last executing test programs: 13m25.64637573s ago: executing program 32 (id=158): bpf$TOKEN_CREATE(0x24, &(0x7f0000000780), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x4, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x2016}}}, 0x7) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0xc000003, 0xf, &(0x7f0000000080)=[0x1e, 0x9, 0x2, 0x4, 0x4, 0xffffdffa, 0x2d7b, 0x40000003, 0x5d, 0x5, 0xfffffffa, 0x8, 0x6, 0x880e, 0x5], 0x2, 0x4000007}) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb90402200800fd00d0cf7c13000000a10a000700014002020c600004b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95647daffffffffff1f215ce3bb9ad809d5e1cace81ed0bff07000000000000007276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a682", 0xd5}], 0x1}, 0x40080) syz_clone3(&(0x7f0000000600)={0x41000, &(0x7f0000000380)=0xffffffffffffffff, &(0x7f00000003c0)=0x0, &(0x7f0000000400), {0xc}, &(0x7f00000004c0)=""/92, 0x5c, &(0x7f0000000580)=""/3, &(0x7f00000005c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58) sched_setscheduler(r3, 0x0, &(0x7f0000000680)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)={0xffffffffffffffff}, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000280)=ANY=[@ANYRES16=r2], &(0x7f0000000080)='GPL\x00', 0x5, 0xc9, &(0x7f0000000940)=""/201, 0x0, 0xf, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x6}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000ac0)=ANY=[@ANYRES32=r8, @ANYRES32=r8, @ANYBLOB="2f0000000000000000000041f78d2557f61ee800e11306f6449437c50b9b22e0edf27f6d0b8ed67318e2ff147bc338051a19afd78e812c9179b8a16ddcf6b565fd22972cc6dd", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000900)={r6, r6, 0x16, 0x0, @val=@tcx={@void, @value=r7, @void, @void, r9}}, 0x1c) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0x0, 0x110a}, 0xc) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000740)={0xff, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYRES32=r10, @ANYRES32=r5, @ANYBLOB="2d0000317f5e4e916d82edb3", @ANYRES32=r11, @ANYRES64=r9], 0x20) ioctl$COMEDI_CMD(r0, 0x80406409, &(0x7f0000000340)={0x0, 0x80, 0x0, 0x8f, 0x80, 0x5, 0x4, 0x0, 0x40, 0xffffffff, 0x10, 0x1, &(0x7f0000000140)=[0x7, 0xc3, 0x7, 0x5, 0x4, 0x1, 0x6, 0x3], 0x8, &(0x7f0000000280)="04bf6eed41ddc1d3a2cdc0700c6bae0064c1395734865b262fc3760214138e00d9ac2005651d390cf45f6851c46220ab180f54cc2fc7a1b03edc069f4b69643e268993046d4b6db15e38bb994ae8c5ce87fd23fdac1b63137b0755d50e1fcdfd63b329a3c18acc32180afab43862a17542756728afc755654aa7dfa0f1b261bae34dfda115d50fcd972c440091a86ac8a4e90c8742e5c8", 0x97}) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 2m36.537769365s ago: executing program 33 (id=2686): syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00003b2000/0x4000)=nil) socket(0x40000000015, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x800, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000001c0)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close(0x3) 2m7.472136875s ago: executing program 34 (id=2811): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) getrlimit(0xc, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000180000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$audio1(0xffffff9c, 0x0, 0x400, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)={0x650, r5, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x620, 0x8, 0x0, 0x1, [{0x380, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x350, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x6}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x250, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x208, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x650}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r6, r6, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="ac67926f5a705f69643d", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000001,\x00']) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0x39011, 0x0) 1m23.015185506s ago: executing program 35 (id=2904): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$FICLONE(r1, 0x40049409, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x8994, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00'}, 0x94) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 1m17.975496564s ago: executing program 2 (id=2923): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x5, 0x4, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='team_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x70, 0xac, 0x7d, 0x5}, 0x9c) 1m17.755225733s ago: executing program 2 (id=2926): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0xfe, 0x7fff0006}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000070)='./proc\x00', &(0x7f00000000d0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/icmp_ratelimit\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1', 0x1) r2 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000002c0)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r4 = syz_open_dev$swradio(&(0x7f0000000300), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r4, 0xc0405665, &(0x7f0000000100)={0x2, 0x2, 0x3, 0x0, 0x694}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_crypto(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=@del={0xe8, 0x11, 0x20, 0x70bd2b, 0x25dfdbff, {{'drbg_pr_ctr_aes256\x00'}, '\x00', '\x00', 0x2c00, 0x600}, [{0x8, 0x1, 0x100}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20044884}, 0x24040800) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4018641b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000c17000/0x2000)=nil}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x22, 0x1}, &(0x7f0000000280)) ioctl$int_in(r5, 0x5421, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0xffb) r6 = openat$rtc(0xffffff9c, &(0x7f0000000340), 0x2000, 0x0) ioctl$RTC_EPOCH_SET(r6, 0x4004700e, 0x8000) fcntl$setstatus(r5, 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz1\x00'}, 0x5, 0x40, 0x1, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 1m17.483185607s ago: executing program 2 (id=2930): arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000023cd085a000000000000000000000000ffff00000000000000"], 0x4c}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffefe, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'fo\x00', 0x0, 0x7f}, 0x2c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8fffffeb703000008080000b704000000000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x4c) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000080)=0x3, 0x12) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000580)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @remote, 0xfffffff9}, r4}}, 0x30) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc01c5868, &(0x7f00000001c0)={r2, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x0, &(0x7f00000000c0)={@_ha_fsid={[0x7ff]}, {0x9, 0x9, 0x1, 0x7}}, 0x799, &(0x7f0000000100), &(0x7f0000000140)=0xa}) r9 = socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, 0x0) write$cgroup_subtree(r8, &(0x7f00000005c0)=ANY=[@ANYBLOB="2b626c6b696f2006667265657a6572202d626c6b696f20006e65745f636c73202b6e65745f636c73002d70696473202b6e65745f7072696f202b6e65745f7072696f202b63707573657420"], 0x4b) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=@newtfilter={0x4a0, 0x2c, 0xd2b, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x46c, 0x2, [@TCA_U32_POLICE={0x444, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x50, 0x4}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x3c7, 0xef2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x9d, 0x101, 0x0, 0x7, 0x2, 0x800, 0x9, 0xfffffff3, 0xffffffff, 0x9, 0x5, 0x99, 0x9, 0x4, 0x7fffffff, 0x9, 0x8, 0x2, 0x0, 0x49e783be, 0x10001, 0x7, 0x8, 0x4, 0x2, 0xa8, 0x4000000, 0x9, 0xf1, 0x0, 0xe1, 0x2, 0xce, 0x3, 0x6, 0x2, 0x8, 0x8, 0x9, 0x2, 0xc, 0x2, 0x10000, 0x1, 0x100, 0xff, 0xa226, 0x3, 0x8001, 0x4, 0x2f, 0x6a, 0x8, 0x400, 0x647fcd37, 0x4, 0x1000, 0x7ff, 0x6, 0x1, 0xfc00, 0xaba, 0x5, 0x7, 0x7f, 0x4, 0x5, 0xffff, 0x49, 0x10000000, 0x6a, 0x3, 0x4, 0x7, 0x7, 0x3, 0x7, 0x3, 0x5, 0xe, 0x7fff, 0x5, 0x2, 0xfffffffd, 0xffff, 0x200000, 0x2, 0x8001, 0x7ff, 0x5, 0x57a, 0x8001, 0x8b, 0x4022b232, 0x0, 0x81, 0x5, 0xfffffffd, 0xee9, 0x80000001, 0x4, 0xffff0211, 0x9, 0x5, 0x7, 0x5, 0xffffffff, 0x3, 0x401, 0x52f, 0x2, 0x0, 0x9, 0xae, 0x81, 0x9, 0x1d, 0x3, 0x5, 0x0, 0x8000, 0xfffffbff, 0x81, 0xa44e, 0x4, 0x9, 0xffffb060, 0x3, 0x4, 0xa5de, 0x8, 0x0, 0x7, 0x60000000, 0xeb, 0x9, 0x7, 0x3, 0xb01, 0x3, 0xbd9, 0x1, 0xfff, 0x2, 0x9, 0xdef, 0x2, 0x9, 0x8, 0x2, 0x3, 0x0, 0x0, 0x5, 0x8, 0x1, 0x3, 0x1d000, 0x0, 0x78b, 0x5e, 0x2, 0x10, 0x0, 0xca, 0x3, 0x1, 0x672d, 0xfffffff7, 0x7fffffff, 0x5, 0x4, 0x2, 0x5, 0x100, 0x2, 0x9, 0x2, 0x5, 0x81, 0x3, 0xdb, 0xa, 0x3, 0x3, 0xb, 0x4, 0x8, 0x5, 0x3, 0x4, 0xd162, 0x7ff, 0x0, 0xfffffffb, 0x760, 0x0, 0x5, 0x0, 0x8, 0x8, 0x1, 0x0, 0xda000000, 0x3050, 0x5, 0x8, 0x400000, 0x4, 0x24000, 0xffff1f92, 0xb, 0x5, 0x8, 0x1, 0x5cb45cef, 0x401, 0x3, 0x81, 0x90, 0x8, 0x8, 0x3, 0x8, 0xfffffffc, 0x3, 0x7ff, 0x10000, 0x8, 0xc1, 0x7, 0x1800, 0xfffff800, 0x3, 0x8, 0xa7, 0xdc3, 0x260000, 0x6, 0x4, 0x64d0, 0x22bc, 0x3, 0xfffff324, 0x5, 0x3, 0x8000, 0x6, 0x2, 0xffff4a8d, 0x3, 0x0, 0xb21e, 0x6, 0x8001]}]}, @TCA_U32_SEL={0x24, 0x5, {0x6, 0x7, 0x1, 0x4, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x4a0}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) syz_io_uring_complete(0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f0000000200)=@xdp={0x2c, 0xd, r11, 0x27}, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x268}, 0x4000081) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r12, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r13 = getpid() sched_setscheduler(r13, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 1m16.822335285s ago: executing program 6 (id=2931): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x10000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000600)={0x0, 0x0, {0x1, 0x2, 0x0, 0x0, 0x100000}, 0x1009}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x20912c}) r2 = socket(0x1e, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={r5, 0x1}, 0x8) sendmmsg$sock(r2, &(0x7f0000000100)=[{{&(0x7f0000000080)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x8982) r8 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_S_MODE(r8, 0x40046109, 0x0) ioctl$CEC_S_MODE(r7, 0x40046109, 0x0) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, &(0x7f0000000600)) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x507300, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x7, &(0x7f0000000280)="aa92ac083338ee1ed9fbffffff00", 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) ioprio_get$uid(0x3, 0x0) 1m16.817084935s ago: executing program 2 (id=2932): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff}) write$FUSE_GETXATTR(r3, &(0x7f0000002400)={0x18, 0x0, 0x0, {0xffff}}, 0x18) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x4000040) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x20}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r10, r10) setpgid(r10, r10) ioprio_get$pid(0x2, r10) write$RDMA_USER_CM_CMD_NOTIFY(r8, &(0x7f0000001740)={0xf, 0x8, 0xfa00, {r9, 0x13}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="39c394e534ecf02e7e0e9ca20800", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x95, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 1m16.618764427s ago: executing program 2 (id=2934): gettid() r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./debug/x86/pat_memtype_list\x00', 0xe191148f63df7df0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/disk', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r2, 0x500e, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./dev/mapper/control\x00', 0x2000, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$comedi(0xffffff9c, &(0x7f0000000380)='/dev/comedi1\x00', 0x20801, 0x0) ioctl$COMEDI_CMDTEST(r6, 0x8040640a, &(0x7f00000004c0)={0x9, 0x1, 0x80, 0xf, 0x80, 0x9, 0x1, 0x101, 0x10, 0x4, 0x100, 0x6, 0x0, 0x0, 0x0}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/bus/input/devices\x00', 0x0, 0x0) poll(&(0x7f00000004c0)=[{r7, 0x402}], 0x1, 0x1) syz_io_uring_setup(0xf00, &(0x7f0000000600)={0x0, 0x5961, 0x10020, 0x0, 0x4e, 0x0, r7}, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) read$msr(r5, &(0x7f00000002c0)=""/4096, 0x1000) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=ANY=[@ANYBLOB="340000001acf29795ed16af9410000000700000084703bcce0824f1d48f50f0c23f74d80aa3e408f366ce26fe1789f813d0ab19093370075019efd1ca0ce157480264b3bbee704e91d2baa87e32c7ec1a8afe5e7c8c54fc7596c9a6632970c918ba33003352fdfe177dd4a38bf4ff518bc8885f80477e57a7722d47ac568a52ca6a5c3c81fd7ddaaf81e7191431fe0f0f0b778f7713851257bf15fa7c7998018a1b08680eeab5dfe4fcd86e39d894d1ee468b89ae8e589790bbcc4454514fbe7ab80908dcab26d7204533a12a1679ddfc017f35f5e8f0e49d3cad1e1ecbc0784021636701a5f14989272deb414f03ddffcf5059dca10", @ANYRES32=r4, @ANYBLOB="000000000000000014001a80100004"], 0x34}}, 0x0) timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x24, 0x4, @thr={&(0x7f0000000440)="093a0fd4fcc61f8f893796f1a6358d6701cfbf8ee0604d2bf0b258e985eadd7956e9e8c705104ccf107cf68b8357901ef72c5aa29b7e777861eebec2387cbc3f4b9977deb66ede31a0aaf63f16b04ae6699c9f3ab1dd2f6617075ebf6b61ceb43fb17baaf46a94c36e1ce7131045e5c2dffaee4db8abee024dcce5c6b4c54b063991eef5f10ea045803ac8517a52acace9207f59b6eab5b2b000fb925ae34c50e2187aeb90a99d03d16c16bf5ad4ba161930c66b9e295bdb98ff29fb745366617649eb29ef44eddde133cdfd857927407f870b625ebb75cd32583124757d9b41dfa7ff7ed108ac557aa157a0", &(0x7f0000000380)="6fd29b53ddaa92b74238ecf543ccfd92fb21179d8c650ff57d3fbcea9568723a2e9ac27ddd4114f656b38657fdb69c1a0f34948a4419b75555d40bdc851d685418ec79cbda18f528bd9ef2b46f0f9ef0e530335abb4a66afcd0cdd0e7e094176f3298cfaf2df92a4050f22ef0fb45ad5397909d30cb7b8b5d2a4864920880c89b548b1572797dc5326443c363ace01cb"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 1m16.48295804s ago: executing program 5 (id=2935): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='bRequestType=+ bRequest=6 wValue=0 wIndex=0 wLength=0\x00', 0x36) 1m16.311426875s ago: executing program 5 (id=2936): openat$iommufd(0xffffffffffffff9c, 0x0, 0x2a82, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) mknodat(r1, &(0x7f0000000100)='./file7\x00', 0x1140, 0x7bcb) getdents64(r1, &(0x7f0000000240)=""/131, 0x83) openat(r1, &(0x7f0000000100)='./dev/ttyACM0\x00', 0x2, 0x1) syz_usb_control_io(r0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m15.832187278s ago: executing program 6 (id=2937): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002780)={0x18, 0x2f, 0x9, 0x70bd28, 0x0, {0x4}, [@nested={0x4, 0x10}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x28, r4, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) close_range(r1, 0xffffffffffffffff, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10) r7 = socket$kcm(0x29, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x119, 0x487, 0x0, &(0x7f0000000100)) setsockopt$sock_timeval(r6, 0x1, 0x1, &(0x7f0000000140), 0x10) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0xff, 0x0, 0x3, 0x0, 0xca}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000000000002000000300004802c000072616e67650000001c000280080001400000000b080002400000000104000480040003800900010073797a30000000000900020073797a3200000000140000001100010000160000000000000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 1m15.619501262s ago: executing program 2 (id=2938): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r3, 0x0, 0x4004) (async) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r3, 0x0, 0x4004) unshare(0x2040400) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x4) r6 = openat$cgroup_ro(r5, &(0x7f0000000340)='cgroup.stat\x00', 0x5000000, 0x0) readv(r6, &(0x7f00000012c0)=[{&(0x7f0000003c40)=""/4082, 0xff2}], 0x1) (async) readv(r6, &(0x7f00000012c0)=[{&(0x7f0000003c40)=""/4082, 0xff2}], 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f00000007c0)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}, {&(0x7f00000003c0)="8f74e60bcf5c2e709bfd2f497f8e6e09ef1bebb1cd558cf102a23371965cf3ae1e4ca838b297d5c2c27247eeedac81032c59b0284f1d5d69ff8c5c47131f6975cf75dca26a4200d6e0e0ce1f6b82267018e4cef970b73b25c4db98c78281fe8489316a3838bafc4c12ca8acee08121921511d4520d309d1610b6a1057127e5e948b9960a8d43600002397f6ceacd687d8def082b247aa4cd98aff59f71f830d9b078528faee283134a3769faf1de66f4297017615eda112bb1f120dfe3b0e7d0820d78865691ffcb8801482309aeb2", 0xcf}, {&(0x7f00000005c0)="c9d5b0b3eae8ad2d8e08ba6a1cacd371b6d2caaadc3b0ceecb529cd98abe3fcf9b5d3065d8679ed6f2ff67a1ac8718eca139a815f87911d82ae5f371326848fd4248f309f5b26321f592f262c04920a44c1a7965e7bfcc70c05eafefb32c5de5b754e0bbc1acb330f2ddf672c18892f2cc7d277ebe0b1b7634bb886b43a5eb4c26129cc33e85f7", 0x87}, {&(0x7f0000000680)="73f4dce6e70df00f1d909796e36af6032f5582e037134778396cd810c2043db3a9caaa8f7534d73ed442a956cb7e47411be5997f4f6eab0bda441f4c2c9a9a50a45ffca6d02e6ce2a36e5989a8d83b3e08ecfca170d17dd0d4a30f041acde6c6a12a370107a78a17fe4f4d673008e6e7ed8d3f0aee99f907040218c0a19dab6d1ee01c81cd30c9ab5e", 0x89}, {&(0x7f0000000800)="e7f3476a89e566bd6d2322985c23c5f5e6330a59c6cad9ec0bcc24009208dc2bb23d94604eda42057831ff7122f8489ed0cc1c0e0252f0c6bcf6c9d0e9cb9c1f856cbaa038cc8035e36d81018fa98528b301cdfb2f0d9cf76e741236512b35628502633282d389620000000000", 0x6d}], 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffff9c, &(0x7f0000000240), 0x503001, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x14, 0x3b, 0x301, 0xa70bd1d, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x14, 0x3b, 0x301, 0xa70bd1d, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r9, 0x5601, &(0x7f00000000c0)) (async) ioctl$VT_GETMODE(r9, 0x5601, &(0x7f00000000c0)) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r8) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) mount$binder(0x0, &(0x7f00000021c0)='.\x00', &(0x7f0000002200), 0x1200850, &(0x7f0000000280)=ANY=[@ANYBLOB="73746174733dc238c4ca041219ced227e5676c6f62616c2c00"]) 1m15.524074912s ago: executing program 36 (id=2938): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r3, 0x0, 0x4004) (async) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r3, 0x0, 0x4004) unshare(0x2040400) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x4) r6 = openat$cgroup_ro(r5, &(0x7f0000000340)='cgroup.stat\x00', 0x5000000, 0x0) readv(r6, &(0x7f00000012c0)=[{&(0x7f0000003c40)=""/4082, 0xff2}], 0x1) (async) readv(r6, &(0x7f00000012c0)=[{&(0x7f0000003c40)=""/4082, 0xff2}], 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f00000007c0)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}, {&(0x7f00000003c0)="8f74e60bcf5c2e709bfd2f497f8e6e09ef1bebb1cd558cf102a23371965cf3ae1e4ca838b297d5c2c27247eeedac81032c59b0284f1d5d69ff8c5c47131f6975cf75dca26a4200d6e0e0ce1f6b82267018e4cef970b73b25c4db98c78281fe8489316a3838bafc4c12ca8acee08121921511d4520d309d1610b6a1057127e5e948b9960a8d43600002397f6ceacd687d8def082b247aa4cd98aff59f71f830d9b078528faee283134a3769faf1de66f4297017615eda112bb1f120dfe3b0e7d0820d78865691ffcb8801482309aeb2", 0xcf}, {&(0x7f00000005c0)="c9d5b0b3eae8ad2d8e08ba6a1cacd371b6d2caaadc3b0ceecb529cd98abe3fcf9b5d3065d8679ed6f2ff67a1ac8718eca139a815f87911d82ae5f371326848fd4248f309f5b26321f592f262c04920a44c1a7965e7bfcc70c05eafefb32c5de5b754e0bbc1acb330f2ddf672c18892f2cc7d277ebe0b1b7634bb886b43a5eb4c26129cc33e85f7", 0x87}, {&(0x7f0000000680)="73f4dce6e70df00f1d909796e36af6032f5582e037134778396cd810c2043db3a9caaa8f7534d73ed442a956cb7e47411be5997f4f6eab0bda441f4c2c9a9a50a45ffca6d02e6ce2a36e5989a8d83b3e08ecfca170d17dd0d4a30f041acde6c6a12a370107a78a17fe4f4d673008e6e7ed8d3f0aee99f907040218c0a19dab6d1ee01c81cd30c9ab5e", 0x89}, {&(0x7f0000000800)="e7f3476a89e566bd6d2322985c23c5f5e6330a59c6cad9ec0bcc24009208dc2bb23d94604eda42057831ff7122f8489ed0cc1c0e0252f0c6bcf6c9d0e9cb9c1f856cbaa038cc8035e36d81018fa98528b301cdfb2f0d9cf76e741236512b35628502633282d389620000000000", 0x6d}], 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffff9c, &(0x7f0000000240), 0x503001, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x14, 0x3b, 0x301, 0xa70bd1d, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x14, 0x3b, 0x301, 0xa70bd1d, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r9, 0x5601, &(0x7f00000000c0)) (async) ioctl$VT_GETMODE(r9, 0x5601, &(0x7f00000000c0)) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r8) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) mount$binder(0x0, &(0x7f00000021c0)='.