrtrtun(&(0x7f000085a000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 14.545203678s ago: executing program 9 (id=2311): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r3 = memfd_create(&(0x7f0000000440)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xff05) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 13.929495906s ago: executing program 7 (id=2313): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote, r5}, 0x14) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) socket(0x840000000002, 0x3, 0xff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13.906154647s ago: executing program 6 (id=2314): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x20000cc, 0x0) r3 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 11.897122314s ago: executing program 6 (id=2316): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[r0], 0x1}, 0x58) 10.880076964s ago: executing program 6 (id=2317): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) setrlimit(0x6, &(0x7f00000001c0)={0x6, 0x6}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)='S', 0x1}], 0x1) 9.679208258s ago: executing program 9 (id=2318): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x48, 0x0, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) getpgrp(0x0) ftruncate(0xffffffffffffffff, 0x6000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) fsopen(0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 9.009662325s ago: executing program 7 (id=2319): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0xff}, 0x1c) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x2, 0x8}, 0xffffffffffffff95) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}}, 0x0, 0x5}, 0x94) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@migrate={0xa0, 0x21, 0xd39, 0x0, 0x0, {{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in6=@empty, @in=@broadcast, @in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x3000000, 0x11, 0x2}]}]}, 0xa0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r5, &(0x7f0000000100)="11e5a68e291a6f297bca1e72499a1c0b73c1486bc5cd08a7132b5dc14cefffc62d", 0x21, 0x40, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) lsm_get_self_attr(0x64, &(0x7f00000002c0)={0x0, 0x0, 0x35, 0x15, ""/21}, &(0x7f0000001280)=0x35, 0x0) 8.814062051s ago: executing program 6 (id=2320): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x4, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x24d2, 0x33}, 0x0, @in=@loopback, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 8.773036144s ago: executing program 0 (id=2321): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f00000002c0)='ceph\x00', 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={r6, @in6={{0xa, 0x4e24, 0x800, @empty, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf5}, &(0x7f0000000480)=0x9c) r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4040000) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 7.971112556s ago: executing program 0 (id=2323): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) getpriority(0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = openat$qrtrtun(0xffffff9c, &(0x7f0000000240), 0x801) mmap$qrtrtun(&(0x7f000085a000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.996636884s ago: executing program 9 (id=2324): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x600008d0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 4.719408258s ago: executing program 0 (id=2325): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x74}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) pipe(0x0) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000000c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x70bd25, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES16=r5, @ANYBLOB="010026ca7000fbdbdf2505000000280001800d0001007564703a73797a320000000014000280080003"], 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r6, 0x3, 0x1) 2.989305684s ago: executing program 0 (id=2326): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0xff}, 0x1c) 2.783088588s ago: executing program 7 (id=2327): pipe2$watch_queue(0x0, 0x80) r0 = io_uring_setup(0x5ba8, &(0x7f0000000000)={0x0, 0x88b7, 0x2, 0x1, 0x4}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000340)={0x0, 0x8000000002, 0x0, [0x802f, 0xffffffff, 0x9, 0x1, 0x6], [0x1000000000000002, 0x10000002, 0x1, 0x2, 0x7ffd, 0xffffffffffff99b9, 0x5, 0x8000000000000001, 0x9, 0xffff, 0x9, 0x1, 0xfc5, 0xfffffffffffffff4, 0x8e3f, 0xfffffffffffffffa, 0x100, 0xd, 0xd9, 0x90, 0xf0, 0x800000000002a9, 0x19, 0x0, 0x3, 0x0, 0xa, 0x20000000003, 0xa53, 0x2, 0x6, 0x7, 0x0, 0xfffffffffffffffa, 0x80, 0x3, 0x80, 0x931, 0x101, 0x3, 0x8004, 0x19a0, 0x101, 0x1, 0xb, 0x8, 0x1, 0x2, 0x1, 0x400083, 0x538a, 0x8001, 0xda, 0x4, 0x0, 0x803, 0x8000005, 0xb, 0x3, 0x77, 0x4, 0x800, 0x7, 0x7, 0x3, 0xffffffffffffffff, 0x8, 0x8000, 0x12f, 0x8, 0x6, 0xfffffffffffffffc, 0x82c, 0x7ff, 0x3, 0x2, 0x2, 0x4, 0x3, 0x5, 0x100000001, 0x4000000000800, 0x1, 0xe773, 0x2, 0x8, 0x10000000, 0x6, 0xe, 0x9, 0x100000001, 0x400004, 0x800000008, 0x7, 0x9, 0x10000, 0x6, 0x1, 0x16d, 0x2, 0x8, 0xffffffffffff43b3, 0x8, 0x5eb, 0x12, 0x0, 0x0, 0x3, 0x4, 0x7, 0x3ff, 0x0, 0x8, 0x5, 0x0, 0x2, 0x3e, 0x80000001, 0x7, 0x101, 0x1]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="950000000000000080d610930800000018110000e8002f92418baf5a2b5c646f99", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000180000000004"], &(0x7f0000000980)='syzkaller\x00', 0x5, 0xf2, &(0x7f00000009c0)=""/242, 0x41100, 0x44, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80)={0x2, 0x9, 0xfffffffd, 0xa7}, 0x10, 0x1276c, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x120) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x2, @empty, 0x7}], 0x1c) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}, 0x2000000}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0x17, 0x1, 0x100, &(0x7f0000000440)="387ed7626d850509a2d6c1aa38f15cd0c234cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88731b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d461d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a750ecb3421143c5c4ded0f06affc524dcf3418272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955582efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8ddbf5e20d604413ed2ddf9bcbf881caf811852806175d638909f6234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284a3e90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def9122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a7e58b4f8c6a1c6b9b5ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc5092548feaef72c5d42cece59181fcb5bad8c24bd9f8f78dd85b82831325501e80d899e9252f99d3a266639438ac5252d9bccff4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2b046c6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd600000013139929cefec965c0c761785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829ed0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1aa1ab704782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c413923167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29a814bd8fed1ab6d2846c73345962895d289ac718aacac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) socket$netlink(0x10, 0x3, 0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000007840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="100000001001000001"], 0x10, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0c00000019000000060000000c0000000801000003000000771e4147994bd7364839c067ae90a7e57eee2869f2e7bcd42936848ea7910e1f1f702631dfe63d5b6c384c4715765224326b9ce4633f4a8705143d886e0a8cd45339c3edfcaea95048b85a6022a36c7e2711f2fca101d34752b66535ab0b10b8"], 0x18}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000073c0)}}], 0x4, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x13, 0x0, 0x0) 1.815436001s ago: executing program 0 (id=2328): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000200"/16, @ANYBLOB="c7231f2cba280502a5f77c359f34bb45c6d716bb3119f13b27846d58e2f285ffe2e2202b1fb9330b7a65abafdd3221a18be6d7f7b22f263220fa0de7d5cc0477cce853c7d875d18ba8c660aa4dd1a2e61b8a8e409e0e3291d6f0d5b08bc26520f4af864f03c2e62ab9f2adf9c5a783ad55b43f558e7774a4c88889cc9a7282be684e498d"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.42676169s ago: executing program 7 (id=2329): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x48, 0x0, 0x0, 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) r4 = getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2, r4}) rt_tgsigqueueinfo(0x0, r4, 0x26, &(0x7f0000000180)={0x2f, 0x3}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r5, 0x6000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000012c0)={0x18}) fsopen(0x0, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) bpf$PROG_LOAD(0x5, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 361.556517ms ago: executing program 9 (id=2330): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') writev(r3, &(0x7f0000000240)=[{&(0x7f00000001c0)='p', 0x1}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000b32000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x40) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r5, 0x80845663, 0x0) madvise(&(0x7f0000735000/0x1000)=nil, 0x1000, 0x65) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x48801}, 0x4040090) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000380), 0x4401, 0x0) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x10000) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x3, 0x8, {{0x5, 0x4, 0x0, 0x33, 0x14, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @multicast1}}}}) r7 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000001b80)={0x1, 0x0, [{0x7378287bbf7e2c17, 0x95, &(0x7f0000000880)=""/149}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000100)=0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 0 (id=2331): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote, r5}, 0x14) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) socket(0x840000000002, 0x3, 0xff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): ond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.174755][T14940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 955.255271][ T12] bridge_slave_1: left allmulticast mode [ 955.289554][ T12] bridge_slave_1: left promiscuous mode [ 955.339804][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.406989][ T12] bridge_slave_0: left allmulticast mode [ 955.442516][ T12] bridge_slave_0: left promiscuous mode [ 955.485139][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.940495][T14410] Bluetooth: hci5: command tx timeout [ 957.228199][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 957.622199][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 957.729037][ T12] bond0 (unregistering): Released all slaves [ 958.424624][ T31] kauditd_printk_skb: 60 callbacks suppressed [ 958.445919][ T31] audit: type=1326 audit(1771401919.290:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.2.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 958.479602][ T31] audit: type=1326 audit(1771401919.290:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.2.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 958.479686][ T31] audit: type=1326 audit(1771401919.290:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.2.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 958.479760][ T31] audit: type=1326 audit(1771401919.290:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.2.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 958.479882][ T31] audit: type=1326 audit(1771401919.290:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.2.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 958.479971][ T31] audit: type=1326 audit(1771401919.290:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.2.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 958.480029][ T31] audit: type=1326 audit(1771401919.290:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.2.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 958.480084][ T31] audit: type=1326 audit(1771401919.290:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.2.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 958.480142][ T31] audit: type=1326 audit(1771401919.290:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.2.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 958.480199][ T31] audit: type=1326 audit(1771401919.300:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15075 comm="syz.2.1861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 958.703493][ T12] tipc: Disabling bearer [ 958.703661][ T12] tipc: Left network mode [ 958.753954][T14940] team0: Port device team_slave_0 added [ 958.971905][T14940] team0: Port device team_slave_1 added [ 959.014096][T14410] Bluetooth: hci5: command tx timeout [ 960.335090][T14940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 960.345175][T14940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 960.457757][T14940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 960.635595][T14940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 960.659655][T14940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 960.779570][T14940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.069614][ T5840] Bluetooth: hci5: command tx timeout [ 961.497159][T14940] hsr_slave_0: entered promiscuous mode [ 961.504765][T14940] hsr_slave_1: entered promiscuous mode [ 961.513080][T14940] debugfs: 'hsr0' already exists in 'hsr' [ 961.546314][T14940] Cannot create hsr debugfs directory [ 963.161025][ T5840] Bluetooth: hci5: command tx timeout [ 964.367757][ T12] hsr_slave_0: left promiscuous mode [ 964.418395][ T12] hsr_slave_1: left promiscuous mode [ 964.442722][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 964.472041][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 964.504822][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.525202][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.637759][ T12] veth1_macvtap: left promiscuous mode [ 964.652939][ T12] veth0_macvtap: left promiscuous mode [ 964.665495][ T12] veth1_vlan: left promiscuous mode [ 964.697985][ T12] veth0_vlan: left promiscuous mode [ 965.665251][T15144] libceph: resolve '0.' (ret=-3): failed [ 967.240800][ T12] team0 (unregistering): Port device team_slave_1 removed [ 967.400907][ T12] team0 (unregistering): Port device team_slave_0 removed [ 968.459911][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 968.631624][ T9] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 968.641247][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.659127][ T9] usb 2-1: config 0 descriptor?? [ 968.669453][ T9] usb 2-1: selecting invalid altsetting 1 [ 968.727021][ T9] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 968.825177][T15047] udevd[15047]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 969.577442][T15172] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 970.152779][ T5822] infiniband syz0: ib_query_port failed (-19) [ 970.169891][ T5822] usb 2-1: USB disconnect, device number 13 [ 970.268891][T15045] chnl_net:caif_netlink_parms(): no params data found [ 970.859646][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 971.269632][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 971.334388][ T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 971.404926][ T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 971.439747][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 971.449552][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 971.480810][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 971.491316][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 971.506833][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 971.562515][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.706260][ T9] usb 3-1: config 0 descriptor?? [ 972.014848][ T9] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 972.023271][T15176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.082360][T15176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.536739][ T29] usb 3-1: USB disconnect, device number 12 [ 972.555149][ T29] usblp0: removed [ 972.710148][T15045] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.729736][T15045] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.747272][T15045] bridge_slave_0: entered allmulticast mode [ 972.765237][T15045] bridge_slave_0: entered promiscuous mode [ 972.795367][T15045] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.847029][T15045] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.860695][T15045] bridge_slave_1: entered allmulticast mode [ 972.876258][T15045] bridge_slave_1: entered promiscuous mode [ 974.114613][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 974.192991][T15045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.385913][T15045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.903433][ T31] kauditd_printk_skb: 73 callbacks suppressed [ 974.903462][ T31] audit: type=1326 audit(1771401935.770:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15218 comm="syz.6.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f817019c629 code=0x7ffc0000 [ 974.969610][ T31] audit: type=1326 audit(1771401935.770:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15218 comm="syz.6.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f817019c629 code=0x7ffc0000 [ 975.187095][ T31] audit: type=1326 audit(1771401935.770:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15218 comm="syz.6.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f817019c629 code=0x7ffc0000 [ 975.359221][ T31] audit: type=1326 audit(1771401935.770:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15218 comm="syz.6.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f817019c629 code=0x7ffc0000 [ 975.429603][ T31] audit: type=1326 audit(1771401935.780:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15218 comm="syz.6.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f817019c629 code=0x7ffc0000 [ 975.511449][ T31] audit: type=1326 audit(1771401935.780:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15218 comm="syz.6.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f817019c629 code=0x7ffc0000 [ 975.662660][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.709648][ T31] audit: type=1326 audit(1771401935.780:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15218 comm="syz.6.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f817019c629 code=0x7ffc0000 [ 975.787132][ T31] audit: type=1326 audit(1771401935.780:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15218 comm="syz.6.