last executing test programs: 22.584653345s ago: executing program 4 (id=54): ioprio_set$pid(0x2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x0, 0x80000001, 0xb41, 0x9, 0x100000000, 0x40, 0x3}, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 22.095873072s ago: executing program 4 (id=58): socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) pipe2(&(0x7f0000000080), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) unshare(0x400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0x9, 0x4, 0x1, 0x3, 0x5, 0x101, 0xffc, 0x9, 0x600, 0x3, 0x1, 0xfffffffa, 0x3, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11003, 0x1, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x9, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x5, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 20.42802827s ago: executing program 4 (id=62): socket(0x10, 0x803, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x8, 0x40000000000000]}}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) epoll_wait(r1, 0x0, 0xfffffffffffffef0, 0x80000000) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000ea0103000000090001"], 0x70}}, 0x20000800) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000040)=0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000a80)={0x0, 0x80000}) syz_open_dev$sg(0x0, 0x4, 0x208000) 20.359270813s ago: executing program 3 (id=63): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a05100000000000000109022d00010000000009040000010300000009210000080122070009058103"], 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={0x4001, 0x80, 0x1}, 0x18) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="00220700000075bf84301f82007c8c632e4aa2e3c5f7458a371109f118fb91fe30a60000000016b13572dd2647249fa50a69a085cc299a134b24e19fbfcf42db70ae0bb8a4ace04f657c186d5b07a67efbac45aa65a033f23b64eed1ba05cea7fcf8f0662af4bb974d63e977bc242cb26fe7cf9e88a9d3ba3312ef369977da0780a8c6fbed5fee94d6d50d2477b32fed9644eef1d1de6f79d19bfd11062a053bbf657c96dd5a2dde00a24a7954cb740044e8979ec8b49e5c8b400d15627a55db026b5b2c793e3ef8540179886eedeb49eb6d10c985b12ad94e02f28a2db5c86ab43cf826734601dbf1cb84fed35818af99cb05e9ab86960ee9ea78845bd0810d4ab8381714c0c4c6e2fc04b3d4991f83a5731d55e92d8328ebfd382201727668c760552cd1b3f4db3ccd41dc74bf28f855277eb75668700fff67b5cff9b8fdf52aa9d9228e146ea96783a2e34323b525b14ee122fd9888070c1d2a17fa2e48dd8a8cc5741b48fbc5425183f0564d055b1bf15a47b2ad5708d2ac1a1392409723b9b6ff49cc7c26267d54b31cfcde1e832a564697c8b7cd65d92eb9c4bd8d0551b45c53a517968691c8b83d5ffd28a7b6ba39f42f02f75b2bad203384b9ea907932dc226e85bfec1f7ef378d904910275ab7d7106b32375c2"], 0x0}, 0x0) socket$inet(0x2, 0x80000, 0x73) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) syz_clone3(&(0x7f0000000380)={0x1a000000, 0x0, 0x0, 0x0, {0x3f}, 0x0, 0x0, &(0x7f0000000240)=""/242, 0x0}, 0x58) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="00080000075005002c0012800b00010062726964676500001c0002800c0023"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, &(0x7f0000003740)=[{}], 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffeda, 0x72, 0x8, 0xfffffffffffffc8a, 0x0}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xffffffffffffff51, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x298c, 0x2, 0x0, 0x401}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3c000001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a000111"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18.841528091s ago: executing program 4 (id=66): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) 16.312434139s ago: executing program 4 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000180)=0x401, 0x4) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r5, &(0x7f0000000080), 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) 16.120910314s ago: executing program 0 (id=70): getpeername$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@null, @null, @bcast, @bcast, @default, @remote, @rose]}, &(0x7f0000000080)=0x48) 15.858539391s ago: executing program 0 (id=71): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_MCE_KILL(0x4e, 0x0, 0x20000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x2a1}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021740000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000004800038044000080080003400000000238000b80340001800a0001006c696d6974000000240002800c00024000000000000000050c000140fffffffffffffffc0800", @ANYRES16=r0], 0xf8}, 0x1, 0x0, 0x0, 0xc0c5}, 0x4000) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120150023762e28908cb042b01f6e0014303010902120001ff80d0010904771900f90559"], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) 15.564069415s ago: executing program 3 (id=72): socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) pipe2(&(0x7f0000000080), 0x0) unshare(0x400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0x9, 0x4, 0x1, 0x3, 0x5, 0x101, 0xffc, 0x9, 0x600, 0x3, 0x1, 0xfffffffa, 0x3, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11003, 0x1, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x9, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x5, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 14.193558793s ago: executing program 1 (id=73): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x50}}, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r5, 0x2007ffb) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x200) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r7, r6, 0x0, 0x7ffff000) creat(0x0, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xf, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000001000000000000000000000218110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000001f9500000000000000bf91000000000000b7022f00010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x800000}, &(0x7f0000000540)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc, 0x0, {0x0, r13}}) io_uring_enter(r9, 0x1a73, 0x21, 0x1, 0x0, 0x0) 13.741985527s ago: executing program 3 (id=74): unshare(0x28040680) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0) 9.304537883s ago: executing program 1 (id=75): r0 = socket$pppl2tp(0x18, 0x1, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(r1, 0x0, 0x20000000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000000)={0xb1e1}) ptrace$cont(0xf7aef61bbe72383, 0x0, 0x276, 0x401) r3 = socket$kcm(0x23, 0x5, 0x0) listen(r3, 0x800) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000380)={0x23, 0x0, 0x58}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, r5) accept4(r3, 0x0, 0x0, 0x80000) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') bind$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) pread64(r7, &(0x7f0000000240)=""/164, 0x131, 0x131) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x1, 0x1, 0x0, 0x3}}, 0x26) sendmmsg(r0, &(0x7f0000004380), 0x34000, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)) 9.248168069s ago: executing program 0 (id=76): socket(0x10, 0x803, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x8, 0x40000000000000]}}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) epoll_wait(r1, 0x0, 0xfffffffffffffef0, 0x80000000) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000ea0103000000090001"], 0x70}}, 0x20000800) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000040)=0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000a80)={0x0, 0x80000}) syz_open_dev$sg(0x0, 0x4, 0x208000) 9.084967621s ago: executing program 2 (id=77): r0 = socket$pppl2tp(0x18, 0x1, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20000000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000000)={0xb1e1}) r2 = socket$kcm(0x23, 0x5, 0x0) listen(r2, 0x800) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000380)={0x23, 0x0, 0x58}, 0x10) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) write$tun(r5, 0x0, 0x3db) accept4(r2, 0x0, 0x0, 0x80000) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) pread64(r6, &(0x7f0000000240)=""/164, 0x131, 0x131) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x1, 0x1, 0x0, 0x3}}, 0x26) sendmmsg(r0, &(0x7f0000004380), 0x34000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) 7.965205637s ago: executing program 0 (id=78): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x50}}, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r5, 0x2007ffb) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x200) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r7, r6, 0x0, 