last executing test programs: 23m36.465847262s ago: executing program 2 (id=790): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf254f00000008000300", @ANYRESHEX=r3, @ANYBLOB="10007a800cb1194361ebd4feb3000300b89a49df969055870000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4050) 23m36.437188172s ago: executing program 2 (id=791): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd25, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40010) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="14010000140001002dbd7000fcdbdf2503014e800c0002"], 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 23m35.561052353s ago: executing program 2 (id=792): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) getsockname$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000140)=0x1c) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x34000, &(0x7f00000000c0)=@gcm_256={{0x304}, '\x00', "6ca0ef44bcdaf33d9060001a65aae2621600f79c1f901d896f9157b1a7166ac1", "abfdff7d", "708958f96700"}, 0x38) 23m35.505752718s ago: executing program 2 (id=794): r0 = socket$kcm(0x11, 0x2, 0x300) recvmsg$kcm(r0, &(0x7f0000002280)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)="1d29dd78f203a3dc8b6acdacb77730a858d2ca8abc44fb4c8a6278d9a305107df5dd926cc480eef82db06b36bf7e1b4179c18592a69c4e247525ff03523d65455b463eb6b83692e6a443", 0x4a}, {&(0x7f00000000c0)="3907d397e01d32b8d1c80f9357ebe044da7bc342", 0x14}, {&(0x7f0000000100)="183e445f7b219ecf150709b5da6fb165d6c3cf94054036b321a84302d4f81aa21c10f78d", 0x24}, {&(0x7f0000000140)="5a9e40229b230393eefe6c8de15b29bd12d82f708dc6a7c70d889c66f297db6074c89d37465fd38626060c64cb60dff52e4ebb0ca21559d1760ed4e4b369b8cb7ad03669954bd4a51f1307d20048f330a374dcc103c2d2beaf844b460817d6495f73f6ccc7acb05d443b06bb19267bc8a18b4c761515758a07d733d9b67b11782e2c5972ae826f41d25e5f92b09ee7b58128ff9fad2312f92daacef03a7a0f93923c57c57c256d7edffecb9172c1b455f8aa22", 0xb3}, {&(0x7f0000000200)="5bf47aff7fb7f2ca28a89a77c564a2891a452e4510f20fa4cf04011e5414073b8e3049d9dc54f385527bbb2c05ce3f83a5ffe1499e4454313192a48ff3cdbf6cf5033a4f758af8dbdc4e7ac17e25329f58b2e749b8381b97589616a847da2caacc7a1c9acad324a2372c4369fb335a5f245558e6f1826f6a306b6786aa1a0602d682f82476386e4184e9b01d955b65709c290bd781086da188a98251e9dfb5a132ae0ca7d9bd6ed1885a536cac745a4f19e4a4e22c8ca3c58b3a38480a77f1bf968e005b04ca7e695745c1ab2baf3165008c0a4762cf471782e215e36d795e7c0fa42b5a9d5f18af2758450c417518bcfe9a5e", 0xf3}], 0x5, &(0x7f0000000340)=[@ip_retopts={{0x50, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0xb, 0x3, 0x0, [{@rand_addr=0x64010102, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@loopback, 0x5}, {@empty, 0xfff}, {@empty, 0x7}]}, @timestamp={0x44, 0xc, 0xca, 0x0, 0x9, [0x51ae, 0x4]}, @lsrr={0x83, 0xb, 0x8, [@multicast2, @multicast2]}]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0xffff8020}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x8001}}], 0x70}, 0x448c4) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8907, 0x0) 23m35.025451022s ago: executing program 2 (id=795): r0 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) 23m34.215533768s ago: executing program 2 (id=796): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x171}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x60, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x36, 0x5f}}}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2ac08a943339e0a28cc86f8a24f0b500"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="071c55af424ae9d2b59502dc4f53c07a"}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x840}, 0x4050) 23m34.137939611s ago: executing program 32 (id=796): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x171}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x60, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x36, 0x5f}}}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2ac08a943339e0a28cc86f8a24f0b500"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="071c55af424ae9d2b59502dc4f53c07a"}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x840}, 0x4050) 18m13.438072558s ago: executing program 1 (id=2045): memfd_create(&(0x7f0000001780)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xc7\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xbd`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x9d\x83\xcd\b\xd1\x02R\x9b7\xaf\xb7o\x01\xf9\x15\xb8KB\x04\x06\xa5\xea\x0ft\xbb\x1er\x14\xdb\xd1\xcd\xfd\x00'/146, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, r4}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1f00, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) write$cgroup_int(r5, &(0x7f0000000300)=0x7f, 0xfdef) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 18m10.581179211s ago: executing program 1 (id=2053): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 5) 18m9.979892768s ago: executing program 1 (id=2057): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x80, 0x1, 0x7, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x48, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4811}, 0x40884) 18m9.754663495s ago: executing program 1 (id=2059): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, 0x0) r3 = syz_clone(0x82008400, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) r4 = syz_open_procfs(0x0, &(0x7f0000000c00)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r5 = syz_open_procfs(r3, &(0x7f0000000100)='map_files\x00') fchdir(r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48090}, 0xc000) 18m9.66053658s ago: executing program 1 (id=2060): r0 = io_uring_setup(0x68f4, &(0x7f00000002c0)={0x0, 0x7ae8, 0x8, 0x2, 0x1000168}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd86) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_dev$video(&(0x7f0000000140), 0x100000001, 0x80000) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f0000000080)={0x2, 0x3, 0x8, {0x0, 0x4, 0x0, 0x8}}) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000000)="b842068ec80f79c666b9800000c00f326635008000000f30658b9299ebf000bfaa80260fc731baf80c66efbafc0c66b8f5ee91dd66efbaf80c66b8c076cd8066efbafc0c66b80000000066ef0f22666466f30f09", 0x54}], 0x1, 0x41, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0xcc, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x9c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x8c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x64, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7ff, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x7ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xb, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x40}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2f67, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x4}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0xffffff81}}]}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0xcc}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222", 0x5}], 0x1}}], 0x1, 0x20008000) close_range(r0, 0xffffffffffffffff, 0x0) 18m9.487671036s ago: executing program 1 (id=2061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/softlockup_count', 0x1c3483, 0x8e) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x3, 0x23366a21, 0x15, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYRESHEX=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xb7, &(0x7f00000005c0)=""/183, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000240)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@cpuset_v2_mode}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040054}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x108) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r5, &(0x7f00000082c0)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x2) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x24000, &(0x7f0000000400)=ANY=[]) read$FUSE(r6, &(0x7f0000004280)={0x2020}, 0x2020) 18m9.290765276s ago: executing program 33 (id=2061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/softlockup_count', 0x1c3483, 0x8e) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x3, 0x23366a21, 0x15, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYRESHEX=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xb7, &(0x7f00000005c0)=""/183, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000240)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@cpuset_v2_mode}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040054}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x108) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r5, &(0x7f00000082c0)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x2) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x24000, &(0x7f0000000400)=ANY=[]) read$FUSE(r6, &(0x7f0000004280)={0x2020}, 0x2020) 2m15.737455345s ago: executing program 0 (id=6126): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=@newtaction={0xca0, 0x30, 0x1, 0x0, 0x0, {}, [{0xc8c, 0x1, [@m_police={0xc88, 0x14, 0x0, 0x0, {{0xb}, {0xc10, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x3, 0xa32, 0x7fffffff, 0x4, 0x2, 0x7e, 0x4, 0x0, 0x69, 0x1ff, 0x9, 0x5, 0xfffffffb, 0x1000, 0x9, 0xfffffffa, 0x2548, 0x677576ef, 0x6, 0x200, 0x4, 0x9, 0xfffffc01, 0x6, 0x9a, 0x10, 0x2, 0xd, 0x9, 0x1, 0x60b13f4c, 0x0, 0x6, 0x8, 0x0, 0x80, 0x4b50, 0x0, 0x3, 0xf, 0x80000000, 0xe, 0x154, 0x4, 0xf, 0xfff, 0xe, 0xffffffff, 0x4, 0x2, 0x4, 0x8b41, 0x4, 0xe189, 0x0, 0x3ff, 0x4, 0x6, 0xfff, 0x0, 0x6c5, 0x8, 0x19, 0xd94, 0x7ff, 0x1, 0x7f, 0x1, 0x7, 0x6, 0x9, 0x9, 0x0, 0xc9, 0x5e6, 0x3, 0x11c, 0x8, 0x0, 0x93, 0x2, 0x3, 0x1a6, 0x80000001, 0x40, 0x9, 0x3, 0xe, 0x496, 0x5, 0x6, 0x7, 0x9, 0xa74, 0x0, 0x2, 0x6, 0x3, 0x5, 0xd3, 0x6, 0x4, 0x0, 0xffff0000, 0x0, 0x0, 0x7, 0x8b7, 0x8, 0x9, 0x1, 0xffff, 0x3, 0x0, 0x3, 0xa, 0x1, 0x45d125e2, 0x1000, 0xb1a2, 0x9, 0xa6b, 0x6, 0x81, 0x0, 0x4, 0xed, 0x4, 0xffffffff, 0x7, 0x200, 0x6, 0x84, 0x5, 0x8, 0x80000001, 0xcf0b, 0xcf2, 0x5, 0x79, 0x80000000, 0x401, 0xf4, 0xc6, 0x80, 0xc, 0x7ff, 0x5, 0x5, 0x4, 0x0, 0x1, 0xc04d8000, 0x6, 0x2, 0x0, 0x80000001, 0x0, 0x8, 0x7000, 0xa35, 0x8, 0x7fff, 0x3, 0x7, 0xeea, 0x81, 0xe00000, 0x6, 0x57f, 0x4, 0x2, 0xc57, 0x0, 0x0, 0xb9, 0x7, 0x2, 0x8, 0x9, 0x2, 0xd219, 0x100003, 0x81, 0x4d0d659d, 0x8, 0x2, 0x8, 0x7, 0x5, 0x5, 0x5, 0x8001, 0x1, 0x5, 0x3, 0x0, 0x3, 0x82259, 0x5, 0x6024, 0x7cba928a, 0x0, 0x7fff, 0x6, 0x4, 0x2, 0x8, 0x5, 0x7, 0x1, 0x7f, 0x80, 0x0, 0x5, 0x7, 0x10001, 0x97, 0x4f, 0x5f, 0x10000, 0x7, 0x8, 0x7ff, 0x1, 0x3ff, 0x7, 0x3, 0x0, 0x4, 0x5, 0x200, 0x240, 0x9, 0x3, 0x0, 0x1, 0xfff, 0x7, 0x4, 0xe05, 0x4, 0x1b4, 0x6, 0xd646, 0x6, 0x3, 0x5, 0x95, 0x4, 0x3ff, 0x8, 0x7, 0x1, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x378, 0x400, 0x8, 0x4, 0xfff, 0x401, 0xe, 0x4, 0x29e, 0xfff, 0xffff, 0x80, 0xc, 0x7, 0x4, 0x7, 0x5, 0x0, 0x3, 0x1, 0x52a, 0x8, 0x0, 0x6, 0x2, 0x1, 0x9a, 0x7, 0x5, 0x1, 0x6, 0x10001, 0xffffffff, 0x6e, 0x83, 0x2, 0x8001, 0x2, 0x4, 0x80, 0x5, 0x401, 0x200, 0x4, 0x8, 0xe2, 0x9, 0x2, 0x0, 0x8, 0x7, 0x400, 0x9, 0x8001, 0x0, 0x4, 0xd, 0x0, 0x6, 0xd, 0x4, 0x41, 0x8, 0x2, 0x0, 0xffff0001, 0x4b2, 0xdd6, 0x1, 0x1, 0x9, 0x1, 0xc4d3, 0x6, 0x3, 0x3, 0xc, 0x4, 0x4, 0x4, 0x101, 0xb, 0x1956da1b, 0xc45, 0x600, 0x0, 0x80, 0x3, 0x0, 0xc2c4, 0x68, 0xb, 0x8, 0x5, 0x7, 0xe7, 0x5, 0xb, 0x57b645b2, 0x8, 0xfffffff9, 0x101, 0xa5, 0xd, 0xfff, 0x5, 0x1, 0x3, 0x9, 0x6, 0xed5, 0x9, 0x8, 0x2, 0x0, 0xa95, 0x9557, 0x3, 0x7ff, 0x2, 0x2, 0x7, 0x100, 0x0, 0xfffffeba, 0x1, 0x8af, 0x200, 0x9, 0x1, 0x3, 0x3, 0xfffffffb, 0x5, 0xb, 0x2, 0x3, 0x8c5, 0x9, 0x4, 0x80000001, 0x5, 0xf, 0x0, 0x1ff, 0x9, 0xb, 0x9, 0x10001, 0xfffffb7f, 0x5, 0x2, 0x10000, 0x2c, 0x4, 0x2, 0x7, 0x0, 0x8, 0x4, 0xfa1, 0x4, 0xf12, 0x236, 0x7, 0x85, 0xff, 0x6, 0x5, 0x647f, 0x6, 0x80, 0x8, 0x2e2, 0x5, 0x5, 0x8, 0xb824, 0x10001, 0x0, 0x80800, 0x20000000, 0xe3, 0x6, 0x2, 0x9, 0x9, 0x3, 0x5, 0xffffffff, 0xff, 0x6, 0xe965, 0x8, 0x3, 0x5, 0x101, 0x6, 0x796bc765, 0x401, 0xfffffffd, 0x0, 0x1, 0xc, 0xd, 0x0, 0x1, 0x2, 0x9, 0x1, 0x9a6, 0x2, 0x928, 0x1, 0x89b, 0x29, 0xb3e, 0x8, 0x5, 0xfffffffa, 0x41, 0x2, 0xfffffa5e, 0x0, 0x0, 0x7a8, 0x7, 0xffff, 0x870, 0x9, 0xfffffff7, 0x6, 0xffffffeb, 0x0, 0x3bfc, 0xffff, 0xcee4, 0x5, 0x7, 0x5, 0x6, 0x3, 0x9, 0x401, 0x1, 0x4, 0x5, 0xf, 0x3, 0x3, 0x80000000, 0x0, 0x1000, 0x1, 0x80000001, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x2, 0x5, 0x0, 0xa, 0xa, 0x2, 0xf467, 0x3e, 0x0, 0xfffffffb, 0x7, 0x7f, 0x1, 0x7, 0x9, 0x7f, 0x7a25, 0x6, 0x7, 0x57beacbe, 0xd, 0x1, 0xa1b, 0x5, 0xc, 0x10, 0x8a5, 0x10, 0x4, 0x9, 0x4048, 0x3, 0x3, 0x5, 0xf8, 0xffffffff, 0x5, 0x10, 0x8, 0x0, 0x5, 0x2, 0x3ff, 0x3, 0x2, 0x8, 0xa, 0x6, 0x4, 0x7, 0x4, 0x9, 0x6, 0x81, 0xb, 0x24, 0x6, 0x6, 0x9, 0x3, 0x4, 0xffdf, 0xfffffffb, 0x9, 0xdb4, 0x32, 0x9, 0x4, 0x6, 0x8, 0x10000, 0x0, 0x6, 0x200, 0x3, 0x2, 0x7ff, 0x3, 0x0, 0x10000, 0xf, 0x80, 0x1, 0x2, 0x80000000, 0x2, 0x6, 0x4, 0xf, 0x4, 0xff, 0x8b0d, 0xb6a, 0x5, 0x81, 0xc2, 0x1, 0x10, 0x1, 0x2, 0x3ff, 0xd40, 0x1, 0x0, 0x5, 0x3, 0x6, 0xfffffffb, 0x1001ff, 0x6, 0x3, 0x4cdc, 0x949, 0x7e879808, 0x6, 0x10, 0x1, 0x7, 0x4000b, 0xfffffffc, 0x7, 0xf, 0xe4, 0x2, 0x1, 0x9ad, 0x7, 0x101, 0xffffffff, 0x53, 0xd078, 0x9, 0x7, 0x5, 0xa4, 0x455, 0x10001, 0x1, 0x6, 0x7, 0xfffffffb, 0x3, 0x9, 0x7, 0x5c71, 0x6, 0x0, 0x0, 0x0, 0x5, 0x1, 0x81, 0xd, 0x4000, 0x5, 0x6f0f, 0x8f, 0xf1000000, 0x10, 0x80, 0x7, 0x80000000, 0x3, 0x7, 0xffff, 0x5, 0xffff, 0x8001, 0x6, 0x7, 0x60000000, 0x6, 0x9, 0x49cd4fcf, 0x7, 0xa22, 0xf8ef, 0xfffffff9, 0x80000000, 0x1, 0xc4, 0x6, 0x31d, 0xf86, 0x8, 0x3, 0x0, 0x8, 0x9, 0x3, 0x0, 0x200, 0x1, 0x5f1, 0x6, 0x9, 0x0, 0x5, 0x4, 0x7, 0x8d7c, 0x8, 0x7, 0x8, 0x4, 0xfff, 0x3, 0x5, 0x2, 0x2, 0x7f, 0xe, 0x78, 0x6, 0x80000000, 0x3, 0x2, 0x80000001, 0x4, 0x6d, 0x7, 0x6687, 0x10000, 0x2, 0x5, 0x7, 0xfffffff8, 0x7, 0x7, 0x0, 0x1, 0x0, 0x4, 0x87, 0x0, 0x5, 0x8, 0x1, 0xffc00000, 0x81, 0x1, 0x3ff, 0xe, 0x1ff, 0x0, 0x61d8d484, 0x9, 0x7, 0x4, 0x0, 0x5, 0x4, 0x6, 0x3, 0xffffffff]}], []]}, {0x4d, 0x6, "47f712033767b2ac7d18e66c21fa7c64b17f23a2722ab9f2aa5c7b56ece9294c355f82eb49e15866607280bde9df2dde8bd40ec314de9af838eb5df53e2618b988a75103e42368af0f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xca0}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setresgid(0xee00, 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, r2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2m13.95759216s ago: executing program 0 (id=6142): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0, 0x10001}, 0x0, 0x2, 0x8000}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x40000000015, 0x5, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x2, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 2m13.077454656s ago: executing program 0 (id=6148): syz_usbip_server_init(0x5) r0 = socket(0x10, 0x3, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x50, 0x14, 0x1, 0xfffffffc, 0x0, {0x2, 0x0, 0x0, 0x0, {0xfff2}, {0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x24, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x19}, @TCA_PIE_ALPHA={0x8, 0x4, 0x8}, @TCA_PIE_TARGET={0x8, 0x1, 0x5}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x1}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1, 0x80000000, 0x0, 0x3ff}, 0x10) 2m12.507545478s ago: executing program 0 (id=6152): socket$kcm(0x2, 0xa, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x3) read$char_usb(r2, &(0x7f0000000300)=""/245, 0xf5) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000240)) socket$kcm(0x2, 0xa, 0x73) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getdents64(r3, &(0x7f0000000400)=""/4096, 0xc00) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x300) 2m11.565406211s ago: executing program 0 (id=6159): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000014000501267170006bdbdf2511000d0001083916f8d66cffe8ef8d0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$btrfs_control(0xffffff9c, &(0x7f00000001c0), 0x40, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r6) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x804) fallocate(0xffffffffffffffff, 0x0, 0x8, 0x1000f4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r7) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, r8, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x10001}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20004800) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), r6) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000090603000000000000000000050000030900020073797a3100000000050001000700000038000780060004404e21b974cf5e0700ffe63e3f0530e2a41e0968400a0101010c00028008000140e00000020c00148008000140ffffffff"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) process_vm_readv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000020c0)=""/210, 0xd2}, {&(0x7f0000000d40)=""/255, 0xff}], 0x2, &(0x7f0000001f40)=[{&(0x7f0000000500)=""/85, 0x55}, {&(0x7f0000000880)=""/85, 0x55}, {&(0x7f0000002fc0)=""/4112, 0x1010}, {&(0x7f0000000980)=""/131, 0x83}, {&(0x7f0000000ac0)=""/177, 0xb1}, {&(0x7f0000000700)=""/248, 0xf8}, {&(0x7f0000002d80)=""/225, 0xe1}, {&(0x7f0000000800)=""/66, 0x42}, {&(0x7f0000002e80)=""/135, 0x87}, {&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000000e40)=""/187, 0xbb}, {&(0x7f0000000f00)=""/42, 0x2a}, {&(0x7f0000000f40)=""/4096, 0x1000}], 0xd, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000008000"/20, @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="020000000300"/28], 0x50) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="2200c24703aa1a44186ff4bab10100d7c020d79172edda21d2a684f7c79305c1292f8f79c0a6726d687171e75df99e1606712d5e649030ea21a6ab6ff5a4ffad8f5181d9dcc3f5aaad67910986481929175cd0a5e6a65f9661c36fa713c70129cd03f9b680e9be60ffdd6179f103c88de618584173602c3e12f6b58a66ac6de6d83f85bdc7d802bca58edb5f2c429cc595d49e9d9dd32995f437d8a65b51df31c5b5356c3687d38b2d870309e4ba87f4f71c69ab83f539603a7a64d622d17edfdc0e625601bf2fe2b5", @ANYRES16=r11, @ANYBLOB="00042dbd7000fddbdd2503000000080002000500000008000700ac1414aa1400050000000000000000000000ffff0a010101"], 0x38}, 0x1, 0x0, 0x0, 0x20000084}, 0x44040010) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2m11.13488107s ago: executing program 0 (id=6161): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f00000003c0)={"637bf629b5896eeb77e137c6e7f24b7891d6f012acc9fe23b2a34566bb56", 0x2, 0x1, 0x0, 0x101, 0x81, 0x5, 0x1, 0x6, [0x5, 0x4, 0x1, 0x401, 0x3, 0x2ab9, 0x4e2edc8b, 0x80000001, 0x8, 0x7, 0x3, 0x4, 0x7ef, 0xc, 0xffff0000, 0x2, 0x6, 0x7, 0x6]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=r0, 0x36, 0x0, 0x1, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@fallback=r3, r0, 0x36, 0x0, 0x0, @void, @value=r0, @void, @void, r6}, 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) (fail_nth: 5) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb8", @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x24) close(0xffffffffffffffff) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) 2m10.879417907s ago: executing program 34 (id=6161): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f00000003c0)={"637bf629b5896eeb77e137c6e7f24b7891d6f012acc9fe23b2a34566bb56", 0x2, 0x1, 0x0, 0x101, 0x81, 0x5, 0x1, 0x6, [0x5, 0x4, 0x1, 0x401, 0x3, 0x2ab9, 0x4e2edc8b, 0x80000001, 0x8, 0x7, 0x3, 0x4, 0x7ef, 0xc, 0xffff0000, 0x2, 0x6, 0x7, 0x6]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=r0, 0x36, 0x0, 0x1, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@fallback=r3, r0, 0x36, 0x0, 0x0, @void, @value=r0, @void, @void, r6}, 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) (fail_nth: 5) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb8", @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x24) close(0xffffffffffffffff) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) 1m48.43873551s ago: executing program 5 (id=6236): pipe(&(0x7f00000001c0)) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) close(0x3) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'macvtap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="c14d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="24080100", @ANYRES32=r3, @ANYBLOB="05000600010000000500070001000000"], 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = getpgrp(0x0) rt_tgsigqueueinfo(r7, r7, 0x40, &(0x7f0000000440)={0xd, 0x2, 0x10001}) sendmsg$nl_route(r6, 0x0, 0x4008000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$SIOCGIFMTU(r5, 0x8921, &(0x7f0000000000)={'hsr0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, r1, 0x1, 0xf0bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008800) 1m48.336471051s ago: executing program 5 (id=6238): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x1814, 0x2, 0x2}, 0x18, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xff, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffc}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) r4 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$inet6(r4, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x0, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x800003, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) memfd_create(&(0x7f0000000100)='-]+\x00', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) 1m47.357272742s ago: executing program 5 (id=6240): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455cb, 0xfffffffffffffffc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000400)=""/152, 0x98}], 0x1) landlock_restrict_self(0xffffffffffffffff, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000080)="b9ff030768442602000000f088a87f", 0x0, 0xfc, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x4c) 1m47.071587666s ago: executing program 5 (id=6242): socket$kcm(0x2, 0xa, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x3) read$char_usb(r2, &(0x7f0000000300)=""/245, 0xf5) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000240)) socket$kcm(0x2, 0xa, 0x73) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getdents64(r3, &(0x7f0000000400)=""/4096, 0xc00) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x300) 1m46.449877293s ago: executing program 5 (id=6245): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x1814, 0x2, 0x2}, 0x18, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xff, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffc}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x0, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x800003, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) memfd_create(&(0x7f0000000100)='-]+\x00', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) 1m46.137195325s ago: executing program 5 (id=6246): pipe(&(0x7f00000001c0)) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) close(0x3) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'macvtap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="c14d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="24080100", @ANYRES32=r3, @ANYBLOB="05000600010000000500070001000000"], 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = getpgrp(0x0) rt_tgsigqueueinfo(r7, r7, 0x40, &(0x7f0000000440)={0xd, 0x2, 0x10001}) sendmsg$nl_route(r6, 0x0, 0x4008000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$SIOCGIFMTU(r5, 0x8921, &(0x7f0000000000)={'hsr0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, r1, 0x1, 0xf0bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008800) 1m45.937642019s ago: executing program 35 (id=6246): pipe(&(0x7f00000001c0)) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) close(0x3) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'macvtap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="c14d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="24080100", @ANYRES32=r3, @ANYBLOB="05000600010000000500070001000000"], 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = getpgrp(0x0) rt_tgsigqueueinfo(r7, r7, 0x40, &(0x7f0000000440)={0xd, 0x2, 0x10001}) sendmsg$nl_route(r6, 0x0, 0x4008000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$SIOCGIFMTU(r5, 0x8921, &(0x7f0000000000)={'hsr0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, r1, 0x1, 0xf0bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008800) 8.622116887s ago: executing program 6 (id=6717): rseq(0x0, 0x4b, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) shutdown(r1, 0x1) r2 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x3ff, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfe, 0x32}}}}}}]}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) syz_usb_ep_read(r2, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) fchdir(r7) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000100)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20004810) close(r0) 8.432733429s ago: executing program 7 (id=6720): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xff, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffc}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r4, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x0, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x800003, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) memfd_create(&(0x7f0000000100)='-]+\x00', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) 7.924709497s ago: executing program 4 (id=6721): socket$nl_route(0x10, 0x3, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x101600, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x8c, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xc002, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x1404, 0x1, 0x70bdad, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x800, 0x430000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) 6.285415895s ago: executing program 6 (id=6724): openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x400) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7ff}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfdd}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4080}, 0x20000840) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xffffffffffffffff) keyctl$revoke(0x3, r4) add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000180), &(0x7f0000000440)="375f9c2beeffdc181e10d1f414139b0116cbadc3452c1117bf184c04000000c7b54100d1feb9f7e86bafda0432be1b1df062d5d6bc4e9cf792b9b9025e86970ee659e716c93ba657", 0x48, r4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) 5.632181029s ago: executing program 4 (id=6725): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x18, 0xfffffffe, 0x0, 0xffffffffffffffff, 0xfff}, 0x50) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e25, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r2, @empty, @loopback}}}], 0x18, 0x3f}}], 0x1, 0xc0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x40, 0x8, 0x1d, 0x9, {{0x14, 0x4, 0x2, 0x0, 0x50, 0x68, 0x0, 0xd0, 0x29, 0x0, @multicast2, @multicast1, {[@end, @timestamp={0x44, 0x10, 0xc0, 