\x00', &(0x7f0000002200), 0x1200850, &(0x7f0000000280)=ANY=[@ANYBLOB="73746174733dc238c4ca041219ced227e5676c6f62616c2c00"]) 1m15.469092925s ago: executing program 6 (id=2940): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 1m15.468705377s ago: executing program 6 (id=2941): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff}) write$FUSE_GETXATTR(r3, &(0x7f0000002400)={0x18, 0x0, 0x0, {0xffff}}, 0x18) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x4000040) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x20}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r10, r10) setpgid(r10, r10) ioprio_get$pid(0x2, r10) write$RDMA_USER_CM_CMD_NOTIFY(r8, &(0x7f0000001740)={0xf, 0x8, 0xfa00, {r9, 0x13}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="39c394e534ecf02e7e0e9ca20800", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x95, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 1m15.201452935s ago: executing program 6 (id=2942): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x9, 0x7fff0000}]}) fanotify_init(0x200, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x4, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x2001, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ppoll(&(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000c957}, 0x20040091) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYRES64=0x0], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) epoll_create1(0x0) epoll_create1(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 1m14.291547723s ago: executing program 6 (id=2943): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) move_pages(r2, 0x0, &(0x7f0000000380), &(0x7f0000000400), &(0x7f0000000440), 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYRESHEX], 0x0}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491710d000000", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3c) 1m14.24565624s ago: executing program 37 (id=2943): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) move_pages(r2, 0x0, &(0x7f0000000380), &(0x7f0000000400), &(0x7f0000000440), 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYRESHEX], 0x0}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491710d000000", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3c) 1m13.274559245s ago: executing program 5 (id=2945): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r1, 0xc008aec1, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) io_getevents(0x0, 0xc0000000, 0x1, &(0x7f0000000880)=[{}], &(0x7f0000000900)={r2, r3+60000000}) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_clone3(&(0x7f0000000b40)={0x8003800, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000280), {0x29}, &(0x7f0000000940)=""/137, 0x89, &(0x7f0000000a00)=""/247, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000000)={0x1, "b53f165acb3df7b331b5a31d147fd1d2fd14849296109de06865f319e1ffb2d8", 0x2}) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x80000000}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x27, [0x8000, 0x80000000, 0xf, 0x8, 0x80, 0x2, 0x318, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0xbc5b, 0x80000001, 0x25, 0x11, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x2, 0x8, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x7fffffff, 0x6, 0x6, 0x2, 0x9, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x9, 0x5, 0xfffffff7, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x5, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x4, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x0, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0x5, 0x10000, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0xf94, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x3, 0x5, 0x1, 0x486, 0x3, 0x303c, 0x3e7, 0x4, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d04, 0x6, 0x38, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12c, 0x4, 0x1, 0x1000000a, 0x9, 0x5, 0x1c, 0x120000, 0x3, 0x7f, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x69d9, 0xb, 0x5, 0x4, 0x6, 0x0, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb74, 0x101, 0x10000, 0x4, 0x7fff, 0x14000, 0x7f, 0x2, 0x5, 0x7, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x7fffffff, 0x1, 0x98, 0xa1f, 0xf40, 0x2, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7]}, 0x45c) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r7, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4040800) r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r8, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r8, &(0x7f0000000040)={0x2, 0xfe}, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x60040000) 1m11.05112622s ago: executing program 5 (id=2946): syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00003b2000/0x4000)=nil) socket(0x40000000015, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) lseek(r1, 0x800, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000001c0)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close(0x3) 1m10.036122196s ago: executing program 5 (id=2947): mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x40000, 0x0) read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002340)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000069c0)={0x2020}, 0x2020) r1 = syz_usb_connect_ath9k(0x3, 0xb7, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x20132, 0xffffffffffffffff, 0xb2993000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$MAP_CREATE(0x0, 0x0, 0x50) ptrace$poke(0x4, r2, &(0x7f00000011c0), 0xfffffffffffffffe) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r3, 0x0, 0x0) 1m8.337616358s ago: executing program 5 (id=2948): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/serial8250/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='serial8250\x00', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/platform/devices/serial8250/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='usb251xb', 0x8) listen(0xffffffffffffffff, 0x9) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/platform/drivers/usb251xb/bind\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x8080, 0x8, 0x3, 0x0, 0x0, r2}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r9, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r9, r11, &(0x7f0000000340)={0x0, 0xfb7e, 0x3000, 0x2, 0x3cf, 0x0, r5}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0xfffffffd, 0x3de, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0xfffffffe, 0x278}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdada, 0x1000, 0x3, 0x321}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9b3, 0x20, 0x3, 0x80000c4, 0x0, r4}}], 0x4, &(0x7f0000000e00)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xf6}, 0x0, r10, '\x00', {0x5, 0xe81, 0x0, 0x0}}, 0x0) add_key(&(0x7f00000001c0)='user\x00', 0x0, &(0x7f0000000a40), 0x0, 0xfffffffffffffffb) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000140)={0xf, 0x4cd, 0x2, 0x3, 0x1, "c4249d0788fa8dccada7257c3105714622383e", 0xe3b, 0x5}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$kcm(0xa, 0x5, 0x0) 53.285708201s ago: executing program 38 (id=2948): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/serial8250/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='serial8250\x00', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/platform/devices/serial8250/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='usb251xb', 0x8) listen(0xffffffffffffffff, 0x9) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/platform/drivers/usb251xb/bind\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x8080, 0x8, 0x3, 0x0, 0x0, r2}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r9, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r9, r11, &(0x7f0000000340)={0x0, 0xfb7e, 0x3000, 0x2, 0x3cf, 0x0, r5}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0xfffffffd, 0x3de, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0xfffffffe, 0x278}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdada, 0x1000, 0x3, 0x321}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9b3, 0x20, 0x3, 0x80000c4, 0x0, r4}}], 0x4, &(0x7f0000000e00)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xf6}, 0x0, r10, '\x00', {0x5, 0xe81, 0x0, 0x0}}, 0x0) add_key(&(0x7f00000001c0)='user\x00', 0x0, &(0x7f0000000a40), 0x0, 0xfffffffffffffffb) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000140)={0xf, 0x4cd, 0x2, 0x3, 0x1, "c4249d0788fa8dccada7257c3105714622383e", 0xe3b, 0x5}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$kcm(0xa, 0x5, 0x0) 42.72200008s ago: executing program 9 (id=3031): syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00003b2000/0x4000)=nil) socket(0x40000000015, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) lseek(r1, 0x800, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000001c0)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close(0x3) 41.471893847s ago: executing program 9 (id=3033): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/bDeviceClass\x00', 0x2, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) (async, rerun: 64) r1 = fcntl$dupfd(r0, 0x0, r0) (rerun: 64) read(r1, 0x0, 0x0) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000f98500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000740)="ba37bc6e74cc160f3f46dd21efc8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 40.298138953s ago: executing program 9 (id=3038): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x111000, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0xfffffffa}, 0x2) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') r3 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r3, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) write$P9_RMKNOD(r3, 0x0, 0x0) readv(r2, &(0x7f0000000780)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0x14000000, 0x9, 0x1, 0x3, 0x10, 0x8, 0x8, 0x9, 0x1, 0x9, 0x5, 0x400, 0x0, 0xe, 0x1e, 0x1c, {0x4, 0x3}, 0x8, 0x1}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000840)={0x14, 0x38, 0x825, 0x70bd2b, 0x25dfdbfe, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4044050}, 0x40010) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x7, {0x5, 0xfffffffe, 0x10, 0x1d}}) 39.093846996s ago: executing program 9 (id=3039): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff}) write$FUSE_GETXATTR(r3, &(0x7f0000002400)={0x18, 0x0, 0x0, {0xffff}}, 0x18) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x20}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r10, r10) setpgid(r10, r10) ioprio_get$pid(0x2, r10) write$RDMA_USER_CM_CMD_NOTIFY(r8, &(0x7f0000001740)={0xf, 0x8, 0xfa00, {r9, 0x13}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="39c394e534ecf02e7e0e9ca20800", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x95, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 38.93377631s ago: executing program 9 (id=3040): r0 = socket(0x2000000000000021, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000005000000180100002020642500000000002020207b1af8ff00000000bfa10000000000000701000ef8ffffffb702000008000000b70300000100000085000000b4c68d95de9ba106e80a5afd2480ba22db5a0bc5e2b869b639058990855f18"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x37, 0x17, 0x1, {0x2e, './proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode'}}, 0x37) shutdown(r0, 0x2) write$bt_hci(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000000, &(0x7f0000006680)) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x401, 0x40) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x9, 0x0, 0x6}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40980, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0xc, &(0x7f0000000180)) ioctl$TCFLSH(r2, 0x400455c8, 0x4) close(r2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r4, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xd, &(0x7f00000001c0), 0x0, 0x0, 0x50, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$uinput_user_dev(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f80000001000010026bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="621d0200000000001400030076657468315f746f5f6873720000000008000400d4000000bc001680b800018040000c80"], 0xf8}}, 0x20084084) 38.449064869s ago: executing program 0 (id=3042): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='measure #', 0x9) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)=@newchain={0x24, 0x1e, 0x101, 0xfffffffd, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x4, 0x8}, {0x10, 0xb}}}, 0x24}}, 0x44004) r6 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000002}) syz_open_dev$vbi(0x0, 0x0, 0x2) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) socket$nl_route(0x10, 0x3, 0x0) 37.735950413s ago: executing program 7 (id=3044): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x3ffd, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4005c}, 0x20000000) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 37.595578827s ago: executing program 0 (id=3045): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8008640b, &(0x7f00000edb40)={0x1, &(0x7f00000ed9c0)=[{0xe000003, 0xf, &(0x7f00000016c0)=[0x0, 0x1ff, 0x3, 0x2, 0x502dd8b8, 0x4b03, 0x4, 0x4, 0x3e69, 0x0, 0x9, 0xbb, 0x4, 0x2, 0x200], 0xa145, 0x7}]}) 37.482572395s ago: executing program 0 (id=3047): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCDARP(r0, 0x541b, &(0x7f0000000040)={{0x2, 0x4e24, @local}, {0x306}, 0x8, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'ip6gre0\x00'}) 37.412703283s ago: executing program 0 (id=3048): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x4000040) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x20}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r10, r10) setpgid(r10, r10) ioprio_get$pid(0x2, r10) write$RDMA_USER_CM_CMD_NOTIFY(r8, &(0x7f0000001740)={0xf, 0x8, 0xfa00, {r9, 0x13}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="39c394e534ecf02e7e0e9ca20800", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x95, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 37.322342408s ago: executing program 7 (id=3049): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000c40)=ANY=[@ANYRESDEC, @ANYBLOB="f805b2f8ad3cffba30c997e8d128450cbefdef0a8c6f6e082947fd31ac8c8eb874daf86703cf8051de763880b5b8331ad3077d0fa62519881001ba491a8117692f9ab275a168412f1db7f1a71b9ea3d7487a10ad30c6d48dd36c9203a1dbe9f60cab51c0a35a26e38fc21ffaed40bff04fadae6251b632a5c5bf67d11d8e2872b22f3fb45f76cc80e2166bfce222afde6784ddc541361a72d1e078da5c1748a098d6120694c82669cfe6bed47a65025d8485229cadf17698046fa69bc73b17b6a37f2e87610a67972794ca6d43cc4734f85ea6a85ea12fd6134cca734d22f14585faa9", @ANYRES8=r2, @ANYBLOB, @ANYBLOB, @ANYBLOB="9ae18047956cc350a9d21b52d35e76b4a72455435d0a5472bbd087037b02324ca26e56363f253157d5480ed6b692f71248b25023c502231e1ef632d217462a257cc74b07b7d98bc6f4dd375f1cfc85a829edaa872745c69b83435c0c7d1f0b2f8d822bb59c82f59b06ecef8e463d2185cf8c17dec8be689dc2a555da8824e0ecafbe980fefe7248273208a18c31d02e2a7f35bda48faf64967b085568961dfad56635529dcab690064f0e5714a814f46f09dfae312e05d1657db025c5a5cd98bb12b9beb3d4a9cf4eaf8b013a6d6cacaf7be3a0f923294c2186c2dc3c7d54d7a4e66c0e445884cf7c7ee", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x2, 0xb8, &(0x7f0000000140)=""/184, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000050) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x28, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff024}, {0x28, 0x0, 0x0, 0x80000000}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r7, &(0x7f0000001c00), 0x400000000000159, 0x40840) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40046607, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e22, 0x3, 'lc\x00', 0x1, 0x323b, 0x55}, {@empty, 0x4e27, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r1, 0x2f, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 37.32171269s ago: executing program 0 (id=3050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x20000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0xc0a45320, &(0x7f00000001c0)={0x80, 0x0, 'client1\x00', 0x80000001, "786281f043ca447c", "b437067509007708e18f85bb3d22ac7a6568af9ebb8891fdffa0225452869ac0", 0x0, 0xfffffffe}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x150014, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @name="a13c4dacaace7477f3f8f1d68f8a0c4a4b407126d4a332ea110a356827492a5c"}) r5 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000580)="eb5130ad59c9be7ec4a1cba93b7a4ea4e2a440163e9440f67b913ad994d871fc2c9bbffc5e0400fa147b09b091646ceca62282836d3bbdcf6c6696bf7e76dd60903efb44fbe686f8f51792eff2f2134b7cb9168d9089123098d8f53fbb102ea52668dd36039a0aa52402a223d11a04912ad5c90f9c02067b4ebe94dba5966a5062e63f0fbe5ce8e906a204e1522bba23bed5a16c34864417d27a49df76c4316766b90e19e0b32ed7e6f27ca89ccc24b1befef00678522f270e045c8dd9675b1e6c2e04254b7ac4fd4a15b96b5a", 0xcd) r8 = fcntl$dupfd(r6, 0x406, r6) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r8, &(0x7f0000000400)=ANY=[@ANYRESOCT=r4, @ANYRES64=r6, @ANYRES16=r8, @ANYRES32=r6, @ANYRESDEC, @ANYRES8=r7, @ANYRES64=r5, @ANYRES64=r5], 0xfffffdcf) connect$unix(r8, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x2c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 37.152010909s ago: executing program 9 (id=3051): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITEV_FIXED={0x3d, 0x2, 0x4004, @fd, 0x8000, 0x0, 0x0, 0x18, 0x0, {0x2, 0x0, 0xfb, '\x00', 0x0, 0x401}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 36.262937963s ago: executing program 39 (id=3051): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITEV_FIXED={0x3d, 0x2, 0x4004, @fd, 0x8000, 0x0, 0x0, 0x18, 0x0, {0x2, 0x0, 0xfb, '\x00', 0x0, 0x401}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 36.245965532s ago: executing program 7 (id=3053): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000006800010000000000000000000200000000000000080001000200000008000500", @ANYRES64=r0], 0x28}}, 0x0) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, r1) keyctl$clear(0x7, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r5 = socket$tipc(0x1e, 0x5, 0x0) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, 0x0) syz_io_uring_submit(r8, r9, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x2000}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x20040084) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x4, 