0x7ffff000) creat(0x0, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xf, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000001000000000000000000000218110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000001f9500000000000000bf91000000000000b7022f00010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x800000}, &(0x7f0000000540), &(0x7f0000000040), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.827766492s ago: executing program 2 (id=79): r0 = fsopen(&(0x7f0000000080)='cifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000140)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae\x01\x91&6n \xf2<\xd6\xcf\x15\xd3\xd7\x1d\xa7=\xef\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\\b\xa0\xbbL}\xcc\'(;\xdcjN\xab\xcf\xa0\x1dN\xbeA\x17\n\f\xcd=\'\x11\x1b\b>Z\x8e\xb1\xc3j$v\xef,\x06/\x00\x00\x00\x00\x00\xc7\x0f\xab\t\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000fdffffff00000000000000007110bd000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) 7.783353598s ago: executing program 1 (id=80): syz_emit_ethernet(0x66, &(0x7f0000000880)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x800006, {0xc, 0x6, "f6cd53", 0x200, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0006cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296560000d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fd92bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f46dc53a26fd997f3af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46ba8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a650b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0c1043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077be00000000d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc654ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f900", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xa, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r2, r3, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x26, 0x5, 0x61001838, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0xa0, 0x0, 0x5, {{0x1000000000000002, 0x4, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8001, {0x1000000002, 0xffffffffffffffff, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x800, r2, 0x0, 0x1, 0xfffffdff}}}}, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) 3.896483521s ago: executing program 2 (id=81): getpeername$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@null, @null, @bcast, @bcast, @default, @remote, @rose]}, &(0x7f0000000080)=0x48) 3.759119913s ago: executing program 3 (id=82): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000340), 0x4000, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'local', '', @void}}}, {@quota}]}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000093000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000280)={r5, 0x0, 0x8001, 0x0, 0x0, [0x0], [0x0, 0x0, 0x1, 0x2], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) splice(r0, &(0x7f0000000040)=0x8, r1, &(0x7f00000006c0)=0x7, 0x0, 0x9) 3.739175973s ago: executing program 0 (id=83): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x7]}, 0x8, 0x0) getdents(r1, &(0x7f0000000100)=""/135, 0x87) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.6285358s ago: executing program 2 (id=84): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000000)=""/8, 0xfffffffffffffd0b, 0x400123eb, 0x0, 0x1154103478d401ea) 3.431131589s ago: executing program 4 (id=85): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84", 0xbd}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x400}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)}}], 0x3, 0x24000010) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) r1 = semget$private(0x0, 0x6, 0x0) semtimedop(r1, &(0x7f00000003c0)=[{0x0, 0x1}], 0x1, 0x0) semop(r1, &(0x7f0000001240)=[{}, {0x0, 0x2, 0x2000}], 0x2aaaaaaaaaaaa9c9) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x49, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13d, 0x4}}, 0xfffffffffffffdd2) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 3.334122067s ago: executing program 1 (id=86): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="06000000040000"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(0x0, 0x8fff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) execve(&(0x7f0000001040)='./file0\x00', &(0x7f0000001080), 0x0) stat(&(0x7f0000000080)='./file0\x00', 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.011202106s ago: executing program 3 (id=87): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, 0x0) 2.111336888s ago: executing program 2 (id=88): socket(0x10, 0x803, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x8, 0x40000000000000]}}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) epoll_wait(r1, 0x0, 0xfffffffffffffef0, 0x80000000) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000ea0103000000090001"], 0x70}}, 0x20000800) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000040)=0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000a80)={0x0, 0x80000}) syz_open_dev$sg(0x0, 0x4, 0x208000) 2.006258184s ago: executing program 1 (id=89): r0 = socket$pppl2tp(0x18, 0x1, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20000000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000000)={0xb1e1}) r2 = socket$kcm(0x23, 0x5, 0x0) listen(r2, 0x800) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000380)={0x23, 0x0, 0x58}, 0x10) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) write$tun(r5, 0x0, 0x3db) accept4(r2, 0x0, 0x0, 0x80000) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) pread64(r6, &(0x7f0000000240)=""/164, 0x131, 0x131) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x1, 0x1, 0x0, 0x3}}, 0x26) sendmmsg(r0, &(0x7f0000004380), 0x34000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) 1.032237604s ago: executing program 3 (id=90): r0 = socket$pppl2tp(0x18, 0x1, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(r1, 0x0, 0x20000000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000000)={0xb1e1}) ptrace$cont(0xf7aef61bbe72383, 0x0, 0x276, 0x401) r3 = socket$kcm(0x23, 0x5, 0x0) listen(r3, 0x800) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000380)={0x23, 0x0, 0x58}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, r5) accept4(r3, 0x0, 0x0, 0x80000) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') bind$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) pread64(r7, &(0x7f0000000240)=""/164, 0x131, 0x131) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x1, 0x1, 0x0, 0x3}}, 0x26) sendmmsg(r0, &(0x7f0000004380), 0x34000, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)) 299.775765ms ago: executing program 2 (id=91): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) socket$inet6(0xa, 0x3, 0x40) (async) socket$inet6(0xa, 0x3, 0x40) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendto$packet(r3, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x40000, &(0x7f0000000180)={0x11, 0x18, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r6, 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r6, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x2, 0x0, 0x8, 0x54210, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2, 0x8}, 0x50) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r7, 0x4008941a, &(0x7f0000000100)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_lsm={0x1d, 0x22, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80}, {}, {}, [@jmp={0x5, 0x1, 0xd, 0x7, 0x0, 0x50, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @ldst={0x0, 0x2, 0x4, 0x7, 0x5, 0x100, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7ff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0xcc, &(0x7f00000007c0)=""/204, 0x41000, 0x1, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x2, 0x4, 0x3}, 0x10, r6, 0x0, 0x5, &(0x7f0000000980)=[r7], &(0x7f00000009c0)=[{0x1, 0x5, 0x9, 0x9}, {0x4, 0x1, 0x9, 0xb}, {0x0, 0x3, 0x6}, {0x0, 0x4, 0x9, 0x7}, {0x2, 0x1, 0xf, 0x8}], 0x10, 0x44c}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_lsm={0x1d, 0x22, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80}, {}, {}, [@jmp={0x5, 0x1, 0xd, 0x7, 0x0, 0x50, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @ldst={0x0, 0x2, 0x4, 0x7, 0x5, 0x100, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7ff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0xcc, &(0x7f00000007c0)=""/204, 0x41000, 0x1, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x2, 0x4, 0x3}, 0x10, r6, 0x0, 0x5, &(0x7f0000000980)=[r7], &(0x7f00000009c0)=[{0x1, 0x5, 0x9, 0x9}, {0x4, 0x1, 0x9, 0xb}, {0x0, 0x3, 0x6}, {0x0, 0x4, 0x9, 0x7}, {0x2, 0x1, 