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f817019c629 code=0x7ffc0000 [ 975.923202][ T31] audit: type=1326 audit(1771401935.780:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15218 comm="syz.6.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f817019c629 code=0x7ffc0000 [ 975.946051][ T31] audit: type=1326 audit(1771401935.780:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15218 comm="syz.6.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f817019c629 code=0x7ffc0000 [ 976.013261][T15045] team0: Port device team_slave_0 added [ 976.156508][T15045] team0: Port device team_slave_1 added [ 976.840928][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.109758][T15045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 977.169422][T15045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 977.335660][T15045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 977.380192][T15045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 977.395144][T15045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 977.484813][T15045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 977.586068][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.732629][T14940] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 978.073173][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.203386][T14940] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 978.629335][T14940] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 978.757081][T14940] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 978.896774][T15045] hsr_slave_0: entered promiscuous mode [ 978.918845][T15045] hsr_slave_1: entered promiscuous mode [ 980.805656][ T12] bridge_slave_1: left allmulticast mode [ 980.819756][ T12] bridge_slave_1: left promiscuous mode [ 980.861459][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.951597][ T12] bridge_slave_0: left allmulticast mode [ 980.974449][ T12] bridge_slave_0: left promiscuous mode [ 981.005025][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.487913][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 982.630077][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 982.678713][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 982.824876][ T12] bond0 (unregistering): Released all slaves [ 983.180360][ T12] tipc: Disabling bearer [ 983.195991][ T12] tipc: Left network mode [ 983.721570][T14940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 983.905075][ T31] kauditd_printk_skb: 35 callbacks suppressed [ 983.905110][ T31] audit: type=1326 audit(1771401944.780:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15307 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 984.075046][ T31] audit: type=1326 audit(1771401944.780:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15307 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 984.341337][ T31] audit: type=1326 audit(1771401944.780:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15307 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 984.599748][ T31] audit: type=1326 audit(1771401944.780:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15307 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 984.721465][ T31] audit: type=1326 audit(1771401944.780:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15307 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 984.909410][ T31] audit: type=1326 audit(1771401944.780:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15307 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 985.035734][ T31] audit: type=1326 audit(1771401944.780:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15307 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 985.188347][ T31] audit: type=1326 audit(1771401944.780:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15307 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 985.340822][ T31] audit: type=1326 audit(1771401944.790:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15307 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 985.453468][ T31] audit: type=1326 audit(1771401944.790:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15307 comm="syz.0.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 985.482592][T14940] 8021q: adding VLAN 0 to HW filter on device team0 [ 985.868366][ T7106] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.875554][ T7106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.056552][ T7106] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.063892][ T7106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 987.582718][T14940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 989.023512][T15045] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 989.131231][T15045] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 989.310765][T15045] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 989.334787][T15352] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 989.397578][T14410] Bluetooth: hci2: command 0x0406 tx timeout [ 989.461352][T15045] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 990.477889][T14940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 990.629418][T15045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 990.872053][ T12] hsr_slave_0: left promiscuous mode [ 990.885337][ T12] hsr_slave_1: left promiscuous mode [ 990.911990][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 990.949341][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 990.980720][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 991.021231][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 991.090747][ T12] veth1_macvtap: left promiscuous mode [ 991.115696][ T12] veth0_macvtap: left promiscuous mode [ 991.140396][ T12] veth1_vlan: left promiscuous mode [ 991.202345][ T12] veth0_vlan: left promiscuous mode [ 991.650339][ T5829] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 991.852346][ T5829] usb 3-1: Using ep0 maxpacket: 8 [ 991.903277][ T5829] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 991.919560][ T5829] usb 3-1: config 0 has no interface number 0 [ 991.938080][ T5829] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 991.989391][ T5829] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 992.009888][ T5829] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 992.059915][ T5829] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 992.101630][ T1094] smc: removing ib device syz2 [ 992.119180][ T5829] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 992.172688][ T5829] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 992.184292][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.220465][ T5829] usb 3-1: Product: syz [ 992.224688][ T5829] usb 3-1: Manufacturer: syz [ 992.229300][ T5829] usb 3-1: SerialNumber: syz [ 992.277378][ T5829] usb 3-1: config 0 descriptor?? [ 992.444574][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.451311][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.578399][ T5829] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 992.934100][ T12] team0 (unregistering): Port device team_slave_1 removed [ 992.972641][ T5921] usb 3-1: USB disconnect, device number 13 [ 993.051537][ T12] team0 (unregistering): Port device team_slave_0 removed [ 993.291765][ T5914] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 993.456030][T15045] 8021q: adding VLAN 0 to HW filter on device team0 [ 993.579372][ T8165] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.586639][ T8165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.690826][ T5914] usb 7-1: Using ep0 maxpacket: 8 [ 994.112290][ T5914] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 994.406706][ T8164] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.413937][ T8164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.428702][ T5914] usb 7-1: config 0 has no interface number 0 [ 994.435839][ T5914] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 994.486244][ T5914] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 994.549545][ T5914] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 994.671127][ T5914] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 994.725941][ T5914] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 994.830939][ T5914] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 994.877008][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.122938][ T5914] usb 7-1: Product: syz [ 995.127172][ T5914] usb 7-1: Manufacturer: syz [ 995.132402][ T5914] usb 7-1: SerialNumber: syz [ 996.230980][ T5914] usb 7-1: config 0 descriptor?? [ 996.385952][ T5914] usb 7-1: can't set config #0, error -71 [ 996.453622][ T5914] usb 7-1: USB disconnect, device number 3 [ 996.912204][T15426] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 997.175683][T15430] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 997.376676][T15045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 997.576398][T14410] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 997.585920][T14410] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 997.596312][T14410] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 997.605343][T14410] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 997.745097][T14410] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 997.949844][ T31] kauditd_printk_skb: 156 callbacks suppressed [ 997.949872][ T31] audit: type=1326 audit(1771401958.820:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15436 comm="syz.0.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 998.197628][ T31] audit: type=1326 audit(1771401958.830:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15436 comm="syz.0.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 998.748862][ T31] audit: type=1326 audit(1771401958.830:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15436 comm="syz.0.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 998.849392][T15446] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 999.725327][ T31] audit: type=1326 audit(1771401958.830:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15436 comm="syz.0.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1000.650961][ T31] audit: type=1326 audit(1771401958.830:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15436 comm="syz.0.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1000.673692][ T31] audit: type=1326 audit(1771401958.830:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15436 comm="syz.0.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1000.674136][ T5840] Bluetooth: hci3: command tx timeout [ 1002.769585][T14410] Bluetooth: hci3: command tx timeout [ 1002.784308][T15434] chnl_net:caif_netlink_parms(): no params data found [ 1002.923574][T15045] veth0_vlan: entered promiscuous mode [ 1003.291581][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1003.294715][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1003.298450][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1003.301201][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1003.301953][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1003.308001][ T31] audit: type=1326 audit(1771401964.100:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.6.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f817019c629 code=0x7ffc0000 [ 1003.308083][ T31] audit: type=1326 audit(1771401964.100:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.6.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f817019c629 code=0x7ffc0000 [ 1003.308159][ T31] audit: type=1326 audit(1771401964.100:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.6.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f817019c629 code=0x7ffc0000 [ 1003.325677][ T31] audit: type=1326 audit(1771401964.100:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.6.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f817019c629 code=0x7ffc0000 [ 1003.325768][ T31] audit: type=1326 audit(1771401964.100:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.6.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f817019c629 code=0x7ffc0000 [ 1003.325849][ T31] audit: type=1326 audit(1771401964.100:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.6.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f817019c629 code=0x7ffc0000 [ 1003.325968][ T31] audit: type=1326 audit(1771401964.100:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.6.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f817019c629 code=0x7ffc0000 [ 1003.326051][ T31] audit: type=1326 audit(1771401964.100:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.6.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f817019c629 code=0x7ffc0000 [ 1003.326130][ T31] audit: type=1326 audit(1771401964.100:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.6.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f817019c629 code=0x7ffc0000 [ 1003.326209][ T31] audit: type=1326 audit(1771401964.100:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.6.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f817019c629 code=0x7ffc0000 [ 1003.856155][T15474] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1004.839633][ T5840] Bluetooth: hci3: command tx timeout [ 1006.120608][ T5840] Bluetooth: hci6: command tx timeout [ 1006.223746][T15045] veth1_vlan: entered promiscuous mode [ 1006.909604][ T5840] Bluetooth: hci3: command tx timeout [ 1007.750786][T15434] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.750889][T15434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.751099][T15434] bridge_slave_0: entered allmulticast mode [ 1007.922392][T15434] bridge_slave_0: entered promiscuous mode [ 1007.981062][T15434] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.981200][T15434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.981411][T15434] bridge_slave_1: entered allmulticast mode [ 1008.022076][T15434] bridge_slave_1: entered promiscuous mode [ 1008.189633][ T5840] Bluetooth: hci6: command tx timeout [ 1008.277224][T15488] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 1008.422420][T15045] veth0_macvtap: entered promiscuous mode [ 1008.643600][T15434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.660102][T15434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.021588][T15490] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 1009.269185][T15045] veth1_macvtap: entered promiscuous mode [ 1009.560942][T15494] libceph: resolve '0.' (ret=-3): failed [ 1009.715674][T15434] team0: Port device team_slave_0 added [ 1009.719069][T15434] team0: Port device team_slave_1 added [ 1010.211344][T15434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1010.211368][T15434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.211408][T15434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1010.269737][ T5840] Bluetooth: hci6: command tx timeout [ 1010.431999][T15045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1010.432820][T15434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1010.432845][T15434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.432897][T15434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.714497][T15434] hsr_slave_0: entered promiscuous mode [ 1010.716696][T15434] hsr_slave_1: entered promiscuous mode [ 1010.717573][T15434] debugfs: 'hsr0' already exists in 'hsr' [ 1010.717605][T15434] Cannot create hsr debugfs directory [ 1010.772489][T15045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1011.057196][T14019] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.057318][T14019] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.057385][T14019] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.057446][T14019] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.447744][T15462] chnl_net:caif_netlink_parms(): no params data found [ 1012.095524][ T8154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.095560][ T8154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.349552][ T5840] Bluetooth: hci6: command tx timeout [ 1012.570831][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.585557][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.892392][T15462] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.946423][T15462] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.992082][T15462] bridge_slave_0: entered allmulticast mode [ 1013.010592][T15462] bridge_slave_0: entered promiscuous mode [ 1013.048410][T15462] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.065961][T15462] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.085228][T15462] bridge_slave_1: entered allmulticast mode [ 1013.230095][ T31] kauditd_printk_skb: 48 callbacks suppressed [ 1013.230125][ T31] audit: type=1326 audit(1771401974.050:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15516 comm="syz.5.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8079c629 code=0x7ffc0000 [ 1013.230203][ T31] audit: type=1326 audit(1771401974.060:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15516 comm="syz.5.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8079c629 code=0x7ffc0000 [ 1013.230274][ T31] audit: type=1326 audit(1771401974.060:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15516 comm="syz.5.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8079c629 code=0x7ffc0000 [ 1013.230346][ T31] audit: type=1326 audit(1771401974.060:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15516 comm="syz.5.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fdd8079c629 code=0x7ffc0000 [ 1013.230418][ T31] audit: type=1326 audit(1771401974.060:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15516 comm="syz.5.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8079c629 code=0x7ffc0000 [ 1013.230490][ T31] audit: type=1326 audit(1771401974.060:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15516 comm="syz.5.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8079c629 code=0x7ffc0000 [ 1013.230563][ T31] audit: type=1326 audit(1771401974.060:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15516 comm="syz.5.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8079c629 code=0x7ffc0000 [ 1013.230638][ T31] audit: type=1326 audit(1771401974.060:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15516 comm="syz.5.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdd8079c629 code=0x7ffc0000 [ 1013.230710][ T31] audit: type=1326 audit(1771401974.060:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15516 comm="syz.5.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8079c629 code=0x7ffc0000 [ 1013.230782][ T31] audit: type=1326 audit(1771401974.060:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15516 comm="syz.5.