0x4, 0x6bc, 0xffffffff, 0x470, 0x470, 0x0, 0xfeffffff, 0xffffffff, 0x5f4, 0x5f4, 0x5f4, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, [0x0, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00], 'ip6gre0\x00', 'veth0_to_bond\x00', {}, {}, 0x32, 0x7, 0x5, 0x4}, 0x2f2, 0x304, 0x344, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x7f}}}, @common=@ah={{0x30}, {[0x4d5, 0x4d2], 0xc8, 0x4}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x2, "7bb9e202c328195132db405277bbb7a6b21cf6ae22238cb8f38000"}}}, {{@ipv6={@remote, @loopback, [0xff000000, 0xffffffff, 0xffffffff, 0xff], [0xff000000, 0xff, 0xffffff00, 0xff000000], 'dummy0\x00', 'lo\x00', {0xff}, {}, 0x3c, 0x40, 0x2}, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xa, 0x7ffb]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xc}, @mcast2, [0xffffffff], [0x0, 0x0, 0x0, 0xffffffff], 'veth1_macvtap\x00', 'vcan0\x00'}, 0x0, 0x160, 0x184, 0x0, {}, [@common=@frag={{0x30}, {[0x1, 0xa60], 0x0, 0x2, 0x2}}, @common=@srh1={{0x8c}, {0x4, 0x0, 0x0, 0x0, 0x0, @dev, @remote, @private1, [0x0, 0xff000000, 0xff000000, 0xffffff00], [0x0, 0xff000000], [0x0, 0xff, 0x0, 0xffffffff], 0x968, 0x2}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x718) close_range(r0, r2, 0x2) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[], 0x30}}, 0x0) 35.592956235s ago: executing program 0 (id=3055): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x400000ff, 0x2, 0x4, 0x0, 0x4}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) syz_open_dev$dmmidi(&(0x7f0000000280), 0x9, 0x40000) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x10) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000100)={0x20, 0x20, 0x2, 0x4000}) r2 = io_uring_setup(0x17ce, &(0x7f0000000140)={0x0, 0x52c1, 0x1, 0x0, 0x31d}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x8c, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x60, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_SEL={0x54, 0x5, {0x4, 0x8, 0x4, 0x4, 0x2, 0x4, 0x6, 0x769, [{0x40, 0x2, 0x80000000, 0x401}, {0xfffffff9, 0x9, 0x2, 0x8}, {0x7, 0x7, 0x101, 0x2}, {0x1, 0x6, 0xfffffffc, 0xffff}]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) close_range(r2, 0xffffffffffffffff, 0x0) 34.665038419s ago: executing program 40 (id=3055): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x400000ff, 0x2, 0x4, 0x0, 0x4}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) syz_open_dev$dmmidi(&(0x7f0000000280), 0x9, 0x40000) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x10) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000100)={0x20, 0x20, 0x2, 0x4000}) r2 = io_uring_setup(0x17ce, &(0x7f0000000140)={0x0, 0x52c1, 0x1, 0x0, 0x31d}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x8c, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x60, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_SEL={0x54, 0x5, {0x4, 0x8, 0x4, 0x4, 0x2, 0x4, 0x6, 0x769, [{0x40, 0x2, 0x80000000, 0x401}, {0xfffffff9, 0x9, 0x2, 0x8}, {0x7, 0x7, 0x101, 0x2}, {0x1, 0x6, 0xfffffffc, 0xffff}]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) close_range(r2, 0xffffffffffffffff, 0x0) 34.289167976s ago: executing program 7 (id=3058): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x4000040) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x20}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r10, r10) setpgid(r10, r10) ioprio_get$pid(0x2, r10) write$RDMA_USER_CM_CMD_NOTIFY(r8, &(0x7f0000001740)={0xf, 0x8, 0xfa00, {r9, 0x13}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="39c394e534ecf02e7e0e9ca20800", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x95, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 34.090623551s ago: executing program 7 (id=3060): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000028000000080004000006000008001b0000000000c279afaaadb44a34f646c1f9d56c9fcccec82a8e7e7969b4ee1677b7bb4b613b41014b9ac81dafa99307adec0323e4ce0925076890fb63080cb9e8cb8c537723adeb0adf1a776d54554aa0a8fea1795a9f51fcfb3aaacbb1907ce7656faf112576c0bd5803b80b50c1a1000d9c3c2354be186a166b4cb3fa1498fa34758afc4f27da002f1024677110d33274aa29d756ff37253982f09620ade6b682aaca18a37f7308b04dbed1d08861b82d148576c8d76dfb42695fcc9343b9267e77b53390"], 0x30}}, 0x0) ftruncate(r2, 0x2000009) sendfile(r0, r2, 0x0, 0x7ffff004) 31.978775578s ago: executing program 7 (id=3062): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200004200000000000000000000008500000087000000180100002078642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0xfffff5d4}}, './file0\x00'}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1}, 0x20048000) write(0xffffffffffffffff, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b00000000", 0x23) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 31.853739185s ago: executing program 41 (id=3062): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200004200000000000000000000008500000087000000180100002078642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0xfffff5d4}}, './file0\x00'}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1}, 0x20048000) write(0xffffffffffffffff, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b00000000", 0x23) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14.011189975s ago: executing program 3 (id=3094): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, &(0x7f0000000100)={0x7, 0x6, 0x0, 0x1000000002, 0x7, 0x80000004}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x0, 0x2, 0x1b}, &(0x7f0000000200), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x8000, 0x9, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000240)=0x1, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r8, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES8, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES64, @ANYRES16=r3], 0xff2e) ioctl$TCFLSH(r10, 0x540b, 0x1) write$cgroup_int(r9, &(0x7f0000000000), 0x12) 13.499581884s ago: executing program 1 (id=3095): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200004200000000000000000000008500000087000000180100002078642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0xfffff5d4}}, './file0\x00'}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1}, 0x20048000) write(0xffffffffffffffff, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b00000000", 0x23) socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 12.470571263s ago: executing program 3 (id=3098): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0xfd, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x5, [{@private=0xa010101, 0xc485}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x2}]}]}}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x5, 0x7}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}}], 0x1, 0x10042, 0x0) 12.32665141s ago: executing program 1 (id=3099): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp', 0x2) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) shutdown(r0, 0x1) 12.324916889s ago: executing program 3 (id=3100): openat$audio(0xffffff9c, &(0x7f00000000c0), 0x48100, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x28, r2, 0x101, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'wpan0\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c040) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x2e, 0xe}, 0x0) mprotect(&(0x7f000006a000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x427b5000) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) write$tun(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x2e) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4000002d) r7 = socket$inet_sctp(0x2, 0x1, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x1, 'none\x00', 0x34, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x4e24, 0x3, 0x1cb, 0x73, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'fo\x00', 0x8, 0x323b, 0x56}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) 12.022304266s ago: executing program 1 (id=3104): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x80000000, 0x8, 0x0, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='dummy_udc.0\n\x00', 0xc) poll(0x0, 0x0, 0x1f4) openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/usb/devices/usb5/bConfigurationValue\x00', 0x1, 0x0) 11.236223983s ago: executing program 1 (id=3109): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff}) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000002400)={0x18, 0x0, 0x0, {0xffff}}, 0x18) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x4000040) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x20}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r9, r9) setpgid(r9, r9) ioprio_get$pid(0x2, r9) write$RDMA_USER_CM_CMD_NOTIFY(r7, &(0x7f0000001740)={0xf, 0x8, 0xfa00, {r8, 0x13}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="39c394e534ecf02e7e0e9ca20800", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x95, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 10.944828736s ago: executing program 1 (id=3110): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200004200000000000000000000008500000087000000180100002078642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0xfffff5d4}}, './file0\x00'}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1}, 0x20048000) write(0xffffffffffffffff, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b00000000", 0x23) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 10.107506251s ago: executing program 3 (id=3113): membarrier(0x10, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) membarrier(0x8, 0x0) fsopen(0x0, 0x1) ioctl$DVB_DEMUX_DMX_REMOVE_PID(0xffffffffffffffff, 0x40026f34, 0x0) syslog(0x3, &(0x7f0000000140)=""/4096, 0x1000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c000100060006000800000010000700"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 10.018715033s ago: executing program 3 (id=3114): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) rseq(0xfffffffffffffffe, 0xfffffffffffffeb2, 0x0, 0x0) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) r0 = open(&(0x7f00000002c0)='.