0x0, 0x7, [0x9, 0x80000001, 0xffffffff]}, @rr={0x7, 0x13, 0xa, [@multicast1, @multicast1, @empty, @remote]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0x32, 0x1, 0x9, [{@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0xfa}, 0x4}]}]}}}}}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000030000000000000000000000950000cbc655ec44d0fc358bc61ac958e289f70000800000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r6, 0x25, 0x14, @val=@tcx}, 0x1c) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000140), 0xc, &(0x7f0000000700)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="80010000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf250400000024000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000400000040000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f310000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="3400018008000100", @ANYRES32=0x0, @ANYBLOB="140002006e657464657673696d300000000000001400020076657468315f766972745f77696669003800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000300000000ffffff7f006d61636d6d616e300000000024a60e65080001003c835707f39dfc2e12ede184a731b83995bbf1d8338929d0dbc5acc268ffb31e555bb62453246dc2c025f74646d1c1645a64a23f1225c20cdc02ad732f3b1db944eab47572b247c8db35f3d7ca8dc5e486e440a8a46da77e0532b6f6bf2b764ffdef6df288bc8f6f3b78c7d72e59a05ac392765cfd7e8cf24d6e333e4604a5a3372e544d02223a05987a53e2a582624c6fc365eef2e22bc0ce9a0058500ab65e2e6fc01a1f18c021c4d63634b274f84286521e5079208a2a1943f8dc1e0496c65f2ba76f858bb416374865747ba8802a67d32a1fb7e1c4dbdd4bcf378a6f2378fa60aabdf50cb27a8c89fd8fe4ef557572c3605390cddc", @ANYRES32=0x0, @ANYBLOB="2c00018014000200697036746e6c3000000000000000000014000200000000000000000000000000000000002000018008000100", @ANYRES32=r2, @ANYBLOB="1400020076657468315f746f5f7465616d000000380001801400020076657468315f766c616e00000000000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="080003000200000008000100", @ANYRES32=r9, @ANYBLOB="180001801400020076657468305f766c616e000000000000"], 0x180}, 0x1, 0x0, 0x0, 0x40000}, 0x8008) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 5.410471848s ago: executing program 6 (id=6726): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)={0x200000, 0x200000, 0x80}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000500)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000f00000c0000000c000000020000000000000000000004000000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r5, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x15, 0x0}}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000c40)={&(0x7f00000008c0)="e76f63d4c0c28c53862a578de349aa7ef71c6b0bdac9a5e036bdf4aacd7bb788b4b78616ba084ef418e5f82f9708c79c1e8e3982098fe129fd2b7de7b12af142b4b92004e512015d6cd4e9d322d327e4d0b6989e917ca44653463a06b2670e229d6f0e07f5b140d8a44dec4ec930198df99b6501d4d2961e7877962357f8b783ced4939d49bba16467c525764578f99f678097026b0b578d6bbe97b3a4adc0eaf1f4af6c", &(0x7f0000000980)=""/108, &(0x7f0000000ac0)="f44c30d8796f39c3de0fc8298cf94d3691dd61f00dfd6161ff75cdd1d9d2e184bbd1c8a7dde82f48215121f2ffbcbadb6d87608b41259edbfe6ca5693b4c0b6868a3646b4f42b0da419448ef791dd55d11ae42f056aed0ffb0a5c34855ec7358ea7ab3bf0268c3be686107b4f959514d6719fdf9c3e9d21b216be258cfb163916cb676969208da92ea35bf5ca9adf8cf189d71b1f195a0140661cb81fba6b3528d787a6dcb7f54e7dcf30539d5dc9073e904c3d3078ca18c123384a585d8d02fa1617f8c5c582c90633e14adb52368a494e17fd73ff9279cddc67540e795243f9747f8", &(0x7f0000000bc0)="93ef610825c45e825c0572115ae142546571688182c11e8c9587e4fd267d899d8fd9a2f859457a321d65af98fcae1c155270bf4b6fb2ff66f53754ebc60b60c46566bc6e88e13298a543360ba4b244c2b3b63a471879da11c5a168e1a13da5c13029fb4a18", 0xffff, r5, 0x4}, 0x38) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000006c0)={0xc7, 0x0, 0x1}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r7, 0x401870cb, &(0x7f0000000040)) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000580)={0x2, 0x0, 0x6, {0xc0020006, 0xe7ffffff, 0x5, 0x54ef}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0xe, &(0x7f00000005c0)=ANY=[@ANYRES16, @ANYRES16=r6, @ANYRESOCT=0x0, @ANYBLOB="8c3ca41d04187bfbc75c7bef10c1d03dd57a26ccbad28e2072fb50790e131f1a6825aeb01f053dd03c4f941adfdb12b83e06c2a14516a57dc8ad48561e1c69330709772302ce5b326ecf55c1706c260b5f8295935d3ab7c8e2c26192b693c2f2e1a0773583b850aa47d8012c005a45c85f7a772c2b043d24e4afd63805414c7b92106db9db7541ab40ebcea9a91a4f8931dd0500d00dc57b69f8c6331c914fde641e", @ANYRES8=r2, @ANYRES16=r3, @ANYRESDEC=r5, @ANYRES32], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 5.401600511s ago: executing program 7 (id=6727): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=@newtaction={0xce4, 0x30, 0x1, 0x0, 0x0, {}, [{0xcd0, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0xc88, 0x14, 0x0, 0x0, {{0xb}, {0xc10, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x3, 0xa32, 0x7fffffff, 0x4, 0x2, 0x7e, 0x4, 0x0, 0x69, 0x1ff, 0x9, 0x5, 0xfffffffb, 0x1000, 0x9, 0xfffffffa, 0x2548, 0x677576ef, 0x6, 0x200, 0x4, 0x9, 0xfffffc01, 0x6, 0x9a, 0x10, 0x2, 0xd, 0x9, 0x1, 0x60b13f4c, 0x0, 0x6, 0x8, 0x0, 0x80, 0x4b50, 0x0, 0x3, 0xf, 0x80000000, 0xe, 0x154, 0x4, 0xf, 0xfff, 0xe, 0xffffffff, 0x4, 0x2, 0x4, 0x8b41, 0x4, 0xe189, 0x0, 0x3ff, 0x4, 0x6, 0xfff, 0x0, 0x6c5, 0x8, 0x19, 0xd94, 0x7ff, 0x1, 0x7f, 0x1, 0x7, 0x6, 0x9, 0x9, 0x0, 0xc9, 0x5e6, 0x3, 0x11c, 0x8, 0x0, 0x93, 0x2, 0x3, 0x1a6, 0x80000001, 0x40, 0x9, 0x3, 0xe, 0x496, 0x5, 0x6, 0x7, 0x9, 0xa74, 0x0, 0x2, 0x6, 0x3, 0x5, 0xd3, 0x6, 0x4, 0x0, 0xffff0000, 0x0, 0x0, 0x7, 0x8b7, 0x8, 0x9, 0x1, 0xffff, 0x3, 0x0, 0x3, 0xa, 0x1, 0x45d125e2, 0x1000, 0xb1a2, 0x9, 0xa6b, 0x6, 0x81, 0x0, 0x4, 0xed, 0x4, 0xffffffff, 0x7, 0x200, 0x6, 0x84, 0x5, 0x8, 0x80000001, 0xcf0b, 0xcf2, 0x5, 0x79, 0x80000000, 0x401, 0xf4, 0xc6, 0x80, 0xc, 0x7ff, 0x5, 0x5, 0x4, 0x0, 0x1, 0xc04d8000, 0x6, 0x2, 0x0, 0x80000001, 0x0, 0x8, 0x7000, 0xa35, 0x8, 0x7fff, 0x3, 0x7, 0xeea, 0x81, 0xe00000, 0x6, 0x57f, 0x4, 0x2, 0xc57, 0x0, 0x0, 0xb9, 0x7, 0x2, 0x8, 0x9, 0x2, 0xd219, 0x100003, 0x81, 0x4d0d659d, 0x8, 0x2, 0x8, 0x7, 0x5, 0x5, 0x5, 0x8001, 0x1, 0x5, 0x3, 0x0, 0x3, 0x82259, 0x5, 0x6024, 0x7cba928a, 0x0, 0x7fff, 0x6, 0x4, 0x2, 0x8, 0x5, 0x7, 0x1, 0x7f, 0x80, 0x0, 0x5, 0x7, 0x10001, 0x97, 0x4f, 0x5f, 0x10000, 0x7, 0x8, 0x7ff, 0x1, 0x3ff, 0x7, 0x3, 0x0, 0x4, 0x5, 0x200, 0x240, 0x9, 0x3, 0x0, 0x1, 0xfff, 0x7, 0x4, 0xe05, 0x4, 0x1b4, 0x6, 0xd646, 0x6, 0x3, 0x5, 0x95, 0x4, 0x3ff, 0x8, 0x7, 0x1, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x378, 0x400, 0x8, 0x4, 0xfff, 0x401, 0xe, 0x4, 0x29e, 0xfff, 0xffff, 0x80, 0xc, 0x7, 0x4, 0x7, 0x5, 0x0, 0x3, 0x1, 0x52a, 0x8, 0x0, 0x6, 0x2, 0x1, 0x9a, 0x7, 0x5, 0x1, 0x6, 0x10001, 0xffffffff, 0x6e, 0x83, 0x2, 0x8001, 0x2, 0x4, 0x80, 0x5, 0x401, 0x200, 0x4, 0x8, 0xe2, 0x9, 0x2, 0x0, 0x8, 0x7, 0x400, 0x9, 0x8001, 0x0, 0x4, 0xd, 0x0, 0x6, 0xd, 0x4, 0x41, 0x8, 0x2, 0x0, 0xffff0001, 0x4b2, 0xdd6, 0x1, 0x1, 0x9, 0x1, 0xc4d3, 0x6, 0x3, 0x3, 0xc, 0x4, 0x4, 0x4, 0x101, 0xb, 0x1956da1b, 0xc45, 0x600, 0x0, 0x80, 0x3, 0x0, 0xc2c4, 0x68, 0xb, 0x8, 0x5, 0x7, 0xe7, 0x5, 0xb, 0x57b645b2, 0x8, 0xfffffff9, 0x101, 0xa5, 0xd, 0xfff, 0x5, 0x1, 0x3, 0x9, 0x6, 0xed5, 0x9, 0x8, 0x2, 0x0, 0xa95, 0x9557, 0x3, 0x7ff, 0x2, 0x2, 0x7, 0x100, 0x0, 0xfffffeba, 0x1, 0x8af, 0x200, 0x9, 0x1, 0x3, 0x3, 0xfffffffb, 0x5, 0xb, 0x2, 0x3, 0x8c5, 0x9, 0x4, 0x80000001, 0x5, 0xf, 0x0, 0x1ff, 0x9, 0xb, 0x9, 0x10001, 0xfffffb7f, 0x5, 0x2, 0x10000, 0x2c, 0x4, 0x2, 0x7, 0x0, 0x8, 0x4, 0xfa1, 0x4, 0xf12, 0x236, 0x7, 0x85, 0xff, 0x6, 0x5, 0x647f, 0x6, 0x80, 0x8, 0x2e2, 0x5, 0x5, 0x8, 0xb824, 0x10001, 0x0, 0x80800, 0x20000000, 0xe3, 0x6, 0x2, 0x9, 0x9, 0x3, 0x5, 0xffffffff, 0xff, 0x6, 0xe965, 0x8, 0x3, 0x5, 0x101, 0x6, 0x796bc765, 0x401, 0xfffffffd, 0x0, 0x1, 0xc, 0xd, 0x0, 0x1, 0x2, 0x9, 0x1, 0x9a6, 0x2, 0x928, 0x1, 0x89b, 0x29, 0xb3e, 0x8, 0x5, 0xfffffffa, 0x41, 0x2, 0xfffffa5e, 0x0, 0x0, 0x7a8, 0x7, 0xffff, 0x870, 0x9, 0xfffffff7, 0x6, 0xffffffeb, 0x0, 0x3bfc, 0xffff, 0xcee4, 0x5, 0x7, 0x5, 0x6, 0x3, 0x9, 0x401, 0x1, 0x4, 0x5, 0xf, 0x3, 0x3, 0x80000000, 0x0, 0x1000, 0x1, 0x80000001, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x2, 0x5, 0x0, 0xa, 0xa, 0x2, 0xf467, 0x3e, 0x0, 0xfffffffb, 0x7, 0x7f, 0x1, 0x7, 0x9, 0x7f, 0x7a25, 0x6, 0x7, 0x57beacbe, 0xd, 0x1, 0xa1b, 0x5, 0xc, 0x10, 0x8a5, 0x10, 0x4, 0x9, 0x4048, 0x3, 0x3, 0x5, 0xf8, 0xffffffff, 0x5, 0x10, 0x8, 0x0, 0x5, 0x2, 0x3ff, 0x3, 0x2, 0x8, 0xa, 0x6, 0x4, 0x7, 0x4, 0x9, 0x6, 0x81, 0xb, 0x24, 0x6, 0x6, 0x9, 0x3, 0x4, 0xffdf, 0xfffffffb, 0x9, 0xdb4, 0x32, 0x9, 0x4, 0x6, 0x8, 0x10000, 0x0, 0x6, 0x200, 0x3, 0x2, 0x7ff, 0x3, 0x0, 0x10000, 0xf, 0x80, 0x1, 0x2, 0x80000000, 0x2, 0x6, 0x4, 0xf, 0x4, 0xff, 0x8b0d, 0xb6a, 0x5, 0x81, 0xc2, 0x1, 0x10, 0x1, 0x2, 0x3ff, 0xd40, 0x1, 0x0, 0x5, 0x3, 0x6, 0xfffffffb, 0x1001ff, 0x6, 0x3, 0x4cdc, 0x949, 0x7e879808, 0x6, 0x10, 0x1, 0x7, 0x4000b, 0xfffffffc, 0x7, 0xf, 0xe4, 0x2, 0x1, 0x9ad, 0x7, 0x101, 0xffffffff, 0x53, 0xd078, 0x9, 0x7, 0x5, 0xa4, 0x455, 0x10001, 0x1, 0x6, 0x7, 0xfffffffb, 0x3, 0x9, 0x7, 0x5c71, 0x6, 0x0, 0x0, 0x0, 0x5, 0x1, 0x81, 0xd, 0x4000, 0x5, 0x6f0f, 0x8f, 0xf1000000, 0x10, 0x80, 0x7, 0x80000000, 0x3, 0x7, 0xffff, 0x5, 0xffff, 0x8001, 0x6, 0x7, 0x60000000, 0x6, 0x9, 0x49cd4fcf, 0x7, 0xa22, 0xf8ef, 0xfffffff9, 0x80000000, 0x1, 0xc4, 0x6, 0x31d, 0xf86, 0x8, 0x3, 0x0, 0x8, 0x9, 0x3, 0x0, 0x200, 0x1, 0x5f1, 0x6, 0x9, 0x0, 0x5, 0x4, 0x7, 0x8d7c, 0x8, 0x7, 0x8, 0x4, 0xfff, 0x3, 0x5, 0x2, 0x2, 0x7f, 0xe, 0x78, 0x6, 0x80000000, 0x3, 0x2, 0x80000001, 0x4, 0x6d, 0x7, 0x6687, 0x10000, 0x2, 0x5, 0x7, 0xfffffff8, 0x7, 0x7, 0x0, 0x1, 0x0, 0x4, 0x87, 0x0, 0x5, 0x8, 0x1, 0xffc00000, 0x81, 0x1, 0x3ff, 0xe, 0x1ff, 0x0, 0x61d8d484, 0x9, 0x7, 0x4, 0x0, 0x5, 0x4, 0x6, 0x3, 0xffffffff]}], []]}, {0x4d, 0x6, "47f712033767b2ac7d18e66c21fa7c64b17f23a2722ab9f2aa5c7b56ece9294c355f82eb49e15866607280bde9df2dde8bd40ec314de9af838eb5df53e2618b988a75103e42368af0f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xce4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setresgid(0xee00, 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, r2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 5.274133978s ago: executing program 3 (id=6728): socket$nl_route(0x10, 0x3, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x101600, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x40000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x800, 0x430000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000300)={{0x2, 0x3, 0x101, 0x9, '\x00', 0x1}, 0x3, 0x100, 0x8, r1, 0x0, 0x3b6, 'syz0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x300, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012"], 0x50}}, 0x4008840) 5.215618036s ago: executing program 6 (id=6729): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x2a, 0x0, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000100)='./file0/file0\x00', 0x22) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r6, &(0x7f0000000140)=[{&(0x7f0000001240)=""/4090, 0xffa}], 0x1) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 4.638641326s ago: executing program 4 (id=6730): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000f80)=""/71) socket$inet(0xa, 0x801, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="9339279142d7711c0000dd000000"]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005500)={0x14d8, 0x33, 0x1, 0x0, 0x25dfdbfe, {0x3}, [@nested={0x1a0, 0x105, 0x0, 0x1, [@typed={0x8, 0x2b, 0x0, 0x0, @pid}, @nested={0x168, 0x9c, 0x0, 0x1, [@typed={0x74, 0x110, 0x0, 0x0, @binary="72e7b30e421ef3b023196ea288f5a9b35b6c6f3ba4c58b6babf7a2837b28b8bf6feb5bd53294729a3f37188275e1d22987e29d412de6b4ffd94446728565c421cd233b7caddff63093b9bc61a3b10ca3bed002a111416c8f11f0bd60dd22800740eff4c7cea3e950462b618561e73351"}, @typed={0xeb, 0x29, 0x0, 0x0, @binary="56ec9390aa3438be1e02efdfcc9962669e964bcc58d02ff56ff11e719828f1b073e169b6aceef12630d7e572b7d99a965f1974c2668b5cffe4c4eba1dc4beaf555ee9370bb1ed28fe9817ff000604ad9e436e2a142779a9d237a52c6577f8bf597df9f9430c61460aef809769ef2e212aad425fabad0374c73884d2a5ec0ba755aa277cfcafbb964ffba8af17f4437c8ca04171654a758cd577eacc2980a0aea88109b693d5ce73f70d9d41b1e4ea3793a3fbf9413dc3f5fdabd8e4373c27aadac83346bf3141420914dca085588e61e321f3fdf5d9fab8295dd747cf46a5f30b9e17d5e38c2a0"}, @nested={0x4, 0x64}]}, @typed={0x8, 0x10d, 0x0, 0x0, @fd=r2}, @typed={0x9, 0x47, 0x0, 0x0, @str=').:!\x00'}, @nested={0xc, 0x125, 0x0, 0x1, [@nested={0x4, 0x140}, @nested={0x4, 0xcd}]}, @typed={0xb, 0xc2, 0x0, 0x0, @str='--,^]2\x00'}]}, @generic="f450c65c5ee4f5026dbae3806cc07c74ac600f783a7220b8e34c50541849210e04e07639c58782b0d5574c273e0e2016969bedb9c9e6d133d7dc6bfa3c83a2318b480a7d5006448bf087d26e538b1cbc477911a77ff92dbfe6edda5cf43ffa1ca39227936ce2c97646018dea97f354d96d3deace73666557b64c18c806739f513d975c28ccc557a451a6b189f57642cf2da3e2bf1bc1cfb720432ea3c2a81756ac910dc2ee70c0243e82ed91401aa8462c6fea1540ce1a647c820fd5e5eb2e08762b", @nested={0x1260, 0xb8, 0x0, 0x1, [@nested={0xdb, 0x13b, 0x0, 0x1, [@typed={0x8, 0x5e, 0x0, 0x0, @fd}, @typed={0xc, 0x9f, 0x0, 0x0, @u64=0x7}, @generic="f6b2e0feeba25d90e1b185f26992083426f229891576bdbec2e0c6a43404dcd25ba8716191420f04cf475516d21758ed9ab46e186708d693d55614368aea9d58917e9c585ddf94f84aad3bbdef3238d74e26f99c665ee4c6ed59bb346b8501a42386c5621101abbdfc7c3742364c2fea1b1ab71043799b221e2872a9c6361d08a2bc5f43f433b5b7e802ca344194e52a766e8b3b90809fbee76b6f5db5bc5c6f676f7450a8803ad13937fb85341db04260da101a15a82440d1c400436687c7c55c98cf"]}, @typed={0x4, 0x157}, @nested={0x9e, 0x108, 0x0, 0x1, [@typed={0x8, 0xf1, 0x0, 0x0, @uid}, @generic="cf43989cdbbee6e75d597ad11581017a057974d43f192d69a4cca57ea6127bb3b80502d9b12c", @nested={0x4, 0x3e}, @generic="1490e338558b1d2c76abe73b3ea86f6fb44a16f25c7d1e1dff79c351a1c8e80f880ec8cf6713cbecccc05b2124ec60315729c5a4be15a08c016837d25f6dc456b628d4981ad1f3e1c62aa8019b9242edb8f2bad9dec91bf2d4809eb05d39bbdd34b3e61c6e798d1f"]}, @nested={0x10da, 0x2a, 0x0, 0x1, [@generic="2183d3b81d5fb9edaa2912352e0cd312811a0f8e5d285e00dd3e58298518d59a63155941394109246aa75df035a8ac5a9ce0c1d3fea2e30a2687b7620648aaab71440a3c4a003ace65a9673213a37c251cf040bb0e8762235aeef1696bf12189baa28b6710653b1f48dd823b70d30dfdae981abd31c7995b3a5d2f7191e75a43cd25d3e8be6a83ca4e14dfcae574f55acff084055b14543e20066f00842b138d71b76f6188465d206ccc3018abc7eed2ba7416c797908cdec2680db472c5a3ac9d52b3c5b32c20872381b2db1b7cd3636cc80d6cd73b3f1fff278a65da2ad6c2291b407a18f380dda1260b21e2b45cf048e8b7289afa914c5bd10c44fb0371d8cca985efa92016ca0b1d7ab2cf2172e131ddb83e3d1e03dc73708c2437dacad08eb85c46db8c12791b944e9ca2213bf4c3d5bf2077564aabe0caea5224eb60945d67150368e3cc5978b2c348e3a5079117e1a2c0f8a76fa23ed9f90fb24d74b55c187575d9becac2fd6b0807119032f34dbae6f1efd72a97b7188976e7a6408eb9fd4868dd80982e341e0ef840e01e68d1d5715793e923cb9c71480ca63419ba349ddd9cbeaa36bb7ac0a90b28de56381804d39531ccdef9fc2bb317760541c0e83b7591cd1105611edb9677583f6a2152afcd667db82ff93850cb9c626f50793b63b5c801c3a453b0e360dff1f8574c6d10567f2287633528b819679f00d15c6a0c3958f1830a1a5b24a17457c6ef3e9828caaadb0a526ef3d1c239c86fad734a69af17ac0175b9054808a7f52abb91fb36b9f8d81e7aca6cd66e2d65be130f7461861c5933337e5fc7e759cbb20ace5d5ddefd42e3c8f038c423fff4d87e2815eb99bf1fb1951acc500e281c8660f5d06ca6d39d37bfa70055948e1fe72b9608a7fb1f32f8fc953f1509be1f9301dd6f7ad0460ac18bbeb6eb811540eb8c8faddb12bb58cdb7897403a45baf225936aa7459ec2420cd91a96c2915fd4a6810daa46ce3fb6dec27d67e6623ea8302f05802f9a758666c40be4d4d275eb282384725988cd100837d0e181bb01158c9206abf6810dd5601c55a1fe4e50b0486c804dc72dfc57fa8cf0158d1c42f8dd28cd080d3d0e97e62cc8269d81439fb728d914ced7ed7fc9176efa5acdeb69bd31a3b57d68653eb2174e18faee3d2ccece4ad3bb1d2ec59fc1cf177f750e1c1ae5cf82c8a2017eb808f506b0be25d3d8bd677e24d881e59add30eb377f22166bab005cd29d7de228e098a58744502e757eeae2db28160afb1db3c4ff237af5bdbef6bc7c773767ca4dd602a672ea97f285e45847e3929d71b0470793464ba487da4704f9c0a63c86ff5626d1256a924d8b54e20e932abeee2cafcb1733ba52f3db5cbc1955cbb2505a34060f54dca2b12bceda06bd727f095a05ecd458d087c1b530db87d2b75f5cb20ee5624c1e42b12fdbe485c26bb13117c86042b0cc4613c9fcdd872a4aba479a4fbb56f47c9714dbbc84611a0e2efdf80a818e03053a41cc53d5eb26b3706f6cac6ba420f4d07150e7df120d749f83fd158426fa0dc29195af504bbd4594f8e24d40adf9751b31e186831857ca32205dbb4f2df63a84d7c23fe428c299270c7a1a5d0ed3f62cfda041ab5e4d6d953dc935193006a70bd78522568258ba0db7a1db1ab7c57f5c36b5051f2e421a6aafb04a4478332e0b44e85bc2381c11df1c854c89479283c3970928f0a0fbbbcf8e23b4671962fdc0919a921f4f3876a6a95e320913f9323d1c5455dc6e1c755b7bb44b9491f14e1cb098236bee77699b3af4b8ce0e28678940cc82f2074d5f92d7e402393b2d4e43d61bc721734804688a5bbe9af1928562c7217433abc6d1198cb502261d859cbcc62a5bdc2ed6a074e2f9ecdf5403ee3d6dc64ebd5eb846cbb8304e2e16b5467162780cee601fd2e4bbe9af13c287aa462f21d3667e38053011f8f7ca6ce0e242440ee993c026ffa06ef88448c06195e1bda0d6fecc0632524e6b74652aea3db35e9155bf03b38c2fac8be230077d2365da1258ed63a11e49cf76b95a9fc5e19a420637ddb12fb0d263a4c6fb029e1706c8ac66809aba01acbc5d60840879a8ff6e9765fb9e1eede4a016d94bab7981633f8c8d6d47654371b46d23212c8efeeffc0310d24395844f9941c6e2077c894092a4e06b5f8104db4b720c4c1449dcef5387d18cb2ad89d6822e1ae36e95cf8bdf3afdd5b4adf6e2953a16c5cebbf5794e23dd8d8967793163b0bb018afa285de884f462999155b9cef8e6b138248bafe29ea1c6800607938db725b06a34f7f7914e6c82a0dbc1140c8449e1c49eddce102bff6a80b8f24cda51a44ecee987f72df0835abdce45eda8697a125bd5abd7ae1176c2257f8691ceeac728961fcaaf14467067bc8853101cc210192a053fb50b7962949aa936172c0cc7574404d1238bd89950258b61e1302ee3f4f13d22eec8f8908f4323e10e26c6aa7f57fea6969fb042b448fbb42bbde5300942527568f861d30fc5f162fb139f77daf6abeb359501123f145df0240fe3963f252587de38fe6718876150216087fb43de981d63f88c7872787e7d180a469524465c666126615a3d1e3b54a040c7432acf00f911cd93f03baa0eb2f4f5af455cf2d906e8e60bf0e2d9f33c80be77c6e4d9afbdcc6c6590a913efa8df778fe050ddb888de03686fefcab5345b6fbb2f4b844a01a4ff946f9b2161c27f01dc87c1d46ba64e1179cca2316e4338d78548de163a03099dfccec57a6c3b3ed20d18eddddc912d271124d0879f6d1ef9cbe5e2a0d45b6ed6eedfe0dcafe9581023d7244826571522756c5987153bc0d9b477b466871ee08f9ff76c9585863f699b2bc56985b1f537f56f4667d51b50b79015378675c85f7b415f46a0e43b2271dcea17a0e8463d3bdcded36ed52063d8c6dea8dd3c3c407a9f7f01d2890e0c8ed10c03cd87878c0b5e78169166531d3ed39240adc7cfa5eda3de91a251ad090d73e87fb9cdf0e524ee7643d12e5e5c46bc915cc98c19a99dc6774063eede7802bab3db3ea68f11543df243569dc62b0d92634ee6ad345808f13e248db1a7d9957680edf789c34fc8cd21e8f2aa93363fbcde02bc0cb98ed315ec664387180221be468102a1e9e5a84fc35edb720fc8e5f7bd7322d5c4227b8393d5ac58b379a333bdaa717ea26b9ad64960a9cefcb3b9c472a60dc02d7505b5c02a27cd02d43a43d6c38a026eccf1f6522cec2c27452a30c3c1e52434c64ba86d2bcecae53822c7b94f3cc63ac3c8ede5e9ffe6fb573f39342e1c720bc205c52d045ed0c65082bccbdfd6001af5491b2ec235b39734c3395063f2642e273c4e02c102458200f26eece4932320c807c0a39493155cb098854eef1b94f395e6371d9a91d1525e3fdcfbb682515a4297f4ef0ea1c4103f000e0e92634c1a779ddcb06ab1c3a5c07192c6a9ab5d0e6ac9633e4c5fd261f890d8a14ffee09b90e3c908cbf7b59f88e58519d0dbc2e59f9ac408b6597017c679e8932020b07e465b38e8d74e74518748c6589b3baba3c79adb635e9ae0a41324c27f31f4831391fffa716ac27c4dfe9031864701a41e3efed267f1886b05da697311fcfd8d1bfcc9b0cbcc99175af952332e919e76516bd76088e4cb3bd9def408aa5a13882511a298deb299e94f1b7b166d7c5463873e37722ea4298aa19014fa612256f4e0aa954077c447bbf300dfff0eb9f9a469661cab946a962da639a117a6635a5b72ac1957175488ce47ce9d829cefc761c23f62b51a8c6fc2352b251e85d8e2bea1d4e21706b197bfc09f101c01cc29fad815d615e341d114e0e4a403d364717af2fc0e97f4d0adfceb6f6c89585b1defd5b07f5a0ce9ea5601d64576d1e35cf56c836612147c9527f81a813db3d1c6bfd1c2844d8c3f7504af6f19ac154f487ff3bcc8c8fff11032ba4999b5b076bbb7c2ec6f21e3640565a28dbb7e444243cb32e154db38bb88907d2798aff4149ed772c43c8d1fa74e98e030f11fb6416762a8ccef6b46254d7ea58d02b1b32bd8c5f3bfe7ec097881869cf8dfedbc7b4c71e89cf3f79c46712c6edbe3fbcdfb34b5c1e290e77d53e07f011d4193b0e3ee2e6aa50e79c753357b55d9016a56e329852f3b99ff41173b842576f7c1a0b961d323d8048fc9795d2622c7e7e0ee6bd8fda3eaf000d93c752ee483d8608ff43048120463d8e6e5975325e34380e8769792330accb23c87e5fabd83f4bb6873f01175bbf79ce4aebb4cb441b3312d5434b74804784520c630b55708188fd0272de1276faf44b83e032ad52101d055c09c46dacd1007155fd3723b5b224af5af674748a6b567edeb29a4fe8802c54f2005395addb55d81823b9066e7103bc014d51d2dde0d25645e1ba020290749bae1fd1b3a33a852c9d115f191da4f71e3a7aeec57f3ba5956dbe4df753d3a6634ce1f5ab0d77f5bf914b17706d85ef5e8bb8840b28ba36cb4067b3b78634060254f6a3f8a4215876e829f1f4a59d1bbc47a7b5ea6c1d468b1eaf08a9fa09d653e052cf9115b4a3333e3040ec647c249133550c998393b77c520f8682fb472d72a79a899ae3eaff8437d033d9cd6faf9f442d20a4e4c51d416b5562db94b06919b3fd5c250d87102195470f067e950390a0002d69c2a1b7ef6b885f14467241a5bfa21f6070d8582868952e40f8934d544c73b8f42e95514d7b34ccee197d47a96138f3d07b800b251d8313b7b33fed4a8ac2561bcc0efc9da26aa23aae824c40d96c4a6efb21b8964e962cb0f39d52c98f351f0d7f30ca853da13c03b2b8ffff8af6f71d8b7159dcd6c31875d30ab8ea88889524c05a2a80771b52eae9f78531a8792fb14ff08b303f2af5b7c7972f6b19cb2030c79ad5bbcac01449c5d0b94d79d307f1e8ebdede143619d736f9e49d08a7705860552d689b50f62eaaa33803447fb12ac3920a8dba59ff975715823cb08a8134ebca8775b78f869069e3151dd1dd7f145e84ba2eb52397ba4b10cb74b0d02f99a55683a8b768aa3c84fda3e94d30db6c18c3ae4bb6be76a752cd7a41e8c4233fa6ad66c782dec78c7530a1d5bdc697e8a0f9b91accdbe0a42e6434cee962504e8ff44f5610d14f57d2e652c38ed536d76350610900adc013bc37804fb2b77fc168ef6d3c7680437ec010a3aed253a2cbde7fa11f8275c4f2b5d6685af5ff6a8288e2f0378e701301f5ff5faaeadc1e4300163343a33021c15becb4877ff94c0c912147d012f92cf8473c32dd8aeb7ec46b4dc673cc29d931edbceff3c76898862c8e814b9d612e6cabdc5c307ffe527dcf5614beb3b2c063b39a02c4bcc98bd9e4fa5d4bf56e1185cb5d18d732548325554441709ea8832b2e849f5cc587c7eb32a50fd8ddbdcc92c32264abc77f62454e498ac1d8f7540eb8a98ed73e5aca5f00cf3f015a3d4172ef7f3f21db725f072aa6319e98b5b794fc24d0e602de6b7caebd3a256f2fb77454977ee7cb45875ed5a016e49e20d8cdedd577f2c3bc3ef9781b40cc9160c20785fedd40f1d117ef9ac018d6d1a4c13c110e65ef228b47d06130cd1d544e64dd6ffd80ca92e8cfe60294070ebba228c641e34ae96c41f8ea52fcb3d5ae466bd044a82d8ef4ca67472e4ab895663faa20959a05c112aaf8fef435d20414092d8beaedbc79eabf8524f8856a580fb5d7017663c6e5b8142213d8fad68bd9059da95b38ccab3eeb7adaca6f2b9d76eb25d81dfac931a253844ac02bff0c30b2f248fce7d11930cc78b0d71083240ff695038ba8bf6d5337d8c29a7bb125", @generic="ffb2f1add257f0848ef10b5cfa5b5ad4988871bcefab5da64bd2b11be92d1e4621771142a2c3", @generic="0069ecf04907ea0385200b2eb8fbdf2db55948cd4c485c5cca91bfc4239f2857bc2766f78a080714d4003fc6041511be9d00889ab49831366db3e322b6b974e8ca1b4a9af934f29242a3cb692ce3375fdb51eb18e00afafaad93a6d8bfa3185b3bb305b3826f592808c4f8df46748bd0379c862e15aabe6a313948d715b575d77e96555479d9fbe2625347b17954410d06e8bdf9c923b7cd01d50eb1c1d75722290b3d7abcfbc6f89610c04ba48bf80c"]}]}]}, 0x14d8}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}}}, 0x118) io_setup(0x3fe, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f00000034c0)={0x2020}, 0xcac) eventfd2(0x7, 0x80800) socket$nl_netfilter(0x10, 0x3, 0xc) 3.558589819s ago: executing program 3 (id=6731): creat(&(0x7f0000000180)='./file0\x00', 0xa) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x5, 0x6d99}}}}, 0x11) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x2015034, &(0x7f0000000180)='}(\x00') ptrace$pokeuser(0x6, r4, 0x108, 0x4) ptrace$pokeuser(0x6, r4, 0x118, 0x20000000) read$FUSE(r0, 0x0, 0x0) 3.350485061s ago: executing program 7 (id=6732): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xff, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffc}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r4, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x0, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x800003, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) memfd_create(&(0x7f0000000100)='-]+\x00', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) 3.252298714s ago: executing program 6 (id=6733): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000181500", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e02, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x4040000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r3 = open(0x0, 0x145142, 0x0) ftruncate(r3, 0x2007ffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = io_uring_setup(0x407d, &(0x7f00000000c0)={0x0, 0xe5d3, 0x2, 0x1, 0x3}) io_uring_enter(r5, 0x6a8a, 0xffefffff, 0x21, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) creat(&(0x7f0000000100)='./file2\x00', 0xd931d3864d39dcc4) lremovexattr(&(0x7f0000000100)='./file0\x00', 0x0) ioprio_set$pid(0x0, 0x0, 0x2000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x10d) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b01660cfb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x4, 0x7, 0x4000000000000e51, 0x3, 0x5479, 0x2000001035, 0x200000000006, 0x0, 0x5, 0x3, 0x892, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.246686625s ago: executing program 3 (id=6734): openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x400) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7ff}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfdd}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4080}, 0x20000840) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xffffffffffffffff) keyctl$revoke(0x3, r4) add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000180), &(0x7f0000000440)="375f9c2beeffdc181e10d1f414139b0116cbadc3452c1117bf184c04000000c7b54100d1feb9f7e86bafda0432be1b1df062d5d6bc4e9cf792b9b9025e86970ee659e716c93ba657", 0x48, r4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) 2.705422907s ago: executing program 4 (id=6735): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (fail_nth: 9) 2.275239142s ago: executing program 3 (id=6736): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140), 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r2, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r3, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)='H', 0x1, 0x40000, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000003380)=[{{&(0x7f0000000400)=@vsock, 0x80, &(0x7f0000000500)=[{&(0x7f0000000480)="b416e120c9d077d92ac2f060011d8115039b00a865c29a9109375ab6c680390b27f492fcb9be953c292df3c4db89833e645013fea262c59271c34feccae31781a96b2b8d7906265bb6a18c31e16231136e07d3e1f255d451473a9c12e7", 0x5d}], 0x1, &(0x7f00000034c0)=[@txtime={{0x14, 0x1, 0x3d, 0x4}}, @mark={{0x10, 0x1, 0x24, 0x7}}, @txtime={{0x14, 0x1, 0x3d, 0x1}}, @timestamping={{0x10, 0x1, 0x25, 0x7}}, @txtime={{0x14, 0x1, 0x3d, 0x5}}, @mark={{0x10, 0x1, 0x24, 0x8}}, @mark={{0x10, 0x1, 0x24, 0x7fff}}, @mark={{0x10, 0x1, 0x24, 0x80000000}}, @mark={{0x10, 0x1, 0x24, 0x2}}, @timestamping={{0x10, 0x1, 0x25, 0x2}}], 0xac}}, {{&(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x3, 0x4, {0xa, 0x4e22, 0x5, @mcast2, 