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8079c629 code=0x7ffc0000 [ 1013.308435][T15462] bridge_slave_1: entered promiscuous mode [ 1013.549935][T15462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1013.561115][T15462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.284590][T15462] team0: Port device team_slave_0 added [ 1014.288537][ T12] bridge_slave_1: left allmulticast mode [ 1014.288565][ T12] bridge_slave_1: left promiscuous mode [ 1014.288757][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.316079][ T12] bridge_slave_0: left allmulticast mode [ 1014.316111][ T12] bridge_slave_0: left promiscuous mode [ 1014.316310][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.126036][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1016.142837][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1016.200145][ T12] bond0 (unregistering): Released all slaves [ 1016.263375][T15462] team0: Port device team_slave_1 added [ 1016.710640][T15525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.719901][T15525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.218882][T15525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1017.308841][T15525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1017.760921][T15539] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 1017.981758][ T12] hsr_slave_0: left promiscuous mode [ 1018.007598][ T12] hsr_slave_1: left promiscuous mode [ 1018.026947][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1018.068831][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1018.239911][T13769] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1018.289087][T15546] libceph: resolve '0.' (ret=-3): failed [ 1018.542814][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1018.564616][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1018.589843][T13769] usb 6-1: Using ep0 maxpacket: 8 [ 1018.615977][T13769] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 1018.624276][T13769] usb 6-1: config 0 has no interface number 0 [ 1018.630489][T13769] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1018.641590][T13769] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1018.652230][T13769] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1018.671266][T13769] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1018.686168][T13769] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1018.992782][T13769] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1019.142245][T13769] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.516545][T13769] usb 6-1: Product: syz [ 1019.521394][T13769] usb 6-1: Manufacturer: syz [ 1019.527237][T13769] usb 6-1: SerialNumber: syz [ 1019.540911][T13769] usb 6-1: config 0 descriptor?? [ 1019.626278][ T8154] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.674950][T15462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1019.684109][T15462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1019.804628][T13769] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1019.816448][T15462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1019.870030][ T8154] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.887755][ T8154] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.362070][ T5829] usb 6-1: USB disconnect, device number 7 [ 1025.443916][T15462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1025.658457][T15462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.749537][T15462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1025.791461][ T8154] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.104474][T15573] infiniband syz2: set down [ 1026.109054][T15573] infiniband syz2: added ipvlan0 [ 1026.115899][T15573] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1026.117696][T15573] infiniband syz2: Couldn't open port 1 [ 1026.153745][T15573] RDS/IB: syz2: added [ 1026.157810][T15573] smc: adding ib device syz2 with port count 1 [ 1026.164137][T15573] smc: ib device syz2 port 1 has no pnetid [ 1028.059993][T15462] hsr_slave_0: entered promiscuous mode [ 1028.081094][T15462] hsr_slave_1: entered promiscuous mode [ 1028.122481][T15462] debugfs: 'hsr0' already exists in 'hsr' [ 1028.164956][T15462] Cannot create hsr debugfs directory [ 1028.529799][ T31] kauditd_printk_skb: 91 callbacks suppressed [ 1028.529827][ T31] audit: type=1326 audit(1771401989.410:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15579 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 1028.639442][ T31] audit: type=1326 audit(1771401989.410:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15579 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 1028.773876][ T31] audit: type=1326 audit(1771401989.410:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15579 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 1028.811410][T15585] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 1028.836575][ T31] audit: type=1326 audit(1771401989.410:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15579 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 1028.936239][ T31] audit: type=1326 audit(1771401989.410:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15579 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 1029.069222][ T31] audit: type=1326 audit(1771401989.420:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15579 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 1029.505054][T15434] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1030.327435][T15434] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1030.426771][T15434] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1030.465764][T15590] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1030.475438][T15590] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1030.485585][T15590] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1030.542357][T15434] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1033.783777][T15434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.928326][T15434] 8021q: adding VLAN 0 to HW filter on device team0 [ 1033.986303][T15575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.993501][T15575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.071071][ T191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.078365][ T191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.557991][T15462] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1034.614083][T15462] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1034.663197][T15462] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1034.983838][T15462] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1035.681455][T15434] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1035.899639][T13769] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1036.131752][T13769] usb 7-1: Using ep0 maxpacket: 8 [ 1036.234113][T13769] usb 7-1: config 0 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 1036.315069][T13769] usb 7-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1036.355180][T13769] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1036.369566][T13769] usb 7-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1036.466539][T13769] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.555307][T15462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1036.624665][T13769] usb 7-1: config 0 descriptor?? [ 1036.916186][ T31] audit: type=1326 audit(1771401997.600:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15647 comm="syz.2.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 1037.017003][T15462] 8021q: adding VLAN 0 to HW filter on device team0 [ 1037.025834][ T31] audit: type=1326 audit(1771401997.600:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15647 comm="syz.2.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 1037.127605][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.134856][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1037.140640][ T31] audit: type=1326 audit(1771401997.600:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15647 comm="syz.2.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 1037.166986][T15630] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1037.202441][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.209684][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1037.313461][ T31] audit: type=1326 audit(1771401997.610:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15647 comm="syz.2.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 1037.526987][ T31] audit: type=1326 audit(1771401997.610:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15647 comm="syz.2.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 1037.605751][T13769] usbhid 7-1:0.0: can't add hid device: -71 [ 1037.611880][T13769] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1037.620116][ T31] audit: type=1326 audit(1771401997.610:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15647 comm="syz.2.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 1037.648526][T13769] usb 7-1: USB disconnect, device number 4 [ 1037.663843][ T31] audit: type=1326 audit(1771401997.610:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15647 comm="syz.2.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 1037.692623][ T31] audit: type=1326 audit(1771401997.610:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15647 comm="syz.2.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 1037.716713][ T31] audit: type=1326 audit(1771401997.610:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15647 comm="syz.2.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 1038.056283][ T31] audit: type=1326 audit(1771401997.610:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15647 comm="syz.2.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 1038.305032][T15434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1039.221710][T15462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1040.640199][T15434] veth0_vlan: entered promiscuous mode [ 1040.839799][T15434] veth1_vlan: entered promiscuous mode [ 1040.984428][T15434] veth0_macvtap: entered promiscuous mode [ 1041.324002][T15705] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1042.242352][T15434] veth1_macvtap: entered promiscuous mode [ 1043.193802][T15434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1043.206681][T15434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1043.426718][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.454026][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.592090][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.632155][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.114451][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.159647][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.458558][T15462] veth0_vlan: entered promiscuous mode [ 1044.562108][ T8154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.600512][T15462] veth1_vlan: entered promiscuous mode [ 1044.619599][ T8154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.896243][T15462] veth0_macvtap: entered promiscuous mode [ 1044.989559][ T31] kauditd_printk_skb: 105 callbacks suppressed [ 1044.989591][ T31] audit: type=1326 audit(1771402005.830:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15717 comm="syz.0.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1045.152705][T15462] veth1_macvtap: entered promiscuous mode [ 1045.165741][ T31] audit: type=1326 audit(1771402005.830:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15717 comm="syz.0.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1045.287378][T15462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1045.886606][T15737] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1046.797568][T15462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1048.110725][ T59] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.139836][ T59] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.203045][ T59] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.313614][ T191] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.987132][ T8154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.026030][ T8154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1049.194436][ T8154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.205618][ T8154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.573411][ T31] audit: type=1326 audit(1771402013.460:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15752 comm="syz.0.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1052.884275][ T31] audit: type=1326 audit(1771402013.510:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15752 comm="syz.0.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1053.924783][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.932573][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1053.941522][ T31] audit: type=1326 audit(1771402013.510:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15752 comm="syz.0.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1054.132160][ T31] audit: type=1326 audit(1771402013.510:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15752 comm="syz.0.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1054.299537][ T31] audit: type=1326 audit(1771402013.510:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15752 comm="syz.0.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1054.431844][ T31] audit: type=1326 audit(1771402013.800:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15752 comm="syz.0.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1054.569008][ T31] audit: type=1326 audit(1771402013.800:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15752 comm="syz.0.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1054.816071][ T31] audit: type=1326 audit(1771402013.810:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15752 comm="syz.0.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1054.857211][ T31] audit: type=1326 audit(1771402013.810:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15752 comm="syz.0.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1055.011931][T15775] syz2: rxe_newlink: already configured on ipvlan0 [ 1056.611780][ T31] audit: type=1326 audit(1771402013.810:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15752 comm="syz.0.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1057.111074][T15783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.118751][T15783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.609668][ T31] kauditd_printk_skb: 94 callbacks suppressed [ 1057.609698][ T31] audit: type=1326 audit(1771402018.480:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15788 comm="syz.4.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1a51b9c392 code=0x7ffc0000 [ 1057.751930][ T31] audit: type=1326 audit(1771402018.480:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15788 comm="syz.4.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1a51b9c392 code=0x7ffc0000 [ 1057.751996][ T31] audit: type=1326 audit(1771402018.480:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15788 comm="syz.4.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a51b9c629 code=0x7ffc0000 [ 1057.752052][ T31] audit: type=1326 audit(1771402018.480:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15788 comm="syz.4.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1a51b9c392 code=0x7ffc0000 [ 1057.752109][ T31] audit: type=1326 audit(1771402018.480:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15788 comm="syz.4.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a51b9c629 code=0x7ffc0000 [ 1057.752166][ T31] audit: type=1326 audit(1771402018.480:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15788 comm="syz.4.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a51b9c629 code=0x7ffc0000 [ 1057.752221][ T31] audit: type=1326 audit(1771402018.480:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15788 comm="syz.4.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1a51b9c427 code=0x7ffc0000 [ 1057.752278][ T31] audit: type=1326 audit(1771402018.490:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15788 comm="syz.4.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1a51b59391 code=0x7ffc0000 [ 1057.752334][ T31] audit: type=1326 audit(1771402018.490:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15788 comm="syz.4.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f1a51b9d449 code=0x7ffc0000 [ 1057.752388][ T31] audit: type=1326 audit(1771402018.490:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15788 comm="syz.4.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f1a51b58aec code=0x7ffc0000 [ 1057.861135][T15783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1057.940613][T15783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1059.457705][T15809] tipc: Started in network mode [ 1059.462718][T15809] tipc: Node identity ac14140f, cluster identity 4711 [ 1059.470546][T15809] tipc: New replicast peer: 255.255.255.255 [ 1059.477091][T15809] tipc: Enabled bearer , priority 10 [ 1059.483560][ T8164] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.723243][ T8164] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.745998][ T8164] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.757966][ T8164] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.133304][T13598] tipc: Node number set to 2886997007 [ 1065.288622][T15851] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1988'. [ 1065.319713][ T5921] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1065.658317][ T5921] usb 7-1: Using ep0 maxpacket: 8 [ 1065.757689][T15864] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1066.635137][ T5921] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 1066.649336][ T5921] usb 7-1: config 0 has no interface number 0 [ 1066.660582][ T5921] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1067.335760][ T5921] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1067.346972][ T5921] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1067.359011][ T5921] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1067.379186][ T5921] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1067.527104][T15867] binder_alloc: 15865: binder_alloc_buf, no vma [ 1067.639984][ T5921] usb 7-1: string descriptor 0 read error: -71 [ 1067.690065][ T5921] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1067.980310][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.916270][ T5921] usb 7-1: config 0 descriptor?? [ 1068.964654][ T5921] usb 7-1: can't set config #0, error -71 [ 1069.051086][ T5921] usb 7-1: USB disconnect, device number 5 [ 1071.914773][T15908] tipc: Started in network mode [ 1071.919770][T15908] tipc: Node identity ac14140f, cluster identity 4711 [ 1071.926869][T15908] tipc: New replicast peer: 255.255.255.255 [ 1071.935516][T15908] tipc: Enabled bearer , priority 10 [ 1072.242096][ T31] kauditd_printk_skb: 77 callbacks suppressed [ 1072.242120][ T31] audit: type=1326 audit(1771402033.130:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15906 comm="syz.5.