\x00', 0x101800, 0x1d2) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 10.018521109s ago: executing program 3 (id=3115): r0 = openat$cdrom(0xffffff9c, &(0x7f0000000140), 0x44a80, 0x0) ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000000180)={@lba=0xe3a3, 0x2, 0x1, &(0x7f0000000200)=""/1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x6, 0x0, &(0x7f0000000000)) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000080)=0xfd, 0x4) recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10042, 0x0) 10.002304883s ago: executing program 1 (id=3116): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x5, 0x20001000, 0xffffffffffffffff, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000000)={0x3, 0x20000000, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x44}}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x884) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$inet_udp(0x2, 0x2, 0x0) openat$cdrom(0xffffff9c, 0x0, 0x0, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000012c0)=[@window={0x3, 0x1, 0x8}, @mss={0x2, 0xc5dc}, @timestamp, @window={0x3, 0x8000, 0x627}, @mss={0x2, 0x4}, @sack_perm, @timestamp, @sack_perm], 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x26022, 0x0) 9.848779839s ago: executing program 42 (id=3116): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x5, 0x20001000, 0xffffffffffffffff, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000000)={0x3, 0x20000000, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x44}}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x884) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$inet_udp(0x2, 0x2, 0x0) openat$cdrom(0xffffff9c, 0x0, 0x0, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000012c0)=[@window={0x3, 0x1, 0x8}, @mss={0x2, 0xc5dc}, @timestamp, @window={0x3, 0x8000, 0x627}, @mss={0x2, 0x4}, @sack_perm, @timestamp, @sack_perm], 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x26022, 0x0) 7.26795872s ago: executing program 8 (id=3127): unshare(0x68040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x600, 0x80, &(0x7f0000000880)={'broute\x00', 0x0, 0x0, 0x0, [0x9, 0x2, 0xff7fb532, 0x3a8e5b6c, 0x40000, 0x208]}, &(0x7f0000000000)=0x78) 4.395734408s ago: executing program 8 (id=3134): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0xb6, &(0x7f0000000100)={&(0x7f0000000080)={0x40, r2, 0x1, 0x70bd28, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xea8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 2.612544418s ago: executing program 8 (id=3136): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200004200000000000000000000008500000087000000180100002078642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0xfffff5d4}}, './file0\x00'}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1}, 0x20048000) write(0xffffffffffffffff, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b00000000", 0x23) socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2.299299247s ago: executing program 8 (id=3137): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendto(r1, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803000000000000", 0x68, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000080)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="170000005500e50226bd700016000000070000005f7318ab3c72652a7759fde4fa5612260cb9960efad1aae7de2341a2d3523ab29e038caef9c0b16b8b88aaf64a3f5c409c88341e9b183aa9e81a7b860596c3c5c877c2bc979253cfa49b4fb7df92a5594edf83e6ecea52ef1f3c4851706cca8969", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB='\x00'/24], 0x38}, 0x1, 0x2000000, 0x0, 0x2000c844}, 0x20000110) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000600)="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", 0x10b}, {&(0x7f0000000540)="68d5a742c88671b2edc3950bf81a", 0xe}], 0x2, &(0x7f00000007c0)=[@assoc={0x10, 0x117, 0x4, 0x4}], 0x10, 0x4}, {0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)="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", 0x1b8}], 0x1, &(0x7f0000000340)=[@op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0xd2}, @assoc={0x10, 0x117, 0x4, 0x6}, @assoc={0x10, 0x117, 0x4, 0x8}, @assoc={0x10, 0x117, 0x4, 0x81}, @assoc={0x10, 0x117, 0x4, 0xfffffff8}, @assoc={0x10, 0x117, 0x4, 0x1}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10}], 0x90, 0x4008091}], 0x2, 0x804) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/80, 0x50}], 0x1}, 0x120c0) mmap(&(0x7f0000009000/0x2000)=nil, 0x2000, 0x0, 0x8031, r4, 0xd337f000) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) 1.778112438s ago: executing program 8 (id=3139): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000240)={&(0x7f0000000200)={0x2, 0xffff, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x810) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[], 0xcc}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = open(&(0x7f0000000140)='./file0\x00', 0x608000, 0x1ca) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r2, @ANYBLOB], 0x50) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r4) socket$key(0xf, 0x3, 0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f0000000400)=0x9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x9, @mcast1, 0x5}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) fsmount(0xffffffffffffffff, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) 1.491698591s ago: executing program 4 (id=3141): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = syz_open_dev$sg(&(0x7f0000000100), 0xa, 0xc0100) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000140)) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304}, "7f3900005200", "9a5d38a17f00c500000000feff00", "a1e3837f", "542924b4eab9743a"}, 0x28) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x353381) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000005b80)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x7, 0x8, 0x36, @mcast2, @loopback, 0x40, 0x0, 0x63ed, 0xfffffffe}}) recvfrom(r1, &(0x7f0000000440)=""/4070, 0xfe6, 0x117, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r4) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffcf6512e1f582837508601ede986d1ee7036b0a", @ANYRES16=r5, @ANYBLOB="65572abd7000f9dbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x240488d1}, 0x24004052) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) 774.281315ms ago: executing program 8 (id=3142): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000340)={&(0x7f0000000380)=[{0x1e, 0x5011, 0x0, 0x0}], 0x1}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_clone3(&(0x7f0000000c40)={0x400101000, 0x0, 0x0, &(0x7f0000000480), {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000004c0), 0x1000, r5}, 0x38) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f00000004c0)={0x3, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0xfffffffffffffff6, 0x0, 0x100, 0x0, 0x40}}, {0x280000, 0x4, 0x1, 0x0, @sint={0x6b3b3a47, 0x7}}, {0xffdfec93, 0x5, 0x0, 0x0, @adapter={0xfffffffffffffffc, 0x8000000000000001, 0x692, 0x6566}}]}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x81}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='1\x00', 0x1) mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x80000, &(0x7f00000006c0)=ANY=[@ANYBLOB="2c65727370616e30002c2c2c47504c002c6673757569643d63636630616163002d640d63642d370132382d396364352d38003430313331302c646566636f6e746578743d757365725f752c66736d616769633d3078303030303030303030303030303030642c636f6e746578743d73797374656d5f752c736d61636b66736861743d65727370616e30002c61707072616973655f747970653d696d617369672c", @ANYRESDEC]) quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000000240)=@sg0, 0x0, &(0x7f0000000280)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) write(r6, &(0x7f0000000140)='1\x00', 0x1) openat(r6, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0xfc94c54f54391741, 0x188) 546.519106ms ago: executing program 4 (id=3143): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f00000001c0)={{0x3, 0x200, 0x85c2, 0x1, 0x0, 0x4}, 0x348, [0x1, 0x84, 0x1, 0x9, 0x3, 0x9, 0xff, 0x7, 0x7, 0x0, 0x7, 0x5, 0x9c, 0x3, 0x6, 0xb9, 0x4, 0x6, 0x6, 0x7, 0x8, 0x8, 0x9, 0x1, 0x4c1b, 0x3, 0x7, 0x9, 0x4, 0x8295, 0x80000001, 0xb5, 0x8, 0x7, 0x8, 0x6, 0x7fffffff, 0x9, 0x1, 0x2, 0x4, 0x8, 0x2, 0x5, 0x81, 0xcc88, 0x2a6f, 0x10000, 0x6a, 0x0, 0x17, 0x800, 0xfc, 0x8, 0x2, 0x400, 0x0, 0xb22, 0x6, 0xc9a, 0xfff, 0x401, 0x8, 0x9c7d, 0x5, 0x0, 0x6, 0x7fff, 0x0, 0x3, 0xffff8382, 0x7fffffff, 0x1ff, 0x6, 0x9, 0x8, 0x0, 0xfffffffa, 0x8, 0x8c, 0x7, 0x400, 0x2, 0x2, 0x10, 0x6, 0x8000, 0xd3, 0x7f, 0x16cf, 0x1, 0x8, 0x2, 0xd7b, 0x9, 0x7fff, 0xffffff5c, 0x1, 0x666, 0x0, 0x8, 0x7, 0x3, 0x3, 0x3, 0x1, 0x4, 0x368, 0x8, 0x3, 0x580, 0x2, 0x6, 0x10, 0x70955bc4, 0x1, 0x2, 0xfffffffb, 0x2, 0x2, 0x3, 0xfffff38f, 0x2, 0xa000000, 0xeb, 0x5b2, 0x4, 0x960, 0x6, 0x79, 0x3, 0x30, 0x3, 0x7, 0x1, 0x7fff, 0xf2, 0x5, 0x7, 0xff, 0x4, 0x3, 0x12e4, 0x3, 0x0, 0x101, 0x200, 0x7, 0x40, 0x0, 0x1, 0x3, 0x2, 0xffffff00, 0x702, 0x7, 0x800, 0x81, 0xfffffff7, 0x7, 0x1, 0xd, 0x40, 0x10000, 0x3, 0xffffffff, 0x23db, 0x6, 0x0, 0x5, 0x7, 0xffffffff, 0x4, 0x7, 0x6, 0x2, 0x200040, 0xb7, 0x6, 0x638, 0x0, 0x800, 0x6, 0x6, 0x0, 0x8, 0x7, 0x2, 0x8, 0x2, 0xfffffffb, 0x2, 0x80, 0xffff7fff, 0x4, 0x200, 0x7f, 0x1, 0x5, 0x6, 0x1, 0xfffffffa, 0xc, 0x50c2, 