0x2}}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000680)="0f78c822ceb710506e0077e8b0298c5e6d5155363dd21a8692f6c7b8bde8f2de6da1c2aef3f169825144f5f64f22655642da4f29b9eab1163990f746c5", 0x3d}, {&(0x7f00000006c0)="1026d89dc3d439d202", 0x9}, {&(0x7f0000000740)="efa5c1507d7c327a927967c279b291f419c37fe35a49bd83e5a6edb9bc0450af488650fd7c95880de3899944f52d7527a6fbec393ac3d54d2dffa38e392d80caa358e89e49644b5b63e019455c693c8ba21511fff9cbc316048f682fc98a1727be0c3f592fab1ea231129252eed33be254df67e80d5d625ead9e4b2c0721fedbdc85f3e9ae1cf0f85aa163e1b7bb42422d9f664dd4b090723c1c135b7c937f7c1d41b1b156543fec308e1ae4fa109e5488fd57301ba43e0660c0bee0", 0xbc}, {&(0x7f0000000800)="66d39c46ca2e5adbf466e74b46656357dea3d7a715c5be826e50e0cbca71316db8af5d5183", 0x25}, {&(0x7f0000000840)="870d6dd48294f19de77942d116d2e6371aaea1e52a1ca8bf4068375d29c918012dfb33bc81588dd10360cd759b02c1c6fe674a87e6f6c155a7d8ef897e6cc457a44d2b69c995224e6c09afe6e9ccea8bf06e0c3117296cd367855b11ce5903944d2757c194ef3b4a02e0a6f4e847ae26e5ec6d1773fb23e97697ca09a3fcb38959522dbc5cf3a5149a66225d5258d10de335a3d5e13fb9b65263fd4b9376876489ba633fd75e", 0xa6}, {&(0x7f0000000900)="ee4b8dc6cba072c54aa1dbfff49ef31dfc69a7d18f5957551a6c02072e432d6d645ae34fb9ad25bf674856d113226b", 0x2f}], 0x6, &(0x7f0000000980)=[@mark={{0x10, 0x1, 0x24, 0x8000}}, @timestamping={{0x10, 0x1, 0x25, 0x5}}, @timestamping={{0x10, 0x1, 0x25, 0x2}}, @timestamping={{0x10, 0x1, 0x25, 0x3}}, @timestamping={{0x10, 0x1, 0x25, 0x9}}, @txtime={{0x14, 0x1, 0x3d, 0x4}}], 0x64}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)="41c8affa173829794d617a32", 0xc}, {&(0x7f0000000a40)="4c916ffdc67309df9e4e4571e8b9163d67e6d49aa0a9d79380756da2923bcfe40c832b81cf76822ced2ce3ec57f703d182d01addbe7a128fcacef71f2e724a95b6adba0d8a199d8e6e0528c31c1444db1f226aa821b2998ecd6422f431a15821602ac382c4f83aa8a2f771657928b85e533091258c17023916ad63ecba366e0040e7786143555c21b71fdae7e1def16ccfe7cb0fb4e15c4e503686574cd592895df27904deb32788d6ead62b16fcd6a563e63769302995320e69a19c536f5ce4839ccc92466beb", 0xc7}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000b80)="57d1f99a45a44e04bf67d26371c3b86dae907853369dfd571f61dbd07ef63c69ddcd671670fbc23546b5e02050c9e3f1dd6cb668be5b2e77357ada2aa4b6b91f215ce2318b809b1afc0637cf69eaafee", 0x50}, {&(0x7f0000000c00)="48fe39bf067c74d94aa3c87d86a2b63053e98ed9ae195ad403f1a16fc548e49c4c414b4a762970e14d7accc5b67fb7693842acab7192e05f85d80ffb36c2e6c04a3f1367611ad0ecf72d3bf65f9d8bdee1825154c759071d3df9332b789003e53a26537b33eff2c3951a28435e849a69097c9bb0af5e0b08a0ecc473d24cfd9ee61138e31c66b75f1e8f89eb99fde94af2e1b54fe193ce7dbf318551fbe843bdd7e25a52a7c1603bb1655425adc289a1df8f72a6e1d10ed7f50de308bb86faa7dbdafe5aa168bdb365d9f928412711d04fb11f212d466aeea29b1f6802b37ea8670a0feedf32b05db1b0a920390b4a6ebe9601889bdb905d2ae452db", 0xfc}, {&(0x7f0000000d00)="b3b345aeeb2385776a9d2478eaa11b400678487b7c9cef6345b296144baa8bd77070d3dca7ef27edd6ed567142be68542665fc3c6283a0a3be43c8acbd937ecc49d936081fb550312ea5f6c0c811742acc95e4e0bd3ff49b465a9abf76c643a90f0a6352c7d7f34733", 0x69}, {&(0x7f0000000d80)="2a2f4912d30017e5cd8ec3bac1bbb5499b8df43a47241706b44d3ecc11316408d8b7ae6c20098e32ea7cab341c8213c12b43bb5d130e74a6ad898936c5ef24abae0a593c734ffd6e7255e0d80d9f9e20", 0x50}], 0x4}}, {{&(0x7f0000000e40)=@qipcrtr={0x2a, 0xffffffffffffffff}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000ec0)="fa2856e273ea8fdfb7efb8f439bc26cebaca8503495490d248b51c55c5cdb21b3ea81665e0d03b3884124019ff4d04197c1d8ee63b50dd6c74157f446f25bca3324a7f04f85893b3ab8b57dadc61dce5983193943d1646d39cfdca34c4a9d37d2877f2ede16b9612eea5070d27b63962202a1ebde4c02bb498fd7acd62f981ccdff061fed55ad1231cbb8700978fa6afe2e87072cbcfa4e73ab4cde5e9221746187d74fcf8993c00e131c84a25a198167314e65f154b625cf7fea5083b877aff1b45", 0xc2}, {&(0x7f0000000fc0)="d0c378462d9e52ea405f3f9b9d6eb65f1cf694054d982b49bd0920c8cf993f9660c96e0690a773bf2250233e0d3f7799a278a26248a46d28c8e27e0f2e170bedb4f183260f0b291a7650c10ef7c63df4abceac466e4fd783c3a8bfcca41577e5ffa372661633dc864a1fad048265ed473b23e2fae44df27f5473b1db06bf6e76aef6bf3e82ed745253", 0x89}, {&(0x7f0000001080)="2df25bdff7b2351b693ebdb4d6891e0caa01e3465c37731907eb6dd0e411d530a61f5af8f05a76449e", 0x29}, {&(0x7f00000010c0)="d1d7726e6b99dc54e649c68f285aa5b2b5d4fa5248a314438346f5a893262424107a48cb23eee9ba464c40d69ef9807cfd6dc1d1efede4d0d5402b28ce08b5a096e4577ec73a4b5b52aee5fc9abde8d0e7440e7ee78e37a992f078c8785c4348aa0870b4c56a049b40da3689a093f2c50933d06471dfa3a2e928a0624dc4a79d104d7f6c51e13f8f7f6f06661d095f227163707249763b23f3693ec1f2203c8d234f086f7b17cfcb27964a577a8ad1ea45eeec7a29b724ec8cac2cfb9c", 0xbd}, {&(0x7f0000001180)='1', 0x1}, {&(0x7f00000011c0)="40f5b4eab6ad79", 0x7}, {&(0x7f0000001200)="ed909fdf085fdd77d8af4975fac2c7b19e52411528a1800f65456ed76a24d45d787adaa544e992ae4b37d62f7f29365cb13a8200507d460cff2b3429df8885b70206c1ea5490fd51d52c3153bddc0e6ccaca6e580745d24d9b6dd736f180006e038601f513795fb82bff0019e83ea1d3bd2a507b9539c4ddce4f67e82fd130dc2f6bdaf904819d841e0b860646e277681fe252b323ffdfe663927bb50c345078f4d2ef59eb58243835d3402714ea57867c14dd4f4c4dd86ed83cdee909d12a98ea493626c09352b0f78bf1db67050b2544e69d707eb5d0bdff0be76bb06c5f440a7dec63eaa6de3277ecc2bb9c97f0a6d48f", 0xf2}, {&(0x7f0000001300)="bc14694e84b6fab3bda3109b445154373746b88f57625810c168401ab5721eee3776e9648da0cd9b09cef0cb15a303241f67bd0311131a1dd974abe13c229a71e8fe0a944ada4896965c12e2fb593004d2e333543a4e1723c4d67836577a73c55a4f6bc88323f09140c983bf1ef8e78234382d2d93200c525bbfbd22d90f1f02bd7b42fe88367433f02a0ea3a13b25ab3c581ed5bfaadd2ccdd4e99900424d686f1b7ad804554d966e3d1c1ad4b74d066ca2f42ae7d8", 0xb6}, {&(0x7f00000013c0)="5b759d044c37240f470df27c1f81feb3e3d7027a829f203b3bbd3fae7d0a12d8dadf39812e8da588ce9e0c4939d6d701c2f4f52c2bacef6644086792fc603428c9a28db5855c17b010e3ceb7c6f8443d2ae26cddc2c4c9289bb80b37ad565c00814badab92d0c1881986470ec769bf2dcbc8628c18e39138adb20c58f7df8e8e2a0a7def64ab739f3737892ba85e7298644595262a0f149ba023f620f7064433", 0xa0}], 0x9, &(0x7f0000001500)}}, {{&(0x7f0000001540)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x80, &(0x7f0000001600)=[{&(0x7f00000015c0)="d63682d2a3d2281b", 0x8}], 0x1, &(0x7f0000001640)=[@timestamping={{0x10, 0x1, 0x25, 0x3}}], 0x10}}, {{&(0x7f0000001680)=@llc={0x1a, 0x339, 0x5, 0x6, 0xf, 0x3, @multicast}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001700)="f24958490ae88966b285d7f05beb96dd65c1f0a60a581329a4db08e6892dbe92d8ba3e61011ecaf05e0e5efb9ef95fb183c7730df39608c0a086a10152f617d8e5180a0da696addb42b4094b137b330f420decaa925080b94e6ae2d747e04eabce4ca89ae247089485a1bd757d0f71b53ce846b60edfdbe29bc3a7f7492d0e11a29774f5ea21b72887996c95e4d252641339101238e92e6ecb5310af00fc979862f5ad", 0xa3}, {&(0x7f00000017c0)="a74cedd3358769524f5151d2af244be644f5623f38d48a8be1cb2904efa8ad1baac4e8430dc365682bba7efd57f08063f9894336d1797bf424ba488c36b6bcdf94278149be7d78035841f0bf47af87b78863a6d299745a96f03c079e0011541e4e4bfa7c30d7a256a65f87269d9398210c4d3d2abc2e6acfb0f12dd08a73cafbe954f3289a26df70aff3ca06e7d1810e7125b01c30380bbefb1d2cc6c6fb4368c9f9eaae29433d78a1543103eec9b784c37bb02c4e0a8d60e3a32abce6f1ffe0e6eef66a", 0xc4}, {&(0x7f00000018c0)="95e6bb4ec2768f7353a5a9f0fa3fc1c2b53481fd49dac2d690de8ec673c62279e84d4a4c5fd72273f4348f0266d2edc37177db32b2455a4b0fc13031c0493ddaadecfddc6a5d3fba54f9d0159061ea0dc66aff6235a067ea442b822045ab16974e540a67e11026550378ab4633f1b9553629b4d3054465b7ea2227540b995d925e855c67fb998fad9b6d23518bc7", 0x8e}, {&(0x7f0000001980)="76f87827487357e52920c7ec68bf9f69ab8bdd2b9520085b6281be799044cb258eec2720", 0x24}], 0x4, &(0x7f0000001a00)=[@txtime={{0x14}}, @timestamping={{0x10, 0x1, 0x25, 0x200}}, @txtime={{0x14}}, @timestamping={{0x10}}, @mark={{0x10, 0x1, 0x24, 0xd}}, @timestamping={{0x10, 0x1, 0x25, 0x401}}], 0x68}}, {{&(0x7f0000001a80)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000540)="4533492b144dde86ee2c9796bc30dbedbe7b1d9d1adab50e42ab6730e152c64333ec40a16c8580ae2094907f30d9cb6ed6ca600e695c6e0dcfd7559ccaa66b45ef9c7272e0bc0e1cdf0cf65fd7f945", 0x4f}], 0x1, &(0x7f0000001b80)=[@timestamping={{0x10, 0x1, 0x25, 0x1}}, @timestamping={{0x10, 0x1, 0x25, 0x1}}, @timestamping={{0x10, 0x1, 0x25, 0x6}}, @mark={{0x10, 0x1, 0x24, 0x9}}], 0x40}}, {{&(0x7f0000001bc0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm-aes-ce\x00'}, 0x80, &(0x7f0000003100)=[{&(0x7f0000001c40)="2266b7497057ce59df507e146875191891c13363566c7eb820d077440cb1e568f681bae91f5cd8aaccc80f9a1397901d2958ba4984054087c3e87e71d205dff97f7ca6e7a8ebaf46c527c746c83cf443a65ff6a2dbd6fa480c2cff44b2c8d58ba89a3dede4177d4fe559ed7a65ba995a2af7e75215b98d5454e85bf7861331003176c8ca274b94599cdb8c5f00c1f24a8035d48fccd3423cb31f4bc5cb3cf5acf6e00de97e10c50b75e93f38d67aaf8789a7eae0fa0ca77b010f2f", 0xbb}, {&(0x7f0000001d00)="779eb241e9717f18013bc36ee66a765baec4a69ccf2f890494b9024500b0769d9aa68c29a4b93a1de519be8e27a0bdb68779a6156b19ef8e2eec3366fdb36525307e9340f2c65d5da4861f63f420e886019cb63f927e0f6b9a3622d93b2c3dacb392bae5f236522024027b9b80", 0x6d}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000002e00)="532c8aa79437ef99b181ae630b13ee76b628d8c018e450774fb7c197f15f87287a347bfbfc1860c1babbddc09cd3e59e31a73fbb1f8638d2caed2994d1ff04a3ab3f259969b7a33fc240e3f89f11a28d2e2494b8174729470fd880a3f79d897bd9ddaf4178081ecccd708d69f0197401290a72392e2ff8f98c4d76e660a0687701f3ed0b3db60da3bd45771f28c26fc5a122e069a8abc185cd664f2bfd6a5e7613196f1f69782e9b0c5360794b57a1f05fa0bd25037f2e4212f82e2ed50d1aea3200de6d9582bf841ac8280aef5d088d7c69af7e28e1de9a73ed107757565a", 0xdf}, {&(0x7f0000002f00)="139942ab38015bc10bc5780bcbba48fbeae0b23150443c9f77d80e4de2fc723bc6b725b248f238431a27eb4972c31ae96439a9decbce2203160a91f6a1091290a086d7dc68cfbabed45921f0fe185bd0472eafdb2da624c50b8f184a5842329e9cfeb1062164c6c20b6845487f74f75d6d3b1248c6d37495958bca7e0b42298d7427e7839468c9b1de0e732bf70c84e75442d13e630db9780a3d2f7f8c3a6007baa22d20a4acdcbd704d0c16ed7a82751f149b8885dc55a4dc7a03d075adc0288745b88c44ff660a2f59fb7e51e64135b50ef3d29017a4b81424628222f6adfb3f4b26", 0xe3}, {&(0x7f0000003000)="e346871021cd0257e2cd4811870e5edf531050f4f7c615ddc70962a6fb4403571454a1e1d5236d3fc4982b289a1201dbad0f7228d4e725ce1748be840db272ef977bbdfef88f6ec4dee2b1bb2cce412bd29abcfffa68884f88928979a24a7dbfcce20239bd161e91bd373e11c535bf8555e1ea2f9423037baa414e40e439273889469adb454af88f32ab1378d9ef3875af226606df3a27d2a18205017302e1775522f9a19eb9f5c26a024e8c0c38fae31f8a49d06dfa53724100e2515b31ff1ec89739a611151dbde19fc2da2966f36e990552414d10ba99baa70f89cb3fc8481c389c7b8ca65da3d255e09f8de2d453d8e7ae26", 0xf4}], 0x6}}, {{&(0x7f0000003140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @multicast2}, 0x1, 0x1, 0x3, 0x3}}, 0x80, &(0x7f00000032c0)=[{&(0x7f00000031c0)="24ca2f78b6668cb6ffa8730b52bccad0bd64809e4c3499805834b794", 0x1c}, {&(0x7f0000003200)="0e2f0e89bd7f76d8846ed46ec2043cf584e7c5a9930c127aa0c4bd50473deb525bf4faa4ab5d03f504b93810b15b80e4f1acdc595a9017b9fe74d1d080bdfd371a4760a6623a5fdd4b7794210071347d63d7011ea82928476acaf863382a21e170b8ca4a514f51fe42bb05bbaee03ed0037b6b2d8a9740c308530a8926687407b5a2f4e36ac06c12ae43882e912d88d723e3d42651f16957505c7d9e74e04acbba31a56e978acc85b1f628e322", 0xad}], 0x2, &(0x7f0000003300)=[@timestamping={{0x10, 0x1, 0x25, 0x10}}, @txtime={{0x14, 0x1, 0x3d, 0x4}}, @timestamping={{0x10, 0x1, 0x25, 0x2}}, @mark={{0x10, 0x1, 0x24, 0xed1}}, @mark={{0x10, 0x1, 0x24, 0x98a0}}, @mark={{0x10, 0x1, 0x24, 0x9}}], 0x64}}], 0xa, 0x4040080) 2.274414825s ago: executing program 6 (id=6737): socket$inet6(0xa, 0x80003, 0xff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x2c0480d4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000acc000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000009e000c0046723040dcf851353d80428b66c4a5c76fdd086344be5b4b365b030000000000000098b7647dd42e1f003e993562f7"], 0xf4}, 0x1, 0x0, 0x0, 0x4040854}, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x650442, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000001c0)) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0xfffffffffffffcef) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000040)={0x18, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x2b, @local, 0x4e22, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) setsockopt$inet6_int(r4, 0x29, 0x5, &(0x7f0000fcb000)=0xff7fffff, 0x4) 1.971690273s ago: executing program 7 (id=6738): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)={0x200000, 0x200000, 0x80}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000500)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000f00000c0000000c000000020000000000000000000004000000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r5, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x15, 0x0}}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000c40)={&(0x7f00000008c0)="e76f63d4c0c28c53862a578de349aa7ef71c6b0bdac9a5e036bdf4aacd7bb788b4b78616ba084ef418e5f82f9708c79c1e8e3982098fe129fd2b7de7b12af142b4b92004e512015d6cd4e9d322d327e4d0b6989e917ca44653463a06b2670e229d6f0e07f5b140d8a44dec4ec930198df99b6501d4d2961e7877962357f8b783ced4939d49bba16467c525764578f99f678097026b0b578d6bbe97b3a4adc0eaf1f4af6c", &(0x7f0000000980)=""/108, &(0x7f0000000ac0)="f44c30d8796f39c3de0fc8298cf94d3691dd61f00dfd6161ff75cdd1d9d2e184bbd1c8a7dde82f48215121f2ffbcbadb6d87608b41259edbfe6ca5693b4c0b6868a3646b4f42b0da419448ef791dd55d11ae42f056aed0ffb0a5c34855ec7358ea7ab3bf0268c3be686107b4f959514d6719fdf9c3e9d21b216be258cfb163916cb676969208da92ea35bf5ca9adf8cf189d71b1f195a0140661cb81fba6b3528d787a6dcb7f54e7dcf30539d5dc9073e904c3d3078ca18c123384a585d8d02fa1617f8c5c582c90633e14adb52368a494e17fd73ff9279cddc67540e795243f9747f8", &(0x7f0000000bc0)="93ef610825c45e825c0572115ae142546571688182c11e8c9587e4fd267d899d8fd9a2f859457a321d65af98fcae1c155270bf4b6fb2ff66f53754ebc60b60c46566bc6e88e13298a543360ba4b244c2b3b63a471879da11c5a168e1a13da5c13029fb4a18", 0xffff, r5, 0x4}, 0x38) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000006c0)={0xc7, 0x0, 0x1}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r7, 0x401870cb, &(0x7f0000000040)) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000580)={0x2, 0x0, 0x6, {0xc0020006, 0xe7ffffff, 0x5, 0x54ef}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0xe, &(0x7f00000005c0)=ANY=[@ANYRES16, @ANYRES16=r6, @ANYRESOCT=0x0, @ANYBLOB="8c3ca41d04187bfbc75c7bef10c1d03dd57a26ccbad28e2072fb50790e131f1a6825aeb01f053dd03c4f941adfdb12b83e06c2a14516a57dc8ad48561e1c69330709772302ce5b326ecf55c1706c260b5f8295935d3ab7c8e2c26192b693c2f2e1a0773583b850aa47d8012c005a45c85f7a772c2b043d24e4afd63805414c7b92106db9db7541ab40ebcea9a91a4f8931dd0500d00dc57b69f8c6331c914fde641e", @ANYRES8=r2, @ANYRES16=r3, @ANYRESDEC=r5, @ANYRES32], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 1.814924215s ago: executing program 7 (id=6739): syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x3, 0x0, &(0x7f0000001080)) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000040)={{0x3, 0x3}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000200)='udf\x00', 0x410, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) syz_io_uring_setup(0x49d, &(0x7f0000000100)={0x0, 0x79af, 0x2, 0x8000, 0x400246}, 0x0, &(0x7f00000006c0), &(0x7f0000000000)) io_setup(0x3, &(0x7f0000002140)=0x0) io_getevents(r4, 0xffffffff, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setpriority(0x0, 0x1, 0xa7a8) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) 1.745513771s ago: executing program 4 (id=6740): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=@newtaction={0xce4, 0x30, 0x1, 0x0, 0x0, {}, [{0xcd0, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0xc88, 0x14, 0x0, 0x0, {{0xb}, {0xc10, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x3, 0xa32, 0x7fffffff, 0x4, 0x2, 0x7e, 0x4, 0x0, 0x69, 0x1ff, 0x9, 0x5, 0xfffffffb, 0x1000, 0x9, 0xfffffffa, 0x2548, 0x677576ef, 0x6, 0x200, 0x4, 0x9, 0xfffffc01, 0x6, 0x9a, 0x10, 0x2, 0xd, 0x9, 0x1, 0x60b13f4c, 0x0, 0x6, 0x8, 0x0, 0x80, 0x4b50, 0x0, 0x3, 0xf, 0x80000000, 0xe, 0x154, 0x4, 0xf, 0xfff, 0xe, 0xffffffff, 0x4, 0x2, 0x4, 0x8b41, 0x4, 0xe189, 0x0, 0x3ff, 0x4, 0x6, 0xfff, 0x0, 0x6c5, 0x8, 0x19, 0xd94, 0x7ff, 0x1, 0x7f, 0x1, 0x7, 0x6, 0x9, 0x9, 0x0, 0xc9, 0x5e6, 0x3, 0x11c, 0x8, 0x0, 0x93, 0x2, 0x3, 0x1a6, 0x80000001, 0x40, 0x9, 0x3, 0xe, 0x496, 0x5, 0x6, 0x7, 0x9, 0xa74, 0x0, 0x2, 0x6, 0x3, 0x5, 0xd3, 0x6, 0x4, 0x0, 0xffff0000, 0x0, 0x0, 0x7, 0x8b7, 0x8, 0x9, 0x1, 0xffff, 0x3, 0x0, 0x3, 0xa, 0x1, 0x45d125e2, 0x1000, 0xb1a2, 0x9, 0xa6b, 0x6, 0x81, 0x0, 0x4, 0xed, 0x4, 0xffffffff, 0x7, 0x200, 0x6, 0x84, 0x5, 0x8, 0x80000001, 0xcf0b, 0xcf2, 0x5, 0x79, 0x80000000, 0x401, 0xf4, 0xc6, 0x80, 0xc, 0x7ff, 0x5, 0x5, 0x4, 0x0, 0x1, 0xc04d8000, 0x6, 0x2, 0x0, 0x80000001, 0x0, 0x8, 0x7000, 0xa35, 0x8, 0x7fff, 0x3, 0x7, 0xeea, 0x81, 0xe00000, 0x6, 0x57f, 0x4, 0x2, 0xc57, 0x0, 0x0, 0xb9, 0x7, 0x2, 0x8, 0x9, 0x2, 0xd219, 0x100003, 0x81, 0x4d0d659d, 0x8, 0x2, 0x8, 0x7, 0x5, 0x5, 0x5, 0x8001, 0x1, 0x5, 0x3, 0x0, 0x3, 0x82259, 0x5, 0x6024, 0x7cba928a, 0x0, 0x7fff, 0x6, 0x4, 0x2, 0x8, 0x5, 0x7, 0x1, 0x7f, 0x80, 0x0, 0x5, 0x7, 0x10001, 0x97, 0x4f, 0x5f, 0x10000, 0x7, 0x8, 0x7ff, 0x1, 0x3ff, 0x7, 0x3, 0x0, 0x4, 0x5, 0x200, 0x240, 0x9, 0x3, 0x0, 0x1, 0xfff, 0x7, 0x4, 0xe05, 0x4, 0x1b4, 0x6, 0xd646, 0x6, 0x3, 0x5, 0x95, 0x4, 0x3ff, 0x8, 0x7, 0x1, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x378, 0x400, 0x8, 0x4, 0xfff, 0x401, 0xe, 0x4, 0x29e, 0xfff, 0xffff, 0x80, 0xc, 0x7, 0x4, 0x7, 0x5, 0x0, 0x3, 0x1, 0x52a, 0x8, 0x0, 0x6, 0x2, 0x1, 0x9a, 0x7, 0x5, 0x1, 0x6, 0x10001, 0xffffffff, 0x6e, 0x83, 0x2, 0x8001, 0x2, 0x4, 0x80, 0x5, 0x401, 0x200, 0x4, 0x8, 0xe2, 0x9, 0x2, 0x0, 0x8, 0x7, 0x400, 0x9, 0x8001, 0x0, 0x4, 0xd, 0x0, 0x6, 0xd, 0x4, 0x41, 0x8, 0x2, 0x0, 0xffff0001, 0x4b2, 0xdd6, 0x1, 0x1, 0x9, 0x1, 0xc4d3, 0x6, 0x3, 0x3, 0xc, 0x4, 0x4, 0x4, 0x101, 0xb, 0x1956da1b, 0xc45, 0x600, 0x0, 0x80, 0x3, 0x0, 0xc2c4, 0x68, 0xb, 0x8, 0x5, 0x7, 0xe7, 0x5, 0xb, 0x57b645b2, 0x8, 0xfffffff9, 0x101, 0xa5, 0xd, 0xfff, 0x5, 0x1, 0x3, 0x9, 0x6, 0xed5, 0x9, 0x8, 0x2, 0x0, 0xa95, 0x9557, 0x3, 0x7ff, 0x2, 0x2, 0x7, 0x100, 0x0, 0xfffffeba, 0x1, 0x8af, 0x200, 0x9, 0x1, 0x3, 0x3, 0xfffffffb, 0x5, 0xb, 0x2, 0x3, 0x8c5, 0x9, 0x4, 0x80000001, 0x5, 0xf, 0x0, 0x1ff, 0x9, 0xb, 0x9, 0x10001, 0xfffffb7f, 0x5, 0x2, 0x10000, 0x2c, 0x4, 0x2, 0x7, 0x0, 0x8, 0x4, 0xfa1, 0x4, 0xf12, 0x236, 0x7, 0x85, 0xff, 0x6, 0x5, 0x647f, 0x6, 0x80, 0x8, 0x2e2, 0x5, 0x5, 0x8, 0xb824, 0x10001, 0x0, 0x80800, 0x20000000, 0xe3, 0x6, 0x2, 0x9, 0x9, 0x3, 0x5, 0xffffffff, 0xff, 0x6, 0xe965, 0x8, 0x3, 0x5, 0x101, 0x6, 0x796bc765, 0x401, 0xfffffffd, 0x0, 0x1, 0xc, 0xd, 0x0, 0x1, 0x2, 0x9, 0x1, 0x9a6, 0x2, 0x928, 0x1, 0x89b, 0x29, 0xb3e, 0x8, 0x5, 0xfffffffa, 0x41, 0x2, 0xfffffa5e, 0x0, 0x0, 0x7a8, 0x7, 0xffff, 0x870, 0x9, 0xfffffff7, 0x6, 0xffffffeb, 0x0, 0x3bfc, 0xffff, 0xcee4, 0x5, 0x7, 0x5, 0x6, 0x3, 0x9, 0x401, 0x1, 0x4, 0x5, 0xf, 0x3, 0x3, 0x80000000, 0x0, 0x1000, 0x1, 0x80000001, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x2, 0x5, 0x0, 0xa, 0xa, 0x2, 0xf467, 0x3e, 0x0, 0xfffffffb, 0x7, 0x7f, 0x1, 0x7, 0x9, 0x7f, 0x7a25, 0x6, 0x7, 0x57beacbe, 0xd, 0x1, 0xa1b, 0x5, 0xc, 0x10, 0x8a5, 0x10, 0x4, 0x9, 0x4048, 0x3, 0x3, 0x5, 0xf8, 0xffffffff, 0x5, 0x10, 0x8, 0x0, 0x5, 0x2, 0x3ff, 0x3, 0x2, 0x8, 0xa, 0x6, 0x4, 0x7, 0x4, 0x9, 0x6, 0x81, 0xb, 0x24, 0x6, 0x6, 0x9, 0x3, 0x4, 0xffdf, 0xfffffffb, 0x9, 0xdb4, 0x32, 0x9, 0x4, 0x6, 0x8, 0x10000, 0x0, 0x6, 0x200, 0x3, 0x2, 0x7ff, 0x3, 0x0, 0x10000, 0xf, 0x80, 0x1, 0x2, 0x80000000, 0x2, 0x6, 0x4, 0xf, 0x4, 0xff, 0x8b0d, 0xb6a, 0x5, 0x81, 0xc2, 0x1, 0x10, 0x1, 0x2, 0x3ff, 0xd40, 0x1, 0x0, 0x5, 0x3, 0x6, 0xfffffffb, 0x1001ff, 0x6, 0x3, 0x4cdc, 0x949, 0x7e879808, 0x6, 0x10, 0x1, 0x7, 0x4000b, 0xfffffffc, 0x7, 0xf, 0xe4, 0x2, 0x1, 0x9ad, 0x7, 0x101, 0xffffffff, 0x53, 0xd078, 0x9, 0x7, 0x5, 0xa4, 0x455, 0x10001, 0x1, 0x6, 0x7, 0xfffffffb, 0x3, 0x9, 0x7, 0x5c71, 0x6, 0x0, 0x0, 0x0, 0x5, 0x1, 0x81, 0xd, 0x4000, 0x5, 0x6f0f, 0x8f, 0xf1000000, 0x10, 0x80, 0x7, 0x80000000, 0x3, 0x7, 0xffff, 0x5, 0xffff, 0x8001, 0x6, 0x7, 0x60000000, 0x6, 0x9, 0x49cd4fcf, 0x7, 0xa22, 0xf8ef, 0xfffffff9, 0x80000000, 0x1, 0xc4, 0x6, 0x31d, 0xf86, 0x8, 0x3, 0x0, 0x8, 0x9, 0x3, 0x0, 0x200, 0x1, 0x5f1, 0x6, 0x9, 0x0, 0x5, 0x4, 0x7, 0x8d7c, 0x8, 0x7, 0x8, 0x4, 0xfff, 0x3, 0x5, 0x2, 0x2, 0x7f, 0xe, 0x78, 0x6, 0x80000000, 0x3, 0x2, 0x80000001, 0x4, 0x6d, 0x7, 0x6687, 0x10000, 0x2, 0x5, 0x7, 0xfffffff8, 0x7, 0x7, 0x0, 0x1, 0x0, 0x4, 0x87, 0x0, 0x5, 0x8, 0x1, 0xffc00000, 0x81, 0x1, 0x3ff, 0xe, 0x1ff, 0x0, 0x61d8d484, 0x9, 0x7, 0x4, 0x0, 0x5, 0x4, 0x6, 0x3, 0xffffffff]}], []]}, {0x4d, 0x6, "47f712033767b2ac7d18e66c21fa7c64b17f23a2722ab9f2aa5c7b56ece9294c355f82eb49e15866607280bde9df2dde8bd40ec314de9af838eb5df53e2618b988a75103e42368af0f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xce4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setresgid(0xee00, 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, r2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1.424982882s ago: executing program 3 (id=6741): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x2a, 0x0, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000100)='./file0/file0\x00', 0x22) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r6, &(0x7f0000000140)=[{&(0x7f0000001240)=""/4090, 0xffa}], 0x1) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 5.392769ms ago: executing program 4 (id=6742): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=@newtaction={0xce4, 0x30, 0x1, 0x0, 0x0, {}, [{0xcd0, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0xc88, 0x14, 0x0, 0x0, {{0xb}, {0xc10, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x3, 0xa32, 0x7fffffff, 0x4, 0x2, 0x7e, 0x4, 0x0, 0x69, 0x1ff, 0x9, 0x5, 0xfffffffb, 0x1000, 0x9, 0xfffffffa, 0x2548, 0x677576ef, 0x6, 0x200, 0x4, 0x9, 0xfffffc01, 0x6, 0x9a, 0x10, 0x2, 0xd, 0x9, 0x1, 0x60b13f4c, 0x0, 0x6, 0x8, 0x0, 0x80, 0x4b50, 0x0, 0x3, 0xf, 0x80000000, 0xe, 0x154, 0x4, 0xf, 0xfff, 0xe, 0xffffffff, 0x4, 0x2, 0x4, 0x8b41, 0x4, 0xe189, 0x0, 0x3ff, 0x4, 0x6, 0xfff, 0x0, 0x6c5, 0x8, 0x19, 0xd94, 0x7ff, 0x1, 0x7f, 0x1, 0x7, 0x6, 0x9, 0x9, 0x0, 0xc9, 0x5e6, 0x3, 0x11c, 0x8, 0x0, 0x93, 0x2, 0x3, 0x1a6, 0x80000001, 0x40, 0x9, 0x3, 0xe, 0x496, 0x5, 0x6, 0x7, 0x9, 0xa74, 0x0, 0x2, 0x6, 0x3, 0x5, 0xd3, 0x6, 0x4, 0x0, 0xffff0000, 0x0, 0x0, 0x7, 0x8b7, 0x8, 0x9, 0x1, 0xffff, 0x3, 0x0, 0x3, 0xa, 0x1, 0x45d125e2, 0x1000, 0xb1a2, 0x9, 0xa6b, 0x6, 0x81, 0x0, 0x4, 0xed, 0x4, 0xffffffff, 0x7, 0x200, 0x6, 0x84, 0x5, 0x8, 0x80000001, 0xcf0b, 0xcf2, 0x5, 0x79, 0x80000000, 0x401, 0xf4, 0xc6, 0x80, 0xc, 0x7ff, 0x5, 0x5, 0x4, 0x0, 0x1, 0xc04d8000, 0x6, 0x2, 0x0, 0x80000001, 0x0, 0x8, 0x7000, 0xa35, 0x8, 0x7fff, 0x3, 0x7, 0xeea, 0x81, 0xe00000, 0x6, 0x57f, 0x4, 0x2, 0xc57, 0x0, 0x0, 0xb9, 0x7, 0x2, 0x8, 0x9, 0x2, 0xd219, 0x100003, 0x81, 0x4d0d659d, 0x8, 0x2, 0x8, 0x7, 0x5, 0x5, 0x5, 0x8001, 0x1, 0x5, 0x3, 0x0, 0x3, 0x82259, 0x5, 0x6024, 0x7cba928a, 0x0, 0x7fff, 0x6, 0x4, 0x2, 0x8, 0x5, 0x7, 0x1, 0x7f, 0x80, 0x0, 0x5, 0x7, 0x10001, 0x97, 0x4f, 0x5f, 0x10000, 0x7, 0x8, 0x7ff, 0x1, 0x3ff, 0x7, 0x3, 0x0, 0x4, 0x5, 0x200, 0x240, 0x9, 0x3, 0x0, 0x1, 0xfff, 0x7, 0x4, 0xe05, 0x4, 0x1b4, 0x6, 0xd646, 0x6, 0x3, 0x5, 0x95, 0x4, 0x3ff, 0x8, 0x7, 0x1, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x378, 0x400, 0x8, 0x4, 0xfff, 0x401, 0xe, 0x4, 0x29e, 0xfff, 0xffff, 0x80, 0xc, 0x7, 0x4, 0x7, 0x5, 0x0, 0x3, 0x1, 0x52a, 0x8, 0x0, 0x6, 0x2, 0x1, 0x9a, 0x7, 0x5, 0x1, 0x6, 0x10001, 0xffffffff, 0x6e, 0x83, 0x2, 0x8001, 0x2, 0x4, 0x80, 0x5, 0x401, 0x200, 0x4, 0x8, 0xe2, 0x9, 0x2, 0x0, 0x8, 0x7, 0x400, 0x9, 0x8001, 0x0, 0x4, 0xd, 0x0, 0x6, 0xd, 0x4, 0x41, 0x8, 0x2, 0x0, 0xffff0001, 0x4b2, 0xdd6, 0x1, 0x1, 0x9, 0x1, 0xc4d3, 0x6, 0x3, 0x3, 0xc, 0x4, 0x4, 0x4, 0x101, 0xb, 0x1956da1b, 0xc45, 0x600, 0x0, 0x80, 0x3, 0x0, 0xc2c4, 0x68, 0xb, 0x8, 0x5, 0x7, 0xe7, 0x5, 0xb, 0x57b645b2, 0x8, 0xfffffff9, 0x101, 0xa5, 0xd, 0xfff, 0x5, 0x1, 0x3, 0x9, 0x6, 0xed5, 0x9, 0x8, 0x2, 0x0, 0xa95, 0x9557, 0x3, 0x7ff, 0x2, 0x2, 0x7, 0x100, 0x0, 0xfffffeba, 0x1, 0x8af, 0x200, 0x9, 0x1, 0x3, 0x3, 0xfffffffb, 0x5, 0xb, 0x2, 0x3, 0x8c5, 0x9, 0x4, 0x80000001, 0x5, 0xf, 0x0, 0x1ff, 0x9, 0xb, 0x9, 0x10001, 0xfffffb7f, 0x5, 0x2, 0x10000, 0x2c, 0x4, 0x2, 0x7, 0x0, 0x8, 0x4, 0xfa1, 0x4, 0xf12, 0x236, 0x7, 0x85, 0xff, 0x6, 0x5, 0x647f, 0x6, 0x80, 0x8, 0x2e2, 0x5, 0x5, 0x8, 0xb824, 0x10001, 0x0, 0x80800, 0x20000000, 0xe3, 0x6, 0x2, 0x9, 0x9, 0x3, 0x5, 0xffffffff, 0xff, 0x6, 0xe965, 0x8, 0x3, 0x5, 0x101, 0x6, 0x796bc765, 0x401, 0xfffffffd, 0x0, 0x1, 0xc, 0xd, 0x0, 0x1, 0x2, 0x9, 0x1, 0x9a6, 0x2, 0x928, 0x1, 0x89b, 0x29, 0xb3e, 0x8, 0x5, 0xfffffffa, 0x41, 0x2, 0xfffffa5e, 0x0, 0x0, 0x7a8, 0x7, 0xffff, 0x870, 0x9, 0xfffffff7, 0x6, 0xffffffeb, 0x0, 0x3bfc, 0xffff, 0xcee4, 0x5, 0x7, 0x5, 0x6, 0x3, 0x9, 0x401, 0x1, 0x4, 0x5, 0xf, 0x3, 0x3, 0x80000000, 0x0, 0x1000, 0x1, 0x80000001, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x2, 0x5, 0x0, 0xa, 0xa, 0x2, 0xf467, 0x3e, 0x0, 0xfffffffb, 0x7, 0x7f, 0x1, 0x7, 0x9, 0x7f, 0x7a25, 0x6, 0x7, 0x57beacbe, 0xd, 0x1, 0xa1b, 0x5, 0xc, 0x10, 0x8a5, 0x10, 0x4, 0x9, 0x4048, 0x3, 0x3, 0x5, 0xf8, 0xffffffff, 0x5, 0x10, 0x8, 0x0, 0x5, 0x2, 0x3ff, 0x3, 0x2, 0x8, 0xa, 0x6, 0x4, 0x7, 0x4, 0x9, 0x6, 0x81, 0xb, 0x24, 0x6, 0x6, 0x9, 0x3, 0x4, 0xffdf, 0xfffffffb, 0x9, 0xdb4, 0x32, 0x9, 0x4, 0x6, 0x8, 0x10000, 0x0, 0x6, 0x200, 0x3, 0x2, 0x7ff, 0x3, 0x0, 0x10000, 0xf, 0x80, 0x1, 0x2, 0x80000000, 0x2, 0x6, 0x4, 0xf, 0x4, 0xff, 0x8b0d, 0xb6a, 0x5, 0x81, 0xc2, 0x1, 0x10, 0x1, 0x2, 0x3ff, 0xd40, 0x1, 0x0, 0x5, 0x3, 0x6, 0xfffffffb, 0x1001ff, 0x6, 0x3, 0x4cdc, 0x949, 0x7e879808, 0x6, 0x10, 0x1, 0x7, 0x4000b, 0xfffffffc, 0x7, 0xf, 0xe4, 0x2, 0x1, 0x9ad, 0x7, 0x101, 0xffffffff, 0x53, 0xd078, 0x9, 0x7, 0x5, 0xa4, 0x455, 0x10001, 0x1, 0x6, 0x7, 0xfffffffb, 0x3, 0x9, 0x7, 0x5c71, 0x6, 0x0, 0x0, 0x0, 0x5, 0x1, 0x81, 0xd, 0x4000, 0x5, 0x6f0f, 0x8f, 0xf1000000, 0x10, 0x80, 0x7, 0x80000000, 0x3, 0x7, 0xffff, 0x5, 0xffff, 0x8001, 0x6, 0x7, 0x60000000, 0x6, 0x9, 0x49cd4fcf, 0x7, 0xa22, 0xf8ef, 0xfffffff9, 0x80000000, 0x1, 0xc4, 0x6, 0x31d, 0xf86, 0x8, 0x3, 0x0, 0x8, 0x9, 0x3, 0x0, 0x200, 0x1, 0x5f1, 0x6, 0x9, 0x0, 0x5, 0x4, 0x7, 0x8d7c, 0x8, 0x7, 0x8, 0x4, 0xfff, 0x3, 0x5, 0x2, 0x2, 0x7f, 0xe, 0x78, 0x6, 0x80000000, 0x3, 0x2, 0x80000001, 0x4, 0x6d, 0x7, 0x6687, 0x10000, 0x2, 0x5, 0x7, 0xfffffff8, 0x7, 0x7, 0x0, 0x1, 0x0, 0x4, 0x87, 0x0, 0x5, 0x8, 0x1, 0xffc00000, 0x81, 0x1, 0x3ff, 0xe, 0x1ff, 0x0, 0x61d8d484, 0x9, 0x7, 0x4, 0x0, 0x5, 0x4, 0x6, 0x3, 0xffffffff]}], []]}, {0x4d, 0x6, "47f712033767b2ac7d18e66c21fa7c64b17f23a2722ab9f2aa5c7b56ece9294c355f82eb49e15866607280bde9df2dde8bd40ec314de9af838eb5df53e2618b988a75103e42368af0f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xce4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setresgid(0xee00, 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, r2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 4.605286ms ago: executing program 3 (id=6743): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000012000/0x3000)=nil], 0x0, 0x0, 0x6) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1, &(0x7f0000000840)=0x4, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x3f, 0x1}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000071112400000000208510000002000000850000000e00000095000000000000009500a50500000000049759c7d1d34253cc4a0550567a7bab339d33245f73bfae64f9c3ed420c1497dc9db917a914cee291fc55ddde2903727fba011d8f21ea59fe2689b3d5964ab05cafdbfe1eea343e0c300d88d680c3358f2125d72d46b06cf28228bcdcdfbac649bb0c2c805660859a09c7872d9630266f9dde602e18687ba3deeae0f5444a395edc6a313d11c8b85df48aec4a94d4c368ad5c81709a162edf743674d9a63fee0dcbdf8c117bc87ef3b947ffc78a47414a4c1dce0584f28f72874051699f3e6f59b45a"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 0s ago: executing program 7 (id=6744): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=@newtaction={0xce4, 0x30, 0x1, 0x0, 0x0, {}, [{0xcd0, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0xc88, 0x14, 0x0, 0x0, {{0xb}, {0xc10, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x3, 0xa32, 0x7fffffff, 0x4, 0x2, 0x7e, 0x4, 0x0, 0x69, 0x1ff, 0x9, 0x5, 0xfffffffb, 0x1000, 0x9, 0xfffffffa, 0x2548, 0x677576ef, 0x6, 0x200, 0x4, 0x9, 0xfffffc01, 0x6, 0x9a, 0x10, 0x2, 0xd, 0x9, 0x1, 0x60b13f4c, 0x0, 0x6, 0x8, 0x0, 0x80, 0x4b50, 0x0, 0x3, 0xf, 0x80000000, 0xe, 0x154, 0x4, 0xf, 0xfff, 0xe, 0xffffffff, 0x4, 0x2, 0x4, 0x8b41, 0x4, 0xe189, 0x0, 0x3ff, 0x4, 0x6, 0xfff, 0x0, 0x6c5, 0x8, 0x19, 0xd94, 0x7ff, 0x1, 0x7f, 0x1, 0x7, 0x6, 0x9, 0x9, 0x0, 0xc9, 0x5e6, 0x3, 0x11c, 0x8, 0x0, 0x93, 0x2, 0x3, 0x1a6, 0x80000001, 0x40, 0x9, 0x3, 0xe, 0x496, 0x5, 0x6, 0x7, 0x9, 0xa74, 0x0, 0x2, 0x6, 0x3, 0x5, 0xd3, 0x6, 0x4, 0x0, 0xffff0000, 0x0, 0x0, 0x7, 0x8b7, 0x8, 0x9, 0x1, 0xffff, 0x3, 0x0, 0x3, 0xa, 0x1, 0x45d125e2, 0x1000, 0xb1a2, 0x9, 0xa6b, 0x6, 0x81, 0x0, 0x4, 0xed, 0x4, 0xffffffff, 0x7, 0x200, 0x6, 0x84, 0x5, 0x8, 0x80000001, 0xcf0b, 0xcf2, 0x5, 0x79, 0x80000000, 0x401, 0xf4, 0xc6, 0x80, 0xc, 0x7ff, 0x5, 0x5, 0x4, 0x0, 0x1, 0xc04d8000, 0x6, 0x2, 0x0, 0x80000001, 0x0, 0x8, 0x7000, 0xa35, 0x8, 0x7fff, 0x3, 0x7, 0xeea, 0x81, 0xe00000, 0x6, 0x57f, 0x4, 0x2, 0xc57, 0x0, 0x0, 0xb9, 0x7, 0x2, 0x8, 0x9, 0x2, 0xd219, 0x100003, 0x81, 0x4d0d659d, 0x8, 0x2, 0x8, 0x7, 0x5, 0x5, 0x5, 0x8001, 0x1, 0x5, 0x3, 0x0, 0x3, 0x82259, 0x5, 0x6024, 0x7cba928a, 0x0, 0x7fff, 0x6, 0x4, 0x2, 0x8, 0x5, 0x7, 0x1, 0x7f, 0x80, 0x0, 0x5, 0x7, 0x10001, 0x97, 0x4f, 0x5f, 0x10000, 0x7, 0x8, 0x7ff, 0x1, 0x3ff, 0x7, 0x3, 0x0, 0x4, 0x5, 0x200, 0x240, 0x9, 0x3, 0x0, 0x1, 0xfff, 0x7, 0x4, 0xe05, 0x4, 0x1b4, 0x6, 0xd646, 0x6, 0x3, 0x5, 0x95, 0x4, 0x3ff, 0x8, 0x7, 0x1, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x378, 0x400, 0x8, 0x4, 0xfff, 0x401, 0xe, 0x4, 0x29e, 0xfff, 0xffff, 0x80, 0xc, 0x7, 0x4, 0x7, 0x5, 0x0, 0x3, 0x1, 0x52a, 0x8, 0x0, 0x6, 0x2, 0x1, 0x9a, 0x7, 0x5, 0x1, 0x6, 0x10001, 0xffffffff, 0x6e, 0x83, 0x2, 0x8001, 0x2, 0x4, 0x80, 0x5, 0x401, 0x200, 0x4, 0x8, 0xe2, 0x9, 0x2, 0x0, 0x8, 0x7, 0x400, 0x9, 0x8001, 0x0, 0x4, 0xd, 0x0, 0x6, 0xd, 0x4, 0x41, 0x8, 0x2, 0x0, 0xffff0001, 0x4b2, 0xdd6, 0x1, 0x1, 0x9, 0x1, 0xc4d3, 0x6, 0x3, 0x3, 0xc, 0x4, 0x4, 0x4, 0x101, 0xb, 0x1956da1b, 0xc45, 0x600, 0x0, 0x80, 0x3, 0x0, 0xc2c4, 0x68, 0xb, 0x8, 0x5, 0x7, 0xe7, 0x5, 0xb, 0x57b645b2, 0x8, 0xfffffff9, 0x101, 0xa5, 0xd, 0xfff, 0x5, 0x1, 0x3, 0x9, 0x6, 0xed5, 0x9, 0x8, 0x2, 0x0, 0xa95, 0x9557, 0x3, 0x7ff, 0x2, 0x2, 0x7, 0x100, 0x0, 0xfffffeba, 0x1, 0x8af, 0x200, 0x9, 0x1, 0x3, 0x3, 0xfffffffb, 0x5, 0xb, 0x2, 0x3, 0x8c5, 0x9, 0x4, 0x80000001, 0x5, 0xf, 0x0, 0x1ff, 0x9, 0xb, 0x9, 0x10001, 0xfffffb7f, 0x5, 0x2, 0x10000, 0x2c, 0x4, 0x2, 0x7, 0x0, 0x8, 0x4, 0xfa1, 0x4, 0xf12, 0x236, 0x7, 0x85, 0xff, 0x6, 0x5, 0x647f, 0x6, 0x80, 0x8, 0x2e2, 0x5, 0x5, 0x8, 0xb824, 0x10001, 0x0, 0x80800, 0x20000000, 0xe3, 0x6, 0x2, 0x9, 0x9, 0x3, 0x5, 0xffffffff, 0xff, 0x6, 0xe965, 0x8, 0x3, 0x5, 0x101, 0x6, 0x796bc765, 0x401, 0xfffffffd, 0x0, 0x1, 0xc, 0xd, 0x0, 0x1, 0x2, 0x9, 0x1, 0x9a6, 0x2, 0x928, 0x1, 0x89b, 0x29, 0xb3e, 0x8, 0x5, 0xfffffffa, 0x41, 0x2, 0xfffffa5e, 0x0, 0x0, 0x7a8, 0x7, 0xffff, 0x870, 0x9, 0xfffffff7, 0x6, 0xffffffeb, 0x0, 0x3bfc, 0xffff, 0xcee4, 0x5, 0x7, 0x5, 0x6, 0x3, 0x9, 0x401, 0x1, 0x4, 0x5, 0xf, 0x3, 0x3, 0x80000000, 0x0, 0x1000, 0x1, 0x80000001, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x2, 0x5, 0x0, 0xa, 0xa, 0x2, 0xf467, 0x3e, 0x0, 0xfffffffb, 0x7, 0x7f, 0x1, 0x7, 0x9, 0x7f, 0x7a25, 0x6, 0x7, 0x57beacbe, 0xd, 0x1, 0xa1b, 0x5, 0xc, 0x10, 0x8a5, 0x10, 0x4, 0x9, 0x4048, 0x3, 0x3, 0x5, 0xf8, 0xffffffff, 0x5, 0x10, 0x8, 0x0, 0x5, 0x2, 0x3ff, 0x3, 0x2, 0x8, 0xa, 0x6, 0x4, 0x7, 0x4, 0x9, 0x6, 0x81, 0xb, 0x24, 0x6, 0x6, 0x9, 0x3, 0x4, 0xffdf, 0xfffffffb, 0x9, 0xdb4, 0x32, 0x9, 0x4, 0x6, 0x8, 0x10000, 0x0, 0x6, 0x200, 0x3, 0x2, 0x7ff, 0x3, 0x0, 0x10000, 0xf, 0x80, 0x1, 0x2, 0x80000000, 0x2, 0x6, 0x4, 0xf, 0x4, 0xff, 0x8b0d, 0xb6a, 0x5, 0x81, 0xc2, 0x1, 0x10, 0x1, 0x2, 0x3ff, 0xd40, 0x1, 0x0, 0x5, 0x3, 0x6, 0xfffffffb, 0x1001ff, 0x6, 0x3, 0x4cdc, 0x949, 0x7e879808, 0x6, 0x10, 0x1, 0x7, 0x4000b, 0xfffffffc, 0x7, 0xf, 0xe4, 0x2, 0x1, 0x9ad, 0x7, 0x101, 0xffffffff, 0x53, 0xd078, 0x9, 0x7, 0x5, 0xa4, 0x455, 0x10001, 0x1, 0x6, 0x7, 0xfffffffb, 0x3, 0x9, 0x7, 0x5c71, 0x6, 0x0, 0x0, 0x0, 0x5, 0x1, 0x81, 0xd, 0x4000, 0x5, 0x6f0f, 0x8f, 0xf1000000, 0x10, 0x80, 0x7, 0x80000000, 0x3, 0x7, 0xffff, 0x5, 0xffff, 0x8001, 0x6, 0x7, 0x60000000, 0x6, 0x9, 0x49cd4fcf, 0x7, 0xa22, 0xf8ef, 0xfffffff9, 0x80000000, 0x1, 0xc4, 0x6, 0x31d, 0xf86, 0x8, 0x3, 0x0, 0x8, 0x9, 0x3, 0x0, 0x200, 0x1, 0x5f1, 0x6, 0x9, 0x0, 0x5, 0x4, 0x7, 0x8d7c, 0x8, 0x7, 0x8, 0x4, 0xfff, 0x3, 0x5, 0x2, 0x2, 0x7f, 0xe, 0x78, 0x6, 0x80000000, 0x3, 0x2, 0x80000001, 0x4, 0x6d, 0x7, 0x6687, 0x10000, 0x2, 0x5, 0x7, 0xfffffff8, 0x7, 0x7, 0x0, 0x1, 0x0, 0x4, 0x87, 0x0, 0x5, 0x8, 0x1, 0xffc00000, 0x81, 0x1, 0x3ff, 0xe, 0x1ff, 0x0, 0x61d8d484, 0x9, 0x7, 0x4, 0x0, 0x5, 0x4, 0x6, 0x3, 0xffffffff]}], []]}, {0x4d, 0x6, "47f712033767b2ac7d18e66c21fa7c64b17f23a2722ab9f2aa5c7b56ece9294c355f82eb49e15866607280bde9df2dde8bd40ec314de9af838eb5df53e2618b988a75103e42368af0f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xce4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setresgid(0xee00, 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, r2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) kernel console output (not intermixed with test programs): 8004][T28475] lo speed is unknown, defaulting to 1000 [ 1578.530843][T28475] gre0 speed is unknown, defaulting to 1000 [ 1578.615011][T28497] __vm_enough_memory: pid: 28497, comm: syz.3.6166, bytes: 4294963200 not enough memory for the allocation [ 1578.754933][ T5446] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1578.927986][ T12] hsr_slave_0: left promiscuous mode [ 1578.930971][ T12] hsr_slave_1: left promiscuous mode [ 1578.933544][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1578.938115][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1579.120033][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1579.127996][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1579.191892][T14033] smbdirect: ib_dev[syz2] removed [ 1579.205167][ T5446] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1579.225425][ T7395] libceph: connect (1)[c::]:6789 error -101 [ 1579.230071][ T7395] libceph: mon0 (1)[c::]:6789 connect error [ 1579.272126][T28513] ceph: No mds server is up or the cluster is laggy [ 1579.401084][T28475] bridge0: port 1(bridge_slave_0) entered blocking state [ 1579.406343][T28475] bridge0: port 1(bridge_slave_0) entered disabled state [ 1579.418962][T28475] bridge_slave_0: entered allmulticast mode [ 1579.423353][T28475] bridge_slave_0: entered promiscuous mode [ 1579.430064][T28475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1579.435278][T28475] bridge0: port 2(bridge_slave_1) entered disabled state [ 1579.441090][T28475] bridge_slave_1: entered allmulticast mode [ 1579.447639][T28475] bridge_slave_1: entered promiscuous mode [ 1579.523065][T28475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1579.530505][T28475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1579.537781][ T5446] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1579.563589][T28475] team0: Port device team_slave_0 added [ 1579.568465][T28475] team0: Port device team_slave_1 added [ 1579.592018][T28475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1579.594539][T28475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1579.603008][T28475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1579.608629][T28475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1579.610995][T28475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1579.619584][T28475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1579.670038][T28475] hsr_slave_0: entered promiscuous mode [ 1579.675285][T28475] hsr_slave_1: entered promiscuous mode [ 1579.681252][T28475] debugfs: 'hsr0' already exists in 'hsr' [ 1579.686223][T28475] Cannot create hsr debugfs directory [ 1579.787457][ T5446] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1579.987654][T28475] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1579.991700][T28475] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1579.994795][T28475] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1579.998753][T28475] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1580.001512][T28475] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1580.005836][T28475] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1580.008608][T28475] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1580.012586][T28475] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1580.042248][T13249] Bluetooth: hci2: command tx timeout [ 1580.042315][T23727] usb 46-1: device descriptor read/8, error -110 [ 1580.067755][T28475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1580.081226][T28475] 8021q: adding VLAN 0 to HW filter on device team0 [ 1580.087307][T23699] bridge0: port 1(bridge_slave_0) entered blocking state [ 1580.089683][T23699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1580.097744][T23699] bridge0: port 2(bridge_slave_1) entered blocking state [ 1580.100079][T23699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1580.455714][T23727] usb usb46-port1: attempt power cycle [ 1580.737791][T28475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1580.907625][T28475] veth0_vlan: entered promiscuous mode [ 1580.919138][T28475] veth1_vlan: entered promiscuous mode [ 1580.950512][T28475] veth0_macvtap: entered promiscuous mode [ 1580.956522][T28475] veth1_macvtap: entered promiscuous mode [ 1580.965882][T28475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1580.975815][T28475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1580.981417][T14033] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.984614][T14033] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.988002][T14033] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.990924][T14033] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.054734][T23727] usb usb46-port1: unable to enumerate USB device [ 1581.079218][ T9292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.084959][ T9292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.110098][T21920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.114368][T21920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.654199][ T5825] usb 10-1: new high-speed USB device number 86 using dummy_hcd [ 1581.802281][ T5825] usb 10-1: Using ep0 maxpacket: 8 [ 1581.808723][ T5825] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1581.813856][ T5825] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1581.818756][ T5825] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1581.821872][ T5825] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1581.826297][ T5825] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.839110][ T5825] usb 10-1: config 0 descriptor?? [ 1582.122259][T13249] Bluetooth: hci2: command tx timeout [ 1582.263402][ T5825] mcp2221 0003:04D8:00DD.008D: unknown main item tag 0x0 [ 1582.265747][ T5825] mcp2221 0003:04D8:00DD.008D: unknown main item tag 0x0 [ 1582.268072][ T5825] mcp2221 0003:04D8:00DD.008D: unknown main item tag 0x0 [ 1582.270429][ T5825] mcp2221 0003:04D8:00DD.008D: unknown main item tag 0x0 [ 1582.272832][ T5825] mcp2221 0003:04D8:00DD.008D: unknown main item tag 0x0 [ 1582.275575][ T5825] mcp2221 0003:04D8:00DD.008D: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1582.465226][T28582] i2c i2c-2: unsupported multi-msg i2c transaction [ 1582.469173][T22167] usb 10-1: USB disconnect, device number 86 [ 1582.704081][T28595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6176'. [ 1583.101525][T28604] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6178'. [ 1583.608064][T28614] __vm_enough_memory: pid: 28614, comm: syz.3.6181, bytes: 4294963200 not enough memory for the allocation [ 1583.919608][T28602] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1583.922321][T28602] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1586.082225][ T5880] usb 10-1: new high-speed USB device number 87 using dummy_hcd [ 1586.232280][ T5880] usb 10-1: Using ep0 maxpacket: 16 [ 1586.239914][ T5880] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1586.248466][ T5880] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1586.252426][ T5880] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.255600][ T5880] usb 10-1: Product: syz [ 1586.257813][ T5880] usb 10-1: Manufacturer: syz [ 1586.259679][ T5880] usb 10-1: SerialNumber: syz [ 1586.284122][ T5880] usb 10-1: config 0 descriptor?? [ 1586.324774][ T5880] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1586.329991][ T5880] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 1587.318449][ T40] audit: type=1326 audit(2000001276.699:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28657 comm="syz.6.6193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 1587.330982][ T40] audit: type=1326 audit(2000001276.699:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28657 comm="syz.6.6193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 1587.342827][ T40] audit: type=1326 audit(2000001276.699:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28657 comm="syz.6.6193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 1587.369937][ T40] audit: type=1326 audit(2000001276.699:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28657 comm="syz.6.6193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 1587.387995][ T40] audit: type=1326 audit(2000001276.699:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28657 comm="syz.6.6193" exe="/syz-executor" sig=0 arch=40000003 syscall=36 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 1587.410435][ T40] audit: type=1326 audit(2000001276.759:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28657 comm="syz.6.6193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 1587.425942][ T40] audit: type=1326 audit(2000001276.759:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28657 comm="syz.6.6193" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 1587.440798][ T40] audit: type=1326 audit(2000001276.789:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28657 comm="syz.6.6193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 1587.452141][ T40] audit: type=1326 audit(2000001276.789:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28657 comm="syz.6.6193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 1587.484617][ T40] audit: type=1326 audit(2000001276.869:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28657 comm="syz.6.6193" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf701efcc code=0x7ffc0000 [ 1587.752876][T28674] Unknown options in mask b7f2 [ 1587.892229][ T5880] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1587.923136][ T5825] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1587.978135][ T5880] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1587.981365][ T5880] em28xx 10-1:0.0: board has no eeprom [ 1588.042152][ T5880] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1588.045925][ T5880] em28xx 10-1:0.0: dvb set to bulk mode. [ 1588.056387][ T7395] em28xx 10-1:0.0: Binding DVB extension [ 1588.113598][ T7395] em28xx 10-1:0.0: Registering input extension [ 1588.372349][ T5880] usb 10-1: USB disconnect, device number 87 [ 1588.375300][ T5880] em28xx 10-1:0.0: Disconnecting em28xx [ 1588.377195][ T5880] em28xx 10-1:0.0: Closing input extension [ 1588.391799][ T5880] em28xx 10-1:0.0: Freeing device [ 1588.430008][T28685] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6197'. [ 1588.860259][T28692] __vm_enough_memory: pid: 28692, comm: syz.3.6199, bytes: 4294963200 not enough memory for the allocation [ 1590.889836][T28739] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1591.317988][T28747] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.401481][T28747] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.508123][T28747] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.613791][T28747] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.697373][T14029] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.708976][T14029] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.716816][T14029] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.746445][T14029] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1593.740062][T28783] netlink: 'syz.6.6214': attribute type 2 has an invalid length. [ 1593.742910][T28783] netlink: 244 bytes leftover after parsing attributes in process `syz.6.6214'. [ 1593.762260][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 1593.762329][ T40] audit: type=1326 audit(2000001283.059:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28779 comm="syz.6.6214" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701efcc code=0x0 [ 1594.752845][T28796] __vm_enough_memory: pid: 28796, comm: syz.5.6217, bytes: 4294963200 not enough memory for the allocation [ 1595.002432][T23253] usb 10-1: new high-speed USB device number 88 using dummy_hcd [ 1595.153888][T23253] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 1595.156744][T23253] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1595.160181][T23253] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1595.164381][T23253] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1595.167498][T23253] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1595.170367][T23253] usb 10-1: Product: syz [ 1595.171837][T23253] usb 10-1: Manufacturer: syz [ 1595.173613][T23253] usb 10-1: SerialNumber: syz [ 1595.176687][T23253] usb 10-1: config 0 descriptor?? [ 1595.180743][T23253] hub 10-1:0.0: bad descriptor, ignoring hub [ 1595.183037][T23253] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1595.186822][T23253] usb 10-1: selecting invalid altsetting 0 [ 1595.454552][T28573] usb 10-1: USB disconnect, device number 88 [ 1595.712170][ T10] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 1595.863415][ T10] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1595.867139][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1595.870325][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1595.873373][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1595.879169][ T10] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1595.883184][ T10] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1595.885849][ T10] usb 9-1: Product: syz [ 1595.887338][ T10] usb 9-1: Manufacturer: syz [ 1595.891797][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 1595.893935][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 1595.896972][ T10] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1595.899029][ T10] cdc_wdm 9-1:1.0: Unknown control protocol [ 1596.466575][T28818] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1597.556930][T28825] gre0 speed is unknown, defaulting to 1000 [ 1598.427409][T26459] usb 9-1: USB disconnect, device number 84 [ 1598.543546][T28850] __vm_enough_memory: pid: 28850, comm: syz.3.6229, bytes: 4294963200 not enough memory for the allocation [ 1599.186184][T28859] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6232'. [ 1600.230613][T28865] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6236'. [ 1602.855031][T25950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1602.869209][T25950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1602.878382][T25950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1602.883237][T25950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1602.891630][T25950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1602.915066][T13249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1602.919304][T13249] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1602.925194][T13249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1602.938511][T13249] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1602.949547][T13249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1603.090097][T28928] __vm_enough_memory: pid: 28928, comm: syz.6.6251, bytes: 4294963200 not enough memory for the allocation [ 1603.228490][T28916] gre0 speed is unknown, defaulting to 1000 [ 1603.352206][T23253] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 1603.511887][T28916] bridge0: port 1(bridge_slave_0) entered blocking state [ 1603.516125][T23253] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 1603.516191][T28916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1603.520924][T23253] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1603.524441][T23253] usb 11-1: config 0 interface 0 has no altsetting 0 [ 1603.528118][T23253] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1603.531187][T23253] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1603.532573][T28916] bridge_slave_0: entered allmulticast mode [ 1603.533934][T23253] usb 11-1: Product: syz [ 1603.536979][T28916] bridge_slave_0: entered promiscuous mode [ 1603.537289][T23253] usb 11-1: Manufacturer: syz [ 1603.540744][T23253] usb 11-1: SerialNumber: syz [ 1603.542926][T28916] bridge0: port 2(bridge_slave_1) entered blocking state [ 1603.547693][T28916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1603.549963][T23253] usb 11-1: config 0 descriptor?? [ 1603.553391][T28916] bridge_slave_1: entered allmulticast mode [ 1603.555059][T23253] hub 11-1:0.0: bad descriptor, ignoring hub [ 1603.557778][T23253] hub 11-1:0.0: probe with driver hub failed with error -5 [ 1603.561569][T23253] usb 11-1: selecting invalid altsetting 0 [ 1603.565078][T28916] bridge_slave_1: entered promiscuous mode [ 1603.606922][T28916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1603.611867][T28916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1603.632325][T28916] team0: Port device team_slave_0 added [ 1603.635489][T28916] team0: Port device team_slave_1 added [ 1603.650617][T28916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1603.653014][T28916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1603.661160][T28916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1603.665710][T28916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1603.667918][T28916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1603.676293][T28916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1603.699949][T28916] hsr_slave_0: entered promiscuous mode [ 1603.702744][T28916] hsr_slave_1: entered promiscuous mode [ 1603.705408][T28916] debugfs: 'hsr0' already exists in 'hsr' [ 1603.707496][T28916] Cannot create hsr debugfs directory [ 1603.844262][T26459] usb 11-1: USB disconnect, device number 2 [ 1603.914105][T28916] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1603.919046][T28916] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1603.921873][T28916] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1603.926274][T28916] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1603.929100][T28916] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1603.933544][T28916] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1603.936323][T28916] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1603.940221][T28916] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1603.955596][T28916] bridge0: port 2(bridge_slave_1) entered blocking state [ 1603.958563][T28916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1603.961692][T28916] bridge0: port 1(bridge_slave_0) entered blocking state [ 1603.964714][T28916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1603.996126][T28916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1604.012821][T23699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1604.016290][T23699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1604.026280][T28916] 8021q: adding VLAN 0 to HW filter on device team0 [ 1604.034319][T14033] bridge0: port 1(bridge_slave_0) entered blocking state [ 1604.037606][T14033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1604.047346][T23699] bridge0: port 2(bridge_slave_1) entered blocking state [ 1604.050537][T23699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1604.406134][T28916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1604.545717][T28970] netlink: 'syz.6.6255': attribute type 10 has an invalid length. [ 1604.557399][T28970] team0: Port device veth1_to_hsr added [ 1604.563383][T28970] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1604.728032][T28916] veth0_vlan: entered promiscuous mode [ 1604.733949][T28916] veth1_vlan: entered promiscuous mode [ 1604.750658][T28916] veth0_macvtap: entered promiscuous mode [ 1604.755490][T28916] veth1_macvtap: entered promiscuous mode [ 1604.767656][T28916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1604.774713][T28916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1604.780406][T14033] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1604.783573][T14033] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1604.787697][T14033] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1604.790629][T14033] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1604.857448][ T9292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1604.862271][ T9292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1604.879277][T14033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1604.882418][T14033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1605.012426][T25950] Bluetooth: hci0: command tx timeout [ 1605.063666][T28984] FAULT_INJECTION: forcing a failure. [ 1605.063666][T28984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1605.068333][T28984] CPU: 3 UID: 0 PID: 28984 Comm: syz.4.6257 Tainted: G L syzkaller #0 PREEMPT(full) [ 1605.068350][T28984] Tainted: [L]=SOFTLOCKUP [ 1605.068354][T28984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1605.068360][T28984] Call Trace: [ 1605.068364][T28984] [ 1605.068369][T28984] dump_stack_lvl+0x100/0x190 [ 1605.068385][T28984] should_fail_ex.cold+0x5/0xa [ 1605.068399][T28984] _copy_from_iter+0x1f4/0x1690 [ 1605.068412][T28984] ? __asan_memset+0x23/0x50 [ 1605.068428][T28984] ? __pfx__copy_from_iter+0x10/0x10 [ 1605.068463][T28984] ? __pfx___alloc_skb+0x10/0x10 [ 1605.068481][T28984] netlink_sendmsg+0x808/0xda0 [ 1605.068498][T28984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1605.068514][T28984] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1605.068533][T28984] ____sys_sendmsg+0x9e1/0xb70 [ 1605.068546][T28984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1605.068561][T28984] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1605.068586][T28984] ___sys_sendmsg+0x190/0x1e0 [ 1605.068602][T28984] ? __pfx____sys_sendmsg+0x10/0x10 [ 1605.068623][T28984] ? find_held_lock+0x2b/0x80 [ 1605.068645][T28984] __sys_sendmsg+0x170/0x220 [ 1605.068657][T28984] ? __pfx___sys_sendmsg+0x10/0x10 [ 1605.068667][T28984] ? __fget_files+0x21f/0x3d0 [ 1605.068683][T28984] ? ksys_write+0x1ac/0x250 [ 1605.068697][T28984] ? rcu_is_watching+0x12/0xc0 [ 1605.068711][T28984] __do_fast_syscall_32+0xe7/0x950 [ 1605.068727][T28984] ? lockdep_hardirqs_on+0x78/0x100 [ 1605.068741][T28984] do_fast_syscall_32+0x32/0x70 [ 1605.068767][T28984] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1605.068783][T28984] RIP: 0023:0xf703efcc [ 1605.068792][T28984] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1605.068802][T28984] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1605.068813][T28984] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 1605.068820][T28984] RDX: 0000000024040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1605.068828][T28984] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1605.068834][T28984] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1605.068840][T28984] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1605.068853][T28984] [ 1605.241740][T28989] FAULT_INJECTION: forcing a failure. [ 1605.241740][T28989] name failslab, interval 1, probability 0, space 0, times 0 [ 1605.247221][T28989] CPU: 1 UID: 0 PID: 28989 Comm: syz.4.6258 Tainted: G L syzkaller #0 PREEMPT(full) [ 1605.247250][T28989] Tainted: [L]=SOFTLOCKUP [ 1605.247254][T28989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1605.247261][T28989] Call Trace: [ 1605.247266][T28989] [ 1605.247270][T28989] dump_stack_lvl+0x100/0x190 [ 1605.247286][T28989] should_fail_ex.cold+0x5/0xa [ 1605.247300][T28989] should_failslab+0xc2/0x120 [ 1605.247313][T28989] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1605.247331][T28989] ? skb_clone+0x190/0x400 [ 1605.247344][T28989] skb_clone+0x190/0x400 [ 1605.247356][T28989] netlink_deliver_tap+0xaed/0xcc0 [ 1605.247373][T28989] netlink_unicast+0x62b/0x850 [ 1605.247389][T28989] ? __pfx_netlink_unicast+0x10/0x10 [ 1605.247407][T28989] netlink_sendmsg+0x8b0/0xda0 [ 1605.247424][T28989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1605.247440][T28989] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1605.247458][T28989] ____sys_sendmsg+0x9e1/0xb70 [ 1605.247472][T28989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1605.247487][T28989] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1605.247508][T28989] ___sys_sendmsg+0x190/0x1e0 [ 1605.247523][T28989] ? __pfx____sys_sendmsg+0x10/0x10 [ 1605.247545][T28989] ? find_held_lock+0x2b/0x80 [ 1605.247570][T28989] __sys_sendmsg+0x170/0x220 [ 1605.247582][T28989] ? __pfx___sys_sendmsg+0x10/0x10 [ 1605.247592][T28989] ? __fget_files+0x21f/0x3d0 [ 1605.247609][T28989] ? ksys_write+0x1ac/0x250 [ 1605.247622][T28989] ? rcu_is_watching+0x12/0xc0 [ 1605.247636][T28989] __do_fast_syscall_32+0xe7/0x950 [ 1605.247651][T28989] ? lockdep_hardirqs_on+0x78/0x100 [ 1605.247666][T28989] do_fast_syscall_32+0x32/0x70 [ 1605.247680][T28989] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1605.247694][T28989] RIP: 0023:0xf703efcc [ 1605.247703][T28989] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1605.247713][T28989] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1605.247724][T28989] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 1605.247731][T28989] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 1605.247737][T28989] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1605.247743][T28989] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1605.247749][T28989] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1605.247763][T28989] [ 1605.375604][T28990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6259'. [ 1606.358561][T28999] __vm_enough_memory: pid: 28999, comm: syz.4.6262, bytes: 4294963200 not enough memory for the allocation [ 1606.445628][ T9292] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.523789][ T9292] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.593376][ T9292] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.622218][ T5824] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 1606.661685][ T9292] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.777358][ T40] audit: type=1326 audit(2000001296.159:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29000 comm="syz.3.6263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefcc code=0x7ffc0000 [ 1606.786488][ T5824] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 1606.791714][ T40] audit: type=1326 audit(2000001296.159:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29000 comm="syz.3.6263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefcc code=0x7ffc0000 [ 1606.793718][ T5824] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1606.811275][ T5824] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1606.811274][ T40] audit: type=1326 audit(2000001296.159:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29000 comm="syz.3.6263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefcc code=0x7ffc0000 [ 1606.811301][ T40] audit: type=1326 audit(2000001296.159:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29000 comm="syz.3.6263" exe="/syz-executor" sig=0 arch=40000003 syscall=36 compat=1 ip=0xf6feefcc code=0x7ffc0000 [ 1606.819542][ T5824] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1606.844786][ T40] audit: type=1326 audit(2000001296.219:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29000 comm="syz.3.6263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefcc code=0x7ffc0000 [ 1606.853789][ T5824] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1606.872984][ T5824] usb 9-1: Product: syz [ 1606.872984][ T40] audit: type=1326 audit(2000001296.219:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29000 comm="syz.3.6263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefcc code=0x7ffc0000 [ 1606.873012][ T40] audit: type=1326 audit(2000001296.229:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29000 comm="syz.3.6263" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf6feefcc code=0x7ffc0000 [ 1606.874394][ T5824] usb 9-1: Manufacturer: syz [ 1606.874406][ T5824] usb 9-1: SerialNumber: syz [ 1606.881474][ T5824] usb 9-1: config 0 descriptor?? [ 1606.898115][ T40] audit: type=1326 audit(2000001296.229:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29000 comm="syz.3.6263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefcc code=0x7ffc0000 [ 1606.900949][ T5824] hub 9-1:0.0: bad descriptor, ignoring hub [ 1606.908542][ T5824] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1606.913169][ T5824] usb 9-1: selecting invalid altsetting 0 [ 1606.913705][ T9292] bridge_slave_1: left allmulticast mode [ 1606.917471][ T40] audit: type=1326 audit(2000001296.229:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29000 comm="syz.3.6263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefcc code=0x7ffc0000 [ 1606.927500][ T9292] bridge_slave_1: left promiscuous mode [ 1606.930719][ T40] audit: type=1326 audit(2000001296.229:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29000 comm="syz.3.6263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefcc code=0x7ffc0000 [ 1606.936231][ T9292] bridge0: port 2(bridge_slave_1) entered disabled state [ 1606.964661][ T9292] bridge_slave_0: left allmulticast mode [ 1606.971014][ T9292] bridge_slave_0: left promiscuous mode [ 1606.977589][ T9292] bridge0: port 1(bridge_slave_0) entered disabled state [ 1607.182785][ T5824] usb 9-1: USB disconnect, device number 85 [ 1607.226575][T29001] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1607.231135][T29001] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1607.259775][T29001] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1607.412660][ T9292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1607.438683][ T9292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1607.455448][ T9292] bond0 (unregistering): Released all slaves [ 1607.486045][ T9292] bond1 (unregistering): Released all slaves [ 1607.494539][ T9292] bond2 (unregistering): Released all slaves [ 1607.508592][ T5446] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1608.532779][T25950] Bluetooth: hci0: command 0x040f tx timeout [ 1608.534004][ T5446] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1608.574399][T29047] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6272'. [ 1608.647190][T29051] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6273'. [ 1608.706866][ T5446] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1608.766226][T29060] __vm_enough_memory: pid: 29060, comm: syz.3.6275, bytes: 4294963200 not enough memory for the allocation [ 1608.915486][ T9292] hsr_slave_0: left promiscuous mode [ 1608.918493][ T9292] hsr_slave_1: left promiscuous mode [ 1608.920773][ T9292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1608.927951][ T9292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1608.931056][ T9292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1608.937687][ T9292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1608.947871][ T9292] veth1_macvtap: left promiscuous mode [ 1608.950075][ T9292] veth0_macvtap: left promiscuous mode [ 1608.952526][ T9292] veth1_vlan: left promiscuous mode [ 1608.954995][ T9292] veth0_vlan: left promiscuous mode [ 1609.117607][ T9292] team0 (unregistering): Port device team_slave_1 removed [ 1609.130337][T29072] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6276'. [ 1609.137376][ T9292] team0 (unregistering): Port device team_slave_0 removed [ 1609.262348][ T5446] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1609.335630][T29082] FAULT_INJECTION: forcing a failure. [ 1609.335630][T29082] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1609.340680][T29082] CPU: 0 UID: 0 PID: 29082 Comm: syz.4.6279 Tainted: G L syzkaller #0 PREEMPT(full) [ 1609.340697][T29082] Tainted: [L]=SOFTLOCKUP [ 1609.340701][T29082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1609.340707][T29082] Call Trace: [ 1609.340712][T29082] [ 1609.340717][T29082] dump_stack_lvl+0x100/0x190 [ 1609.340733][T29082] should_fail_ex.cold+0x5/0xa [ 1609.340745][T29082] ? prepare_alloc_pages+0x16d/0x5f0 [ 1609.340760][T29082] should_fail_alloc_page+0xeb/0x140 [ 1609.340774][T29082] prepare_alloc_pages+0x1f0/0x5f0 [ 1609.340787][T29082] ? kvm_tdp_mmu_put_root+0x5e/0x380 [ 1609.340806][T29082] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1609.340826][T29082] ? mark_held_locks+0x40/0x70 [ 1609.340837][T29082] ? smp_call_function_many_cond+0x13e3/0x1700 [ 1609.340854][T29082] ? lockdep_hardirqs_on+0x78/0x100 [ 1609.340867][T29082] ? __pfx_flush_tlb_func+0x10/0x10 [ 1609.340879][T29082] ? smp_call_function_many_cond+0x5de/0x1700 [ 1609.340896][T29082] ? __pfx_should_flush_tlb+0x10/0x10 [ 1609.340912][T29082] ? __pfx_flush_tlb_func+0x10/0x10 [ 1609.340923][T29082] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1609.340947][T29082] ? __lock_acquire+0x4a5/0x2630 [ 1609.340959][T29082] ? __lock_acquire+0x4a5/0x2630 [ 1609.340968][T29082] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1609.340985][T29082] ? policy_nodemask+0xed/0x4f0 [ 1609.340999][T29082] alloc_pages_mpol+0x1fb/0x540 [ 1609.341012][T29082] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1609.341025][T29082] ? find_held_lock+0x2b/0x80 [ 1609.341038][T29082] ? rcuwait_wake_up+0xdf/0x290 [ 1609.341053][T29082] ? rcuwait_wake_up+0xdf/0x290 [ 1609.341071][T29082] folio_alloc_mpol_noprof+0x36/0x260 [ 1609.341086][T29082] vma_alloc_folio_noprof+0xed/0x1d0 [ 1609.341101][T29082] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1609.341114][T29082] ? rcu_read_unlock+0x2d/0xb0 [ 1609.341130][T29082] ? rcu_read_unlock+0x2d/0xb0 [ 1609.341149][T29082] do_wp_page+0xd75/0x4350 [ 1609.341167][T29082] ? __pfx_do_wp_page+0x10/0x10 [ 1609.341182][T29082] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1609.341198][T29082] __handle_mm_fault+0x1ab6/0x2a00 [ 1609.341216][T29082] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1609.341229][T29082] ? __pfx___handle_mm_fault+0x10/0x10 [ 1609.341246][T29082] ? pte_offset_map_lock+0x174/0x320 [ 1609.341258][T29082] ? find_held_lock+0x2b/0x80 [ 1609.341276][T29082] ? follow_page_pte+0x4d0/0x13f0 [ 1609.341291][T29082] handle_mm_fault+0x36d/0xa20 [ 1609.341310][T29082] __get_user_pages+0x1178/0x32a0 [ 1609.341327][T29082] ? down_read_killable+0x307/0x4b0 [ 1609.341344][T29082] ? __pfx___get_user_pages+0x10/0x10 [ 1609.341357][T29082] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1609.341373][T29082] get_user_pages_unlocked+0x1cb/0x7d0 [ 1609.341389][T29082] ? __pfx_get_user_pages_unlocked+0x10/0x10 [ 1609.341402][T29082] ? get_user_pages_fast_only+0xae/0xf0 [ 1609.341416][T29082] ? __pfx_get_user_pages_fast_only+0x10/0x10 [ 1609.341430][T29082] ? __pfx___might_resched+0x10/0x10 [ 1609.341445][T29082] hva_to_pfn+0x871/0xd60 [ 1609.341459][T29082] ? __lock_acquire+0x4a5/0x2630 [ 1609.341469][T29082] ? __lock_acquire+0x4a5/0x2630 [ 1609.341478][T29082] ? __pfx_hva_to_pfn+0x10/0x10 [ 1609.341491][T29082] ? __lock_acquire+0x4a5/0x2630 [ 1609.341503][T29082] ? rcu_is_watching+0x12/0xc0 [ 1609.341526][T29082] kvm_follow_pfn+0x291/0x430 [ 1609.341539][T29082] __kvm_faultin_pfn+0x11c/0x1a0 [ 1609.341552][T29082] ? __pfx___kvm_faultin_pfn+0x10/0x10 [ 1609.341564][T29082] ? __pfx_xa_load+0x10/0x10 [ 1609.341581][T29082] ? kvm_tdp_mmu_map+0xb07/0x21c0 [ 1609.341594][T29082] kvm_mmu_faultin_pfn+0xb73/0x2270 [ 1609.341613][T29082] ? __pfx_fast_page_fault+0x10/0x10 [ 1609.341629][T29082] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 1609.341645][T29082] ? __kvm_mmu_topup_memory_cache+0x332/0x5f0 [ 1609.341656][T29082] ? find_held_lock+0x2b/0x80 [ 1609.341669][T29082] ? kvm_tdp_page_fault+0x295/0x3d0 [ 1609.341684][T29082] kvm_tdp_page_fault+0x182/0x3d0 [ 1609.341696][T29082] kvm_mmu_do_page_fault+0x5a4/0x6c0 [ 1609.341709][T29082] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 1609.341719][T29082] ? find_held_lock+0x2b/0x80 [ 1609.341732][T29082] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 1609.341749][T29082] ? kvm_sched_in+0x9a/0xf0 [ 1609.341762][T29082] ? finish_task_switch.isra.0+0x795/0x1010 [ 1609.341778][T29082] kvm_mmu_page_fault+0x1dd/0x1a70 [ 1609.341793][T29082] ? fred_extint+0x20/0x70 [ 1609.341808][T29082] ? rcu_qs+0x2a/0xe0 [ 1609.341820][T29082] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 1609.341835][T29082] ? __vmx_complete_interrupts+0x129/0x570 [ 1609.341849][T29082] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1609.341868][T29082] handle_ept_violation+0x324/0x7b0 [ 1609.341883][T29082] ? __pfx_handle_ept_violation+0x10/0x10 [ 1609.341897][T29082] vmx_handle_exit+0x84c/0x1f30 [ 1609.341913][T29082] vcpu_run+0x34cf/0x5ca0 [ 1609.341933][T29082] ? __pfx_vcpu_run+0x10/0x10 [ 1609.341952][T29082] ? rcu_is_watching+0x12/0xc0 [ 1609.341966][T29082] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 1609.341981][T29082] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 1609.341999][T29082] kvm_vcpu_ioctl+0x730/0x1720 [ 1609.342011][T29082] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1609.342021][T29082] ? tomoyo_path_number_perm+0x188/0x580 [ 1609.342035][T29082] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1609.342046][T29082] ? get_pid_task+0x106/0x250 [ 1609.342065][T29082] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1609.342081][T29082] ? do_vfs_ioctl+0x226/0x13e0 [ 1609.342092][T29082] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1609.342109][T29082] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 1609.342120][T29082] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1609.342131][T29082] ? __fget_files+0x21f/0x3d0 [ 1609.342147][T29082] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1609.342158][T29082] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1609.342171][T29082] __do_fast_syscall_32+0xe7/0x950 [ 1609.342186][T29082] ? lockdep_hardirqs_on+0x78/0x100 [ 1609.342200][T29082] do_fast_syscall_32+0x32/0x70 [ 1609.342215][T29082] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1609.342228][T29082] RIP: 0023:0xf703efcc [ 1609.342238][T29082] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1609.342248][T29082] RSP: 002b:00000000f540c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1609.342260][T29082] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000ae80 [ 1609.342266][T29082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1609.342273][T29082] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1609.342279][T29082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1609.342285][T29082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1609.342298][T29082] [ 1609.962426][T29071] lo speed is unknown, defaulting to 1000 [ 1609.969289][T29071] lo speed is unknown, defaulting to 1000 [ 1609.975975][T29071] lo speed is unknown, defaulting to 1000 [ 1609.979374][T29071] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1609.984188][T29071] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1609.989754][T29071] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1610.031577][T29071] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1610.102009][T29071] lo speed is unknown, defaulting to 1000 [ 1610.105787][T29071] lo speed is unknown, defaulting to 1000 [ 1610.108572][T29071] lo speed is unknown, defaulting to 1000 [ 1610.111140][T29071] lo speed is unknown, defaulting to 1000 [ 1610.117829][T29071] lo speed is unknown, defaulting to 1000 [ 1610.603019][T25950] Bluetooth: hci0: command 0x040f tx timeout [ 1611.455512][T22167] kernel read not supported for file /cpu/0/msr (pid: 22167 comm: kworker/0:3) [ 1612.032408][ T40] kauditd_printk_skb: 176 callbacks suppressed [ 1612.032421][ T40] audit: type=1326 audit(2000001301.409:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29115 comm="syz.4.6289" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703efcc code=0x0 [ 1612.322869][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.682167][T25950] Bluetooth: hci0: command 0x040f tx timeout [ 1612.920193][T29124] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6290'. [ 1613.760408][T29140] __vm_enough_memory: pid: 29140, comm: syz.6.6294, bytes: 4294963200 not enough memory for the allocation [ 1614.072299][T23727] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 1614.762239][T25950] Bluetooth: hci0: command 0x040f tx timeout [ 1614.913705][T23727] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 1614.917235][T23727] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1614.921373][T23727] usb 11-1: config 0 interface 0 has no altsetting 0 [ 1614.930710][T23727] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1614.934763][T23727] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1614.938677][T23727] usb 11-1: Product: syz [ 1614.940226][ T40] audit: type=1326 audit(2000001304.319:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29165 comm="syz.7.6302" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa8fcc code=0x0 [ 1614.942335][T23727] usb 11-1: Manufacturer: syz [ 1614.950043][T23727] usb 11-1: SerialNumber: syz [ 1614.984074][T23727] usb 11-1: config 0 descriptor?? [ 1614.988075][T23727] hub 11-1:0.0: bad descriptor, ignoring hub [ 1614.992039][T23727] hub 11-1:0.0: probe with driver hub failed with error -5 [ 1615.016065][T23727] usb 11-1: selecting invalid altsetting 0 [ 1615.284547][T23253] usb 11-1: USB disconnect, device number 3 [ 1615.467012][T29175] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6304'. [ 1615.529646][T29168] netlink: 'syz.7.6302': attribute type 2 has an invalid length. [ 1615.533307][T29168] netlink: 244 bytes leftover after parsing attributes in process `syz.7.6302'. [ 1615.792816][T29179] input: syz1 as /devices/virtual/input/input125 [ 1615.957422][T29184] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6308'. [ 1616.216910][T29194] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6308'. [ 1616.842360][T25950] Bluetooth: hci0: command 0x040f tx timeout [ 1617.235989][ T40] audit: type=1326 audit(2000001306.619:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29211 comm="syz.3.6313" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6feefcc code=0x0 [ 1617.481528][T29220] __vm_enough_memory: pid: 29220, comm: syz.7.6315, bytes: 4294963200 not enough memory for the allocation [ 1617.732991][ T5839] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 1617.884943][ T5839] usb 12-1: config index 0 descriptor too short (expected 39, got 27) [ 1617.888320][ T5839] usb 12-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1617.892888][ T5839] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1617.898297][ T5839] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1617.902180][ T5839] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1617.905718][ T5839] usb 12-1: Product: syz [ 1617.907287][ T5839] usb 12-1: Manufacturer: syz [ 1617.909022][ T5839] usb 12-1: SerialNumber: syz [ 1617.922919][ T5839] usb 12-1: config 0 descriptor?? [ 1617.926614][ T5839] hub 12-1:0.0: bad descriptor, ignoring hub [ 1617.928649][ T5839] hub 12-1:0.0: probe with driver hub failed with error -5 [ 1617.934452][ T5839] usb 12-1: selecting invalid altsetting 0 [ 1618.045998][T29228] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6319'. [ 1618.139754][T29228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6319'. [ 1618.252767][ T5838] usb 12-1: USB disconnect, device number 2 [ 1618.919315][T29253] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6328'. [ 1619.031187][T29258] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6329'. [ 1619.106133][T29261] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6330'. [ 1619.111075][T29261] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6330'. [ 1619.205917][T29263] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6331'. [ 1619.254729][T29263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6331'. [ 1619.427259][T29273] FAULT_INJECTION: forcing a failure. [ 1619.427259][T29273] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1619.433460][T29273] CPU: 0 UID: 0 PID: 29273 Comm: syz.6.6335 Tainted: G L syzkaller #0 PREEMPT(full) [ 1619.433486][T29273] Tainted: [L]=SOFTLOCKUP [ 1619.433493][T29273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1619.433504][T29273] Call Trace: [ 1619.433511][T29273] [ 1619.433519][T29273] dump_stack_lvl+0x100/0x190 [ 1619.433545][T29273] should_fail_ex.cold+0x5/0xa [ 1619.433564][T29273] ? prepare_alloc_pages+0x16d/0x5f0 [ 1619.433587][T29273] should_fail_alloc_page+0xeb/0x140 [ 1619.433607][T29273] prepare_alloc_pages+0x1f0/0x5f0 [ 1619.433631][T29273] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1619.433669][T29273] ? find_held_lock+0x2b/0x80 [ 1619.433694][T29273] ? is_bpf_text_address+0x8a/0x1a0 [ 1619.433715][T29273] ? is_bpf_text_address+0x8a/0x1a0 [ 1619.433737][T29273] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1619.433766][T29273] ? is_bpf_text_address+0x94/0x1a0 [ 1619.433787][T29273] ? kernel_text_address+0x8d/0x100 [ 1619.433804][T29273] ? __kernel_text_address+0xd/0x30 [ 1619.433833][T29273] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1619.433861][T29273] ? policy_nodemask+0xed/0x4f0 [ 1619.433900][T29273] alloc_pages_mpol+0x1fb/0x540 [ 1619.433919][T29273] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1619.433936][T29273] ? putname+0xb1/0x110 [ 1619.433959][T29273] ? __lock_acquire+0x4a5/0x2630 [ 1619.433976][T29273] folio_alloc_mpol_noprof+0x36/0x260 [ 1619.434003][T29273] vma_alloc_folio_noprof+0xed/0x1d0 [ 1619.434073][T29273] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1619.434101][T29273] do_anonymous_page+0xb46/0x2050 [ 1619.434126][T29273] ? rcu_read_unlock+0x2d/0xb0 [ 1619.434157][T29273] __handle_mm_fault+0x1d2c/0x2a00 [ 1619.434190][T29273] ? reacquire_held_locks+0xce/0x1e0 [ 1619.434206][T29273] ? __pfx___handle_mm_fault+0x10/0x10 [ 1619.434233][T29273] ? lock_vma_under_rcu+0x17c/0x590 [ 1619.434270][T29273] handle_mm_fault+0x36d/0xa20 [ 1619.434297][T29273] do_user_addr_fault+0x5a3/0x12f0 [ 1619.434334][T29273] exc_page_fault+0x6f/0xd0 [ 1619.434358][T29273] asm_exc_page_fault+0x26/0x30 [ 1619.434374][T29273] RIP: 0023:0xf70513ae [ 1619.434387][T29273] Code: 83 c4 10 85 c0 0f 88 a1 07 00 00 83 7c 24 08 1d 0f 8f 3c 09 00 00 8d 85 a0 44 e1 ff 83 ec 0c 50 e8 37 ea fe ff b8 01 00 00 00 0f c1 85 ec b2 15 00 83 c4 10 83 f8 05 7f 09 8b 5c 24 0c 83 fb [ 1619.434402][T29273] RSP: 002b:00000000f540b440 EFLAGS: 00010282 [ 1619.434415][T29273] RAX: 0000000000000001 RBX: 00000000f73e4ff4 RCX: 00000000f722025f [ 1619.434425][T29273] RDX: 0000000000000000 RSI: 0000000080000040 RDI: 00000000f71f9420 [ 1619.434435][T29273] RBP: 00000000f73e4ff4 R08: 0000000000000000 R09: 0000000000000000 [ 1619.434444][T29273] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1619.434454][T29273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1619.434477][T29273] [ 1619.434625][T29273] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1619.673552][T29280] siw: device registration error -23 [ 1619.743754][T29280] program syz.3.6334 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1619.812286][T23727] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 1619.932648][T26459] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 1619.972344][T23727] usb 11-1: Using ep0 maxpacket: 16 [ 