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8079c629 code=0x7ffc0000 [ 1072.396206][ T31] audit: type=1326 audit(1771402033.130:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15906 comm="syz.5.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8079c629 code=0x7ffc0000 [ 1072.503358][ T31] audit: type=1326 audit(1771402033.180:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15906 comm="syz.5.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fdd8079c629 code=0x7ffc0000 [ 1072.633854][ T31] audit: type=1326 audit(1771402033.180:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15906 comm="syz.5.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8079c629 code=0x7ffc0000 [ 1072.844864][ T31] audit: type=1326 audit(1771402033.180:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15906 comm="syz.5.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8079c629 code=0x7ffc0000 [ 1072.949775][ T31] audit: type=1326 audit(1771402033.210:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15906 comm="syz.5.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fdd8079c629 code=0x7ffc0000 [ 1073.049605][T12348] tipc: Node number set to 2886997007 [ 1073.071662][ T31] audit: type=1326 audit(1771402033.210:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15906 comm="syz.5.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8079c629 code=0x7ffc0000 [ 1073.183498][ T31] audit: type=1326 audit(1771402033.210:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15906 comm="syz.5.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8079c629 code=0x7ffc0000 [ 1073.546547][ T31] audit: type=1326 audit(1771402033.210:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15906 comm="syz.5.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd8079c629 code=0x7ffc0000 [ 1073.946321][ T31] audit: type=1326 audit(1771402033.210:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15906 comm="syz.5.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8079c629 code=0x7ffc0000 [ 1078.680227][T15966] syz2: rxe_newlink: already configured on ipvlan0 [ 1081.640639][T14410] Bluetooth: hci5: command 0x0406 tx timeout [ 1083.668379][T15985] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1083.861196][T15992] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 1086.900211][T16019] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2021'. [ 1087.160639][T16020] tipc: Started in network mode [ 1087.165569][T16020] tipc: Node identity ac14140f, cluster identity 4711 [ 1087.187822][T16020] tipc: New replicast peer: 255.255.255.255 [ 1088.071040][T16020] tipc: Enabled bearer , priority 10 [ 1089.324144][T13598] tipc: Node number set to 2886997007 [ 1089.514774][T16033] netlink: 'syz.4.2022': attribute type 10 has an invalid length. [ 1089.616418][T16033] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1089.862442][ T31] kauditd_printk_skb: 36 callbacks suppressed [ 1089.862471][ T31] audit: type=1326 audit(1771402050.730:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16036 comm="syz.5.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8079c629 code=0x7ffc0000 [ 1090.037951][ T31] audit: type=1326 audit(1771402050.730:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16036 comm="syz.5.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8079c629 code=0x7ffc0000 [ 1090.134714][ T31] audit: type=1326 audit(1771402050.730:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16036 comm="syz.5.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fdd8079c629 code=0x7ffc0000 [ 1090.300358][ T31] audit: type=1326 audit(1771402050.730:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16036 comm="syz.5.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8079c629 code=0x7ffc0000 [ 1090.779569][ T31] audit: type=1326 audit(1771402050.740:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16036 comm="syz.5.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd8079c629 code=0x7ffc0000 [ 1090.919345][ T31] audit: type=1326 audit(1771402050.740:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16036 comm="syz.5.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8079c629 code=0x7ffc0000 [ 1091.176228][ T31] audit: type=1326 audit(1771402050.740:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16036 comm="syz.5.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fdd8079c629 code=0x7ffc0000 [ 1092.219825][ T31] audit: type=1326 audit(1771402050.740:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16036 comm="syz.5.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8079c629 code=0x7ffc0000 [ 1092.309967][ T31] audit: type=1326 audit(1771402050.740:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16036 comm="syz.5.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd8079c629 code=0x7ffc0000 [ 1096.460983][ T31] audit: type=1326 audit(1771402057.340:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16090 comm="syz.9.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c539c629 code=0x7ffc0000 [ 1096.596773][ T31] audit: type=1326 audit(1771402057.340:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16090 comm="syz.9.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c539c629 code=0x7ffc0000 [ 1098.090011][ T31] audit: type=1326 audit(1771402057.340:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16090 comm="syz.9.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fc2c539c629 code=0x7ffc0000 [ 1098.319994][ T31] audit: type=1326 audit(1771402057.340:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16090 comm="syz.9.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c539c629 code=0x7ffc0000 [ 1098.356406][ T31] audit: type=1326 audit(1771402057.340:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16090 comm="syz.9.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2c539c629 code=0x7ffc0000 [ 1098.380452][ T31] audit: type=1326 audit(1771402057.340:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16090 comm="syz.9.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c539c629 code=0x7ffc0000 [ 1098.409880][ T31] audit: type=1326 audit(1771402057.340:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16090 comm="syz.9.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc2c539c629 code=0x7ffc0000 [ 1098.433487][ T31] audit: type=1326 audit(1771402057.340:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16090 comm="syz.9.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c539c629 code=0x7ffc0000 [ 1098.459848][ T31] audit: type=1326 audit(1771402057.340:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16090 comm="syz.9.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2c539c629 code=0x7ffc0000 [ 1098.531222][ T31] audit: type=1326 audit(1771402057.340:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16090 comm="syz.9.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c539c629 code=0x7ffc0000 [ 1101.094497][T16128] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1109.351105][T16179] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1111.447822][T16190] 9pnet_virtio: no channels available for device syz [ 1115.380256][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.386628][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.022990][T14410] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1117.035597][T14410] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1117.074207][T14410] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1117.093277][T14410] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1117.112728][T14410] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1119.271222][T14410] Bluetooth: hci1: command tx timeout [ 1121.311813][T14410] Bluetooth: hci1: command tx timeout [ 1122.513390][T14410] Bluetooth: hci3: command 0x0406 tx timeout [ 1122.656923][ T31] kauditd_printk_skb: 20 callbacks suppressed [ 1122.656954][ T31] audit: type=1326 audit(1771402083.460:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16250 comm="syz.2.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 1122.720036][T16212] chnl_net:caif_netlink_parms(): no params data found [ 1122.885029][ T31] audit: type=1326 audit(1771402083.470:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16250 comm="syz.2.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 1123.008633][ T31] audit: type=1326 audit(1771402083.470:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16250 comm="syz.2.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 1123.174623][ T31] audit: type=1326 audit(1771402083.470:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16250 comm="syz.2.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 1123.390605][ T5840] Bluetooth: hci1: command tx timeout [ 1123.396195][ T31] audit: type=1326 audit(1771402083.470:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16250 comm="syz.2.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 1123.428713][T16258] tipc: Started in network mode [ 1123.532388][T16258] tipc: Node identity ac14140f, cluster identity 4711 [ 1123.709107][ T31] audit: type=1326 audit(1771402083.470:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16250 comm="syz.2.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 1123.790480][ T31] audit: type=1326 audit(1771402083.470:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16250 comm="syz.2.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 1123.870962][ T31] audit: type=1326 audit(1771402083.470:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16250 comm="syz.2.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 1123.897488][T16258] tipc: New replicast peer: 255.255.255.255 [ 1124.003797][T16258] tipc: Enabled bearer , priority 10 [ 1124.173534][ T31] audit: type=1326 audit(1771402083.470:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16250 comm="syz.2.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 1124.275496][ T31] audit: type=1326 audit(1771402083.470:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16250 comm="syz.2.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dcd79c629 code=0x7ffc0000 [ 1124.580073][ T191] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.952248][ T191] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.049877][T16212] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.057187][T16212] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.320341][T16212] bridge_slave_0: entered allmulticast mode [ 1126.303874][ T5840] Bluetooth: hci1: command tx timeout [ 1126.500236][T16212] bridge_slave_0: entered promiscuous mode [ 1127.541400][ T29] tipc: Node number set to 2886997007 [ 1127.576260][T16212] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.607180][T16212] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.644369][T16212] bridge_slave_1: entered allmulticast mode [ 1127.692640][T16212] bridge_slave_1: entered promiscuous mode [ 1128.021668][ T191] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.291057][T16212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1128.358352][ T5840] Bluetooth: hci6: command 0x0406 tx timeout [ 1128.598175][ T191] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.634666][T16299] netlink: 'syz.2.2072': attribute type 10 has an invalid length. [ 1128.709002][T16212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1128.955113][T16299] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1129.081156][T16212] team0: Port device team_slave_0 added [ 1129.200709][T16212] team0: Port device team_slave_1 added [ 1129.438403][T16212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1129.459057][T16212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.504399][T16317] random: crng reseeded on system resumption [ 1129.749510][T16212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1129.887809][T16322] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1131.581621][T16319] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1131.597088][T16319] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1131.933633][T16212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1132.058869][T16212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1133.130574][T16339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2078'. [ 1133.439587][T16212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1136.227348][ T31] audit: type=1326 audit(1771402096.980:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16360 comm="syz.9.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c539c629 code=0x7ffc0000 [ 1136.346201][ T31] audit: type=1326 audit(1771402096.980:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16360 comm="syz.9.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fc2c539c629 code=0x7ffc0000 [ 1136.711358][ T31] audit: type=1326 audit(1771402096.980:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16360 comm="syz.9.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c539c629 code=0x7ffc0000 [ 1136.913477][ T31] audit: type=1326 audit(1771402096.980:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16360 comm="syz.9.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c539c629 code=0x7ffc0000 [ 1137.013514][T16212] hsr_slave_0: entered promiscuous mode [ 1137.064904][T16212] hsr_slave_1: entered promiscuous mode [ 1137.073926][ T31] audit: type=1326 audit(1771402096.980:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16360 comm="syz.9.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2c539c629 code=0x7ffc0000 [ 1137.110832][T16212] debugfs: 'hsr0' already exists in 'hsr' [ 1137.137113][T16212] Cannot create hsr debugfs directory [ 1137.179568][ T191] bridge_slave_1: left allmulticast mode [ 1137.185343][ T191] bridge_slave_1: left promiscuous mode [ 1137.202342][ T31] audit: type=1326 audit(1771402096.980:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16360 comm="syz.9.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c539c629 code=0x7ffc0000 [ 1137.232772][ T191] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.303533][ T31] audit: type=1326 audit(1771402096.990:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16360 comm="syz.9.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc2c539c629 code=0x7ffc0000 [ 1137.382947][ T191] bridge_slave_0: left allmulticast mode [ 1137.419271][ T31] audit: type=1326 audit(1771402096.990:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16360 comm="syz.9.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c539c629 code=0x7ffc0000 [ 1137.486309][ T191] bridge_slave_0: left promiscuous mode [ 1137.532709][ T31] audit: type=1326 audit(1771402096.990:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16360 comm="syz.9.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2c539c629 code=0x7ffc0000 [ 1137.533863][ T191] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.729529][ T31] audit: type=1326 audit(1771402096.990:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16360 comm="syz.9.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c539c629 code=0x7ffc0000 [ 1139.208545][ T191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1139.284433][ T191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1139.379288][ T191] bond0 (unregistering): Released all slaves [ 1139.689683][ T5829] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1139.751920][T16404] netlink: 'syz.2.2087': attribute type 10 has an invalid length. [ 1140.079499][ T5829] usb 10-1: Using ep0 maxpacket: 8 [ 1140.802955][ T5829] usb 10-1: config 0 has an invalid interface number: 186 but max is 0 [ 1140.849597][ T5829] usb 10-1: config 0 has no interface number 0 [ 1140.866562][ T5829] usb 10-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1140.921018][ T5829] usb 10-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1140.956594][ T5829] usb 10-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1141.011598][ T5829] usb 10-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1141.061583][T16416] tipc: Enabling of bearer rejected, already enabled [ 1141.061789][ T5829] usb 10-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1141.185891][ T5829] usb 10-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1141.247296][ T5829] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.281612][ T5829] usb 10-1: Product: syz [ 1141.286212][ T5829] usb 10-1: Manufacturer: syz [ 1141.303171][ T5829] usb 10-1: SerialNumber: syz [ 1141.333441][ T5829] usb 10-1: config 0 descriptor?? [ 1141.934853][T16437] syz2: rxe_newlink: already configured on ipvlan0 [ 1142.810002][ T5829] iowarrior 10-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1143.535773][ T5829] usb 10-1: USB disconnect, device number 2 [ 1143.827554][T16445] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 1144.283691][T16453] syz2: rxe_newlink: already configured on ipvlan0 [ 1147.855209][T16472] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2099'. [ 1148.229817][T16479] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1149.064495][T16485] syz2: rxe_newlink: already configured on ipvlan0 [ 1152.332817][T16492] tipc: Enabling of bearer rejected, already enabled [ 1152.660769][T16498] netlink: 'syz.2.2103': attribute type 10 has an invalid length. [ 1153.050652][ T191] hsr_slave_0: left promiscuous mode [ 1153.057684][ T191] hsr_slave_1: left promiscuous mode [ 1153.124039][ T191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1153.158309][ T191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1153.220967][ T191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1153.265342][ T191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1153.595867][ T191] veth1_macvtap: left promiscuous mode [ 1153.613008][ T191] veth0_macvtap: left promiscuous mode [ 1153.618852][ T191] veth1_vlan: left promiscuous mode [ 1154.649598][ T191] veth0_vlan: left promiscuous mode [ 1156.163478][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 1156.163507][ T31] audit: type=1326 audit(1771402117.040:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16513 comm="syz.4.