0xc1ed, 0x401, 0x3, 0x7, 0x101, 0x800, 0x5, 0x5, 0x8, 0x1, 0x1, 0xfffffff8, 0xe9, 0x1, 0x7f, 0x7ff, 0x0, 0x7, 0xac, 0x80000000, 0x81, 0x80000001, 0x2, 0x80, 0x3ff, 0xa639, 0x0, 0x53647e6f, 0x2, 0xd792, 0x14b, 0x4, 0x3, 0xb36, 0xa, 0x1, 0x4, 0x94, 0x5f, 0x1, 0x8, 0xd8, 0x7fff, 0xf, 0x400, 0x7f, 0x80000001, 0xd08, 0x2, 0x1, 0x6, 0x9, 0x7d9, 0x1, 0x3, 0x3, 0x8, 0x6, 0x400, 0x86, 0x2, 0x1000, 0xbdf6, 0x41bf, 0xc, 0x2487005d, 0x2, 0x1, 0xaa1, 0x6, 0x80000001, 0x9, 0xe, 0x2, 0x0, 0x4, 0x401, 0x5, 0x87a0, 0x54, 0x5, 0x3, 0xf, 0x7fffffff, 0x0, 0x8d, 0xe, 0x3, 0xb6, 0x5, 0x9, 0x100, 0xfff, 0x10, 0x1, 0x6, 0xb7, 0x7, 0xfffffffa, 0x4, 0x5, 0x81, 0x6, 0x5, 0xdcdf, 0x7ff, 0x9, 0xffffffe3, 0x1ff, 0x3, 0xf1c, 0x8021, 0xffffffff, 0x70, 0x10000, 0x7, 0x4, 0x1, 0x0, 0x4, 0x7aed, 0x4, 0x8, 0xe, 0xffffffc0, 0x8b7, 0x5, 0x5, 0x200, 0x40, 0x3ff, 0x4, 0x0, 0xa, 0xc, 0x7, 0xe324, 0xf, 0x7, 0x97a, 0x7fff, 0xffffffff, 0x8, 0x7, 0x40000000, 0x7, 0x6, 0x7, 0x6f007526, 0xa, 0x80000000, 0x0, 0x200, 0xaeb, 0x315c, 0x9, 0x1000, 0xd, 0x5, 0x0, 0xf0f, 0x6, 0x20, 0x2, 0x9, 0x2, 0x9, 0x4, 0x6, 0xb37, 0x8, 0x5, 0x8, 0xa6b7, 0x10001, 0x2, 0x1, 0xf, 0x8, 0x8, 0x3ff, 0x1, 0x4, 0xbe, 0x1, 0x10001, 0x7fa, 0xe7ad, 0x4, 0x6, 0x6, 0x81, 0x10000, 0x3, 0xbd7, 0x71e5119d, 0x62, 0xffd, 0x5, 0x6, 0x4, 0xc, 0x3, 0x7, 0x400, 0x4, 0x400277e, 0xe1, 0x3, 0x4, 0x3, 0x4, 0x6, 0xbf, 0x7, 0x6, 0x8, 0x5, 0x3ff, 0x9ad9, 0x8, 0x1, 0x0, 0x3, 0x400, 0x2, 0x9, 0x6, 0x40, 0x1000, 0x82, 0x4, 0x1000, 0x8, 0x3d, 0x2, 0xe, 0x4, 0x3, 0xfffffffc, 0x4, 0x8, 0x10, 0x6, 0x9, 0xffffffff, 0x10, 0x0, 0x1, 0x9225, 0x3be, 0xd, 0x401, 0x81, 0x13, 0x5, 0x3b1, 0x1, 0x9f18, 0x2, 0x8f86, 0x417db73f, 0x7, 0x1, 0x7, 0x5, 0x3, 0x6, 0x7, 0x0, 0xd, 0x0, 0x7, 0x7, 0x2, 0x8, 0x5, 0x0, 0xab, 0x5, 0x94, 0xb3ab, 0x5ae, 0x2, 0x40, 0x5, 0x0, 0x8001, 0x8, 0x800, 0xb, 0xa4, 0x50, 0x8, 0x99, 0x10, 0x5, 0x100, 0xfffff800, 0x5, 0xca, 0x3, 0x4, 0x6, 0x7ff, 0x6e15d2ec, 0x7, 0x5, 0x8, 0x7ba, 0x21c0, 0xe64, 0x6, 0x7, 0x6d4, 0x5, 0x3, 0x7fff, 0x121, 0x9, 0xe6d8, 0x1000, 0x1ff, 0x42db5dac, 0xffff, 0x6, 0xfffffff8, 0x3ff, 0xfcf, 0x1000, 0x7, 0x2, 0x2, 0x6, 0x7, 0x2, 0x7, 0x80000001, 0x7, 0x8, 0x7, 0xfffff000, 0xfffffffe, 0x5, 0x5, 0x7, 0x80000001, 0x4, 0x2, 0x53f, 0x8, 0x6, 0x0, 0xfffffff8, 0x6, 0x8, 0x9, 0x8, 0x6d, 0x48, 0x8001, 0x1, 0x1, 0x2e7a, 0x8, 0x4, 0x10000, 0x5, 0x1ff, 0x1, 0x8, 0xfffffffd, 0xc217, 0x6, 0x59a, 0x2, 0x3, 0xba7a, 0x6d9c7f55, 0x4, 0x9, 0x1000, 0x3, 0x10001, 0x2, 0x2, 0x7, 0x6, 0x2, 0x1, 0x27a, 0x9, 0x2, 0xde26, 0x99, 0xfffffffe, 0x5, 0x1, 0xdba4b27, 0x6, 0x100, 0x0, 0x9, 0x7, 0x1, 0x7ff, 0x0, 0x2, 0xffff9369, 0x4, 0xff, 0x6, 0xed1, 0x80, 0x0, 0x3, 0x80000001, 0xe, 0x9, 0x1, 0xffff, 0x6, 0x9, 0x4, 0xef3, 0x1, 0xfffffffb, 0x7, 0x40, 0x6, 0x4, 0x9, 0x7f, 0x3, 0x1, 0x3, 0x2, 0xc15e, 0x6, 0x0, 0x6, 0x8, 0xffffffff, 0x8, 0x401, 0x0, 0x10, 0x3, 0x2, 0x4, 0x50d, 0x3, 0x4b, 0x7, 0x0, 0x2, 0x75, 0x80, 0x1, 0xdb, 0x401, 0x6, 0x1, 0x3, 0x6, 0xbf0d, 0x18, 0x1, 0x5, 0x95, 0x7fff, 0xe7, 0xa, 0x4, 0x0, 0xffffff16, 0x10, 0xae25, 0x908, 0x78e, 0x6, 0x1, 0xb2b7, 0xc, 0x7, 0x0, 0x5, 0x9, 0x8, 0x73, 0x9, 0xfffffffe, 0x5df, 0x1, 0x7, 0x81, 0xffffffaa, 0x3, 0x6, 0xd, 0xffffc4e6, 0xffff0001, 0x0, 0x5, 0x10001, 0x2, 0x3, 0x0, 0x6, 0x4, 0x3, 0x8, 0x3, 0x8, 0x5, 0x3, 0xc3f, 0x0, 0x2, 0x6, 0x6, 0xaed, 0x4, 0x9, 0x7, 0x7, 0x8, 0xff, 0x8001, 0x5, 0x9, 0x4, 0xc2, 0x80000000, 0x80000000, 0x4, 0x8, 0xab84, 0xb4, 0xfffffc00, 0x908b, 0x8, 0xc9, 0xfffffffe, 0x1, 0x3, 0x8, 0xfffffffb, 0x0, 0xf8, 0xfffffff0, 0x637, 0x6, 0x4, 0xa, 0x80, 0xfffffff9, 0xfffffb6f, 0x0, 0x120e, 0x7, 0x0, 0x6, 0x2, 0x1000, 0x6, 0x6, 0x2, 0xd, 0x3ff, 0x5e18, 0xf, 0x9ebe, 0x7, 0x2, 0x1, 0x7, 0x7, 0x9e, 0x8, 0xedd3, 0x9, 0x1, 0xffffffff, 0x5, 0x1ff, 0x8, 0x1, 0x5, 0x2, 0x40, 0xe, 0x4, 0xc, 0xc65, 0x40, 0x7, 0xbb7d, 0x10, 0x2, 0x1ff, 0x8, 0x6, 0x80, 0x2, 0xf, 0x7, 0x80000000, 0x6e0, 0x1, 0x5, 0xd1, 0x9, 0x8, 0xfffffe00, 0x0, 0x1, 0x4, 0xe449, 0x4, 0x40, 0x10, 0x1000, 0x0, 0xca, 0xffff, 0x10001, 0xfffff891, 0x5, 0xfe, 0x200, 0xffffff81, 0xfffffff8, 0x4, 0x101, 0x68f0, 0xbfb, 0xdfe2, 0x0, 0x4, 0x9e74, 0x8, 0x7, 0x3ff, 0x80, 0xde7, 0x5, 0x51, 0x0, 0xb, 0x3, 0xad, 0x8, 0x2, 0x1, 0x8000, 0x4, 0x7, 0x8, 0x4, 0x10, 0x80000000, 0x6, 0x1400000, 0xf7, 0x8, 0x81, 0x4, 0x6790, 0x9, 0xfa6, 0x400, 0x7f, 0x3ff, 0x4, 0x2, 0x9, 0x6, 0x9107, 0x1, 0xcac, 0x40, 0x7, 0xc, 0x1, 0x5, 0x7, 0xb923, 0x2, 0xffff3818, 0x3, 0x1, 0x5, 0xe39, 0x4, 0x6, 0x7ff, 0xfff, 0x5, 0x5, 0x1, 0x101, 0xfffffff9, 0x3, 0x1, 0x400, 0xe59, 0x6, 0x8, 0x3ff, 0x6, 0x3ff, 0x9, 0x2, 0x6, 0x12dd, 0x0, 0x10, 0x6, 0x40, 0x0, 0xffffff80, 0x3, 0x0, 0x1, 0x7, 0x997, 0x7, 0x7fffffff, 0x7d, 0x1, 0xe, 0x7e, 0x9, 0x3, 0x5, 0x7c, 0x4, 0x9, 0x3, 0x0, 0x1ff, 0x4, 0x926a, 0x9, 0x6, 0xea, 0x9, 0x9, 0xc0000, 0xf4d, 0x80000001, 0x1, 0x2, 0x1, 0x3, 0x7fff, 0x3, 0x1, 0x5851, 0x9fc, 0x0, 0x6, 0xcf4, 0x6, 0x1, 0xffb8, 0x0, 0x10001, 0x7, 0x8, 0x7b, 0x6, 0x89, 0xfffc0000, 0x9, 0x1, 0x4, 0xb, 0x9, 0x3, 0x5, 0xc2, 0x5, 0x2, 0x9, 0x3, 0x2c33, 0x5, 0x4, 0x0, 0x5, 0x9, 0x1, 0xa, 0x819, 0x5, 0x4, 0xeaa8, 0xb, 0x5, 0x8000, 0xffff, 0x8, 0x7fff, 0xe, 0x3, 0x6, 0xffffffff, 0x7, 0xba, 0x1, 0x2, 0xc7c, 0x8, 0xdc, 0x3, 0x5, 0x6, 0x1]}) r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f909, 0x8002, '\x00', @p_u16=&(0x7f00000010c0)=0xa5b}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000001240)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000001200), 0x1, 0x2, 0x2}) fcntl$setpipe(r3, 0x407, 0xffffffff80000002) write(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r6 = eventfd2(0x3, 0x80000) io_pgetevents(r5, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_submit(r5, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r6}]) io_destroy(r5) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r8, {0x1}}, './file0\x00'}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$KDFONTOP_GET(r9, 0x4b72, &(0x7f0000000980)={0x1, 0x0, 0xb, 0xd, 0x32, 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x3c, r7, 0x5, 0x0, 0x400, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0x40002}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="bc218398b541"}]}, 0x3c}}, 0x800) 535.806195ms ago: executing program 4 (id=3144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) io_setup(0x6, &(0x7f00000000c0)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x1a1081, 0x40) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000100)='9', 0x20000108}]) mkdirat(r3, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='\\', 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x8010) 355.147111ms ago: executing program 4 (id=3145): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$inet6(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e24, @remote}], 0x10) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 161.872584ms ago: executing program 4 (id=3146): openat$audio(0xffffff9c, &(0x7f00000000c0), 0x48100, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x28, r2, 0x101, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'wpan0\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c040) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x2e, 0xe}, 0x0) mprotect(&(0x7f000006a000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x427b5000) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) write$tun(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x2e) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4000002d) socket$inet_sctp(0x2, 0x1, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'fo\x00', 0x8, 0x323b, 0x56}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) 0s ago: executing program 4 (id=3147): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200004200000000000000000000008500000087000000180100002078642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0xfffff5d4}}, './file0\x00'}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1}, 0x20048000) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) kernel console output (not intermixed with test programs): auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 825.076033][ T56] IPVS: starting estimator thread 0... [ 825.090787][ T42] audit: type=1800 audit(1786128845.427:14526): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 825.102944][ T42] audit: type=1800 audit(1786128845.437:14527): pid=16342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2897" name="resource0" dev="sysfs" ino=2630 res=0 errno=0 [ 825.112550][T16342] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2897'. [ 825.116727][T16336] tipc: Started in network mode [ 825.118464][T16336] tipc: Node identity fe800000000000000000000000000011, cluster identity 4711 [ 825.122005][T16336] tipc: Enabling of bearer rejected, failed to enable media [ 825.128046][T16334] lo speed is unknown, defaulting to 1000 [ 825.141160][T16334] lo speed is unknown, defaulting to 1000 [ 825.143466][T16334] lo speed is unknown, defaulting to 1000 [ 825.156914][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.163103][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.171583][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.176910][T16340] IPVS: using max 43 ests per chain, 103200 per kthread [ 825.177507][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.202612][ T42] audit: type=1800 audit(1786128845.537:14528): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16583 res=0 errno=0 [ 825.236724][ T42] audit: type=1800 audit(1786128845.567:14529): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 825.248428][ T42] audit: type=1800 audit(1786128845.567:14530): pid=16332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=305667 res=0 errno=0 [ 825.254480][ T42] audit: type=1800 