1619.976695][T23727] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1619.980745][T23727] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1619.984668][T23727] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1619.988593][T23727] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1619.991814][T23727] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1619.997515][T23727] usb 11-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1620.000578][T23727] usb 11-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1620.003391][T23727] usb 11-1: Manufacturer: syz [ 1620.011174][T23727] usb 11-1: config 0 descriptor?? [ 1620.085027][T26459] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1620.089559][T26459] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1620.094643][T26459] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1620.097926][T26459] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.102980][T26459] usb 9-1: config 0 descriptor?? [ 1620.107141][T26459] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1620.292154][T23727] rc_core: IR keymap rc-hauppauge not found [ 1620.294280][T23727] Registered IR keymap rc-empty [ 1620.565777][T23727] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 1620.582225][T23727] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 1620.603044][T23727] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0 [ 1620.608648][T23727] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0/input126 [ 1620.618883][T23727] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 1620.632196][T23727] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 1620.654312][T23727] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 1620.672327][T23727] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 1620.692234][T23727] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 1620.712160][T23727] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 1620.732198][T23727] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 1620.752314][T23727] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 1620.772304][T23727] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 1620.792316][T23727] mceusb 11-1:0.0: Error: mce write submit urb error = -90 [ 1620.814559][T23727] mceusb 11-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1620.818553][T23727] mceusb 11-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1620.827578][T23727] usb 11-1: USB disconnect, device number 4 [ 1621.039620][T29317] syzkaller0: entered promiscuous mode [ 1621.042138][T29317] syzkaller0: entered allmulticast mode [ 1621.402280][ T10] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 1621.562334][ T10] usb 12-1: Using ep0 maxpacket: 16 [ 1621.565756][ T10] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.569515][ T10] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1621.573652][ T10] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1621.576969][ T10] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1621.580261][ T10] usb 12-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1621.585758][ T10] usb 12-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1621.589072][ T10] usb 12-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1621.591933][ T10] usb 12-1: Manufacturer: syz [ 1621.595190][ T10] usb 12-1: config 0 descriptor?? [ 1621.776889][T29333] netlink: 'syz.3.6346': attribute type 15 has an invalid length. [ 1621.779959][T29333] netlink: 666 bytes leftover after parsing attributes in process `syz.3.6346'. [ 1621.796674][T29333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1621.807494][T29333] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1621.852184][ T10] rc_core: IR keymap rc-hauppauge not found [ 1621.854621][ T10] Registered IR keymap rc-empty [ 1621.857443][ T10] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 1621.866233][T29335] binder: 29332:29335 ioctl c0306201 80000540 returned -22 [ 1621.872355][ T10] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 1621.879364][T29335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1621.892973][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0 [ 1621.899137][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0/input127 [ 1621.905466][ T10] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 1621.922147][ T10] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 1621.942171][ T10] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 1621.962189][ T10] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 1621.982187][ T10] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 1622.002537][ T10] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 1622.022406][ T10] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 1622.042365][ T10] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 1622.062389][ T10] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 1622.083332][ T10] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 1622.104846][ T10] mceusb 12-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1622.108854][ T10] mceusb 12-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1622.115992][ T10] usb 12-1: USB disconnect, device number 3 [ 1622.228307][T29343] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6349'. [ 1622.373431][T29347] siw: device registration error -23 [ 1622.737305][T26459] usb 9-1: USB disconnect, device number 86 [ 1622.829386][T29358] syzkaller0: entered promiscuous mode [ 1622.836042][T29358] syzkaller0: entered allmulticast mode [ 1623.323905][T29365] siw: device registration error -23 [ 1624.022585][T29371] siw: device registration error -23 [ 1625.327042][T29383] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6358'. [ 1625.381473][T29385] rdma_rxe: rxe_newlink: failed to add veth0_virt_wifi [ 1625.748623][T29394] FAULT_INJECTION: forcing a failure. [ 1625.748623][T29394] name failslab, interval 1, probability 0, space 0, times 0 [ 1625.756334][T29394] CPU: 3 UID: 0 PID: 29394 Comm: syz.7.6362 Tainted: G L syzkaller #0 PREEMPT(full) [ 1625.756379][T29394] Tainted: [L]=SOFTLOCKUP [ 1625.756386][T29394] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1625.756395][T29394] Call Trace: [ 1625.756401][T29394] [ 1625.756410][T29394] dump_stack_lvl+0x100/0x190 [ 1625.756436][T29394] should_fail_ex.cold+0x5/0xa [ 1625.756458][T29394] ? tomoyo_encode2+0xfb/0x3c0 [ 1625.756478][T29394] should_failslab+0xc2/0x120 [ 1625.756499][T29394] __kmalloc_noprof+0xe0/0x850 [ 1625.756525][T29394] ? d_absolute_path+0x136/0x1b0 [ 1625.756547][T29394] tomoyo_encode2+0xfb/0x3c0 [ 1625.756570][T29394] tomoyo_encode+0x29/0x50 [ 1625.756591][T29394] tomoyo_realpath_from_path+0x18c/0x690 [ 1625.756615][T29394] tomoyo_path_number_perm+0x23c/0x580 [ 1625.756631][T29394] ? tomoyo_path_number_perm+0x22e/0x580 [ 1625.756652][T29394] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1625.756672][T29394] ? get_pid_task+0x106/0x250 [ 1625.756719][T29394] ? find_held_lock+0x2b/0x80 [ 1625.756758][T29394] ? __fget_files+0x215/0x3d0 [ 1625.756777][T29394] ? hook_file_ioctl_common+0x149/0x410 [ 1625.756793][T29394] ? __fget_files+0x215/0x3d0 [ 1625.756818][T29394] ? __fget_files+0x21f/0x3d0 [ 1625.756842][T29394] security_file_ioctl_compat+0xd3/0x230 [ 1625.756864][T29394] __ia32_compat_sys_ioctl+0xc2/0x360 [ 1625.756886][T29394] __do_fast_syscall_32+0xe7/0x950 [ 1625.756911][T29394] ? lockdep_hardirqs_on+0x78/0x100 [ 1625.756934][T29394] do_fast_syscall_32+0x32/0x70 [ 1625.756953][T29394] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1625.756970][T29394] RIP: 0023:0xf7fa8fcc [ 1625.756982][T29394] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1625.756995][T29394] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1625.757009][T29394] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000227d [ 1625.757018][T29394] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1625.757026][T29394] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1625.757034][T29394] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1625.757041][T29394] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1625.757059][T29394] [ 1625.758521][T29394] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1626.056929][T29400] fuse: Unknown parameter 'f’' [ 1626.156306][T29401] siw: device registration error -23 [ 1626.696589][T29416] comedi comedi1: pcmda12: I/O port conflict (0x100,16) [ 1627.143749][T29429] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6373'. [ 1627.556624][T29442] 9pnet_virtio: no channels available for device syz [ 1627.737498][T29444] __vm_enough_memory: pid: 29444, comm: syz.4.6376, bytes: 4294963200 not enough memory for the allocation [ 1628.022875][T28574] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 1628.207615][T28574] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 1628.211946][T28574] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1628.218943][T28574] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1628.230569][T28574] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1628.234194][T28574] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1628.239632][T28574] usb 9-1: Product: syz [ 1628.243375][T28574] usb 9-1: Manufacturer: syz [ 1628.246917][T28574] usb 9-1: SerialNumber: syz [ 1628.271170][T28574] usb 9-1: config 0 descriptor?? [ 1628.290336][T28574] hub 9-1:0.0: bad descriptor, ignoring hub [ 1628.296161][T28574] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1628.322784][T28574] usb 9-1: selecting invalid altsetting 0 [ 1628.583415][T28574] usb 9-1: USB disconnect, device number 87 [ 1628.870647][T29461] FAULT_INJECTION: forcing a failure. [ 1628.870647][T29461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1628.875179][T29461] CPU: 0 UID: 0 PID: 29461 Comm: syz.6.6381 Tainted: G L syzkaller #0 PREEMPT(full) [ 1628.875197][T29461] Tainted: [L]=SOFTLOCKUP [ 1628.875201][T29461] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1628.875207][T29461] Call Trace: [ 1628.875211][T29461] [ 1628.875216][T29461] dump_stack_lvl+0x100/0x190 [ 1628.875232][T29461] should_fail_ex.cold+0x5/0xa [ 1628.875246][T29461] _copy_to_user+0x32/0xd0 [ 1628.875258][T29461] simple_read_from_buffer+0xcb/0x170 [ 1628.875273][T29461] proc_fail_nth_read+0x1af/0x230 [ 1628.875291][T29461] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1628.875308][T29461] ? rw_verify_area+0xce/0x6d0 [ 1628.875319][T29461] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1628.875336][T29461] vfs_read+0x1e4/0xb30 [ 1628.875349][T29461] ? __pfx_vfs_read+0x10/0x10 [ 1628.875360][T29461] ? find_held_lock+0x2b/0x80 [ 1628.875375][T29461] ? __fget_files+0x215/0x3d0 [ 1628.875389][T29461] ? __fget_files+0x21f/0x3d0 [ 1628.875405][T29461] ksys_read+0x12a/0x250 [ 1628.875417][T29461] ? __pfx_ksys_read+0x10/0x10 [ 1628.875429][T29461] ? rcu_is_watching+0x12/0xc0 [ 1628.875442][T29461] ? rcu_is_watching+0x12/0xc0 [ 1628.875456][T29461] do_int80_emulation+0x141/0x700 [ 1628.875473][T29461] asm_int80_emulation+0x1a/0x20 [ 1628.875484][T29461] RIP: 0023:0xf715616b [ 1628.875493][T29461] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1628.875503][T29461] RSP: 002b:00000000f53cb4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1628.875519][T29461] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f53cb5d0 [ 1628.875526][T29461] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1628.875531][T29461] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1628.875537][T29461] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1628.875543][T29461] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1628.875557][T29461] [ 1629.014600][T29462] siw: device registration error -23 [ 1630.154415][T29469] infiniband syv1: set active [ 1630.156341][T29469] infiniband syv1: added veth0_virt_wifi [ 1630.225015][T29469] smbdirect: ib_dev[syv1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1630.230053][T29469] smbdirect: ib_dev[syv1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1630.236337][T29469] smbdirect: ib_dev[syv1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1630.285808][T29469] RDS/IB: syv1: added [ 1630.291223][T29469] smc: adding ib device syv1 with port count 1 [ 1630.301125][T29469] smc: ib device syv1 port 1 has no pnetid [ 1630.894984][T29485] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1631.108467][T29496] netlink: 'syz.4.6392': attribute type 15 has an invalid length. [ 1631.356461][T29500] siw: device registration error -23 [ 1633.470926][T29515] siw: device registration error -23 [ 1634.655998][T29531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6402'. [ 1634.821445][T29533] new mount options do not match the existing superblock, will be ignored [ 1635.233124][T29540] siw: device registration error -23 [ 1636.377968][T29558] FAULT_INJECTION: forcing a failure. [ 1636.377968][T29558] name failslab, interval 1, probability 0, space 0, times 0 [ 1636.389320][T29558] CPU: 3 UID: 0 PID: 29558 Comm: syz.6.6411 Tainted: G L syzkaller #0 PREEMPT(full) [ 1636.389349][T29558] Tainted: [L]=SOFTLOCKUP [ 1636.389355][T29558] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1636.389364][T29558] Call Trace: [ 1636.389370][T29558] [ 1636.389383][T29558] dump_stack_lvl+0x100/0x190 [ 1636.389407][T29558] should_fail_ex.cold+0x5/0xa [ 1636.389427][T29558] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1636.389447][T29558] should_failslab+0xc2/0x120 [ 1636.389466][T29558] __kmalloc_noprof+0xe0/0x850 [ 1636.389489][T29558] ? kfree+0x1dd/0x6c0 [ 1636.389527][T29558] tomoyo_realpath_from_path+0xb6/0x690 [ 1636.389554][T29558] tomoyo_path_number_perm+0x23c/0x580 [ 1636.389569][T29558] ? tomoyo_path_number_perm+0x22e/0x580 [ 1636.389587][T29558] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1636.389604][T29558] ? get_pid_task+0x106/0x250 [ 1636.389647][T29558] ? find_held_lock+0x2b/0x80 [ 1636.389667][T29558] ? __fget_files+0x215/0x3d0 [ 1636.389684][T29558] ? hook_file_ioctl_common+0x149/0x410 [ 1636.389700][T29558] ? __fget_files+0x215/0x3d0 [ 1636.389721][T29558] ? __fget_files+0x21f/0x3d0 [ 1636.389743][T29558] security_file_ioctl_compat+0xd3/0x230 [ 1636.389762][T29558] __ia32_compat_sys_ioctl+0xc2/0x360 [ 1636.389782][T29558] __do_fast_syscall_32+0xe7/0x950 [ 1636.389802][T29558] ? lockdep_hardirqs_on+0x78/0x100 [ 1636.389823][T29558] do_fast_syscall_32+0x32/0x70 [ 1636.389844][T29558] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1636.389863][T29558] RIP: 0023:0xf701efcc [ 1636.389876][T29558] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1636.389891][T29558] RSP: 002b:00000000f53ec50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1636.389908][T29558] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 1636.389918][T29558] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1636.389927][T29558] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1636.389935][T29558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1636.389944][T29558] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1636.389965][T29558] [ 1636.389990][T29558] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1637.185044][T29561] netlink: 'syz.3.6406': attribute type 10 has an invalid length. [ 1637.473308][T29570] siw: device registration error -23 [ 1638.350610][T29574] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6420'. [ 1639.306028][T29592] __vm_enough_memory: pid: 29592, comm: syz.7.6419, bytes: 4294963200 not enough memory for the allocation [ 1639.552189][T28573] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 1639.734015][T28573] usb 12-1: config index 0 descriptor too short (expected 39, got 27) [ 1639.737427][T28573] usb 12-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1639.740889][T28573] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1639.745527][T28573] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1639.749127][T28573] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1639.752004][T28573] usb 12-1: Product: syz [ 1639.753775][T28573] usb 12-1: Manufacturer: syz [ 1639.756148][T28573] usb 12-1: SerialNumber: syz [ 1639.759849][T28573] usb 12-1: config 0 descriptor?? [ 1639.764011][T28573] hub 12-1:0.0: bad descriptor, ignoring hub [ 1639.766751][T28573] hub 12-1:0.0: probe with driver hub failed with error -5 [ 1639.771823][T28573] usb 12-1: selecting invalid altsetting 0 [ 1639.947867][T29598] __vm_enough_memory: pid: 29598, comm: syz.4.6422, bytes: 4294963200 not enough memory for the allocation [ 1640.066204][ T9] usb 12-1: USB disconnect, device number 4 [ 1640.192403][ T10] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 1640.208443][T29603] siw: device registration error -23 [ 1640.344554][ T10] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 1640.347289][ T10] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1640.350956][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1640.356577][ T10] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1640.360043][ T10] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1640.363457][ T10] usb 9-1: Product: syz [ 1640.365261][ T10] usb 9-1: Manufacturer: syz [ 1640.367224][ T10] usb 9-1: SerialNumber: syz [ 1640.370330][ T10] usb 9-1: config 0 descriptor?? [ 1640.374549][ T10] hub 9-1:0.0: bad descriptor, ignoring hub [ 1640.376585][ T10] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1640.380641][ T10] usb 9-1: selecting invalid altsetting 0 [ 1640.646608][ T10] usb 9-1: USB disconnect, device number 88 [ 1642.172825][T29622] netlink: 'syz.7.6424': attribute type 10 has an invalid length. [ 1642.278238][T29644] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6433'. [ 1642.594410][T29654] FAULT_INJECTION: forcing a failure. [ 1642.594410][T29654] name failslab, interval 1, probability 0, space 0, times 0 [ 1642.598755][T29654] CPU: 3 UID: 0 PID: 29654 Comm: syz.7.6436 Tainted: G L syzkaller #0 PREEMPT(full) [ 1642.598772][T29654] Tainted: [L]=SOFTLOCKUP [ 1642.598776][T29654] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1642.598782][T29654] Call Trace: [ 1642.598787][T29654] [ 1642.598792][T29654] dump_stack_lvl+0x100/0x190 [ 1642.598810][T29654] should_fail_ex.cold+0x5/0xa [ 1642.598825][T29654] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1642.598839][T29654] should_failslab+0xc2/0x120 [ 1642.598854][T29654] __kmalloc_noprof+0xe0/0x850 [ 1642.598870][T29654] ? kfree+0x1dd/0x6c0 [ 1642.598886][T29654] tomoyo_realpath_from_path+0xb6/0x690 [ 1642.598903][T29654] tomoyo_path_number_perm+0x23c/0x580 [ 1642.598914][T29654] ? tomoyo_path_number_perm+0x22e/0x580 [ 1642.598925][T29654] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1642.598937][T29654] ? get_pid_task+0x106/0x250 [ 1642.598965][T29654] ? find_held_lock+0x2b/0x80 [ 1642.598979][T29654] ? __fget_files+0x215/0x3d0 [ 1642.598990][T29654] ? hook_file_ioctl_common+0x149/0x410 [ 1642.599003][T29654] ? __fget_files+0x215/0x3d0 [ 1642.599018][T29654] ? __fget_files+0x21f/0x3d0 [ 1642.599032][T29654] security_file_ioctl_compat+0xd3/0x230 [ 1642.599046][T29654] __ia32_compat_sys_ioctl+0xc2/0x360 [ 1642.599063][T29654] __do_fast_syscall_32+0xe7/0x950 [ 1642.599079][T29654] ? lockdep_hardirqs_on+0x78/0x100 [ 1642.599094][T29654] do_fast_syscall_32+0x32/0x70 [ 1642.599109][T29654] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1642.599123][T29654] RIP: 0023:0xf7fa8fcc [ 1642.599132][T29654] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1642.599143][T29654] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1642.599154][T29654] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040045701 [ 1642.599160][T29654] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1642.599177][T29654] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1642.599185][T29654] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1642.599191][T29654] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1642.599205][T29654] [ 1642.599238][T29654] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1643.169482][T29670] comedi comedi1: pcmda12: I/O port conflict (0x100,16) [ 1644.093397][T29688] ceph: No mds server is up or the cluster is laggy [ 1644.128999][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 1644.139723][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 1644.801199][T29702] netlink: 'syz.7.6450': attribute type 1 has an invalid length. [ 1644.803894][ T12] Bluetooth: hci3: Frame reassembly failed (-84) [ 1644.806318][T29702] netlink: 224 bytes leftover after parsing attributes in process `syz.7.6450'. [ 1645.518521][T29716] Invalid option length (1048307) for dns_resolver key [ 1645.631799][T29719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6456'. [ 1645.796127][T29723] comedi comedi1: pcmda12: I/O port conflict (0x100,16) [ 1646.502165][ T9] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 1646.652144][ T9] usb 11-1: Using ep0 maxpacket: 16 [ 1646.655424][ T9] usb 11-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1646.658879][ T9] usb 11-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1646.664842][ T9] usb 11-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1646.669892][ T9] usb 11-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1646.676769][ T9] usb 11-1: config 0 interface 0 has no altsetting 0 [ 1646.682228][ T9] usb 11-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1646.686861][ T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.690656][ T9] usb 11-1: Product: syz [ 1646.692887][ T9] usb 11-1: Manufacturer: syz [ 1646.695112][ T9] usb 11-1: SerialNumber: syz [ 1646.699595][ T9] usb 11-1: config 0 descriptor?? [ 1646.703104][T29725] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1646.842177][T25950] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1646.842193][T13249] Bluetooth: hci3: command 0x1003 tx timeout [ 1646.911668][T29725] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1646.916626][ T9] input: syz syz as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input128 [ 1647.065354][T29737] new mount options do not match the existing superblock, will be ignored [ 1647.200735][T28574] usb 11-1: USB disconnect, device number 5 [ 1647.355741][T29742] new mount options do not match the existing superblock, will be ignored [ 1648.255308][T29777] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.6472'. [ 1648.259325][T29777] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.6472'. [ 1648.472145][ T5839] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 1648.644709][ T5839] usb 11-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1648.650117][ T5839] usb 11-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1648.656146][ T5839] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1648.660239][ T5839] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.667673][ T5839] usb 11-1: config 0 descriptor?? [ 1648.678403][ T5839] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 1648.689069][T29787] FAULT_INJECTION: forcing a failure. [ 1648.689069][T29787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1648.695574][T29787] CPU: 2 UID: 0 PID: 29787 Comm: syz.4.6476 Tainted: G L syzkaller #0 PREEMPT(full) [ 1648.695591][T29787] Tainted: [L]=SOFTLOCKUP [ 1648.695595][T29787] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1648.695602][T29787] Call Trace: [ 1648.695606][T29787] [ 1648.695610][T29787] dump_stack_lvl+0x100/0x190 [ 1648.695626][T29787] should_fail_ex.cold+0x5/0xa [ 1648.695641][T29787] _copy_from_user+0x2e/0xd0 [ 1648.695659][T29787] get_compat_msghdr+0xb3/0x4b0 [ 1648.695674][T29787] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1648.695691][T29787] ___sys_sendmsg+0x1b6/0x1e0 [ 1648.695707][T29787] ? __pfx____sys_sendmsg+0x10/0x10 [ 1648.695727][T29787] ? find_held_lock+0x2b/0x80 [ 1648.695750][T29787] __sys_sendmsg+0x170/0x220 [ 1648.695761][T29787] ? __pfx___sys_sendmsg+0x10/0x10 [ 1648.695771][T29787] ? __fget_files+0x21f/0x3d0 [ 1648.695788][T29787] ? ksys_write+0x1ac/0x250 [ 1648.695826][T29787] ? rcu_is_watching+0x12/0xc0 [ 1648.695848][T29787] __do_fast_syscall_32+0xe7/0x950 [ 1648.695878][T29787] ? lockdep_hardirqs_on+0x78/0x100 [ 1648.695892][T29787] do_fast_syscall_32+0x32/0x70 [ 1648.695907][T29787] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1648.695921][T29787] RIP: 0023:0xf703efcc [ 1648.695930][T29787] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1648.695940][T29787] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1648.695952][T29787] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 1648.695959][T29787] RDX: 0000000004000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 1648.695965][T29787] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1648.695971][T29787] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1648.695977][T29787] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1648.695990][T29787] [ 1648.931419][T29793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6479'. [ 1649.138862][T29807] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6482'. [ 1649.359208][T29817] program syz.3.6483 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1650.984360][T29838] syzkaller0: entered promiscuous mode [ 1650.990471][T29838] syzkaller0: entered allmulticast mode [ 1651.003483][T29838] tipc: Started in network mode [ 1651.009110][T29838] tipc: Node identity 46272da8f5d6, cluster identity 4711 [ 1651.013623][T29838] tipc: Enabled bearer , priority 0 [ 1651.048152][T29837] tipc: Resetting bearer [ 1651.070822][T29837] tipc: Disabling bearer [ 1651.204405][ T5880] usb 11-1: USB disconnect, device number 6 [ 1652.338990][ T226] Bluetooth: hci3: Frame reassembly failed (-84) [ 1652.340366][T29877] netlink: 'syz.6.6498': attribute type 1 has an invalid length. [ 1652.342211][ T226] Bluetooth: hci3: Frame reassembly failed (-84) [ 1652.345593][T29877] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6498'. [ 1653.082639][T28574] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 1653.234114][T28574] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1653.238582][T28574] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1653.244190][T28574] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1653.248179][T28574] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.255188][T28574] usb 9-1: config 0 descriptor?? [ 1653.261110][T28574] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1654.362170][T13249] Bluetooth: hci3: command 0x1003 tx timeout [ 1654.362660][T25950] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1655.526311][T29924] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 1655.530072][T29924] overlayfs: missing 'lowerdir' [ 1655.711780][T29924] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1655.906077][T23253] usb 