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a51b9c629 code=0x7ffc0000 [ 1156.206448][ T31] audit: type=1326 audit(1771402117.040:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16513 comm="syz.4.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a51b9c629 code=0x7ffc0000 [ 1156.255642][ T31] audit: type=1326 audit(1771402117.040:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16513 comm="syz.4.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f1a51b9c629 code=0x7ffc0000 [ 1156.324186][ T31] audit: type=1326 audit(1771402117.040:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16513 comm="syz.4.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a51b9c629 code=0x7ffc0000 [ 1156.374107][ T191] team0 (unregistering): Port device team_slave_1 removed [ 1156.383472][ T31] audit: type=1326 audit(1771402117.040:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16513 comm="syz.4.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a51b9c629 code=0x7ffc0000 [ 1156.418112][ T191] team0 (unregistering): Port device team_slave_0 removed [ 1156.435868][ T31] audit: type=1326 audit(1771402117.050:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16513 comm="syz.4.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a51b9c629 code=0x7ffc0000 [ 1156.469001][ T31] audit: type=1326 audit(1771402117.050:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16513 comm="syz.4.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a51b9c629 code=0x7ffc0000 [ 1156.503519][ T31] audit: type=1326 audit(1771402117.050:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16513 comm="syz.4.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a51b9c629 code=0x7ffc0000 [ 1156.527154][ T31] audit: type=1326 audit(1771402117.050:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16513 comm="syz.4.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1a51b9c629 code=0x7ffc0000 [ 1156.626237][ T31] audit: type=1326 audit(1771402117.050:2789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16513 comm="syz.4.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a51b9c629 code=0x7ffc0000 [ 1156.692990][T16525] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 1157.937463][T16212] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1158.073189][T16545] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2112'. [ 1158.106816][T16212] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1158.170448][T16212] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1158.578537][T16212] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1159.680213][T16569] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2114'. [ 1160.199652][T16560] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1160.541398][T16583] random: crng reseeded on system resumption [ 1160.593125][T16212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1160.686711][T16212] 8021q: adding VLAN 0 to HW filter on device team0 [ 1161.041878][T16585] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1161.051888][T16585] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1161.435055][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.442258][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1161.540867][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.548137][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1162.330349][T16599] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2119'. [ 1163.636526][T16212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1164.331452][T16618] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 1164.611330][T16622] netlink: 'syz.4.2122': attribute type 10 has an invalid length. [ 1165.200787][T16635] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2125'. [ 1165.768125][T16212] veth0_vlan: entered promiscuous mode [ 1167.120756][T16212] veth1_vlan: entered promiscuous mode [ 1168.479885][T16660] 9pnet_virtio: no channels available for device syz [ 1173.017439][T16212] veth0_macvtap: entered promiscuous mode [ 1173.272917][T16212] veth1_macvtap: entered promiscuous mode [ 1173.364949][T16212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1173.444138][T16212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1173.569695][T14019] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.578675][T14019] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.048238][T16687] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1176.940145][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.946559][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.039599][T14019] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.949117][ T8165] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.305787][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1178.319647][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1178.335264][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1178.355892][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1178.368104][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1179.300609][T16729] netlink: 'syz.9.2140': attribute type 10 has an invalid length. [ 1179.452960][T16738] random: crng reseeded on system resumption [ 1179.647845][T16742] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1179.656391][T16742] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1180.440654][ T5840] Bluetooth: hci5: command tx timeout [ 1180.672998][T16729] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1181.276447][ T191] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.561787][ T5937] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1181.602050][ T191] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.741812][ T5937] usb 3-1: Using ep0 maxpacket: 8 [ 1181.792068][ T5937] usb 3-1: config 0 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 1181.839604][ T5937] usb 3-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1181.874383][ T191] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.895545][ T5937] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1181.937396][ T5937] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1181.988516][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.034124][ T5937] usb 3-1: config 0 descriptor?? [ 1182.201257][ T191] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.425914][T16754] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1182.443360][ T5937] usbhid 3-1:0.0: can't add hid device: -71 [ 1182.455003][ T5937] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1182.466804][ T5937] usb 3-1: USB disconnect, device number 14 [ 1182.510212][ T5840] Bluetooth: hci5: command tx timeout [ 1184.397130][T16808] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2153'. [ 1184.602421][ T5840] Bluetooth: hci5: command tx timeout [ 1186.289488][T13598] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1186.431471][T16712] chnl_net:caif_netlink_parms(): no params data found [ 1186.471743][T13598] usb 10-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 1186.509503][T13598] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.550812][T13598] usb 10-1: config 0 descriptor?? [ 1186.600753][T13598] usb 10-1: selecting invalid altsetting 1 [ 1186.625174][ T191] bridge_slave_1: left allmulticast mode [ 1186.631141][T16821] netlink: 'syz.0.2156': attribute type 10 has an invalid length. [ 1186.662879][ T191] bridge_slave_1: left promiscuous mode [ 1186.668680][ T191] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.685961][ T5840] Bluetooth: hci5: command tx timeout [ 1186.787052][T13598] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1186.815614][T16684] udevd[16684]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1186.817127][ T191] bridge_slave_0: left allmulticast mode [ 1186.850396][T13598] usb 10-1: USB disconnect, device number 3 [ 1186.937318][ T191] bridge_slave_0: left promiscuous mode [ 1186.966077][ T191] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.689680][T16847] sg_write: data in/out 28/10 bytes for SCSI command 0x5d-- guessing data in; [ 1188.689680][T16847] program syz.6.2161 not setting count and/or reply_len properly [ 1190.825063][ T191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1190.931679][ T191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1190.958900][ T191] bond0 (unregistering): Released all slaves [ 1191.215925][T16864] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1191.407283][T16821] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1193.078381][ T191] hsr_slave_0: left promiscuous mode [ 1193.085707][ T191] hsr_slave_1: left promiscuous mode [ 1193.105269][ T191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1193.149136][ T191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1193.259447][ T191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1193.302480][ T191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1193.371006][ T191] veth1_macvtap: left promiscuous mode [ 1193.386840][ T191] veth0_macvtap: left promiscuous mode [ 1193.409636][ T191] veth1_vlan: left promiscuous mode [ 1193.415076][ T191] veth0_vlan: left promiscuous mode [ 1195.125932][ T191] team0 (unregistering): Port device team_slave_1 removed [ 1195.219562][ T191] team0 (unregistering): Port device team_slave_0 removed [ 1196.994562][T16712] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.039219][T16712] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.063302][T16712] bridge_slave_0: entered allmulticast mode [ 1197.079616][T16712] bridge_slave_0: entered promiscuous mode [ 1197.176195][T16712] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.238718][T16712] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.272323][T16712] bridge_slave_1: entered allmulticast mode [ 1197.496366][T16712] bridge_slave_1: entered promiscuous mode [ 1197.789545][ T5921] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1197.841592][T16712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1198.222511][T16712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1198.279907][ T5921] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1198.413100][ T5921] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1198.452859][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1198.479576][ T5921] usb 3-1: Product: syz [ 1198.483954][ T5921] usb 3-1: Manufacturer: syz [ 1198.521064][ T5921] usb 3-1: SerialNumber: syz [ 1198.537613][T16712] team0: Port device team_slave_0 added [ 1198.566860][T16712] team0: Port device team_slave_1 added [ 1198.776575][T16712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1198.822445][ T5921] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1198.859516][T16712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1198.954735][T16712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1199.013583][T16712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1199.051632][T16712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1199.163005][ T5914] usb 3-1: USB disconnect, device number 15 [ 1199.175181][T16712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1199.183785][ T5914] usblp0: removed [ 1200.985540][T16949] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2176'. [ 1201.040427][T16712] hsr_slave_0: entered promiscuous mode [ 1201.074684][T16955] netlink: 'syz.4.2177': attribute type 10 has an invalid length. [ 1201.088882][T16712] hsr_slave_1: entered promiscuous mode [ 1202.119608][ T5937] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1202.320577][ T5937] usb 7-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 1202.506350][ T5937] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.642513][ T5937] usb 7-1: config 0 descriptor?? [ 1202.662808][ T5937] usb 7-1: selecting invalid altsetting 1 [ 1202.813632][ T5937] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1202.891880][T16877] udevd[16877]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1203.036740][ T5914] usb 7-1: USB disconnect, device number 6 [ 1204.616198][T16992] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1204.622783][T16992] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1204.720231][T16992] vhci_hcd vhci_hcd.0: Device attached [ 1205.246497][T13598] usb 34-1: SetAddress Request (2) to port 0 [ 1205.311968][T13598] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1205.403427][T16712] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1205.442856][T16712] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1205.650077][T16712] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1205.931060][T16712] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1207.154280][T16712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1208.039856][T16712] 8021q: adding VLAN 0 to HW filter on device team0 [ 1208.230509][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.237690][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1208.339327][T14019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.346501][T14019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1209.276382][T16993] vhci_hcd: connection reset by peer [ 1209.318519][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1209.359529][ T12] vhci_hcd vhci_hcd.0: release socket [ 1209.395545][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1210.509606][T13598] usb 34-1: device descriptor read/8, error -110 [ 1210.571583][T17056] random: crng reseeded on system resumption [ 1210.623170][T17053] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1210.629763][T17053] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1210.695992][T17053] vhci_hcd vhci_hcd.0: Device attached [ 1210.931931][T16712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1210.972350][T13598] usb usb34-port1: attempt power cycle [ 1211.152556][ T5914] usb 38-1: SetAddress Request (2) to port 0 [ 1211.159782][T17055] vhci_hcd: connection closed [ 1211.161720][ T191] vhci_hcd vhci_hcd.2: stop threads [ 1211.161962][ T5914] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1211.166527][ T191] vhci_hcd vhci_hcd.2: release socket [ 1211.323711][ T191] vhci_hcd vhci_hcd.2: disconnect device [ 1211.636864][T17069] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2192'. [ 1211.750528][T13598] usb usb34-port1: unable to enumerate USB device [ 1212.892387][T16712] veth0_vlan: entered promiscuous mode [ 1212.944021][T16712] veth1_vlan: entered promiscuous mode [ 1213.241842][T16712] veth0_macvtap: entered promiscuous mode [ 1213.350025][T16712] veth1_macvtap: entered promiscuous mode [ 1213.503485][T16712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1213.588928][T16712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1213.753372][ T59] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.837532][ T59] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.892571][ T59] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.932153][ T59] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.186628][T17087] libceph: resolve '0.' (ret=-3): failed [ 1214.891796][T14019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1214.936715][T14019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1215.399451][T17116] 9pnet_virtio: no channels available for device syz [ 1217.309682][ T5914] usb 38-1: device descriptor read/8, error -110 [ 1217.845521][ T5914] usb usb38-port1: attempt power cycle [ 1217.905842][T17121] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1217.936693][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1217.955597][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1218.415208][ T5914] usb usb38-port1: unable to enumerate USB device [ 1225.709469][ T5840] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 1225.710409][ T5823] Bluetooth: hci5: command 0x206a tx timeout [ 1229.203404][T17197] random: crng reseeded on system resumption [ 1229.324297][T17191] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2210'. [ 1229.603877][T17185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.611663][T17185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.745852][T17199] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1229.754421][T17199] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1230.708475][T17185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1230.812551][T17185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1232.633642][T15575] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.692437][T15575] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.729673][T15575] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.739502][T15575] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.187076][T17240] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1236.284453][T17235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2220'. [ 1237.058013][T17257] random: crng reseeded on system resumption [ 1237.288796][T17258] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1237.297717][T17258] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1238.197157][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.203628][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.426794][T17267] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2226'. [ 1239.147974][T17277] random: crng reseeded on system resumption [ 1239.289614][T17276] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1239.296213][T17276] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1239.304919][T17276] vhci_hcd vhci_hcd.0: Device attached [ 1239.481483][T17278] vhci_hcd: connection closed [ 1239.493835][ T8149] vhci_hcd vhci_hcd.9: stop threads [ 1239.504215][ T8149] vhci_hcd vhci_hcd.9: release socket [ 1239.509733][ T8149] vhci_hcd vhci_hcd.9: disconnect device [ 1239.811537][T17281] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1242.035932][T17289] 9pnet_virtio: no channels available for device syz [ 1244.719785][T17302] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2232'. [ 1245.348613][T17302] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2232'. [ 1247.349554][ T5829] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1248.564284][ T5829] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1248.619559][ T5829] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1248.989196][ T5829] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1249.134375][ T5829] usb 10-1: Product: syz [ 1249.138790][ T5829] usb 10-1: Manufacturer: syz [ 1249.143548][ T5829] usb 10-1: SerialNumber: syz [ 1249.541352][T17340] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2239'. [ 1249.613111][ T5829] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1249.710108][ T5829] usb 10-1: USB disconnect, device number 4 [ 1249.769173][ T5829] usblp0: removed [ 1249.907948][T17345] libceph: resolve '0.' (ret=-3): failed [ 1250.405632][T17352] syz2: rxe_newlink: already configured on ipvlan0 [ 1252.121185][T17356] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2244'. [ 1256.218911][T17399] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2251'. [ 1257.019846][T17405] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2254'. [ 1258.229525][ T5829] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1261.299466][ T5829] usb 7-1: Using ep0 maxpacket: 8 [ 1264.199547][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 1264.199577][ T31] audit: type=1326 audit(1771402223.590:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17424 comm="syz.0.