0xf, 0x8}], 0x10, 0x44c}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x50) syz_io_uring_setup(0x3d, &(0x7f0000000580)={0x0, 0xaa9b, 0x13500}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) (async) r8 = syz_io_uring_setup(0x3d, &(0x7f0000000580)={0x0, 0xaa9b, 0x13500}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x21, &(0x7f0000000440), 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 96.99512ms ago: executing program 0 (id=92): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x442, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000009c0)=[@text16={0x10, 0x0}], 0x1, 0x12, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x328003, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r7, @ANYBLOB="14005a801000018004000100"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r8, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703ca", 0x20}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7", 0xa5}], 0x2}}], 0x1, 0x2090) sendto$inet(r8, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r9}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b703000000e2ff008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b700000000000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[r1, r0, r0, r1, r3, r1, r8, r1], 0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000003dc0)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000001180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4000094) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001280)=@newtaction={0x7ac, 0x30, 0xb, 0x0, 0x0, {}, [{0x798, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x8, 0x0, 0x80000}}, @TCA_CT_MARK={0x8, 0x10, 0x10000004}, @TCA_CT_LABELS={0x14, 0x7, "7b7de7663cc8980c0bdfffdecc07a823"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0xf0, 0x12, 0x0, 0x0, {{0xb}, {0xa8, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0xfffffc00, 0x3, 0x1, 0x2}, 0x2}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5d1}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x200, 0x69417ce5, 0x8, 0x6, 0x20}, 0x2}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x9, 0x4, 0x3, 0xb}, 0x7}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x2, 0x10000004, 0x8000, 0x8}, 0x5}}]}, {0x1d, 0x6, "485a0eb0ad82013c2ee96e74e135761920d94005daf2fb4f17"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0xe4, 0x10, 0x0, 0x0, {{0xf}, {0x4}, {0xb2, 0x6, "19dc8906761de64253edb897e5b3800c5ee98c5209959e1ef64aaa7e5b2371813d12be513fe1a15a4fe1a39c016aca832fd5ae1dfcc452de4d14eb45802c5a28ec351665e6c1c944a1f2af0c602fbe8c4cd88008335cff09d970bed57f950b83b7144de688149b31c271818c38d2416db0c92a75cb5483751900c3e0b449fc00669aad48e28e8928e08c96067e9126c86bebb4d307fe92e2d26cf9cc9f837308f9fceb67ca7a311f8044c0b44820"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x4}}}}, @m_police={0x560, 0x1, 0x0, 0x0, {{0xb}, {0x478, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x2, 0x6, 0x401, 0xffa, 0x6, 0x5, 0x0, 0x6, 0x8, 0xfff, 0x49, 0x8000, 0xa, 0xffffffc0, 0x5, 0x4, 0x8, 0x48, 0xff, 0x8, 0x5, 0x6, 0x8, 0x10001, 0x101, 0x0, 0xa, 0x3, 0x6, 0x2, 0xfffffffe, 0x0, 0xff, 0x1, 0x8, 0xceb5, 0x6, 0xa, 0x2, 0x10000, 0xee, 0x9, 0x0, 0x4, 0xb, 0x9, 0x2, 0x96, 0x2, 0x6, 0x6, 0x7, 0x3d4f86c7, 0x1000000, 0x1, 0x200, 0x401, 0x8, 0x9, 0x1ce, 0x4, 0xe4f1, 0x1, 0x3, 0xf, 0x4c9a, 0x7, 0x360, 0x7, 0x9, 0x100, 0x9, 0x200, 0x8, 0x401, 0x3, 0x0, 0xfffffff1, 0x1, 0x3, 0x1, 0xff, 0x100, 0x2, 0x5, 0xa30, 0x8, 0x401, 0xfffffffd, 0x9, 0x7, 0x8000, 0x0, 0xa, 0x8, 0x8764, 0x80000001, 0x1, 0x9, 0x1, 0x2, 0x6, 0x24, 0x7fff, 0x4f3c, 0x9, 0x4, 0x71bbb997, 0x1, 0x8df1, 0x5, 0x7, 0x3ff, 0xff, 0xf4, 0x6, 0x0, 0xffffffff, 0x9, 0x2, 0xba, 0x0, 0x9, 0x4, 0xcb33, 0xc, 0x6, 0xf3b, 0x10001, 0x2, 0x200, 0x800, 0xffff, 0x8, 0x9, 0x80, 0x9, 0x750c, 0x7ff, 0x5, 0x6, 0x1200, 0x81, 0x6, 0x7, 0x7, 0x48, 0x1ff, 0x1, 0x4, 0x0, 0xc, 0x8, 0x0, 0x5, 0xa, 0x4, 0x7, 0x7ff, 0x7, 0x6, 0xff, 0x585, 0x5ba, 0xfffffffc, 0x6666b96f, 0x3ff, 0xfffffbff, 0x3ff, 0x7fff, 0x0, 0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x5b71, 0x1, 0x7fffffff, 0xfffffffe, 0x3, 0xfffffff3, 0x6, 0x5, 0x4, 0x79, 0x3, 0x9, 0x4, 0x26, 0x8000, 0x7fff, 0xc92, 0x4b000000, 0x0, 0xfffffffe, 0x7, 0xa8a, 0x8, 0x7ff, 0x9, 0xe0df, 0x8, 0x9, 0x8, 0x0, 0x80000001, 0x0, 0x0, 0xc, 0xfffffbde, 0x8, 0xb, 0x81, 0x10001, 0x7, 0xc1f5, 0x6, 0xfff, 0x6, 0x1000, 0xfffffff9, 0x7fffffff, 0x4, 0x2f, 0x10000, 0x9, 0xe, 0x8000, 0x4, 0x0, 0x7, 0x7fffffff, 0x15, 0x5, 0x614b1b3f, 0x8, 0x3800, 0xdbe, 0x4, 0x4, 0x4, 0x2, 0x2, 0x2ed, 0x3, 0x800, 0x1, 0x69, 0x94, 0xffffffff, 0x6, 0x7, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x1, 0x2, 0x7, {0x7, 0x2, 0xd, 0x7, 0x7, 0x6}, {0x13, 0x0, 0xf556, 0x6, 0x1, 0x1}, 0x2, 0x9, 0x9}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3a63}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}]]}, {0xbe, 0x6, "a70c286d6d5d5b7704a73b96cecea0320c081608fe8d83f5b0caf8f1f72ab9f8babb33752395b79d7f9f2b6efee7954525c53c3f11bfb83d9c93736822cf05fa0702e3dfd520a0edab45d03769f30d1dc21b817ca2d59e1b7d619253e48aeb255ed5fa1342759b5b3efe57c5b1b72cf1c4f9d37ef59051ac1863941a9d254415bcbca305c45c62750321b7e603f332578e7662abc731f0942b0e0abe302189c80ac42066f805b9adb0585b53836e8e287839918839454f4d2bf7"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x7ac}, 0x1, 0x0, 0x0, 0x8001}, 0x30004850) 0s ago: executing program 1 (id=93): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x50}}, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r5, 0x2007ffb) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x200) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r7, r6, 0x0, 0x7ffff000) creat(0x0, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xf, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000001000000000000000000000218110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000001f9500000000000000bf91000000000000b7022f00010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x800000}, &(0x7f0000000540), &(0x7f0000000040), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.48' (ED25519) to the list of known hosts. [ 81.529539][ T5800] cgroup: Unknown subsys name 'net' [ 81.790153][ T5800] cgroup: Unknown subsys name 'cpuset' [ 81.844232][ T5800] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.841584][ T5800] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.248110][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.283099][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.299758][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.302110][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.314826][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.325530][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.325986][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.327464][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.330398][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.330851][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.333674][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.336083][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.338175][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.340911][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.341384][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.349533][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.354271][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.355560][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.384724][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.447966][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.526199][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.558823][ T5818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.574694][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.580899][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.583316][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.075726][ T31] cfg80211: failed to load regulatory.db [ 87.865493][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 87.889526][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 87.908073][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 87.981034][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 88.002525][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 88.304263][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.305172][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.305351][ T5812] bridge_slave_0: entered allmulticast mode [ 88.307031][ T5812] bridge_slave_0: entered promiscuous mode [ 