9-1: USB disconnect, device number 89 [ 1655.937915][T29937] gre0 speed is unknown, defaulting to 1000 [ 1656.378688][T29937] lo speed is unknown, defaulting to 1000 [ 1656.590660][T29942] random: crng reseeded on system resumption [ 1657.028283][T29939] program syz.4.6514 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1657.173380][T29948] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6516'. [ 1658.353294][ T5839] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 1658.355872][ T5839] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 1658.359166][ T5839] hid-generic 0000:0000:0000.008E: hidraw1: HID v0.00 Device [syz0] on syz0 [ 1658.467551][T29975] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6524'. [ 1658.569707][T29974] fido_id[29974]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1658.777006][T29988] /dev/sr0: Can't open blockdev [ 1658.867704][T29996] Unsupported ieee802154 address type: 0 [ 1658.880132][T29998] loop4: detected capacity change from 0 to 7 [ 1659.003091][T28100] buffer_io_error: 25 callbacks suppressed [ 1659.003106][T28100] Buffer I/O error on dev loop4, logical block 0, async page read [ 1659.012597][T28100] Buffer I/O error on dev loop4, logical block 0, async page read [ 1659.022620][T28100] Buffer I/O error on dev loop4, logical block 0, async page read [ 1659.028515][T28100] Buffer I/O error on dev loop4, logical block 0, async page read [ 1659.034688][T28100] Buffer I/O error on dev loop4, logical block 0, async page read [ 1659.217795][T28100] Buffer I/O error on dev loop4, logical block 0, async page read [ 1659.231345][T28100] Buffer I/O error on dev loop4, logical block 0, async page read [ 1659.248591][T28100] Buffer I/O error on dev loop4, logical block 0, async page read [ 1659.388940][T28100] Buffer I/O error on dev loop4, logical block 0, async page read [ 1659.475568][T28100] Buffer I/O error on dev loop4, logical block 0, async page read [ 1660.022660][T30023] netlink: 'syz.7.6538': attribute type 10 has an invalid length. [ 1660.031979][T30023] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1660.037621][T30023] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1660.065163][T30023] netlink: 14 bytes leftover after parsing attributes in process `syz.7.6538'. [ 1660.071720][T30023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1660.078002][T30023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1660.084253][T30023] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1660.089575][T30023] bond0 (unregistering): Released all slaves [ 1660.460910][T30034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6539'. [ 1661.159266][T30046] bridge0: port 2(bridge_slave_1) entered disabled state [ 1661.162366][T30046] bridge0: port 1(bridge_slave_0) entered disabled state [ 1661.200883][T30046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1661.207834][T30046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1661.248687][ T9292] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.254800][ T9292] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.261362][ T9292] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.269754][ T9292] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.320303][T30051] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6542'. [ 1661.336798][T30054] __vm_enough_memory: pid: 30054, comm: syz.4.6543, bytes: 4294963200 not enough memory for the allocation [ 1661.372781][ T5446] veth0_macvtap: left promiscuous mode [ 1661.592285][T28574] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 1661.777476][T28574] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 1661.782639][T28574] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1661.792345][T28574] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1661.801508][T28574] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1661.804109][T30064] netlink: 'syz.6.6544': attribute type 3 has an invalid length. [ 1661.805319][T28574] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1661.810111][T28574] usb 9-1: Product: syz [ 1661.811487][T28574] usb 9-1: Manufacturer: syz [ 1661.816102][T28574] usb 9-1: SerialNumber: syz [ 1661.819175][T28574] usb 9-1: config 0 descriptor?? [ 1661.822039][T28574] hub 9-1:0.0: bad descriptor, ignoring hub [ 1661.824108][T28574] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1661.827789][T28574] usb 9-1: selecting invalid altsetting 0 [ 1662.124777][ T9] usb 9-1: USB disconnect, device number 90 [ 1662.652053][T30081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6549'. [ 1662.758036][T30078] Bluetooth: MGMT ver 1.23 [ 1662.765495][T30078] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 1663.316246][T30099] fuse: Bad value for 'user_id' [ 1663.316289][T30099] fuse: Bad value for 'user_id' [ 1663.439407][T30102] loop6: detected capacity change from 0 to 2640 [ 1663.441001][T30102] ldm_validate_partition_table(): Disk read failed. [ 1663.441277][T30102] Dev loop6: unable to read RDB block 0 [ 1663.441577][T30102] loop6: unable to read partition table [ 1663.441716][T30102] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1663.614011][T30110] __vm_enough_memory: pid: 30110, comm: syz.7.6557, bytes: 4294963200 not enough memory for the allocation [ 1663.872143][ T5824] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 1664.034365][ T5824] usb 12-1: config index 0 descriptor too short (expected 39, got 27) [ 1664.037465][ T5824] usb 12-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1664.041516][ T5824] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1664.054317][ T5824] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1664.058364][ T5824] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1664.062894][ T5824] usb 12-1: Product: syz [ 1664.065015][ T5824] usb 12-1: Manufacturer: syz [ 1664.067250][ T5824] usb 12-1: SerialNumber: syz [ 1664.077705][ T5824] usb 12-1: config 0 descriptor?? [ 1664.085615][ T5824] hub 12-1:0.0: bad descriptor, ignoring hub [ 1664.088492][ T5824] hub 12-1:0.0: probe with driver hub failed with error -5 [ 1664.098733][ T5824] usb 12-1: selecting invalid altsetting 0 [ 1664.372870][T28574] usb 12-1: USB disconnect, device number 5 [ 1665.986741][T30150] __vm_enough_memory: pid: 30150, comm: syz.4.6569, bytes: 4294963200 not enough memory for the allocation [ 1666.062417][T26459] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 1666.212154][T26459] usb 12-1: Using ep0 maxpacket: 16 [ 1666.215906][T26459] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1666.219597][T26459] usb 12-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1666.222934][T26459] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.227614][T26459] usb 12-1: config 0 descriptor?? [ 1666.232228][T22167] usb 9-1: new high-speed USB device number 91 using dummy_hcd [ 1666.232524][T26459] input: bcm5974 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/input/input129 [ 1666.404106][T22167] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 1666.406975][T22167] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1666.410336][T22167] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1666.414784][T22167] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1666.417772][T22167] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1666.420449][T22167] usb 9-1: Product: syz [ 1666.421900][T22167] usb 9-1: Manufacturer: syz [ 1666.423630][T22167] usb 9-1: SerialNumber: syz [ 1666.426853][T22167] usb 9-1: config 0 descriptor?? [ 1666.429751][T22167] hub 9-1:0.0: bad descriptor, ignoring hub [ 1666.431883][T22167] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1666.436016][T22167] usb 9-1: selecting invalid altsetting 0 [ 1666.484865][ T5880] usb 12-1: USB disconnect, device number 6 [ 1666.487274][ T5129] bcm5974 12-1:0.0: could not read from device [ 1666.495159][T28100] bcm5974 12-1:0.0: could not read from device [ 1666.722711][T23727] usb 9-1: USB disconnect, device number 91 [ 1666.846527][T30157] syzkaller0: entered promiscuous mode [ 1666.848725][T30157] syzkaller0: entered allmulticast mode [ 1668.133368][T30175] FAULT_INJECTION: forcing a failure. [ 1668.133368][T30175] name failslab, interval 1, probability 0, space 0, times 0 [ 1668.137918][T30175] CPU: 3 UID: 0 PID: 30175 Comm: syz.4.6577 Tainted: G L syzkaller #0 PREEMPT(full) [ 1668.137937][T30175] Tainted: [L]=SOFTLOCKUP [ 1668.137941][T30175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1668.137947][T30175] Call Trace: [ 1668.137952][T30175] [ 1668.137956][T30175] dump_stack_lvl+0x100/0x190 [ 1668.137975][T30175] should_fail_ex.cold+0x5/0xa [ 1668.137990][T30175] should_failslab+0xc2/0x120 [ 1668.138003][T30175] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1668.138021][T30175] ? __alloc_skb+0x140/0x710 [ 1668.138034][T30175] __alloc_skb+0x140/0x710 [ 1668.138043][T30175] ? __alloc_skb+0x5b7/0x710 [ 1668.138053][T30175] ? __pfx___alloc_skb+0x10/0x10 [ 1668.138063][T30175] ? if_nlmsg_size+0x5f6/0xd20 [ 1668.138078][T30175] rtmsg_ifinfo_build_skb+0x81/0x260 [ 1668.138094][T30175] rtnetlink_event+0x137/0x1f0 [ 1668.138108][T30175] notifier_call_chain+0x99/0x400 [ 1668.138128][T30175] call_netdevice_notifiers_info+0xbe/0x110 [ 1668.138143][T30175] netif_set_mtu_ext+0x48b/0x7b0 [ 1668.138155][T30175] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 1668.138167][T30175] ? __pfx_validate_linkmsg+0x10/0x10 [ 1668.138193][T30175] ? netif_rx_mode_clean+0x17b/0x1e0 [ 1668.138208][T30175] ? __local_bh_enable_ip+0x9e/0x120 [ 1668.138222][T30175] ? netif_rx_mode_clean+0x17b/0x1e0 [ 1668.138240][T30175] do_setlink.isra.0+0x7f9/0x3e60 [ 1668.138256][T30175] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 1668.138269][T30175] ? __lock_acquire+0x4a5/0x2630 [ 1668.138280][T30175] ? stack_depot_save_flags+0x27/0x9d0 [ 1668.138293][T30175] ? __refill_objects_node+0x2a7/0x8e0 [ 1668.138312][T30175] ? lock_acquire+0x1b1/0x370 [ 1668.138324][T30175] ? rcu_is_watching+0x12/0xc0 [ 1668.138337][T30175] ? trace_contention_end+0x122/0x170 [ 1668.138349][T30175] ? __mutex_lock+0x26d/0x1b10 [ 1668.138363][T30175] ? rtnl_newlink+0x8bb/0x2380 [ 1668.138374][T30175] ? __nla_validate_parse+0x1e7/0x28b0 [ 1668.138391][T30175] ? __pfx___mutex_lock+0x10/0x10 [ 1668.138405][T30175] ? rcu_is_watching+0x12/0xc0 [ 1668.138417][T30175] ? apparmor_capable+0x1d7/0x4d0 [ 1668.138441][T30175] rtnl_newlink+0x1b7e/0x2380 [ 1668.138458][T30175] ? __pfx_rtnl_newlink+0x10/0x10 [ 1668.138469][T30175] ? kernel_text_address+0x8d/0x100 [ 1668.138480][T30175] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1668.138495][T30175] ? __kernel_text_address+0xd/0x30 [ 1668.138506][T30175] ? unwind_get_return_address+0x59/0xa0 [ 1668.138520][T30175] ? arch_stack_walk+0xa6/0xf0 [ 1668.138539][T30175] ? __lock_acquire+0x4a5/0x2630 [ 1668.138549][T30175] ? __pfx_stack_trace_save+0x10/0x10 [ 1668.138563][T30175] ? stack_depot_save_flags+0x27/0x9d0 [ 1668.138575][T30175] ? stack_trace_save+0x8e/0xc0 [ 1668.138593][T30175] ? find_held_lock+0x2b/0x80 [ 1668.138606][T30175] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1668.138618][T30175] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1668.138630][T30175] ? __pfx_rtnl_newlink+0x10/0x10 [ 1668.138642][T30175] rtnetlink_rcv_msg+0x95e/0xe90 [ 1668.138656][T30175] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1668.138670][T30175] ? __lock_acquire+0x4a5/0x2630 [ 1668.138687][T30175] netlink_rcv_skb+0x159/0x420 [ 1668.138702][T30175] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1668.138715][T30175] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1668.138734][T30175] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1668.138750][T30175] netlink_unicast+0x585/0x850 [ 1668.138766][T30175] ? __pfx_netlink_unicast+0x10/0x10 [ 1668.138784][T30175] netlink_sendmsg+0x8b0/0xda0 [ 1668.138800][T30175] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1668.138816][T30175] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1668.138834][T30175] ____sys_sendmsg+0x9e1/0xb70 [ 1668.138848][T30175] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1668.138863][T30175] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1668.138883][T30175] ___sys_sendmsg+0x190/0x1e0 [ 1668.138899][T30175] ? __pfx____sys_sendmsg+0x10/0x10 [ 1668.138920][T30175] ? find_held_lock+0x2b/0x80 [ 1668.138944][T30175] __sys_sendmsg+0x170/0x220 [ 1668.138956][T30175] ? __pfx___sys_sendmsg+0x10/0x10 [ 1668.138966][T30175] ? __fget_files+0x21f/0x3d0 [ 1668.138983][T30175] ? ksys_write+0x1ac/0x250 [ 1668.138996][T30175] ? rcu_is_watching+0x12/0xc0 [ 1668.139010][T30175] __do_fast_syscall_32+0xe7/0x950 [ 1668.139024][T30175] ? lockdep_hardirqs_on+0x78/0x100 [ 1668.139039][T30175] do_fast_syscall_32+0x32/0x70 [ 1668.139053][T30175] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1668.139067][T30175] RIP: 0023:0xf703efcc [ 1668.139076][T30175] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1668.139087][T30175] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1668.139098][T30175] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1668.139104][T30175] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1668.139110][T30175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1668.139116][T30175] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1668.139122][T30175] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1668.139135][T30175] [ 1668.367121][T30180] overlayfs: workdir and upperdir must reside under the same mount [ 1668.431341][T30182] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6578'. [ 1668.567635][T30186] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1668.570418][T30186] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1668.577963][T30186] vhci_hcd vhci_hcd.0: Device attached [ 1668.598049][T30186] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.698736][T30192] loop4: detected capacity change from 0 to 7 [ 1668.713941][ C2] blk_print_req_error: 25 callbacks suppressed [ 1668.713955][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1668.730618][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1668.733655][ C2] buffer_io_error: 21 callbacks suppressed [ 1668.733664][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 1668.764085][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1668.771960][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1668.783375][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1668.791350][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1668.862449][T23727] usb 44-1: SetAddress Request (30) to port 0 [ 1668.864968][T23727] usb 44-1: new SuperSpeed USB device number 30 using vhci_hcd [ 1669.320464][T30194] netlink: 'syz.7.6580': attribute type 2 has an invalid length. [ 1669.730486][T30211] FAULT_INJECTION: forcing a failure. [ 1669.730486][T30211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1669.737614][T30211] CPU: 2 UID: 0 PID: 30211 Comm: syz.4.6585 Tainted: G L syzkaller #0 PREEMPT(full) [ 1669.737649][T30211] Tainted: [L]=SOFTLOCKUP [ 1669.737656][T30211] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1669.737667][T30211] Call Trace: [ 1669.737674][T30211] [ 1669.737682][T30211] dump_stack_lvl+0x100/0x190 [ 1669.737707][T30211] should_fail_ex.cold+0x5/0xa [ 1669.737732][T30211] _copy_to_user+0x32/0xd0 [ 1669.737751][T30211] simple_read_from_buffer+0xcb/0x170 [ 1669.737774][T30211] proc_fail_nth_read+0x1af/0x230 [ 1669.737803][T30211] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1669.737831][T30211] ? rw_verify_area+0xce/0x6d0 [ 1669.737849][T30211] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1669.737876][T30211] vfs_read+0x1e4/0xb30 [ 1669.737899][T30211] ? __pfx_vfs_read+0x10/0x10 [ 1669.737918][T30211] ? find_held_lock+0x2b/0x80 [ 1669.737942][T30211] ? __fget_files+0x215/0x3d0 [ 1669.737967][T30211] ? __fget_files+0x21f/0x3d0 [ 1669.737995][T30211] ksys_read+0x12a/0x250 [ 1669.738015][T30211] ? __pfx_ksys_read+0x10/0x10 [ 1669.738035][T30211] ? rcu_is_watching+0x12/0xc0 [ 1669.738057][T30211] ? rcu_is_watching+0x12/0xc0 [ 1669.738081][T30211] do_int80_emulation+0x141/0x700 [ 1669.738109][T30211] asm_int80_emulation+0x1a/0x20 [ 1669.738127][T30211] RIP: 0023:0xf717616b [ 1669.738141][T30211] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1669.738157][T30211] RSP: 002b:00000000f542d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1669.738175][T30211] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f542d5d0 [ 1669.738186][T30211] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1669.738195][T30211] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1669.738205][T30211] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1669.738214][T30211] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1669.738235][T30211] [ 1669.841019][T30213] [U]  [ 1669.841151][T30187] vhci_hcd: connection reset by peer [ 1669.846679][ T9292] vhci_hcd vhci_hcd.3: stop threads [ 1669.848952][ T9292] vhci_hcd vhci_hcd.3: release socket [ 1669.851339][ T9292] vhci_hcd vhci_hcd.3: disconnect device [ 1669.960815][T25950] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1670.260284][T30238] FAT-fs (nbd6): unable to read boot sector [ 1670.432191][ T5838] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 1671.745794][T30261] FAULT_INJECTION: forcing a failure. [ 1671.745794][T30261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1671.750464][T30261] CPU: 0 UID: 0 PID: 30261 Comm: syz.4.6600 Tainted: G L syzkaller #0 PREEMPT(full) [ 1671.750518][T30261] Tainted: [L]=SOFTLOCKUP [ 1671.750525][T30261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1671.750535][T30261] Call Trace: [ 1671.750541][T30261] [ 1671.750561][T30261] dump_stack_lvl+0x100/0x190 [ 1671.750587][T30261] should_fail_ex.cold+0x5/0xa [ 1671.750609][T30261] _copy_from_iter+0x1f4/0x1690 [ 1671.750625][T30261] ? __asan_memset+0x23/0x50 [ 1671.750642][T30261] ? __pfx__copy_from_iter+0x10/0x10 [ 1671.750656][T30261] ? __pfx___alloc_skb+0x10/0x10 [ 1671.750681][T30261] netlink_sendmsg+0x808/0xda0 [ 1671.750707][T30261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1671.750731][T30261] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1671.750758][T30261] ____sys_sendmsg+0x9e1/0xb70 [ 1671.750778][T30261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1671.750801][T30261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1671.750833][T30261] ___sys_sendmsg+0x190/0x1e0 [ 1671.750857][T30261] ? __pfx____sys_sendmsg+0x10/0x10 [ 1671.750896][T30261] ? find_held_lock+0x2b/0x80 [ 1671.750930][T30261] __sys_sendmsg+0x170/0x220 [ 1671.750949][T30261] ? __pfx___sys_sendmsg+0x10/0x10 [ 1671.750965][T30261] ? __fget_files+0x21f/0x3d0 [ 1671.750990][T30261] ? ksys_write+0x1ac/0x250 [ 1671.751011][T30261] ? rcu_is_watching+0x12/0xc0 [ 1671.751034][T30261] __do_fast_syscall_32+0xe7/0x950 [ 1671.751056][T30261] ? lockdep_hardirqs_on+0x78/0x100 [ 1671.751079][T30261] do_fast_syscall_32+0x32/0x70 [ 1671.751101][T30261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1671.751122][T30261] RIP: 0023:0xf703efcc [ 1671.751136][T30261] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1671.751151][T30261] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1671.751169][T30261] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1671.751179][T30261] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1671.751189][T30261] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1671.751199][T30261] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1671.751209][T30261] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1671.751231][T30261] [ 1672.202176][T25950] Bluetooth: hci0: command 0x040f tx timeout [ 1673.045332][T30283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6605'. [ 1673.119652][T30290] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1673.140442][T21920] Bluetooth: hci3: Frame reassembly failed (-84) [ 1673.163965][ T5880] usb 9-1: new low-speed USB device number 92 using dummy_hcd [ 1673.312232][ T5880] usb 9-1: device descriptor read/64, error -71 [ 1673.464029][T30304] loop4: detected capacity change from 0 to 7 [ 1673.515420][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1673.519405][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1673.523068][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1673.526928][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1673.530902][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1673.552205][ T5880] usb 9-1: new low-speed USB device number 93 using dummy_hcd [ 1673.647356][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 1673.692210][ T5880] usb 9-1: device descriptor read/64, error -71 [ 1673.814578][ T5880] usb usb9-port1: attempt power cycle [ 1674.042179][T23727] usb 44-1: device descriptor read/8, error -110 [ 1674.051276][T30310] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 1674.152178][ T5880] usb 9-1: new low-speed USB device number 94 using dummy_hcd [ 1674.172859][ T5880] usb 9-1: device descriptor read/8, error -71 [ 1674.412206][ T5880] usb 9-1: new low-speed USB device number 95 using dummy_hcd [ 1674.416555][T30315] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1674.432634][T23727] usb usb44-port1: attempt power cycle [ 1674.434954][ T5880] usb 9-1: device descriptor read/8, error -71 [ 1674.542431][ T5880] usb usb9-port1: unable to enumerate USB device [ 1674.993751][T23727] usb usb44-port1: unable to enumerate USB device [ 1675.162243][T13249] Bluetooth: hci3: command 0x1003 tx timeout [ 1675.167787][T25950] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1676.005656][T30337] FAULT_INJECTION: forcing a failure. [ 1676.005656][T30337] name failslab, interval 1, probability 0, space 0, times 0 [ 1676.016647][T30337] CPU: 2 UID: 0 PID: 30337 Comm: syz.4.6618 Tainted: G L syzkaller #0 PREEMPT(full) [ 1676.016690][T30337] Tainted: [L]=SOFTLOCKUP [ 1676.016697][T30337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1676.016706][T30337] Call Trace: [ 1676.016713][T30337] [ 1676.016721][T30337] dump_stack_lvl+0x100/0x190 [ 1676.016759][T30337] should_fail_ex.cold+0x5/0xa [ 1676.016787][T30337] should_failslab+0xc2/0x120 [ 1676.016807][T30337] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1676.016830][T30337] ? sctp_add_bind_addr+0xae/0x3e0 [ 1676.016860][T30337] sctp_add_bind_addr+0xae/0x3e0 [ 1676.016886][T30337] sctp_copy_local_addr_list+0x349/0x550 [ 1676.016907][T30337] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1676.016927][T30337] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 1676.016946][T30337] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1676.016973][T30337] sctp_bind_addr_copy+0xe0/0x530 [ 1676.017002][T30337] sctp_connect_new_asoc+0x1c9/0x770 [ 1676.017025][T30337] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1676.017050][T30337] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1676.017075][T30337] sctp_sendmsg+0x171a/0x22b0 [ 1676.017102][T30337] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1676.017121][T30337] ? __lock_acquire+0x4a5/0x2630 [ 1676.017141][T30337] ? aa_sk_perm+0x309/0xaa0 [ 1676.017164][T30337] ? __pfx_aa_sk_perm+0x10/0x10 [ 1676.017188][T30337] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1676.017210][T30337] inet_sendmsg+0x11c/0x140 [ 1676.017237][T30337] ____sys_sendmsg+0x98d/0xb70 [ 1676.017258][T30337] ? __pfx_inet_sendmsg+0x10/0x10 [ 1676.017283][T30337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1676.017311][T30337] ? _kstrtoull+0x13c/0x1f0 [ 1676.017331][T30337] ? __pfx__kstrtoull+0x10/0x10 [ 1676.017353][T30337] ___sys_sendmsg+0x190/0x1e0 [ 1676.017378][T30337] ? __pfx____sys_sendmsg+0x10/0x10 [ 1676.017428][T30337] __sys_sendmmsg+0x2ff/0x430 [ 1676.017450][T30337] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1676.017486][T30337] ? __pfx___schedule+0x10/0x10 [ 1676.017506][T30337] ? fput+0x79/0x100 [ 1676.017530][T30337] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 1676.017550][T30337] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 1676.017571][T30337] ? lockdep_hardirqs_on+0x78/0x100 [ 1676.017592][T30337] __do_fast_syscall_32+0xe7/0x950 [ 1676.017614][T30337] ? lockdep_hardirqs_on+0x78/0x100 [ 1676.017637][T30337] do_fast_syscall_32+0x32/0x70 [ 1676.017659][T30337] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1676.017680][T30337] RIP: 0023:0xf703efcc [ 1676.017693][T30337] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1676.017708][T30337] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 1676.017725][T30337] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000440 [ 1676.017736][T30337] RDX: 0000000000000001 RSI: 0000000000048000 RDI: 0000000000000000 [ 1676.017746][T30337] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1676.017756][T30337] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1676.017771][T30337] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1676.017793][T30337] [ 1676.602629][T30349] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1676.770741][T30349] KVM: debugfs: duplicate directory 30349-13 [ 1676.867237][T30355] loop4: detected capacity change from 0 to 7 [ 1676.991408][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1676.996883][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1677.000749][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1677.010656][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1677.019916][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1677.860112][T30363] __vm_enough_memory: pid: 30363, comm: syz.6.6625, bytes: 4294963200 not enough memory for the allocation [ 1677.906415][T30365] __vm_enough_memory: pid: 30365, comm: syz.3.6627, bytes: 4294963200 not enough memory for the allocation [ 1678.132502][ T5825] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 1678.303580][ T5825] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 1678.306215][ T5825] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1678.309384][ T5825] usb 11-1: config 0 interface 0 has no altsetting 0 [ 1678.313624][ T5825] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1678.316892][ T5825] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1678.320351][ T5825] usb 11-1: Product: syz [ 1678.322561][ T5825] usb 11-1: Manufacturer: syz [ 1678.325104][ T5825] usb 11-1: SerialNumber: syz [ 1678.329200][ T5825] usb 11-1: config 0 descriptor?? [ 1678.334831][ T5825] hub 11-1:0.0: bad descriptor, ignoring hub [ 1678.337654][ T5825] hub 11-1:0.0: probe with driver hub failed with error -5 [ 1678.343434][ T5825] usb 11-1: selecting invalid altsetting 0 [ 1678.616157][ T5838] usb 11-1: USB disconnect, device number 7 [ 1679.732235][T30377] netlink: 'syz.7.6638': attribute type 1 has an invalid length. [ 1679.782261][T30382] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6638'. [ 1679.846056][T30377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1679.882254][T30377] team0 (unregistering): Port device team_slave_0 removed [ 1679.898242][T30377] team0 (unregistering): Port device team_slave_1 removed [ 1680.499701][T30411] netlink: 'syz.7.6639': attribute type 5 has an invalid length. [ 1680.799796][T30414] netlink: 'syz.7.6640': attribute type 10 has an invalid length. [ 1680.803806][T30414] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6640'. [ 1680.807830][T30414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1680.813705][T22167] lo speed is unknown, defaulting to 1000 [ 1680.840449][T30416] __vm_enough_memory: pid: 30416, comm: syz.4.6641, bytes: 4294963200 not enough memory for the allocation [ 1680.948459][T30419] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6642'. [ 1681.082165][T22167] usb 9-1: new high-speed USB device number 96 using dummy_hcd [ 1681.271820][T22167] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 1681.292942][T22167] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1681.376534][T22167] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1681.401926][T22167] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1681.407730][T22167] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1681.410807][T22167] usb 9-1: Product: syz [ 1681.412493][T22167] usb 9-1: Manufacturer: syz [ 1681.485791][T22167] usb 9-1: SerialNumber: syz [ 1681.600608][ T40] audit: type=1800 audit(2000001370.979:1582): pid=30424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6644" name="file1" dev="overlay" ino=2157 res=0 errno=0 [ 1681.618582][T22167] usb 9-1: config 0 descriptor?? [ 1681.636985][T22167] hub 9-1:0.0: bad descriptor, ignoring hub [ 1681.639262][T22167] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1681.662626][T22167] usb 9-1: selecting invalid altsetting 0 [ 1681.787698][T30428] netlink: 'syz.6.6645': attribute type 1 has an invalid length. [ 1681.804338][T30428] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1681.873838][T30428] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6645'. [ 1681.922914][T30428] team0 (unregistering): Port device team_slave_0 removed [ 1681.931933][T30428] team0 (unregistering): Port device team_slave_1 removed [ 1681.950720][T30428] team0 (unregistering): Port device veth1_to_hsr removed [ 1682.022576][T22167] usb 9-1: USB disconnect, device number 96 [ 1682.043271][T28089] udevd[28089]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1682.233996][T30442] loop4: detected capacity change from 0 to 7 [ 1682.298939][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1682.310211][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1682.316388][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1682.320787][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1682.329700][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1682.478546][T30447] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6651'. [ 1682.555846][T30450] __vm_enough_memory: pid: 30450, comm: syz.4.6652, bytes: 4294963200 not enough memory for the allocation [ 1682.678784][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1682.692506][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1682.696904][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1682.700088][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1682.703167][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1682.832282][T26459] usb 9-1: new high-speed USB device number 97 using dummy_hcd [ 1683.010112][T26459] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 1683.016894][T26459] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1683.021172][T26459] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1683.026425][T26459] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1683.030170][T26459] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1683.033284][T26459] usb 9-1: Product: syz [ 1683.034883][T26459] usb 9-1: Manufacturer: syz [ 1683.036974][T26459] usb 9-1: SerialNumber: syz [ 1683.041027][T26459] usb 9-1: config 0 descriptor?? [ 1683.045444][T26459] hub 9-1:0.0: bad descriptor, ignoring hub [ 1683.047509][T26459] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1683.054714][T26459] usb 9-1: selecting invalid altsetting 0 [ 1683.309697][T30454] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1683.584385][T30454] gre0 speed is unknown, defaulting to 1000 [ 1683.679326][T30454] lo speed is unknown, defaulting to 1000 [ 1684.054596][T26459] usb 9-1: USB disconnect, device number 97 [ 1684.086461][T30460] netlink: 'syz.3.6656': attribute type 1 has an invalid length. [ 1684.137226][T30461] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6656'. [ 1684.150124][T30460] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1684.183967][T30460] team0 (unregistering): Port device team_slave_0 removed [ 1684.189423][T30460] team0 (unregistering): Port device team_slave_1 removed [ 1684.295220][T30472] __vm_enough_memory: pid: 30472, comm: syz.3.6659, bytes: 4294963200 not enough memory for the allocation [ 1684.425202][T30474] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6660'. [ 1686.022244][ T5838] usb 9-1: new high-speed USB device number 98 using dummy_hcd [ 1686.212218][ T5825] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 1686.374538][ T5825] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1686.377513][ T5825] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1686.381028][ T5825] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1686.385040][ T5825] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1686.390292][ T5825] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1686.393808][ T5825] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1686.396631][ T5825] usb 12-1: Product: syz [ 1686.398045][ T5825] usb 12-1: Manufacturer: syz [ 1686.406752][ T5825] cdc_wdm 12-1:1.0: skipping garbage [ 1686.408556][ T5825] cdc_wdm 12-1:1.0: skipping garbage [ 1686.414576][ T5825] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 1686.416720][ T5825] cdc_wdm 12-1:1.0: Unknown control protocol [ 1686.424806][T30505] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6669'. [ 1686.579876][T30512] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6671'. [ 1686.810758][T30519] loop4: detected capacity change from 0 to 7 [ 1686.817884][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1686.822248][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1686.827617][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1687.006763][ T5825] usb 12-1: USB disconnect, device number 8 [ 1687.981615][T25950] Bluetooth: hci0: unexpected event for opcode 0x0c7b [ 1688.273213][T30539] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6678'. [ 1688.532340][ T226] Bluetooth: hci3: Frame reassembly failed (-84) [ 1689.752253][ T9] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 1689.913982][ T9] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1689.918993][ T9] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1689.923968][ T9] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1689.939301][ T9] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1689.944234][ T9] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.951653][ T9] usb 12-1: config 0 descriptor?? [ 1690.359717][ T9] usbhid 12-1:0.0: can't add hid device: -71 [ 1690.361820][ T9] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 1690.369660][ T9] usb 12-1: USB disconnect, device number 9 [ 1690.602240][T13249] Bluetooth: hci3: command 0xfc11 tx timeout [ 1690.611342][T25950] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1692.053552][T25950] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1692.061374][T25950] Bluetooth: hci0: Injecting HCI hardware error event [ 1692.068427][T25950] Bluetooth: hci0: hardware error 0x00 [ 1692.489696][T30597] loop4: detected capacity change from 0 to 7 [ 1692.677817][T30092] buffer_io_error: 10 callbacks suppressed [ 1692.678199][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1692.739893][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1692.763271][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1692.805583][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1692.837631][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1692.926788][T30603] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1692.929566][T30603] IPv6: NLM_F_CREATE should be set when creating new route [ 1692.932453][T30603] IPv6: NLM_F_CREATE should be set when creating new route [ 1693.012772][ T9] usb 9-1: new high-speed USB device number 99 using dummy_hcd [ 1693.162337][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 1693.169507][ T9] usb 9-1: config 1 has an invalid interface number: 105 but max is 0 [ 1693.173473][ T9] usb 9-1: config 1 has no interface number 0 [ 1693.176382][ T9] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1693.180446][ T9] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1693.185213][ T9] usb 9-1: config 1 interface 105 has no altsetting 0 [ 1693.204456][ T9] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1693.210279][ T9] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1693.214053][ T9] usb 9-1: Product: syz [ 1693.215690][ T9] usb 9-1: Manufacturer: syz [ 1693.217525][ T9] usb 9-1: SerialNumber: syz [ 1693.224151][T30591] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1693.229975][T30591] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1693.666281][T30591] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1693.668916][T30591] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1693.833778][T30614] loop4: detected capacity change from 0 to 7 [ 1693.843579][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1693.848436][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1693.852492][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 1693.904064][T30457] Buffer I/O error on dev loop4, logical block 0, async page read [ 1693.907480][T30457] Buffer I/O error on dev loop4, logical block 0, async page read [ 1693.910750][T30457] Buffer I/O error on dev loop4, logical block 0, async page read [ 1693.914644][T30457] Buffer I/O error on dev loop4, logical block 0, async page read [ 1693.942340][ T9] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 1694.202291][T25950] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1694.807995][ T9] aqc111 9-1:1.105: probe with driver aqc111 failed with error -32 [ 1695.032325][T26459] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 1695.183649][T26459] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1695.187590][T26459] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1695.190883][T26459] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1695.195511][T26459] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1695.198600][T26459] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.203858][T26459] usb 11-1: config 0 descriptor?? [ 1695.620515][ T9] usb 9-1: USB disconnect, device number 99 [ 1695.814735][T26459] usbhid 11-1:0.0: can't add hid device: -71 [ 1695.817013][T26459] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 1695.825621][T26459] usb 11-1: USB disconnect, device number 8 [ 1697.618722][T30646] loop4: detected capacity change from 0 to 7 [ 1697.736454][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1697.747422][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1697.779312][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1697.817259][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1697.852182][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1698.741213][T30658] loop4: detected capacity change from 0 to 7 [ 1698.826349][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1698.843800][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1698.862840][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1698.870573][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1698.881448][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1700.138266][T30661] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6714'. [ 1700.342228][T26459] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 1700.494247][T26459] usb 11-1: config 1 has an invalid interface number: 7 but max is 0 [ 1700.547957][T26459] usb 11-1: config 1 has no interface number 0 [ 1700.552891][T26459] usb 11-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1700.572476][T26459] usb 11-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1023 [ 1700.591585][T26459] usb 11-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1700.605291][T26459] usb 11-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1700.613075][T26459] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.620036][T26459] usb 11-1: Product: syz [ 1700.622935][T26459] usb 11-1: Manufacturer: syz [ 1700.625518][T26459] usb 11-1: SerialNumber: syz [ 1700.636440][T30676] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1700.917050][T30676] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6717'. [ 1702.308828][T26459] usb 11-1: Error in usbnet_get_endpoints (-71) [ 1702.410122][T30714] loop4: detected capacity change from 0 to 7 [ 1702.532930][T26459] usb 11-1: USB disconnect, device number 9 [ 1703.057453][T30718] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6725'. [ 1703.141529][T30457] buffer_io_error: 10 callbacks suppressed [ 1703.141547][T30457] Buffer I/O error on dev loop4, logical block 0, async page read [ 1703.144358][T30718] ip6gre1: entered promiscuous mode [ 1703.149651][T30718] ip6gre1: entered allmulticast mode [ 1703.155689][T30457] Buffer I/O error on dev loop4, logical block 0, async page read [ 1703.167845][T30457] Buffer I/O error on dev loop4, logical block 0, async page read [ 1703.183065][T30457] Buffer I/O error on dev loop4, logical block 0, async page read [ 1703.191381][T30457] Buffer I/O error on dev loop4, logical block 0, async page read [ 1704.164845][T30739] binder: Unknown parameter '“9'‘B×q' [ 1704.454203][T30741] netlink: 4900 bytes leftover after parsing attributes in process `syz.4.6730'. [ 1706.155347][T30759] loop4: detected capacity change from 0 to 7 [ 1706.239292][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1706.249119][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1706.253788][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1706.260257][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1706.264895][T30092] Buffer I/O error on dev loop4, logical block 0, async page read [ 1706.632197][T22167] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 1706.917043][T22167] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1708.040632][T22167] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1708.051988][T22167] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1708.061473][T22167] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1708.065923][T22167] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.092979][T22167] usb 11-1: config 0 descriptor?? [ 1708.706805][T22167] usbhid 11-1:0.0: can't add hid device: -71 [ 1708.709075][T22167] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 1708.714608][T22167] usb 11-1: USB disconnect, device number 10 [ 1708.857056][T30783] [ 1708.857922][T30783] ====================================================== [ 1708.860330][T30783] WARNING: possible circular locking dependency detected [ 1708.862648][T30783] syzkaller #0 Tainted: G L [ 1708.864906][T30783] ------------------------------------------------------ [ 1708.867247][T30783] syz.3.6743/30783 is trying to acquire lock: [ 1708.869268][T30783] ffff88804c63b108 (&ht->mutex){+.+.}-{4:4}, at: rhashtable_free_and_destroy+0x49/0x9c0 [ 1708.872298][T30783] [ 1708.872298][T30783] but task is already holding lock: [ 1708.874528][T30783] ffffffff8e9b08c0 (fs_reclaim){+.+.}-{0:0}, at: __alloc_frozen_pages_noprof+0x1239/0x2bc0 [ 1708.877830][T30783] [ 1708.877830][T30783] which lock already depends on the new lock. [ 1708.877830][T30783] [ 1708.881295][T30783] [ 1708.881295][T30783] the existing dependency chain (in reverse order) is: [ 1708.884207][T30783] [ 1708.884207][T30783] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1708.886565][T30783] fs_reclaim_acquire+0xc4/0x100 [ 1708.888384][T30783] __kvmalloc_node_noprof+0xcc/0xa00 [ 1708.890305][T30783] bucket_table_alloc.isra.0+0x88/0x460 [ 1708.892352][T30783] rhashtable_rehash_alloc+0x68/0x110 [ 1708.894300][T30783] rht_deferred_worker+0x1d9/0x1fd0 [ 1708.896159][T30783] process_one_work+0xa0e/0x1980 [ 1708.897859][T30783] worker_thread+0x5ef/0xe50 [ 1708.899547][T30783] kthread+0x370/0x450 [ 1708.901085][T30783] ret_from_fork+0x72b/0xd50 [ 1708.902843][T30783] ret_from_fork_asm+0x1a/0x30 [ 1708.904588][T30783] [ 1708.904588][T30783] -> #0 (&ht->mutex){+.+.}-{4:4}: [ 1708.906951][T30783] __lock_acquire+0x14b8/0x2630 [ 1708.908737][T30783] lock_acquire+0x1b1/0x370 [ 1708.910406][T30783] __mutex_lock+0x1a4/0x1b10 [ 1708.912114][T30783] rhashtable_free_and_destroy+0x49/0x9c0 [ 1708.914152][T30783] kernfs_put.part.0+0x175/0x720 [ 1708.915942][T30783] kernfs_put+0x53/0x60 [ 1708.917496][T30783] evict+0x3c2/0xad0 [ 1708.918994][T30783] iput.part.0+0x605/0xf50 [ 1708.920624][T30783] iput+0x35/0x40 [ 1708.922029][T30783] dentry_unlink_inode+0x2c0/0x4c0 [ 1708.923886][T30783] __dentry_kill+0x1d0/0x690 [ 1708.925677][T30783] shrink_dentry_list+0x180/0x5e0 [ 1708.927546][T30783] prune_dcache_sb+0xea/0x150 [ 1708.929303][T30783] super_cache_scan+0x328/0x550 [ 1708.931092][T30783] do_shrink_slab+0x416/0x1240 [ 1708.932841][T30783] shrink_slab+0xa7d/0x12e0 [ 1708.934511][T30783] shrink_one+0x398/0x7f0 [ 1708.935996][T30783] shrink_node+0x2673/0x3dc0 [ 1708.937586][T30783] do_try_to_free_pages+0x33e/0x16d0 [ 1708.939515][T30783] try_to_free_pages+0x294/0x750 [ 1708.941313][T30783] __alloc_frozen_pages_noprof+0x128f/0x2bc0 [ 1708.943453][T30783] __folio_alloc_noprof+0x13/0x260 [ 1708.945289][T30783] alloc_migration_target+0x1d7/0x6d0 [ 1708.947247][T30783] migrate_pages_batch+0x5dc/0x45c0 [ 1708.949114][T30783] migrate_pages_sync+0x12c/0x880 [ 1708.950945][T30783] migrate_pages+0x1aa5/0x2880 [ 1708.952784][T30783] move_pages_and_store_status+0xf1/0x230 [ 1708.954843][T30783] kernel_move_pages+0xc47/0x13f0 [ 1708.956653][T30783] __ia32_sys_move_pages+0xdd/0x1b0 [ 1708.958520][T30783] __do_fast_syscall_32+0xe7/0x950 [ 1708.960367][T30783] do_fast_syscall_32+0x32/0x70 [ 1708.962160][T30783] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1708.964484][T30783] [ 1708.964484][T30783] other info that might help us debug this: [ 1708.964484][T30783] [ 1708.967804][T30783] Possible unsafe locking scenario: [ 1708.967804][T30783] [ 1708.970219][T30783] CPU0 CPU1 [ 1708.972014][T30783] ---- ---- [ 1708.973766][T30783] lock(fs_reclaim); [ 1708.975106][T30783] lock(&ht->mutex); [ 1708.977229][T30783] lock(fs_reclaim); [ 1708.979348][T30783] lock(&ht->mutex); [ 1708.980668][T30783] [ 1708.980668][T30783] *** DEADLOCK *** [ 1708.980668][T30783] [ 1708.983321][T30783] 2 locks held by syz.3.6743/30783: [ 1708.985033][T30783] #0: ffffffff8e9b08c0 (fs_reclaim){+.+.}-{0:0}, at: __alloc_frozen_pages_noprof+0x1239/0x2bc0 [ 1708.988451][T30783] #1: ffff8880502300d8 (&type->s_umount_key#52){++++}-{4:4}, at: super_cache_scan+0x98/0x550 [ 1708.991790][T30783] [ 1708.991790][T30783] stack backtrace: [ 1708.993723][T30783] CPU: 0 UID: 0 PID: 30783 Comm: syz.3.6743 Tainted: G L syzkaller #0 PREEMPT(full) [ 1708.993739][T30783] Tainted: [L]=SOFTLOCKUP [ 1708.993743][T30783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1708.993750][T30783] Call Trace: [ 1708.993755][T30783] [ 1708.993760][T30783] dump_stack_lvl+0x100/0x190 [ 1708.993772][T30783] print_circular_bug.cold+0x178/0x1c7 [ 1708.993790][T30783] check_noncircular+0x146/0x160 [ 1708.993808][T30783] __lock_acquire+0x14b8/0x2630 [ 1708.993820][T30783] lock_acquire+0x1b1/0x370 [ 1708.993829][T30783] ? rhashtable_free_and_destroy+0x49/0x9c0 [ 1708.993847][T30783] ? __pfx___might_resched+0x10/0x10 [ 1708.993859][T30783] ? __flush_work+0x7e2/0xcb0 [ 1708.993871][T30783] __mutex_lock+0x1a4/0x1b10 [ 1708.993886][T30783] ? rhashtable_free_and_destroy+0x49/0x9c0 [ 1708.993901][T30783] ? rhashtable_free_and_destroy+0x49/0x9c0 [ 1708.993917][T30783] ? try_to_grab_pending+0x45f/0x840 [ 1708.993928][T30783] ? rcu_is_watching+0x12/0xc0 [ 1708.993941][T30783] ? __pfx___mutex_lock+0x10/0x10 [ 1708.993955][T30783] ? enable_work+0x295/0x320 [ 1708.993966][T30783] ? lockdep_hardirqs_on+0x78/0x100 [ 1708.993979][T30783] ? enable_work+0x24c/0x320 [ 1708.993991][T30783] ? __pfx___might_resched+0x10/0x10 [ 1708.994004][T30783] ? rhashtable_free_and_destroy+0x49/0x9c0 [ 1708.994019][T30783] rhashtable_free_and_destroy+0x49/0x9c0 [ 1708.994035][T30783] ? __pfx_simple_xattr_ht_free+0x10/0x10 [ 1708.994051][T30783] ? __pfx___might_resched+0x10/0x10 [ 1708.994068][T30783] kernfs_put.part.0+0x175/0x720 [ 1708.994081][T30783] ? __pfx_kernfs_evict_inode+0x10/0x10 [ 1708.994092][T30783] kernfs_put+0x53/0x60 [ 1708.994103][T30783] evict+0x3c2/0xad0 [ 1708.994117][T30783] ? find_held_lock+0x2b/0x80 [ 1708.994131][T30783] ? __pfx_evict+0x10/0x10 [ 1708.994146][T30783] ? iput.part.0+0x5fd/0xf50 [ 1708.994165][T30783] iput.part.0+0x605/0xf50 [ 1708.994179][T30783] ? __pfx_inode_just_drop+0x10/0x10 [ 1708.994194][T30783] iput+0x35/0x40 [ 1708.994208][T30783] dentry_unlink_inode+0x2c0/0x4c0 [ 1708.994223][T30783] __dentry_kill+0x1d0/0x690 [ 1708.994237][T30783] ? shrink_dentry_list+0x10e/0x5e0 [ 1708.994253][T30783] shrink_dentry_list+0x180/0x5e0 [ 1708.994268][T30783] ? list_lru_walk_one+0x3c/0x50 [ 1708.994279][T30783] prune_dcache_sb+0xea/0x150 [ 1708.994288][T30783] ? list_lru_count_one+0x147/0x320 [ 1708.994304][T30783] ? __pfx_prune_dcache_sb+0x10/0x10 [ 1708.994315][T30783] super_cache_scan+0x328/0x550 [ 1708.994327][T30783] do_shrink_slab+0x416/0x1240 [ 1708.994339][T30783] shrink_slab+0xa7d/0x12e0 [ 1708.994350][T30783] ? shrink_slab+0x690/0x12e0 [ 1708.994362][T30783] ? __pfx_shrink_slab+0x10/0x10 [ 1708.994375][T30783] shrink_one+0x398/0x7f0 [ 1708.994390][T30783] ? shrink_node+0x2653/0x3dc0 [ 1708.994400][T30783] shrink_node+0x2673/0x3dc0 [ 1708.994410][T30783] ? shrink_node+0x23c3/0x3dc0 [ 1708.994420][T30783] ? __pfx_shrink_node+0x10/0x10 [ 1708.994431][T30783] ? rcu_is_watching+0x12/0xc0 [ 1708.994444][T30783] ? do_try_to_free_pages+0x33e/0x16d0 [ 1708.994454][T30783] do_try_to_free_pages+0x33e/0x16d0 [ 1708.994466][T30783] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 1708.994478][T30783] try_to_free_pages+0x294/0x750 [ 1708.994488][T30783] ? psi_group_change+0x457/0xa20 [ 1708.994497][T30783] ? __pfx_try_to_free_pages+0x10/0x10 [ 1708.994509][T30783] ? fs_reclaim_acquire+0x70/0x100 [ 1708.994522][T30783] ? fs_reclaim_acquire+0x70/0x100 [ 1708.994535][T30783] __alloc_frozen_pages_noprof+0x128f/0x2bc0 [ 1708.994552][T30783] ? validate_mm+0x261/0x4e0 [ 1708.994567][T30783] ? __lock_acquire+0x4a5/0x2630 [ 1708.994576][T30783] ? validate_mm+0x392/0x4e0 [ 1708.994591][T30783] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1708.994608][T30783] ? lock_acquire+0x1b1/0x370 [ 1708.994619][T30783] ? __perf_event_task_sched_in+0x27a/0xa10 [ 1708.994636][T30783] __folio_alloc_noprof+0x13/0x260 [ 1708.994652][T30783] alloc_migration_target+0x1d7/0x6d0 [ 1708.994666][T30783] migrate_pages_batch+0x5dc/0x45c0 [ 1708.994679][T30783] ? __pfx_alloc_migration_target+0x10/0x10 [ 1708.994694][T30783] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1708.994709][T30783] ? find_held_lock+0x2b/0x80 [ 1708.994722][T30783] ? __lock_acquire+0x4a5/0x2630 [ 1708.994732][T30783] migrate_pages_sync+0x12c/0x880 [ 1708.994745][T30783] ? __pfx_alloc_migration_target+0x10/0x10 [ 1708.994759][T30783] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1708.994772][T30783] ? __free_object+0x2a8/0x3f0 [ 1708.994787][T30783] ? __lock_acquire+0x4a5/0x2630 [ 1708.994796][T30783] ? css_rstat_updated+0x1ce/0x5a0 [ 1708.994813][T30783] migrate_pages+0x1aa5/0x2880 [ 1708.994827][T30783] ? __pfx_alloc_migration_target+0x10/0x10 [ 1708.994841][T30783] ? __pfx_migrate_pages+0x10/0x10 [ 1708.994855][T30783] ? __lock_acquire+0x4a5/0x2630 [ 1708.994865][T30783] ? mtree_load+0x32d/0xa90 [ 1708.994879][T30783] move_pages_and_store_status+0xf1/0x230 [ 1708.994893][T30783] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 1708.994910][T30783] kernel_move_pages+0xc47/0x13f0 [ 1708.994925][T30783] ? __pfx_kernel_move_pages+0x10/0x10 [ 1708.994959][T30783] ? xfd_validate_state+0x129/0x190 [ 1708.994972][T30783] __ia32_sys_move_pages+0xdd/0x1b0 [ 1708.994986][T30783] ? __do_fast_syscall_32+0x98/0x950 [ 1708.994999][T30783] ? lockdep_hardirqs_on+0x78/0x100 [ 1708.995012][T30783] __do_fast_syscall_32+0xe7/0x950 [ 1708.995027][T30783] do_fast_syscall_32+0x32/0x70 [ 1708.995041][T30783] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1708.995054][T30783] RIP: 0023:0xf6feefcc [ 1708.995067][T30783] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1708.995077][T30783] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 1708.995087][T30783] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000002064 [ 1708.995094][T30783] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 1708.995100][T30783] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1708.995107][T30783] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1708.995113][T30783] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1708.995122][T30783] [ 1709.603429][T30788] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1709.605609][T30788] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1709.608300][T30788] vhci_hcd vhci_hcd.0: Device attached [ 1709.681712][ T226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1709.685761][ T226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1709.724599][T30788] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1709.868297][T30795] vhci_hcd: connection closed [ 1709.868609][ T9292] vhci_hcd vhci_hcd.3: stop threads [ 1709.872415][ T9292] vhci_hcd vhci_hcd.3: release socket [ 1709.874215][ T9292] vhci_hcd vhci_hcd.3: disconnect device [ 1709.882148][ T5880] usb 44-1: enqueue for inactive port 0 [ 1710.372547][ T5880] usb usb44-port1: attempt power cycle [ 1710.932413][ T5880] usb usb44-port1: unable to enumerate USB device