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7fc00000 [ 1264.539530][ T5829] usb 7-1: device descriptor read/all, error -71 [ 1267.419825][ T31] audit: type=1326 audit(1771402228.190:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17438 comm="syz.6.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f817019c629 code=0x7fc00000 [ 1268.699971][T17453] random: crng reseeded on system resumption [ 1268.951869][T17453] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1268.960099][T17453] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1271.628412][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1271.666173][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1271.679868][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1271.703187][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1271.739648][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1272.050133][T17483] random: crng reseeded on system resumption [ 1272.251297][T17486] tipc: Enabling of bearer rejected, already enabled [ 1272.372450][T17485] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1272.380372][T17485] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1273.218618][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1273.232126][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1273.240311][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1273.269589][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1273.291394][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1273.887585][ T5823] Bluetooth: hci1: command tx timeout [ 1273.942697][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.455455][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.921687][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.013436][T17517] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2272'. [ 1275.154753][T17522] random: crng reseeded on system resumption [ 1275.357169][T17523] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1275.369408][T17523] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1275.400114][ T5823] Bluetooth: hci3: command tx timeout [ 1275.554966][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.960999][ T5823] Bluetooth: hci1: command tx timeout [ 1277.057298][ T31] audit: type=1326 audit(1771402237.910:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17533 comm="syz.0.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1277.122433][ T31] audit: type=1326 audit(1771402237.910:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17533 comm="syz.0.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1277.154426][ T31] audit: type=1326 audit(1771402237.910:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17533 comm="syz.0.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1277.182404][ T31] audit: type=1326 audit(1771402237.920:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17533 comm="syz.0.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1277.239468][ T31] audit: type=1326 audit(1771402237.920:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17533 comm="syz.0.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1277.325836][ T31] audit: type=1326 audit(1771402237.920:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17533 comm="syz.0.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1277.404583][ T31] audit: type=1326 audit(1771402237.920:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17533 comm="syz.0.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1277.477069][ T5823] Bluetooth: hci3: command tx timeout [ 1277.489708][ T31] audit: type=1326 audit(1771402237.920:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17533 comm="syz.0.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1277.546007][ T12] bridge_slave_1: left allmulticast mode [ 1277.589494][ T12] bridge_slave_1: left promiscuous mode [ 1277.629804][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.660562][ T31] audit: type=1326 audit(1771402237.920:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17533 comm="syz.0.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1277.739550][ T31] audit: type=1326 audit(1771402237.920:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17533 comm="syz.0.2275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1277.765944][ T12] bridge_slave_0: left allmulticast mode [ 1277.781568][ T12] bridge_slave_0: left promiscuous mode [ 1277.787390][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.029484][ T5823] Bluetooth: hci1: command tx timeout [ 1279.559438][ T5840] Bluetooth: hci3: command tx timeout [ 1280.115363][ T5840] Bluetooth: hci1: command tx timeout [ 1280.220681][T17571] binder_alloc: 17569: binder_alloc_buf, no vma [ 1280.675420][ T5823] Bluetooth: hci6: Opcode 0x206a failed: -110 [ 1280.791703][ T5823] Bluetooth: hci6: command 0x0406 tx timeout [ 1281.135748][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1281.276141][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1281.320692][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1281.429980][ T12] bond0 (unregistering): Released all slaves [ 1281.463870][T17477] chnl_net:caif_netlink_parms(): no params data found [ 1281.732015][ T5823] Bluetooth: hci3: command tx timeout [ 1281.756123][ T12] tipc: Disabling bearer [ 1281.790207][ T12] tipc: Left network mode [ 1282.136303][T17592] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2282'. [ 1283.085116][T17477] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.250030][T17477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.410468][T17477] bridge_slave_0: entered allmulticast mode [ 1283.472417][T17477] bridge_slave_0: entered promiscuous mode [ 1283.551829][T17477] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.559025][T17477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.599693][T17477] bridge_slave_1: entered allmulticast mode [ 1283.620342][T17477] bridge_slave_1: entered promiscuous mode [ 1283.827169][T17492] chnl_net:caif_netlink_parms(): no params data found [ 1286.348521][T17477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1286.593708][ T5823] Bluetooth: hci6: Opcode 0x206a failed: -110 [ 1286.600384][ T5823] Bluetooth: hci6: command 0x0406 tx timeout [ 1286.621005][T17477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1286.879770][T17492] bridge0: port 1(bridge_slave_0) entered blocking state [ 1286.911517][T17492] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.918866][T17492] bridge_slave_0: entered allmulticast mode [ 1286.957151][T17492] bridge_slave_0: entered promiscuous mode [ 1287.007344][T17492] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.015116][T17492] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.022754][T17492] bridge_slave_1: entered allmulticast mode [ 1287.031229][T17492] bridge_slave_1: entered promiscuous mode [ 1287.089625][ T5829] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1287.165536][ T5921] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1287.252429][T17477] team0: Port device team_slave_0 added [ 1287.292157][ T5829] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1287.341634][ T5829] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1287.350881][ T5921] usb 8-1: Using ep0 maxpacket: 8 [ 1287.364083][T17477] team0: Port device team_slave_1 added [ 1287.367420][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1287.382875][ T5921] usb 8-1: config 0 has an invalid interface number: 186 but max is 0 [ 1287.392056][ T5921] usb 8-1: config 0 has no interface number 0 [ 1287.398534][ T5921] usb 8-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1287.409786][ T5829] usb 7-1: Product: syz [ 1287.413970][ T5829] usb 7-1: Manufacturer: syz [ 1287.418597][ T5829] usb 7-1: SerialNumber: syz [ 1287.435872][ T5921] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1287.448108][ T5921] usb 8-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1287.469262][ T5921] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1287.480979][ T5921] usb 8-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1287.511770][T17492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1287.531246][ T5921] usb 8-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1287.540929][ T5921] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.549956][ T5921] usb 8-1: Product: syz [ 1287.558766][T17492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1287.569494][ T5921] usb 8-1: Manufacturer: syz [ 1287.574144][ T5921] usb 8-1: SerialNumber: syz [ 1287.623187][ T5921] usb 8-1: config 0 descriptor?? [ 1287.703285][T17477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1287.751540][T17477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1287.778593][T17477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1287.815615][ T5829] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1288.791866][ T5921] iowarrior 8-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior1 [ 1288.805356][ T5829] usb 7-1: USB disconnect, device number 9 [ 1288.827124][ T5829] usblp0: removed [ 1288.851843][ T5921] usb 8-1: USB disconnect, device number 3 [ 1288.872026][T17477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1288.888902][T17477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1288.938770][T17477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1289.042859][T17492] team0: Port device team_slave_0 added [ 1289.191920][ T31] kauditd_printk_skb: 32 callbacks suppressed [ 1289.191953][ T31] audit: type=1326 audit(1771402250.040:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17643 comm="syz.9.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c539c629 code=0x7ffc0000 [ 1289.194047][T17492] team0: Port device team_slave_1 added [ 1289.198138][ T31] audit: type=1326 audit(1771402250.040:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17643 comm="syz.9.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fc2c539c629 code=0x7ffc0000 [ 1289.437183][ T31] audit: type=1326 audit(1771402250.040:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17643 comm="syz.9.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c539c629 code=0x7ffc0000 [ 1289.609002][ T31] audit: type=1326 audit(1771402250.040:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17643 comm="syz.9.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2c539c629 code=0x7ffc0000 [ 1289.685401][ T31] audit: type=1326 audit(1771402250.040:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17643 comm="syz.9.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c539c629 code=0x7ffc0000 [ 1289.742954][ T31] audit: type=1326 audit(1771402250.050:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17643 comm="syz.9.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c539c629 code=0x7ffc0000 [ 1289.816570][ T31] audit: type=1326 audit(1771402250.050:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17643 comm="syz.9.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc2c539c629 code=0x7ffc0000 [ 1289.970974][ T31] audit: type=1326 audit(1771402250.050:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17643 comm="syz.9.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c539c629 code=0x7ffc0000 [ 1290.159569][ T31] audit: type=1326 audit(1771402250.050:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17643 comm="syz.9.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2c539c629 code=0x7ffc0000 [ 1290.240835][T17477] hsr_slave_0: entered promiscuous mode [ 1290.270186][ T31] audit: type=1326 audit(1771402250.050:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17643 comm="syz.9.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c539c629 code=0x7ffc0000 [ 1290.303404][T17477] hsr_slave_1: entered promiscuous mode [ 1290.343761][T17477] debugfs: 'hsr0' already exists in 'hsr' [ 1290.361363][T17477] Cannot create hsr debugfs directory [ 1290.389950][T17492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1290.419458][T17492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1290.499420][T17492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1290.561503][T17492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1290.568507][T17492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1290.678405][T17492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1291.348586][ T12] hsr_slave_0: left promiscuous mode [ 1291.368620][ T12] hsr_slave_1: left promiscuous mode [ 1291.389957][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1291.410757][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1291.430399][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1291.559466][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1291.587650][ T12] veth1_macvtap: left promiscuous mode [ 1291.606158][ T12] veth0_macvtap: left promiscuous mode [ 1291.616373][ T12] veth1_vlan: left promiscuous mode [ 1291.630207][ T12] veth0_vlan: left promiscuous mode [ 1292.397355][T17675] random: crng reseeded on system resumption [ 1292.664910][T17676] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1292.676158][T17676] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1293.875171][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1293.962447][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1295.579822][ T31] kauditd_printk_skb: 37 callbacks suppressed [ 1295.579857][ T31] audit: type=1326 audit(1771402256.100:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17684 comm="syz.7.2298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c679c629 code=0x7fc00000 [ 1296.905325][T17695] random: crng reseeded on system resumption [ 1297.134527][T17696] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1297.142304][T17696] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1297.548983][T17686] pim6reg: entered allmulticast mode [ 1297.815425][T17492] hsr_slave_0: entered promiscuous mode [ 1297.822438][T17492] hsr_slave_1: entered promiscuous mode [ 1297.829100][T17492] debugfs: 'hsr0' already exists in 'hsr' [ 1297.834979][T17492] Cannot create hsr debugfs directory [ 1300.464557][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.470979][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.597627][ T5840] Bluetooth: hci5: command 0x206a tx timeout [ 1304.206337][ T31] audit: type=1326 audit(1771402264.310:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17724 comm="syz.6.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f817019c629 code=0x7fc00000 [ 1305.375983][T17745] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1310.226002][T17477] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1311.200307][T17477] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1311.224069][T17773] tipc: Enabling of bearer rejected, already enabled [ 1311.639960][T17477] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1311.770700][T17477] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1312.746690][ T12] bridge_slave_1: left allmulticast mode [ 1312.797454][ T12] bridge_slave_1: left promiscuous mode [ 1312.847282][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.891326][ T12] bridge_slave_0: left allmulticast mode [ 1312.918375][ T12] bridge_slave_0: left promiscuous mode [ 1312.949030][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.222911][T17803] random: crng reseeded on system resumption [ 1313.542355][T17803] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1313.550884][T17803] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1314.858219][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1314.890023][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1314.933040][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1314.954236][ T12] bond0 (unregistering): Released all slaves [ 1315.134922][ T12] tipc: Disabling bearer [ 1315.203886][ T31] audit: type=1326 audit(1771402276.070:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.7.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c679c629 code=0x7ffc0000 [ 1315.230798][ T12] tipc: Left network mode [ 1315.374131][ T31] audit: type=1326 audit(1771402276.070:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.7.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fa6c679c629 code=0x7ffc0000 [ 1315.411787][T17820] libceph: resolve '0.' (ret=-3): failed [ 1315.460377][ T31] audit: type=1326 audit(1771402276.070:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.7.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c679c629 code=0x7ffc0000 [ 1315.534368][ T31] audit: type=1326 audit(1771402276.070:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.7.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa6c679c629 code=0x7ffc0000 [ 1315.608004][ T31] audit: type=1326 audit(1771402276.080:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.7.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c679c629 code=0x7ffc0000 [ 1315.821064][ T31] audit: type=1326 audit(1771402276.080:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.7.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c679c629 code=0x7ffc0000 [ 1315.849782][ T31] audit: type=1326 audit(1771402276.080:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.7.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa6c679c629 code=0x7ffc0000 [ 1315.874027][ T31] audit: type=1326 audit(1771402276.080:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.7.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c679c629 code=0x7ffc0000 [ 1315.964878][ T31] audit: type=1326 audit(1771402276.080:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.7.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6c679c629 code=0x7ffc0000 [ 1316.020446][ T31] audit: type=1326 audit(1771402276.080:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17813 comm="syz.7.