88.312654][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.312805][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.312990][ T5814] bridge_slave_0: entered allmulticast mode [ 88.319500][ T5814] bridge_slave_0: entered promiscuous mode [ 88.347916][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.348039][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.348578][ T5816] bridge_slave_0: entered allmulticast mode [ 88.351892][ T5816] bridge_slave_0: entered promiscuous mode [ 88.385085][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.385223][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.385409][ T5812] bridge_slave_1: entered allmulticast mode [ 88.388606][ T5812] bridge_slave_1: entered promiscuous mode [ 88.394819][ T5827] Bluetooth: hci1: command tx timeout [ 88.396377][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.396512][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.396676][ T5814] bridge_slave_1: entered allmulticast mode [ 88.400176][ T5814] bridge_slave_1: entered promiscuous mode [ 88.425633][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.425755][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.426287][ T5816] bridge_slave_1: entered allmulticast mode [ 88.430044][ T5816] bridge_slave_1: entered promiscuous mode [ 88.474978][ T5827] Bluetooth: hci2: command tx timeout [ 88.474995][ T5823] Bluetooth: hci0: command tx timeout [ 88.496607][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.496745][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.496851][ T5813] bridge_slave_0: entered allmulticast mode [ 88.498734][ T5813] bridge_slave_0: entered promiscuous mode [ 88.540593][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.540700][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.540807][ T5817] bridge_slave_0: entered allmulticast mode [ 88.542390][ T5817] bridge_slave_0: entered promiscuous mode [ 88.588323][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.588425][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.588541][ T5813] bridge_slave_1: entered allmulticast mode [ 88.590122][ T5813] bridge_slave_1: entered promiscuous mode [ 88.610761][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.610881][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.611378][ T5817] bridge_slave_1: entered allmulticast mode [ 88.618631][ T5817] bridge_slave_1: entered promiscuous mode [ 88.629305][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.633646][ T5823] Bluetooth: hci3: command tx timeout [ 88.633768][ T5823] Bluetooth: hci4: command tx timeout [ 88.635825][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.667092][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.688985][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.691321][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.721739][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.888626][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.910730][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.942935][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.965803][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.967665][ T5812] team0: Port device team_slave_0 added [ 88.969701][ T5814] team0: Port device team_slave_0 added [ 88.995118][ T5816] team0: Port device team_slave_0 added [ 89.012626][ T5812] team0: Port device team_slave_1 added [ 89.016423][ T5814] team0: Port device team_slave_1 added [ 89.035469][ T5816] team0: Port device team_slave_1 added [ 89.079410][ T5813] team0: Port device team_slave_0 added [ 89.097299][ T5817] team0: Port device team_slave_0 added [ 89.156386][ T5813] team0: Port device team_slave_1 added [ 89.173342][ T5817] team0: Port device team_slave_1 added [ 89.175874][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.175899][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.175925][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.179159][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.179173][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.179199][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.207553][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.207571][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.207595][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.229664][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.229682][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.229728][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.231219][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.231231][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.231255][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.259860][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.259878][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.259905][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.319253][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.319272][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.319296][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.338111][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.338129][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.338153][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.346770][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.346786][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.346811][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.354807][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.354831][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.354855][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.546982][ T5812] hsr_slave_0: entered promiscuous mode [ 89.548975][ T5812] hsr_slave_1: entered promiscuous mode [ 89.565381][ T5814] hsr_slave_0: entered promiscuous mode [ 89.566734][ T5814] hsr_slave_1: entered promiscuous mode [ 89.568322][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 89.568419][ T5814] Cannot create hsr debugfs directory [ 89.601744][ T5816] hsr_slave_0: entered promiscuous mode [ 89.603080][ T5816] hsr_slave_1: entered promiscuous mode [ 89.604166][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 89.604191][ T5816] Cannot create hsr debugfs directory [ 89.684166][ T5813] hsr_slave_0: entered promiscuous mode [ 89.685060][ T5813] hsr_slave_1: entered promiscuous mode [ 89.685852][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 89.685876][ T5813] Cannot create hsr debugfs directory [ 89.692301][ T5817] hsr_slave_0: entered promiscuous mode [ 89.693100][ T5817] hsr_slave_1: entered promiscuous mode [ 89.693821][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 89.693845][ T5817] Cannot create hsr debugfs directory [ 90.474770][ T5827] Bluetooth: hci1: command tx timeout [ 90.553733][ T5827] Bluetooth: hci2: command tx timeout [ 90.553769][ T5827] Bluetooth: hci0: command tx timeout [ 90.724437][ T5823] Bluetooth: hci4: command tx timeout [ 90.724447][ T5827] Bluetooth: hci3: command tx timeout [ 90.897223][ T5812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.943322][ T5812] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.951688][ T5812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.981104][ T5812] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.008682][ T5812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.038442][ T5812] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.042285][ T5812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.068334][ T5812] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.164086][ T5816] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.214965][ T5816] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.232737][ T5816] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.256601][ T5816] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.259971][ T5816] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.286508][ T5816] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.304687][ T5816] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.347180][ T5816] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.482417][ T5813] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.507378][ T5813] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.525825][ T5813] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.568734][ T5813] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.578361][ T5813] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.618700][ T5813] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.643392][ T5813] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.685289][ T5813] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.847623][ T5814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.877354][ T5814] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.899140][ T5814] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.938452][ T5814] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.943310][ T5814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.988343][ T5814] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.010929][ T5814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.048381][ T5814] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.142997][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.205392][ T5817] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.249818][ T5817] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.279217][ T5817] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.308697][ T5817] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.316638][ T5817] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.350779][ T5817] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.362277][ T5817] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.389599][ T5817] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.439386][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.443480][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.492251][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.492974][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.552887][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.553058][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.555428][ T5823] Bluetooth: hci1: command tx timeout [ 92.593261][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.634301][ T5823] Bluetooth: hci2: command tx timeout [ 92.644589][ T5823] Bluetooth: hci0: command tx timeout [ 92.656160][ T1518] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.656363][ T1518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.709788][ T1518] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.709894][ T1518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.740486][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.794150][ T5823] Bluetooth: hci3: command tx timeout [ 92.803855][ T5823] Bluetooth: hci4: command tx timeout [ 92.861748][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.890381][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.918470][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.918697][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.035459][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.035635][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.188571][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.260354][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.273040][ T1518] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.273265][ T1518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.407248][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.407401][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.538063][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.582249][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.632110][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.632243][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.681202][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.681463][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.835909][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.051087][ T5812] veth0_vlan: entered promiscuous mode [ 94.180717][ T5812] veth1_vlan: entered promiscuous mode [ 94.307799][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.531678][ T5812] veth0_macvtap: entered promiscuous mode [ 94.604678][ T5812] veth1_macvtap: entered promiscuous mode [ 94.622252][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.644771][ T5823] Bluetooth: hci1: command tx timeout [ 94.726881][ T5827] Bluetooth: hci2: command tx timeout [ 94.728939][ T5823] Bluetooth: hci0: command tx timeout [ 94.729416][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.755014][ T5813] veth0_vlan: entered promiscuous mode [ 94.770547][ T5816] veth0_vlan: entered promiscuous mode [ 94.782011][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.826844][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.828457][ T5813] veth1_vlan: entered promiscuous mode [ 94.831916][ T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.859739][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.863331][ T5816] veth1_vlan: entered promiscuous mode [ 94.871278][ T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.875132][ T5823] Bluetooth: hci4: command tx timeout [ 94.875170][ T5823] Bluetooth: hci3: command tx timeout [ 94.892927][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.044368][ T5814] veth0_vlan: entered promiscuous mode [ 95.261584][ T5814] veth1_vlan: entered promiscuous mode [ 95.295976][ T5813] veth0_macvtap: entered promiscuous mode [ 95.350848][ T5813] veth1_macvtap: entered promiscuous mode [ 95.361962][ T5816] veth0_macvtap: entered promiscuous mode [ 95.393075][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.393103][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.430672][ T5816] veth1_macvtap: entered promiscuous mode [ 95.459591][ T5817] veth0_vlan: entered promiscuous mode [ 95.517485][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.537456][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.537480][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.555608][ T5817] veth1_vlan: entered promiscuous mode [ 95.567498][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.569803][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.579191][ T5814] veth0_macvtap: entered promiscuous mode [ 95.661518][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.666877][ T55] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.667463][ T5814] veth1_macvtap: entered promiscuous mode [ 95.702862][ T55] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.727251][ T55] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.736510][ T55] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.753101][ T55] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.756347][ T55] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.762329][ T55] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.781300][ T55] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.994438][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.334707][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.509246][ T5817] veth0_macvtap: entered promiscuous mode [ 96.670313][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.671507][ T5817] veth1_macvtap: entered promiscuous mode [ 96.704560][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.708199][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.714113][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.810981][ T1518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.811014][ T1518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.052262][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.127669][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.127703][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.164203][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.447112][ T1558] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.448524][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.448546][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.451161][ T1558] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.461363][ T1558] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.507984][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.713115][ T1181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.713138][ T1181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.054431][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.054456][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.481258][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.481281][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.814544][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.814568][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.410281][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.410305][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.954982][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14'. [ 103.120936][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.214509][ T5984] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 