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c679c629 code=0x7ffc0000 [ 1319.309599][T17492] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1319.587216][T17492] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1319.632348][T17492] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1320.458201][T17477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1320.645195][T17841] tipc: Enabling of bearer rejected, already enabled [ 1320.767001][T17492] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1320.992830][ T31] kauditd_printk_skb: 27 callbacks suppressed [ 1320.992860][ T31] audit: type=1326 audit(1771402281.870:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17843 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1321.062448][ T31] audit: type=1326 audit(1771402281.870:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17843 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1321.149083][T17477] 8021q: adding VLAN 0 to HW filter on device team0 [ 1321.162326][ T31] audit: type=1326 audit(1771402281.880:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17843 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1321.251425][ T31] audit: type=1326 audit(1771402281.880:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17843 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1321.544801][ T31] audit: type=1326 audit(1771402281.880:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17843 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1321.568314][ T31] audit: type=1326 audit(1771402281.880:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17843 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1321.591346][ T31] audit: type=1326 audit(1771402281.880:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17843 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1321.616013][T17853] 9pnet_virtio: no channels available for device syz [ 1321.716687][ T31] audit: type=1326 audit(1771402281.880:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17843 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1321.777371][ T8164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.784577][ T8164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1321.804422][ T31] audit: type=1326 audit(1771402281.940:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17843 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50bc19c629 code=0x7ffc0000 [ 1322.053568][ T191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.060782][ T191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1322.629993][T17492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1323.685567][ T12] hsr_slave_0: left promiscuous mode [ 1323.729458][ T12] hsr_slave_1: left promiscuous mode [ 1323.799957][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1323.840695][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1323.871008][T17875] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2330'. [ 1324.106977][ T1094] smc: removing ib device syz2 [ 1324.801334][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1325.010033][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1325.419041][T17492] 8021q: adding VLAN 0 to HW filter on device team0 [ 1325.478377][ T9] ================================================================== [ 1325.486481][ T9] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x190/0x1c0 [ 1325.495468][ T9] Read of size 8 at addr ffff88807c0622f0 by task kworker/0:0/9 [ 1325.503108][ T9] [ 1325.505438][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 1325.505474][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1325.505496][ T9] Workqueue: events smc_ib_port_event_work [ 1325.505534][ T9] Call Trace: [ 1325.505547][ T9] [ 1325.505560][ T9] dump_stack_lvl+0x100/0x190 [ 1325.505605][ T9] print_report+0x156/0x4c9 [ 1325.505648][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1325.505684][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1325.505721][ T9] ? __phys_addr+0xe8/0x180 [ 1325.505763][ T9] ? __ethtool_get_link_ksettings+0x190/0x1c0 [ 1325.505805][ T9] kasan_report+0xdf/0x1e0 [ 1325.505841][ T9] ? __ethtool_get_link_ksettings+0x190/0x1c0 [ 1325.505888][ T9] __ethtool_get_link_ksettings+0x190/0x1c0 [ 1325.505930][ T9] __ethtool_get_link_ksettings+0x144/0x1c0 [ 1325.505972][ T9] ib_get_eth_speed+0x13a/0xb40 [ 1325.506021][ T9] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1325.506076][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1325.506112][ T9] ? do_raw_spin_unlock+0x145/0x1e0 [ 1325.506175][ T9] rxe_query_port+0x12a/0x330 [ 1325.506208][ T9] ib_query_port+0x441/0x8a0 [ 1325.506255][ T9] smc_ib_port_event_work+0x14c/0xbd0 [ 1325.506293][ T9] ? smc_ib_port_event_work+0x54/0xbd0 [ 1325.506328][ T9] ? rcu_is_watching+0x12/0xc0 [ 1325.506362][ T9] process_one_work+0x9d7/0x1920 [ 1325.506447][ T9] ? __pfx_process_one_work+0x10/0x10 [ 1325.506511][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1325.506554][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1325.506594][ T9] worker_thread+0x5da/0xe40 [ 1325.506648][ T9] ? kthread+0x13a/0x450 [ 1325.506689][ T9] ? __pfx_worker_thread+0x10/0x10 [ 1325.506734][ T9] kthread+0x370/0x450 [ 1325.506776][ T9] ? __pfx_kthread+0x10/0x10 [ 1325.506820][ T9] ret_from_fork+0x754/0xd80 [ 1325.506867][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 1325.506914][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1325.506950][ T9] ? __switch_to+0x7b4/0x1120 [ 1325.506992][ T9] ? __pfx_kthread+0x10/0x10 [ 1325.507038][ T9] ret_from_fork_asm+0x1a/0x30 [ 1325.507081][ T9] [ 1325.507091][ T9] [ 1325.715862][ T9] Allocated by task 14273: [ 1325.720271][ T9] kasan_save_stack+0x30/0x50 [ 1325.725042][ T9] kasan_save_track+0x14/0x30 [ 1325.729727][ T9] __kasan_kmalloc+0xaa/0xb0 [ 1325.734336][ T9] __kvmalloc_node_noprof+0x360/0xa00 [ 1325.739800][ T9] alloc_netdev_mqs+0xd7/0x14f0 [ 1325.744680][ T9] rtnl_create_link+0xc13/0xf80 [ 1325.749554][ T9] rtnl_newlink+0x13b8/0x2380 [ 1325.754230][ T9] rtnetlink_rcv_msg+0x95e/0xe90 [ 1325.759199][ T9] netlink_rcv_skb+0x159/0x420 [ 1325.764018][ T9] netlink_unicast+0x5aa/0x870 [ 1325.768790][ T9] netlink_sendmsg+0x8b0/0xda0 [ 1325.773560][ T9] __sys_sendto+0x4aa/0x520 [ 1325.778082][ T9] __x64_sys_sendto+0xe0/0x1c0 [ 1325.782865][ T9] do_syscall_64+0x106/0xf80 [ 1325.787490][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.793409][ T9] [ 1325.795721][ T9] Freed by task 12: [ 1325.799602][ T9] kasan_save_stack+0x30/0x50 [ 1325.804371][ T9] kasan_save_track+0x14/0x30 [ 1325.809048][ T9] kasan_save_free_info+0x3b/0x70 [ 1325.814096][ T9] __kasan_slab_free+0x5f/0x80 [ 1325.818866][ T9] kfree+0x1f6/0x6b0 [ 1325.822779][ T9] device_release+0xa4/0x240 [ 1325.827477][ T9] kobject_put+0x1f7/0x640 [ 1325.832098][ T9] netdev_run_todo+0x817/0x12c0 [ 1325.836974][ T9] default_device_exit_batch+0x94b/0xc60 [ 1325.842711][ T9] ops_undo_list+0x363/0xab0 [ 1325.847309][ T9] cleanup_net+0x499/0x920 [ 1325.851732][ T9] process_one_work+0x9d7/0x1920 [ 1325.856723][ T9] worker_thread+0x5da/0xe40 [ 1325.861429][ T9] kthread+0x370/0x450 [ 1325.865518][ T9] ret_from_fork+0x754/0xd80 [ 1325.870137][ T9] ret_from_fork_asm+0x1a/0x30 [ 1325.874907][ T9] [ 1325.877218][ T9] The buggy address belongs to the object at ffff88807c062000 [ 1325.877218][ T9] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1325.891530][ T9] The buggy address is located 752 bytes inside of [ 1325.891530][ T9] freed 4096-byte region [ffff88807c062000, ffff88807c063000) [ 1325.905459][ T9] [ 1325.907777][ T9] The buggy address belongs to the physical page: [ 1325.914176][ T9] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c060 [ 1325.922937][ T9] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1325.931694][ T9] memcg:ffff88807c061011 [ 1325.935933][ T9] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1325.943478][ T9] page_type: f5(slab) [ 1325.947459][ T9] raw: 00fff00000000040 ffff88813fe54500 dead000000000100 dead000000000122 [ 1325.956048][ T9] raw: 0000000000000000 0000200000040004 00000000f5000000 ffff88807c061011 [ 1325.964680][ T9] head: 00fff00000000040 ffff88813fe54500 dead000000000100 dead000000000122 [ 1325.973547][ T9] head: 0000000000000000 0000200000040004 00000000f5000000 ffff88807c061011 [ 1325.982225][ T9] head: 00fff00000000003 ffffea0001f01801 00000000ffffffff 00000000ffffffff [ 1325.990943][ T9] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1325.999630][ T9] page dumped because: kasan: bad access detected [ 1326.006136][ T9] page_owner tracks the page as allocated [ 1326.011855][ T9] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6595, tgid 6595 (udevd), ts 535920359502, free_ts 535867154191 [ 1326.033508][ T9] post_alloc_hook+0x153/0x170 [ 1326.038298][ T9] get_page_from_freelist+0x111d/0x3140 [ 1326.043900][ T9] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1326.049920][ T9] new_slab+0xa6/0x6d0 [ 1326.054012][ T9] refill_objects+0x26b/0x400 [ 1326.058709][ T9] __pcs_replace_empty_main+0x19f/0x600 [ 1326.064281][ T9] __kvmalloc_node_noprof+0x7da/0xa00 [ 1326.069657][ T9] seq_read_iter+0x819/0x1270 [ 1326.074373][ T9] kernfs_fop_read_iter+0x46c/0x610 [ 1326.079679][ T9] vfs_read+0x825/0xb30 [ 1326.083836][ T9] ksys_read+0x12a/0x250 [ 1326.088080][ T9] do_syscall_64+0x106/0xf80 [ 1326.092672][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.098576][ T9] page last free pid 5187 tgid 5187 stack trace: [ 1326.104897][ T9] __free_frozen_pages+0x7ca/0x10a0 [ 1326.110153][ T9] qlist_free_all+0x47/0xe0 [ 1326.114766][ T9] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1326.120252][ T9] __kasan_slab_alloc+0x69/0x90 [ 1326.125113][ T9] kmem_cache_alloc_noprof+0x241/0x6e0 [ 1326.130597][ T9] do_getname+0x35/0x390 [ 1326.134856][ T9] do_sys_openat2+0xc5/0x1e0 [ 1326.139462][ T9] __x64_sys_openat+0x12d/0x210 [ 1326.144334][ T9] do_syscall_64+0x106/0xf80 [ 1326.148926][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.154828][ T9] [ 1326.157147][ T9] Memory state around the buggy address: [ 1326.162942][ T9] ffff88807c062180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1326.171017][ T9] ffff88807c062200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1326.179163][ T9] >ffff88807c062280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1326.187214][ T9] ^ [ 1326.194926][ T9] ffff88807c062300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1326.203009][ T9] ffff88807c062380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1326.211175][ T9] ================================================================== [ 1326.899391][ T9] Disabling lock debugging due to kernel taint [ 1326.906362][ T9] ================================================================== [ 1326.914442][ T9] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0xa4/0x1c0 [ 1326.923265][ T9] Read of size 8 at addr ffff88807c0620a8 by task kworker/0:0/9 [ 1326.930907][ T9] [ 1326.933242][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G B syzkaller #0 PREEMPT(full) [ 1326.933296][ T9] Tainted: [B]=BAD_PAGE [ 1326.933311][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1326.933338][ T9] Workqueue: events smc_ib_port_event_work [ 1326.933383][ T9] Call Trace: [ 1326.933395][ T9] [ 1326.933409][ T9] dump_stack_lvl+0x100/0x190 [ 1326.933466][ T9] print_report+0x156/0x4c9 [ 1326.933521][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1326.933569][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1326.933616][ T9] ? __phys_addr+0xe8/0x180 [ 1326.933670][ T9] ? __ethtool_get_link_ksettings+0xa4/0x1c0 [ 1326.933724][ T9] kasan_report+0xdf/0x1e0 [ 1326.933771][ T9] ? __ethtool_get_link_ksettings+0xa4/0x1c0 [ 1326.933830][ T9] kasan_check_range+0x10f/0x1e0 [ 1326.933881][ T9] __ethtool_get_link_ksettings+0xa4/0x1c0 [ 1326.933936][ T9] __ethtool_get_link_ksettings+0x144/0x1c0 [ 1326.933990][ T9] ib_get_eth_speed+0x13a/0xb40 [ 1326.934058][ T9] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1326.934127][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1326.934174][ T9] ? do_raw_spin_unlock+0x145/0x1e0 [ 1326.934217][ T9] rxe_query_port+0x12a/0x330 [ 1326.934259][ T9] ib_query_port+0x441/0x8a0 [ 1326.934320][ T9] smc_ib_port_event_work+0x14c/0xbd0 [ 1326.934363][ T9] ? smc_ib_port_event_work+0x54/0xbd0 [ 1326.934407][ T9] ? rcu_is_watching+0x12/0xc0 [ 1326.934455][ T9] process_one_work+0x9d7/0x1920 [ 1326.934528][ T9] ? __pfx_process_one_work+0x10/0x10 [ 1326.934588][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1326.934644][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1326.934696][ T9] worker_thread+0x5da/0xe40 [ 1326.934764][ T9] ? kthread+0x13a/0x450 [ 1326.934819][ T9] ? __pfx_worker_thread+0x10/0x10 [ 1326.934879][ T9] kthread+0x370/0x450 [ 1326.934932][ T9] ? __pfx_kthread+0x10/0x10 [ 1326.934989][ T9] ret_from_fork+0x754/0xd80 [ 1326.935053][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 1326.935117][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1326.935164][ T9] ? __switch_to+0x7b4/0x1120 [ 1326.935207][ T9] ? __pfx_kthread+0x10/0x10 [ 1326.935263][ T9] ret_from_fork_asm+0x1a/0x30 [ 1326.935316][ T9] [ 1326.935330][ T9] [ 1327.155522][ T9] Allocated by task 14273: [ 1327.159937][ T9] kasan_save_stack+0x30/0x50 [ 1327.164633][ T9] kasan_save_track+0x14/0x30 [ 1327.169332][ T9] __kasan_kmalloc+0xaa/0xb0 [ 1327.173930][ T9] __kvmalloc_node_noprof+0x360/0xa00 [ 1327.179318][ T9] alloc_netdev_mqs+0xd7/0x14f0 [ 1327.184290][ T9] rtnl_create_link+0xc13/0xf80 [ 1327.189197][ T9] rtnl_newlink+0x13b8/0x2380 [ 1327.193884][ T9] rtnetlink_rcv_msg+0x95e/0xe90 [ 1327.199040][ T9] netlink_rcv_skb+0x159/0x420 [ 1327.203816][ T9] netlink_unicast+0x5aa/0x870 [ 1327.208598][ T9] netlink_sendmsg+0x8b0/0xda0 [ 1327.213370][ T9] __sys_sendto+0x4aa/0x520 [ 1327.217943][ T9] __x64_sys_sendto+0xe0/0x1c0 [ 1327.223080][ T9] do_syscall_64+0x106/0xf80 [ 1327.227676][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.233580][ T9] [ 1327.235897][ T9] Freed by task 12: [ 1327.239744][ T9] kasan_save_stack+0x30/0x50 [ 1327.244436][ T9] kasan_save_track+0x14/0x30 [ 1327.249118][ T9] kasan_save_free_info+0x3b/0x70 [ 1327.254163][ T9] __kasan_slab_free+0x5f/0x80 [ 1327.258934][ T9] kfree+0x1f6/0x6b0 [ 1327.262848][ T9] device_release+0xa4/0x240 [ 1327.267462][ T9] kobject_put+0x1f7/0x640 [ 1327.271888][ T9] netdev_run_todo+0x817/0x12c0 [ 1327.276830][ T9] default_device_exit_batch+0x94b/0xc60 [ 1327.282587][ T9] ops_undo_list+0x363/0xab0 [ 1327.287184][ T9] cleanup_net+0x499/0x920 [ 1327.291608][ T9] process_one_work+0x9d7/0x1920 [ 1327.297010][ T9] worker_thread+0x5da/0xe40 [ 1327.301634][ T9] kthread+0x370/0x450 [ 1327.305726][ T9] ret_from_fork+0x754/0xd80 [ 1327.310347][ T9] ret_from_fork_asm+0x1a/0x30 [ 1327.315181][ T9] [ 1327.317503][ T9] The buggy address belongs to the object at ffff88807c062000 [ 1327.317503][ T9] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1327.331848][ T9] The buggy address is located 168 bytes inside of [ 1327.331848][ T9] freed 4096-byte region [ffff88807c062000, ffff88807c063000) [ 1327.345840][ T9] [ 1327.348247][ T9] The buggy address belongs to the physical page: [ 1327.354656][ T9] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c060 [ 1327.363424][ T9] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1327.371925][ T9] memcg:ffff88807c061011 [ 1327.376162][ T9] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1327.383715][ T9] page_type: f5(slab) [ 1327.387745][ T9] raw: 00fff00000000040 ffff88813fe54500 dead000000000100 dead000000000122 [ 1327.396340][ T9] raw: 0000000000000000 0000200000040004 00000000f5000000 ffff88807c061011 [ 1327.405028][ T9] head: 00fff00000000040 ffff88813fe54500 dead000000000100 dead000000000122 [ 1327.413720][ T9] head: 0000000000000000 0000200000040004 00000000f5000000 ffff88807c061011 [ 1327.422401][ T9] head: 00fff00000000003 ffffea0001f01801 00000000ffffffff 00000000ffffffff [ 1327.431164][ T9] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1327.439842][ T9] page dumped because: kasan: bad access detected [ 1327.446338][ T9] page_owner tracks the page as allocated [ 1327.452135][ T9] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6595, tgid 6595 (udevd), ts 535920359502, free_ts 535867154191 [ 1327.473087][ T9] post_alloc_hook+0x153/0x170 [ 1327.477905][ T9] get_page_from_freelist+0x111d/0x3140 [ 1327.483484][ T9] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1327.489482][ T9] new_slab+0xa6/0x6d0 [ 1327.493576][ T9] refill_objects+0x26b/0x400 [ 1327.498312][ T9] __pcs_replace_empty_main+0x19f/0x600 [ 1327.503892][ T9] __kvmalloc_node_noprof+0x7da/0xa00 [ 1327.509285][ T9] seq_read_iter+0x819/0x1270 [ 1327.513984][ T9] kernfs_fop_read_iter+0x46c/0x610 [ 1327.519301][ T9] vfs_read+0x825/0xb30 [ 1327.523575][ T9] ksys_read+0x12a/0x250 [ 1327.527916][ T9] do_syscall_64+0x106/0xf80 [ 1327.532602][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.538814][ T9] page last free pid 5187 tgid 5187 stack trace: [ 1327.545140][ T9] __free_frozen_pages+0x7ca/0x10a0 [ 1327.550369][ T9] qlist_free_all+0x47/0xe0 [ 1327.554904][ T9] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1327.560431][ T9] __kasan_slab_alloc+0x69/0x90 [ 1327.565290][ T9] kmem_cache_alloc_noprof+0x241/0x6e0 [ 1327.570819][ T9] do_getname+0x35/0x390 [ 1327.575104][ T9] do_sys_openat2+0xc5/0x1e0 [ 1327.579725][ T9] __x64_sys_openat+0x12d/0x210 [ 1327.584602][ T9] do_syscall_64+0x106/0xf80 [ 1327.589197][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.595102][ T9] [ 1327.597423][ T9] Memory state around the buggy address: [ 1327.603048][ T9] ffff88807c061f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1327.611118][ T9] ffff88807c062000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1327.619183][ T9] >ffff88807c062080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1327.627237][ T9] ^ [ 1327.632604][ T9] ffff88807c062100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1327.640672][ T9] ffff88807c062180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1327.648830][ T9] ================================================================== [ 1328.171288][ T9] ================================================================== [ 1328.179416][ T9] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x19d/0x1c0 [ 1328.188492][ T9] Read of size 8 at addr ffff88807c0620a8 by task kworker/0:0/9 [ 1328.196148][ T9] [ 1328.198492][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G B syzkaller #0 PREEMPT(full) [ 1328.198550][ T9] Tainted: [B]=BAD_PAGE [ 1328.198566][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1328.198594][ T9] Workqueue: events smc_ib_port_event_work [ 1328.198641][ T9] Call Trace: [ 1328.198655][ T9] [ 1328.198669][ T9] dump_stack_lvl+0x100/0x190 [ 1328.198727][ T9] print_report+0x156/0x4c9 [ 1328.198784][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1328.198833][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1328.198882][ T9] ? __phys_addr+0xe8/0x180 [ 1328.198936][ T9] ? __ethtool_get_link_ksettings+0x19d/0x1c0 [ 1328.198991][ T9] kasan_report+0xdf/0x1e0 [ 1328.199038][ T9] ? __ethtool_get_link_ksettings+0x19d/0x1c0 [ 1328.199105][ T9] __ethtool_get_link_ksettings+0x19d/0x1c0 [ 1328.199161][ T9] __ethtool_get_link_ksettings+0x144/0x1c0 [ 1328.199216][ T9] ib_get_eth_speed+0x13a/0xb40 [ 1328.199279][ T9] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1328.199349][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1328.199398][ T9] ? do_raw_spin_unlock+0x145/0x1e0 [ 1328.199441][ T9] rxe_query_port+0x12a/0x330 [ 1328.199484][ T9] ib_query_port+0x441/0x8a0 [ 1328.199547][ T9] smc_ib_port_event_work+0x14c/0xbd0 [ 1328.199592][ T9] ? smc_ib_port_event_work+0x54/0xbd0 [ 1328.199636][ T9] ? rcu_is_watching+0x12/0xc0 [ 1328.199681][ T9] process_one_work+0x9d7/0x1920 [ 1328.199754][ T9] ? __pfx_process_one_work+0x10/0x10 [ 1328.199816][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1328.199873][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1328.199925][ T9] worker_thread+0x5da/0xe40 [ 1328.199995][ T9] ? kthread+0x13a/0x450 [ 1328.200051][ T9] ? __pfx_worker_thread+0x10/0x10 [ 1328.200121][ T9] kthread+0x370/0x450 [ 1328.200177][ T9] ? __pfx_kthread+0x10/0x10 [ 1328.200235][ T9] ret_from_fork+0x754/0xd80 [ 1328.200298][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 1328.200360][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1328.200407][ T9] ? __switch_to+0x7b4/0x1120 [ 1328.200451][ T9] ? __pfx_kthread+0x10/0x10 [ 1328.200510][ T9] ret_from_fork_asm+0x1a/0x30 [ 1328.200565][ T9] [ 1328.200580][ T9] [ 1328.415148][ T9] Allocated by task 14273: [ 1328.419562][ T9] kasan_save_stack+0x30/0x50 [ 1328.424253][ T9] kasan_save_track+0x14/0x30 [ 1328.429067][ T9] __kasan_kmalloc+0xaa/0xb0 [ 1328.433667][ T9] __kvmalloc_node_noprof+0x360/0xa00 [ 1328.439059][ T9] alloc_netdev_mqs+0xd7/0x14f0 [ 1328.444041][ T9] rtnl_create_link+0xc13/0xf80 [ 1328.448930][ T9] rtnl_newlink+0x13b8/0x2380 [ 1328.453613][ T9] rtnetlink_rcv_msg+0x95e/0xe90 [ 1328.458568][ T9] netlink_rcv_skb+0x159/0x420 [ 1328.463470][ T9] netlink_unicast+0x5aa/0x870 [ 1328.468251][ T9] netlink_sendmsg+0x8b0/0xda0 [ 1328.473044][ T9] __sys_sendto+0x4aa/0x520 [ 1328.477574][ T9] __x64_sys_sendto+0xe0/0x1c0 [ 1328.482367][ T9] do_syscall_64+0x106/0xf80 [ 1328.486966][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.492881][ T9] [ 1328.495290][ T9] Freed by task 12: [ 1328.499167][ T9] kasan_save_stack+0x30/0x50 [ 1328.503859][ T9] kasan_save_track+0x14/0x30 [ 1328.508544][ T9] kasan_save_free_info+0x3b/0x70 [ 1328.513595][ T9] __kasan_slab_free+0x5f/0x80 [ 1328.518368][ T9] kfree+0x1f6/0x6b0 [ 1328.522285][ T9] device_release+0xa4/0x240 [ 1328.526909][ T9] kobject_put+0x1f7/0x640 [ 1328.531336][ T9] netdev_run_todo+0x817/0x12c0 [ 1328.536196][ T9] default_device_exit_batch+0x94b/0xc60 [ 1328.541844][ T9] ops_undo_list+0x363/0xab0 [ 1328.546442][ T9] cleanup_net+0x499/0x920 [ 1328.550865][ T9] process_one_work+0x9d7/0x1920 [ 1328.555831][ T9] worker_thread+0x5da/0xe40 [ 1328.560452][ T9] kthread+0x370/0x450 [ 1328.564545][ T9] ret_from_fork+0x754/0xd80 [ 1328.569176][ T9] ret_from_fork_asm+0x1a/0x30 [ 1328.573950][ T9] [ 1328.576269][ T9] The buggy address belongs to the object at ffff88807c062000 [ 1328.576269][ T9] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1328.590588][ T9] The buggy address is located 168 bytes inside of [ 1328.590588][ T9] freed 4096-byte region [ffff88807c062000, ffff88807c063000) [ 1328.604496][ T9] [ 1328.606812][ T9] The buggy address belongs to the physical page: [ 1328.613314][ T9] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c060 [ 1328.622091][ T9] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1328.630591][ T9] memcg:ffff88807c061011 [ 1328.634825][ T9] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1328.642372][ T9] page_type: f5(slab) [ 1328.646361][ T9] raw: 00fff00000000040 ffff88813fe54500 dead000000000100 dead000000000122 [ 1328.655212][ T9] raw: 0000000000000000 0000200000040004 00000000f5000000 ffff88807c061011 [ 1328.663808][ T9] head: 00fff00000000040 ffff88813fe54500 dead000000000100 dead000000000122 [ 1328.672489][ T9] head: 0000000000000000 0000200000040004 00000000f5000000 ffff88807c061011 [ 1328.681175][ T9] head: 00fff00000000003 ffffea0001f01801 00000000ffffffff 00000000ffffffff [ 1328.689854][ T9] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1328.698520][ T9] page dumped because: kasan: bad access detected [ 1328.705026][ T9] page_owner tracks the page as allocated [ 1328.710829][ T9] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6595, tgid 6595 (udevd), ts 535920359502, free_ts 535867154191 [ 1328.731965][ T9] post_alloc_hook+0x153/0x170 [ 1328.736782][ T9] get_page_from_freelist+0x111d/0x3140 [ 1328.742387][ T9] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1328.748323][ T9] new_slab+0xa6/0x6d0 [ 1328.752420][ T9] refill_objects+0x26b/0x400 [ 1328.757129][ T9] __pcs_replace_empty_main+0x19f/0x600 [ 1328.762710][ T9] __kvmalloc_node_noprof+0x7da/0xa00 [ 1328.768097][ T9] seq_read_iter+0x819/0x1270 [ 1328.772789][ T9] kernfs_fop_read_iter+0x46c/0x610 [ 1328.778037][ T9] vfs_read+0x825/0xb30 [ 1328.782207][ T9] ksys_read+0x12a/0x250 [ 1328.786479][ T9] do_syscall_64+0x106/0xf80 [ 1328.791083][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.796988][ T9] page last free pid 5187 tgid 5187 stack trace: [ 1328.803330][ T9] __free_frozen_pages+0x7ca/0x10a0 [ 1328.808574][ T9] qlist_free_all+0x47/0xe0 [ 1328.813117][ T9] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1328.818619][ T9] __kasan_slab_alloc+0x69/0x90 [ 1328.823575][ T9] kmem_cache_alloc_noprof+0x241/0x6e0 [ 1328.829079][ T9] do_getname+0x35/0x390 [ 1328.833357][ T9] do_sys_openat2+0xc5/0x1e0 [ 1328.837978][ T9] __x64_sys_openat+0x12d/0x210 [ 1328.842860][ T9] do_syscall_64+0x106/0xf80 [ 1328.847464][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.853373][ T9] [ 1328.855692][ T9] Memory state around the buggy address: [ 1328.861325][ T9] ffff88807c061f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1328.869390][ T9] ffff88807c062000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1328.877466][ T9] >ffff88807c062080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1328.885526][ T9] ^ [ 1328.890914][ T9] ffff88807c062100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1328.899039][ T9] ffff88807c062180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1328.907107][ T9] ================================================================== [ 1329.007564][ T9] ================================================================== [ 1329.015684][ T9] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x1b1/0x1c0 [ 1329.024583][ T9] Read of size 8 at addr ffff88807c0622f0 by task kworker/0:0/9 [ 1329.032234][ T9] [ 1329.034578][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G B syzkaller #0 PREEMPT(full) [ 1329.034636][ T9] Tainted: [B]=BAD_PAGE [ 1329.034651][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1329.034678][ T9] Workqueue: events smc_ib_port_event_work [ 1329.034725][ T9] Call Trace: [ 1329.034739][ T9] [ 1329.034753][ T9] dump_stack_lvl+0x100/0x190 [ 1329.034811][ T9] print_report+0x156/0x4c9 [ 1329.034868][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1329.034917][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1329.034966][ T9] ? __phys_addr+0xe8/0x180 [ 1329.035031][ T9] ? __ethtool_get_link_ksettings+0x1b1/0x1c0 [ 1329.035087][ T9] kasan_report+0xdf/0x1e0 [ 1329.035140][ T9] ? __ethtool_get_link_ksettings+0x1b1/0x1c0 [ 1329.035202][ T9] __ethtool_get_link_ksettings+0x1b1/0x1c0 [ 1329.035258][ T9] __ethtool_get_link_ksettings+0x144/0x1c0 [ 1329.035313][ T9] ib_get_eth_speed+0x13a/0xb40 [ 1329.035378][ T9] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1329.035449][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1329.035500][ T9] ? do_raw_spin_unlock+0x145/0x1e0 [ 1329.035544][ T9] rxe_query_port+0x12a/0x330 [ 1329.035587][ T9] ib_query_port+0x441/0x8a0 [ 1329.035649][ T9] smc_ib_port_event_work+0x14c/0xbd0 [ 1329.035695][ T9] ? smc_ib_port_event_work+0x54/0xbd0 [ 1329.035740][ T9] ? rcu_is_watching+0x12/0xc0 [ 1329.035785][ T9] process_one_work+0x9d7/0x1920 [ 1329.035860][ T9] ? __pfx_process_one_work+0x10/0x10 [ 1329.035923][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1329.035980][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1329.036044][ T9] worker_thread+0x5da/0xe40 [ 1329.036116][ T9] ? kthread+0x13a/0x450 [ 1329.036172][ T9] ? __pfx_worker_thread+0x10/0x10 [ 1329.036234][ T9] kthread+0x370/0x450 [ 1329.036290][ T9] ? __pfx_kthread+0x10/0x10 [ 1329.036348][ T9] ret_from_fork+0x754/0xd80 [ 1329.036411][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 1329.036473][ T9] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1329.036522][ T9] ? __switch_to+0x7b4/0x1120 [ 1329.036565][ T9] ? __pfx_kthread+0x10/0x10 [ 1329.036625][ T9] ret_from_fork_asm+0x1a/0x30 [ 1329.036682][ T9] [ 1329.036696][ T9] [ 1329.250818][ T9] Allocated by task 14273: [ 1329.255226][ T9] kasan_save_stack+0x30/0x50 [ 1329.260009][ T9] kasan_save_track+0x14/0x30 [ 1329.264707][ T9] __kasan_kmalloc+0xaa/0xb0 [ 1329.269307][ T9] __kvmalloc_node_noprof+0x360/0xa00 [ 1329.274841][ T9] alloc_netdev_mqs+0xd7/0x14f0 [ 1329.280020][ T9] rtnl_create_link+0xc13/0xf80 [ 1329.284907][ T9] rtnl_newlink+0x13b8/0x2380 [ 1329.289602][ T9] rtnetlink_rcv_msg+0x95e/0xe90 [ 1329.294568][ T9] netlink_rcv_skb+0x159/0x420 [ 1329.299350][ T9] netlink_unicast+0x5aa/0x870 [ 1329.304226][ T9] netlink_sendmsg+0x8b0/0xda0 [ 1329.309087][ T9] __sys_sendto+0x4aa/0x520 [ 1329.313619][ T9] __x64_sys_sendto+0xe0/0x1c0 [ 1329.318415][ T9] do_syscall_64+0x106/0xf80 [ 1329.323040][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.329032][ T9] [ 1329.331436][ T9] Freed by task 12: [ 1329.335248][ T9] kasan_save_stack+0x30/0x50 [ 1329.339930][ T9] kasan_save_track+0x14/0x30 [ 1329.344696][ T9] kasan_save_free_info+0x3b/0x70 [ 1329.349740][ T9] __kasan_slab_free+0x5f/0x80 [ 1329.354511][ T9] kfree+0x1f6/0x6b0 [ 1329.358497][ T9] device_release+0xa4/0x240 [ 1329.363127][ T9] kobject_put+0x1f7/0x640 [ 1329.367555][ T9] netdev_run_todo+0x817/0x12c0 [ 1329.372407][ T9] default_device_exit_batch+0x94b/0xc60 [ 1329.378089][ T9] ops_undo_list+0x363/0xab0 [ 1329.382679][ T9] cleanup_net+0x499/0x920 [ 1329.387103][ T9] process_one_work+0x9d7/0x1920 [ 1329.392068][ T9] worker_thread+0x5da/0xe40 [ 1329.396672][ T9] kthread+0x370/0x450 [ 1329.400757][ T9] ret_from_fork+0x754/0xd80 [ 1329.405411][ T9] ret_from_fork_asm+0x1a/0x30 [ 1329.410185][ T9] [ 1329.412590][ T9] The buggy address belongs to the object at ffff88807c062000 [ 1329.412590][ T9] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1329.426985][ T9] The buggy address is located 752 bytes inside of [ 1329.426985][ T9] freed 4096-byte region [ffff88807c062000, ffff88807c063000) [ 1329.440886][ T9] [ 1329.443687][ T9] The buggy address belongs to the physical page: [ 1329.450089][ T9] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c060 [ 1329.458873][ T9] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1329.467456][ T9] memcg:ffff88807c061011 [ 1329.471703][ T9] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1329.479254][ T9] page_type: f5(slab) [ 1329.483280][ T9] raw: 00fff00000000040 ffff88813fe54500 dead000000000100 dead000000000122 [ 1329.491943][ T9] raw: 0000000000000000 0000200000040004 00000000f5000000 ffff88807c061011 [ 1329.500637][ T9] head: 00fff00000000040 ffff88813fe54500 dead000000000100 dead000000000122 [ 1329.509308][ T9] head: 0000000000000000 0000200000040004 00000000f5000000 ffff88807c061011 [ 1329.518018][ T9] head: 00fff00000000003 ffffea0001f01801 00000000ffffffff 00000000ffffffff [ 1329.526810][ T9] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1329.535492][ T9] page dumped because: kasan: bad access detected [ 1329.541896][ T9] page_owner tracks the page as allocated [ 1329.547595][ T9] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6595, tgid 6595 (udevd), ts 535920359502, free_ts 535867154191 [ 1329.568627][ T9] post_alloc_hook+0x153/0x170 [ 1329.573450][ T9] get_page_from_freelist+0x111d/0x3140 [ 1329.579219][ T9] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1329.585174][ T9] new_slab+0xa6/0x6d0 [ 1329.589286][ T9] refill_objects+0x26b/0x400 [ 1329.593994][ T9] __pcs_replace_empty_main+0x19f/0x600 [ 1329.599827][ T9] __kvmalloc_node_noprof+0x7da/0xa00 [ 1329.605293][ T9] seq_read_iter+0x819/0x1270 [ 1329.610233][ T9] kernfs_fop_read_iter+0x46c/0x610 [ 1329.615559][ T9] vfs_read+0x825/0xb30 [ 1329.619718][ T9] ksys_read+0x12a/0x250 [ 1329.623992][ T9] do_syscall_64+0x106/0xf80 [ 1329.628590][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.634490][ T9] page last free pid 5187 tgid 5187 stack trace: [ 1329.640821][ T9] __free_frozen_pages+0x7ca/0x10a0 [ 1329.646139][ T9] qlist_free_all+0x47/0xe0 [ 1329.650668][ T9] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1329.656147][ T9] __kasan_slab_alloc+0x69/0x90 [ 1329.661029][ T9] kmem_cache_alloc_noprof+0x241/0x6e0 [ 1329.666599][ T9] do_getname+0x35/0x390 [ 1329.670865][ T9] do_sys_openat2+0xc5/0x1e0 [ 1329.675562][ T9] __x64_sys_openat+0x12d/0x210 [ 1329.680432][ T9] do_syscall_64+0x106/0xf80 [ 1329.685029][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.690962][ T9] [ 1329.693297][ T9] Memory state around the buggy address: [ 1329.698938][ T9] ffff88807c062180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1329.707044][ T9] ffff88807c062200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1329.715394][ T9] >ffff88807c062280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1329.723479][ T9] ^ [ 1329.731189][ T9] ffff88807c062300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1329.739346][ T9] ffff88807c062380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1329.747413][ T9] ================================================================== [ 1331.870930][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.938995][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.015612][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.055534][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.431365][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.477375][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.529078][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.612886][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.769848][ T12] bridge_slave_1: left allmulticast mode [ 1332.775539][ T12] bridge_slave_1: left promiscuous mode [ 1332.782944][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1332.791951][ T12] bridge_slave_0: left allmulticast mode [ 1332.797607][ T12] bridge_slave_0: left promiscuous mode [ 1332.804847][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.814729][ T12] bridge_slave_1: left allmulticast mode [ 1332.821139][ T12] bridge_slave_1: left promiscuous mode [ 1332.826865][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1332.836655][ T12] bridge_slave_0: left allmulticast mode [ 1332.842440][ T12] bridge_slave_0: left promiscuous mode [ 1332.848130][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.859184][ T12] bridge_slave_1: left allmulticast mode [ 1332.865253][ T12] bridge_slave_1: left promiscuous mode [ 1332.871996][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1332.882616][ T12] bridge_slave_0: left allmulticast mode [ 1332.888286][ T12] bridge_slave_0: left promiscuous mode [ 1332.894542][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.906871][ T12] bridge_slave_1: left allmulticast mode [ 1332.912966][ T12] bridge_slave_1: left promiscuous mode [ 1332.918713][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1332.933089][ T12] bridge_slave_0: left allmulticast mode [ 1332.938750][ T12] bridge_slave_0: left promiscuous mode [ 1332.945350][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.958468][ T12] bridge_slave_1: left allmulticast mode [ 1332.964334][ T12] bridge_slave_1: left promiscuous mode [ 1332.970784][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1332.979301][ T12] bridge_slave_0: left allmulticast mode [ 1332.985402][ T12] bridge_slave_0: left promiscuous mode [ 1332.991527][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.004946][ T12] bridge_slave_1: left allmulticast mode [ 1333.010735][ T12] bridge_slave_1: left promiscuous mode [ 1333.016457][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.025695][ T12] bridge_slave_0: left allmulticast mode [ 1333.031601][ T12] bridge_slave_0: left promiscuous mode [ 1333.037315][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.254276][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1333.264803][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1333.275762][ T12] bond0 (unregistering): Released all slaves [ 1333.504366][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1333.514538][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1333.531371][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1333.543271][ T12] bond0 (unregistering): Released all slaves [ 1333.638011][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1333.651962][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1333.664128][ T12] bond0 (unregistering): Released all slaves [ 1333.818341][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1333.831695][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1333.841756][ T12] bond0 (unregistering): Released all slaves [ 1333.973237][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1333.983286][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1333.993252][ T12] bond0 (unregistering): Released all slaves [ 1334.138775][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1334.151361][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1334.162065][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1334.173418][ T12] bond0 (unregistering): Released all slaves [ 1334.296392][ T12] tipc: Disabling bearer [ 1334.302275][ T12] tipc: Left network mode [ 1334.331537][ T12] tipc: Disabling bearer [ 1334.337006][ T12] tipc: Left network mode