103.230072][ T5983] FAULT_INJECTION: forcing a failure. [ 103.230072][ T5983] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 103.230108][ T5983] CPU: 0 UID: 0 PID: 5983 Comm: syz.2.16 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 103.230131][ T5983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 103.230143][ T5983] Call Trace: [ 103.230151][ T5983] [ 103.230159][ T5983] dump_stack_lvl+0xe8/0x150 [ 103.230197][ T5983] should_fail_ex+0x46b/0x600 [ 103.230233][ T5983] _copy_from_user+0x2d/0xb0 [ 103.230261][ T5983] ax25_ctl_ioctl+0x102/0xad0 [ 103.230289][ T5983] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 103.230314][ T5983] ? __pfx_ax25_ctl_ioctl+0x10/0x10 [ 103.230351][ T5983] ? rcu_is_watching+0x15/0xb0 [ 103.230383][ T5983] ? bpf_lsm_capable+0x9/0x20 [ 103.230405][ T5983] ? security_capable+0x7e/0x2c0 [ 103.230434][ T5983] ax25_ioctl+0x796/0xd40 [ 103.230462][ T5983] ? __pfx_ax25_ioctl+0x10/0x10 [ 103.230487][ T5983] ? tomoyo_path_number_perm+0x219/0x630 [ 103.230508][ T5983] ? tomoyo_path_number_perm+0x219/0x630 [ 103.230531][ T5983] ? do_vfs_ioctl+0x117b/0x1540 [ 103.230555][ T5983] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 103.230582][ T5983] sock_do_ioctl+0x101/0x320 [ 103.230608][ T5983] ? __pfx_sock_do_ioctl+0x10/0x10 [ 103.230635][ T5983] ? __asan_memset+0x22/0x50 [ 103.230660][ T5983] ? smack_file_ioctl+0x263/0x360 [ 103.230695][ T5983] sock_ioctl+0x5c9/0x7f0 [ 103.230719][ T5983] ? __pfx_sock_ioctl+0x10/0x10 [ 103.230741][ T5983] ? __fget_files+0x2a/0x420 [ 103.230765][ T5983] ? __fget_files+0x3a6/0x420 [ 103.230789][ T5983] ? __fget_files+0x2a/0x420 [ 103.230817][ T5983] ? bpf_lsm_file_ioctl+0x9/0x20 [ 103.230836][ T5983] ? __pfx_sock_ioctl+0x10/0x10 [ 103.230857][ T5983] __se_sys_ioctl+0xff/0x170 [ 103.230877][ T5983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.230898][ T5983] do_syscall_64+0x15f/0xf80 [ 103.230920][ T5983] ? trace_irq_disable+0x3b/0x140 [ 103.230940][ T5983] ? clear_bhb_loop+0x40/0x90 [ 103.230963][ T5983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.231010][ T5983] RIP: 0033:0x7f66b94ac819 [ 103.231028][ T5983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.231044][ T5983] RSP: 002b:00007f66b76fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.231065][ T5983] RAX: ffffffffffffffda RBX: 00007f66b9725fa0 RCX: 00007f66b94ac819 [ 103.231079][ T5983] RDX: 0000200000000200 RSI: 00000000000089e8 RDI: 0000000000000005 [ 103.231091][ T5983] RBP: 00007f66b76fe090 R08: 0000000000000000 R09: 0000000000000000 [ 103.231103][ T5983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.231114][ T5983] R13: 00007f66b9726038 R14: 00007f66b9725fa0 R15: 00007ffd2f689678 [ 103.231145][ T5983] [ 103.306402][ T5985] netlink: 'syz.4.17': attribute type 2 has an invalid length. [ 103.446998][ T5984] team0: Cannot enslave team device to itself [ 103.546798][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 103.651645][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.675479][ T9] usb 2-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 103.675513][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.675534][ T9] usb 2-1: Product: syz [ 103.675550][ T9] usb 2-1: Manufacturer: syz [ 103.675566][ T9] usb 2-1: SerialNumber: syz [ 104.225565][ T5996] netlink: 80 bytes leftover after parsing attributes in process `syz.0.19'. [ 104.291818][ T9] usb 2-1: can't set config #1, error -71 [ 104.727542][ T5997] process 'syz.3.20' launched './file0' with NULL argv: empty string added [ 104.977105][ T5827] Bluetooth: hci3: command tx timeout [ 105.037183][ T9] usb 2-1: USB disconnect, device number 2 [ 105.825128][ T5900] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.029781][ T5900] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 106.029816][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.029838][ T5900] usb 4-1: Product: syz [ 106.029854][ T5900] usb 4-1: Manufacturer: syz [ 106.029870][ T5900] usb 4-1: SerialNumber: syz [ 106.670577][ T6012] netlink: 'syz.4.25': attribute type 2 has an invalid length. [ 107.580242][ T5994] pimreg9: entered allmulticast mode [ 107.873132][ T5900] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 107.873179][ T5900] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 107.877639][ T5900] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 107.877697][ T5900] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 107.922715][ T5900] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 108.065534][ T5900] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 108.113678][ T5907] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.390362][ T5900] usb 4-1: USB disconnect, device number 2 [ 108.543641][ T5907] usb 2-1: Using ep0 maxpacket: 16 [ 108.547274][ T5907] usb 2-1: config 0 has no interfaces? [ 108.553190][ T5907] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 108.553223][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.553245][ T5907] usb 2-1: Product: syz [ 108.553260][ T5907] usb 2-1: Manufacturer: syz [ 108.553275][ T5907] usb 2-1: SerialNumber: syz [ 108.769639][ T6034] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 108.873912][ T5907] usb 2-1: config 0 descriptor?? [ 109.331958][ T6040] Zero length message leads to an empty skb [ 109.418682][ T6043] netlink: 'syz.0.33': attribute type 2 has an invalid length. [ 109.752727][ T6049] netlink: 80 bytes leftover after parsing attributes in process `syz.4.34'. [ 110.414603][ T5900] usb 2-1: USB disconnect, device number 3 [ 110.815700][ T6060] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.189927][ T37] audit: type=1326 audit(1776886224.974:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6062 comm="syz.4.38" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd88bc3c819 code=0x0 [ 111.329327][ T6055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 112.067762][ T5907] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 112.251803][ T5907] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.251866][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.251894][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.251945][ T5907] usb 4-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 112.251971][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.467606][ T5907] usb 4-1: config 0 descriptor?? [ 112.512648][ T6092] EXT4-fs: Conflicting test_dummy_encryption options [ 113.457402][ T5907] hid (null): report_id 0 is invalid [ 113.670399][ T6080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.42'. [ 113.725357][ T6102] netlink: 'syz.4.49': attribute type 2 has an invalid length. [ 113.937099][ T5907] wacom 0003:056A:0010.0001: report_id 0 is invalid [ 113.937127][ T5907] wacom 0003:056A:0010.0001: item 0 0 1 8 parsing failed [ 113.963059][ T5907] wacom 0003:056A:0010.0001: parse failed [ 113.963306][ T5907] wacom 0003:056A:0010.0001: probe with driver wacom failed with error -22 [ 114.160178][ T6080] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 114.208237][ T6107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.42'. [ 114.341253][ T6117] netlink: 20 bytes leftover after parsing attributes in process `syz.3.42'. [ 114.370336][ T31] usb 4-1: USB disconnect, device number 3 [ 114.607144][ T6124] netlink: 'syz.2.53': attribute type 21 has an invalid length. [ 114.607179][ T6124] IPv6: NLM_F_CREATE should be specified when creating new route [ 114.631885][ T6124] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 114.631903][ T6124] IPv6: NLM_F_CREATE should be set when creating new route [ 114.632039][ T6124] IPv6: NLM_F_CREATE should be set when creating new route [ 114.632072][ T6124] IPv6: NLM_F_CREATE should be set when creating new route [ 114.838992][ T6132] netlink: 20 bytes leftover after parsing attributes in process `syz.1.56'. [ 114.839029][ T6132] netlink: 28 bytes leftover after parsing attributes in process `syz.1.56'. [ 114.990540][ T6132] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 115.857938][ T6140] batman_adv: batadv0: Adding interface: dummy0 [ 115.857986][ T6140] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.858110][ T6140] batman_adv: batadv0: Interface activated: dummy0 [ 116.026987][ T6141] batadv0: mtu less than device minimum [ 116.096134][ T6141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.154518][ T6141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.214997][ T6141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.253823][ T6141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.261299][ T6141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.270068][ T6141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.336005][ T6141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.343850][ T6141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.353349][ T6141] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.937482][ T6153] netlink: 'syz.2.64': attribute type 2 has an invalid length. [ 117.114729][ T5998] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 117.165435][ T6154] netlink: 80 bytes leftover after parsing attributes in process `syz.4.62'. [ 117.876440][ T5879] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.899587][ T5998] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.899625][ T5998] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.899642][ T5998] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.899717][ T5998] usb 4-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 117.899738][ T5998] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.947537][ T5998] usb 4-1: config 0 descriptor?? [ 118.063663][ T5879] usb 2-1: Using ep0 maxpacket: 16 [ 118.080945][ T5879] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 118.080978][ T5879] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 118.081245][ T5879] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 118.081268][ T5879] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 118.081288][ T5879] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 118.081306][ T5879] usb 2-1: config 0 has no interface number 0 [ 118.081486][ T5879] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 118.081577][ T5879] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 118.081601][ T5879] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 118.081639][ T5879] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.081667][ T5879] usb 2-1: config 0 interface 125 has no altsetting 0 [ 118.081747][ T5879] usb 2-1: config 0 interface 125 has no altsetting 2 [ 118.211913][ T5879] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 118.212610][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.212636][ T5879] usb 2-1: Product: syz [ 118.212652][ T5879] usb 2-1: Manufacturer: syz [ 118.212676][ T5879] usb 2-1: SerialNumber: syz [ 118.297098][ T5879] usb 2-1: config 0 descriptor?? [ 118.342535][ T5879] usb 2-1: selecting invalid altsetting 2 [ 118.453683][ T5998] hid (null): report_id 0 is invalid [ 118.499713][ T5998] wacom 0003:056A:0010.0002: report_id 0 is invalid [ 118.499741][ T5998] wacom 0003:056A:0010.0002: item 0 0 1 8 parsing failed [ 118.501211][ T5998] wacom 0003:056A:0010.0002: parse failed [ 118.501393][ T5998] wacom 0003:056A:0010.0002: probe with driver wacom failed with error -22 [ 119.723551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.743571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.753556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.763552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.773551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.783551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.793556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.225307][ T5879] get_1284_register timeout [ 120.264246][ C0] usb 2-1: async_complete: urb error -104 [ 120.267799][ C0] usb 2-1: async_complete: urb error -104 [ 120.267915][ C0] usb 2-1: async_complete: urb error -104 [ 120.267996][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 120.838123][ T6171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.63'. [ 121.088785][ T36] usb 2-1: USB disconnect, device number 4 [ 121.219339][ T6171] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 121.487424][ T5998] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 121.526411][ T5879] usb 4-1: USB disconnect, device number 4 [ 121.853559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.873553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.883551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.962799][ T5998] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.962862][ T5998] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.962892][ T5998] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.962935][ T5998] usb 3-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 121.962961][ T5998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.999596][ T5821] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 122.828456][ T5998] usb 3-1: config 0 descriptor?? [ 122.886206][ T5821] usb 1-1: device descriptor read/64, error -71 [ 123.343735][ T5821] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 127.028717][ T5821] usb 1-1: device descriptor read/64, error -71 [ 127.679012][ T5821] usb usb1-port1: attempt power cycle [ 127.806843][ T5998] usbhid 3-1:0.0: can't add hid device: -71 [ 127.806980][ T5998] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 127.941370][ T5998] usb 3-1: USB disconnect, device number 2 [ 128.250470][ T6210] netlink: 'syz.2.77': attribute type 2 has an invalid length. [ 128.369518][ T6215] netlink: 'syz.1.75': attribute type 2 has an invalid length. [ 128.575489][ T6214] netlink: 80 bytes leftover after parsing attributes in process `syz.0.76'. [ 133.130024][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.130131][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.806558][ T5821] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 133.956098][ T5821] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 133.956136][ T5821] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 133.956163][ T5821] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 133.961117][ T5821] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 133.961149][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.961170][ T5821] usb 1-1: Product: syz [ 133.961185][ T5821] usb 1-1: Manufacturer: syz [ 133.961200][ T5821] usb 1-1: SerialNumber: syz [ 133.997623][ T5821] usb 1-1: config 0 descriptor?? [ 134.001139][ T6236] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 134.003924][ T6236] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 134.022081][ T5821] usb 1-1: ucan: probing device on interface #0 [ 134.143956][ T820] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 135.233705][ T820] usb 5-1: Using ep0 maxpacket: 16 [ 135.236385][ T820] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 135.236411][ T820] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 135.236432][ T820] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 135.236452][ T820] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 135.236470][ T820] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 135.236560][ T820] usb 5-1: config 0 has no interface number 0 [ 135.236592][ T820] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 135.236609][ T820] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 135.236624][ T820] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 135.236732][ T820] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 135.236762][ T820] usb 5-1: config 0 interface 125 has no altsetting 0 [ 135.236780][ T820] usb 5-1: config 0 interface 125 has no altsetting 2 [ 135.269652][ T820] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 135.269752][ T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.269773][ T820] usb 5-1: Product: syz [ 135.269787][ T820] usb 5-1: Manufacturer: syz [ 135.269800][ T820] usb 5-1: SerialNumber: syz [ 135.356533][ T5821] usb 1-1: ucan: device reported invalid device info [ 135.356556][ T5821] usb 1-1: ucan: probe failed; try to update the device firmware [ 135.435213][ T6252] netlink: 80 bytes leftover after parsing attributes in process `syz.2.88'. [ 135.555158][ T6257] netlink: 'syz.1.89': attribute type 2 has an invalid length. [ 135.860569][ T820] usb 5-1: config 0 descriptor?? [ 135.973998][ T820] usb 5-1: selecting invalid altsetting 2 [ 136.004082][ T5821] usb 1-1: USB disconnect, device number 5 [ 136.931802][ T6263] netlink: 'syz.3.90': attribute type 2 has an invalid length. [ 137.025270][ C1] usb 5-1: async_complete: urb error -71 [ 137.025339][ C1] usb 5-1: async_complete: urb error -71 [ 137.025389][ C1] usb 5-1: async_complete: urb error -71 [ 137.025438][ C1] usb 5-1: async_complete: urb error -71 [ 137.036715][ T820] get_1284_register: usb error -71 [ 137.166026][ T820] usb 5-1: USB disconnect, device number 2 [ 137.353362][ C1] [ 137.353372][ C1] ====================================================== [ 137.353376][ C1] WARNING: possible circular locking dependency detected [ 137.353381][ C1] syzkaller #0 Not tainted [ 137.353388][ C1] ------------------------------------------------------ [ 137.353392][ C1] syz.3.90/6265 is trying to acquire lock: [ 137.353399][ C1] ffff888064996ba0 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 137.353437][ C1] [ 137.353437][ C1] but task is already holding lock: [ 137.353441][ C1] ffff88803960f460 (slock-AF_PHONET/1){+.+.}-{3:3}, at: __sk_receive_skb+0x1bf/0x9e0 [ 137.353471][ C1] [ 137.353471][ C1] which lock already depends on the new lock. [ 137.353471][ C1] [ 137.353474][ C1] [ 137.353474][ C1] the existing dependency chain (in reverse order) is: [ 137.353478][ C1] [ 137.353478][ C1] -> #1 (slock-AF_PHONET/1){+.+.}-{3:3}: [ 137.353509][ C1] rt_spin_lock_nested+0x81/0x3f0 [ 137.353537][ C1] __sk_receive_skb+0x1bf/0x9e0 [ 137.353558][ C1] pep_do_rcv+0x685/0xaa0 [ 137.353575][ C1] __sk_receive_skb+0x962/0x9e0 [ 137.353598][ C1] phonet_rcv+0x781/0xc40 [ 137.353622][ C1] process_backlog+0x5e1/0xc60 [ 137.353638][ C1] __napi_poll+0xab/0x550 [ 137.353650][ C1] net_rx_action+0x696/0xe00 [ 137.353663][ C1] handle_softirqs+0x1de/0x6d0 [ 137.353679][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 137.353694][ C1] __dev_queue_xmit+0x1eaf/0x3900 [ 137.353705][ C1] batadv_send_skb_packet+0x418/0x690 [ 137.353718][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x631/0x7e0 [ 137.353731][ C1] process_scheduled_works+0xb5d/0x1860 [ 137.353747][ C1] worker_thread+0xa53/0xfc0 [ 137.353755][ C1] kthread+0x388/0x470 [ 137.353767][ C1] ret_from_fork+0x514/0xb70 [ 137.353777][ C1] ret_from_fork_asm+0x1a/0x30 [ 137.353788][ C1] [ 137.353788][ C1] -> #0 (slock-AF_PHONET){+...}-{3:3}: [ 137.353813][ C1] __lock_acquire+0x15a5/0x2cf0 [ 137.353825][ C1] lock_acquire+0x106/0x350 [ 137.353836][ C1] rt_spin_lock+0x83/0x400 [ 137.353851][ C1] __sk_receive_skb+0x1f1/0x9e0 [ 137.353864][ C1] phonet_rcv+0x781/0xc40 [ 137.353878][ C1] process_backlog+0x5e1/0xc60 [ 137.353892][ C1] __napi_poll+0xab/0x550 [ 137.353903][ C1] net_rx_action+0x696/0xe00 [ 137.353916][ C1] handle_softirqs+0x1de/0x6d0 [ 137.353931][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 137.353947][ C1] netif_rx+0xb9/0xf0 [ 137.353956][ C1] pn_send+0x62a/0x8e0 [ 137.353971][ C1] pn_skb_send+0x218/0x510 [ 137.353984][ C1] pipe_snd_status+0x1f1/0x320 [ 137.354000][ C1] pipe_do_rcv+0xf15/0x16a0 [ 137.354009][ C1] __sk_receive_skb+0x962/0x9e0 [ 137.354022][ C1] pep_do_rcv+0x685/0xaa0 [ 137.354031][ C1] __release_sock+0x2a9/0x3d0 [ 137.354041][ C1] release_sock+0x1be/0x290 [ 137.354055][ C1] pep_sock_accept+0xd47/0x11e0 [ 137.354070][ C1] pn_socket_accept+0xc1/0x310 [ 137.354083][ C1] do_accept+0x52b/0x760 [ 137.354097][ C1] __sys_accept4+0x139/0x230 [ 137.354111][ C1] __x64_sys_accept4+0x9a/0xb0 [ 137.354125][ C1] do_syscall_64+0x15f/0xf80 [ 137.354137][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.354147][ C1] [ 137.354147][ C1] other info that might help us debug this: [ 137.354147][ C1] [ 137.354151][ C1] Possible unsafe locking scenario: [ 137.354151][ C1] [ 137.354155][ C1] CPU0 CPU1 [ 137.354158][ C1] ---- ---- [ 137.354161][ C1] lock(slock-AF_PHONET/1); [ 137.354171][ C1] lock(slock-AF_PHONET); [ 137.354179][ C1] lock(slock-AF_PHONET/1); [ 137.354190][ C1] lock(slock-AF_PHONET); [ 137.354197][ C1] [ 137.354197][ C1] *** DEADLOCK *** [ 137.354197][ C1] [ 137.354200][ C1] 6 locks held by syz.3.90/6265: [ 137.354207][ C1] #0: ffff888064997518 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_accept+0x107/0x11e0 [ 137.354239][ C1] #1: ffff88803960f460 (slock-AF_PHONET/1){+.+.}-{3:3}, at: __sk_receive_skb+0x1bf/0x9e0 [ 137.354270][ C1] #2: ffffffff8dfc80c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock_nested+0x1de/0x3f0 [ 137.354301][ C1] #3: ffff88803960f518 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_do_rcv+0x685/0xaa0 [ 137.354326][ C1] #4: ffffffff8dfc80c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 137.354356][ C1] #5: ffffffff8dfc80c0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60 [ 137.354385][ C1] [ 137.354385][ C1] stack backtrace: [ 137.354393][ C1] CPU: 1 UID: 0 PID: 6265 Comm: syz.3.90 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 137.354406][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 137.354413][ C1] Call Trace: [ 137.354418][ C1] [ 137.354423][ C1] dump_stack_lvl+0xe8/0x150 [ 137.354441][ C1] print_circular_bug+0x2e1/0x300 [ 137.354457][ C1] check_noncircular+0x12e/0x150 [ 137.354474][ C1] __lock_acquire+0x15a5/0x2cf0 [ 137.354492][ C1] ? __sk_receive_skb+0x1f1/0x9e0 [ 137.354506][ C1] lock_acquire+0x106/0x350 [ 137.354518][ C1] ? __sk_receive_skb+0x1f1/0x9e0 [ 137.354533][ C1] ? sk_filter_trim_cap+0x8f1/0xce0 [ 137.354549][ C1] rt_spin_lock+0x83/0x400 [ 137.354565][ C1] ? __sk_receive_skb+0x1f1/0x9e0 [ 137.354579][ C1] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 137.354590][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 137.354608][ C1] ? pn_find_sock_by_sa+0x94/0x510 [ 137.354622][ C1] __sk_receive_skb+0x1f1/0x9e0 [ 137.354638][ C1] phonet_rcv+0x781/0xc40 [ 137.354653][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 137.354669][ C1] ? __pfx_phonet_rcv+0x10/0x10 [ 137.354685][ C1] ? process_backlog+0x271/0xc60 [ 137.354699][ C1] ? process_backlog+0x271/0xc60 [ 137.354713][ C1] ? __pfx_phonet_rcv+0x10/0x10 [ 137.354728][ C1] process_backlog+0x5e1/0xc60 [ 137.354746][ C1] __napi_poll+0xab/0x550 [ 137.354760][ C1] net_rx_action+0x696/0xe00 [ 137.354778][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 137.354816][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 137.354831][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 137.354847][ C1] ? enqueue_to_backlog+0x340/0xcb0 [ 137.354863][ C1] handle_softirqs+0x1de/0x6d0 [ 137.354882][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 137.354899][ C1] netif_rx+0xb9/0xf0 [ 137.354909][ C1] pn_send+0x62a/0x8e0 [ 137.354926][ C1] pn_skb_send+0x218/0x510 [ 137.354942][ C1] pipe_snd_status+0x1f1/0x320 [ 137.354959][ C1] ? __pfx_pipe_snd_status+0x10/0x10 [ 137.354977][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 137.354990][ C1] pipe_do_rcv+0xf15/0x16a0 [ 137.355001][ C1] ? __pfx_pipe_do_rcv+0x10/0x10 [ 137.355013][ C1] ? __pfx_pipe_do_rcv+0x10/0x10 [ 137.355023][ C1] ? pep_do_rcv+0x685/0xaa0 [ 137.355033][ C1] __sk_receive_skb+0x962/0x9e0 [ 137.355049][ C1] pep_do_rcv+0x685/0xaa0 [ 137.355059][ C1] ? __pfx_pep_do_rcv+0x10/0x10 [ 137.355070][ C1] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 137.355086][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 137.355099][ C1] ? __pfx_pep_do_rcv+0x10/0x10 [ 137.355108][ C1] __release_sock+0x2a9/0x3d0 [ 137.355120][ C1] ? __release_sock+0xa4/0x3d0 [ 137.355132][ C1] release_sock+0x1be/0x290 [ 137.355146][ C1] ? release_sock+0x2f/0x290 [ 137.355161][ C1] pep_sock_accept+0xd47/0x11e0 [ 137.355177][ C1] ? __asan_memcpy+0x40/0x70 [ 137.355194][ C1] ? __pfx_pep_sock_accept+0x10/0x10 [ 137.355210][ C1] ? alloc_file_pseudo+0x1ae/0x240 [ 137.355225][ C1] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 137.355238][ C1] ? evm_inode_alloc_security+0x40/0xb0 [ 137.355252][ C1] ? security_inode_alloc+0xd5/0x310 [ 137.355270][ C1] pn_socket_accept+0xc1/0x310 [ 137.355283][ C1] ? sock_alloc_file+0x1df/0x2f0 [ 137.355297][ C1] do_accept+0x52b/0x760 [ 137.355312][ C1] ? __pfx_do_accept+0x10/0x10 [ 137.355332][ C1] __sys_accept4+0x139/0x230 [ 137.355347][ C1] ? __pfx___sys_accept4+0x10/0x10 [ 137.355364][ C1] __x64_sys_accept4+0x9a/0xb0 [ 137.355379][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.355391][ C1] do_syscall_64+0x15f/0xf80 [ 137.355403][ C1] ? trace_irq_disable+0x3b/0x140 [ 137.355414][ C1] ? clear_bhb_loop+0x40/0x90 [ 137.355426][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.355437][ C1] RIP: 0033:0x7f159266c819 [ 137.355449][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.355458][ C1] RSP: 002b:00007f15908a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 137.355470][ C1] RAX: ffffffffffffffda RBX: 00007f15928e6090 RCX: 00007f159266c819 [ 137.355479][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 137.355485][ C1] RBP: 00007f1592702c91 R08: 0000000000000000 R09: 0000000000000000 [ 137.355492][ C1] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000000 [ 137.355499][ C1] R13: 00007f15928e6128 R14: 00007f15928e6090 R15: 00007ffe0e5ac308 [ 137.355511][ C1] [ 140.139542][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'.