audit(1786128845.587:14531): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=305678 res=0 errno=0 [ 825.333437][T11968] lo speed is unknown, defaulting to 1000 [ 825.338251][T16334] infiniband syz1: set down [ 825.344997][T16334] infiniband syz1: added lo [ 825.357436][T16334] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 825.362177][T16334] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 825.367761][T16334] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 825.379384][ T42] audit: type=1800 audit(1786128845.717:14532): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=308385 res=0 errno=0 [ 825.392529][ T42] audit: type=1800 audit(1786128845.727:14533): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=308399 res=0 errno=0 [ 825.398115][T16334] RDS/IB: syz1: added [ 825.401871][T16334] smc: adding ib device syz1 with port count 1 [ 825.404015][ T42] audit: type=1800 audit(1786128845.727:14534): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=308413 res=0 errno=0 [ 825.405778][T16334] smc: ib device syz1 port 1 has no pnetid [ 825.416583][T11968] lo speed is unknown, defaulting to 1000 [ 825.433353][T16334] lo speed is unknown, defaulting to 1000 [ 825.538021][T16334] lo speed is unknown, defaulting to 1000 [ 825.623747][T16334] lo speed is unknown, defaulting to 1000 [ 825.708097][T16334] lo speed is unknown, defaulting to 1000 [ 826.169031][T16389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2901'. [ 826.518245][T16393] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2903'. [ 826.576263][T11968] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 826.728330][T11968] usb 10-1: config 0 has an invalid interface number: 205 but max is 0 [ 826.731082][T11968] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.734544][T11968] usb 10-1: config 0 has no interface number 0 [ 826.737070][T11968] usb 10-1: config 0 interface 205 has no altsetting 0 [ 826.741213][T11968] usb 10-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 826.744225][T11968] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.747388][T11968] usb 10-1: Product: syz [ 826.748803][T11968] usb 10-1: Manufacturer: syz [ 826.750425][T11968] usb 10-1: SerialNumber: syz [ 826.754485][T11968] usb 10-1: config 0 descriptor?? [ 826.761492][T11968] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 826.773811][T11968] dvb-usb: bulk message failed: -22 (3/0) [ 826.808334][T11968] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 826.813973][T11968] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 826.823546][T11968] usb 10-1: media controller created [ 826.831021][T11968] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 826.870611][T11968] dvb-usb: bulk message failed: -22 (6/0) [ 826.873684][T11968] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 826.879740][T11968] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input96 [ 826.884904][T11968] dvb-usb: schedule remote query interval to 150 msecs. [ 826.887411][T11968] dvb-usb: bulk message failed: -22 (3/0) [ 826.906420][T11968] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 826.914308][ T5747] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 826.923127][ T5747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 826.927693][ T5747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 826.943198][ T5747] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 826.947926][ T5747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 827.010629][T16386] netlink: 'syz.5.2900': attribute type 10 has an invalid length. [ 827.048382][T11968] dvb-usb: bulk message failed: -22 (1/0) [ 827.055073][T11968] dvb-usb: error while querying for an remote control event. [ 827.126871][T16408] tmpfs: Bad value for 'mpol' [ 827.146922][T16386] syz_tun: entered promiscuous mode [ 827.154559][T16386] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 827.226309][T11968] dvb-usb: bulk message failed: -22 (1/0) [ 827.228920][T11968] dvb-usb: error while querying for an remote control event. [ 827.265159][ T64] Bluetooth: hci2: command 0xfc11 tx timeout [ 827.282130][T14950] Process accounting resumed [ 827.291476][T11535] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 827.391474][T11968] dvb-usb: bulk message failed: -22 (1/0) [ 827.396837][T11968] dvb-usb: error while querying for an remote control event. [ 827.556494][T11968] dvb-usb: bulk message failed: -22 (1/0) [ 827.558980][T11968] dvb-usb: error while querying for an remote control event. [ 827.578142][T16418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2908'. [ 827.716286][T11968] dvb-usb: bulk message failed: -22 (1/0) [ 827.720316][T11968] dvb-usb: error while querying for an remote control event. [ 827.814063][T16400] wlan0 speed is unknown, defaulting to 1000 [ 827.819574][T16400] lo speed is unknown, defaulting to 1000 [ 827.877278][T11968] dvb-usb: bulk message failed: -22 (1/0) [ 827.879206][T11968] dvb-usb: error while querying for an remote control event. [ 828.002789][T16422] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 828.016866][T16422] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 828.021810][T16422] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 828.036223][T11968] dvb-usb: bulk message failed: -22 (1/0) [ 828.038153][T11968] dvb-usb: error while querying for an remote control event. [ 828.173163][T15390] netdevsim netdevsim3 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.197199][ T6070] dvb-usb: bulk message failed: -22 (1/0) [ 828.203293][ T6070] dvb-usb: error while querying for an remote control event. [ 828.248667][T15390] netdevsim netdevsim3 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.367811][ T6070] dvb-usb: bulk message failed: -22 (1/0) [ 828.370271][ T6070] dvb-usb: error while querying for an remote control event. [ 828.437915][ T13] bridge_slave_1: left allmulticast mode [ 828.441746][ T13] bridge_slave_1: left promiscuous mode [ 828.444571][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.536309][ T6070] dvb-usb: bulk message failed: -22 (1/0) [ 828.538402][ T6070] dvb-usb: error while querying for an remote control event. [ 828.542575][ T13] bridge_slave_0: left allmulticast mode [ 828.545111][ T13] bridge_slave_0: left promiscuous mode [ 828.548336][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.703019][ T4035] dvb-usb: bulk message failed: -22 (1/0) [ 828.705625][ T4035] dvb-usb: error while querying for an remote control event. [ 828.867603][ T4035] dvb-usb: bulk message failed: -22 (1/0) [ 828.869496][ T4035] dvb-usb: error while querying for an remote control event. [ 828.928862][ T4035] usb 10-1: USB disconnect, device number 4 [ 829.006279][T11535] Bluetooth: hci3: command tx timeout [ 829.134005][ T4035] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 829.251735][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 829.342724][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 829.378089][ T13] bond0 (unregistering): Released all slaves [ 829.421689][T16400] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.427760][T16400] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.431430][T16400] bridge_slave_0: entered allmulticast mode [ 829.441260][T16400] bridge_slave_0: entered promiscuous mode [ 829.478158][ T1468] Process accounting resumed [ 829.496593][ T5810] netdevsim netdevsim3 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.503255][ T5810] netdevsim netdevsim3 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.523927][ T5445] 8021q: adding VLAN 0 to HW filter on device eth13 [ 829.550368][T16447] bridge8: entered promiscuous mode [ 829.552752][T16447] bridge8: entered allmulticast mode [ 829.558341][T16400] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.565081][T16400] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.585093][T16400] bridge_slave_1: entered allmulticast mode [ 829.596285][T16400] bridge_slave_1: entered promiscuous mode [ 829.901486][T16400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 829.952314][T16400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 830.414974][ T42] kauditd_printk_skb: 80 callbacks suppressed [ 830.415000][ T42] audit: type=1800 audit(1786128850.746:14615): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 830.436603][ T5445] 8021q: adding VLAN 0 to HW filter on device eth14 [ 830.440241][T16400] team0: Port device team_slave_0 added [ 830.444833][T16400] team0: Port device team_slave_1 added [ 830.470975][T16400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 830.473280][T16400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.482840][T16400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 830.520005][T16400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 830.537989][T16400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.546262][T16400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 830.569457][T15195] Process accounting resumed [ 830.598159][T16400] hsr_slave_0: entered promiscuous mode [ 830.603573][T16400] hsr_slave_1: entered promiscuous mode [ 830.608634][T16400] debugfs: 'hsr0' already exists in 'hsr' [ 830.613446][T16400] Cannot create hsr debugfs directory [ 830.698276][ T42] audit: type=1800 audit(1786128851.036:14616): pid=16480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2921" name="file1" dev="tmpfs" ino=323 res=0 errno=0 [ 831.091021][T11535] Bluetooth: hci3: command tx timeout [ 831.693977][ T42] audit: type=1800 audit(1786128852.025:14617): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 831.881272][ T42] audit: type=1800 audit(1786128852.215:14618): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 831.907195][ T42] audit: type=1800 audit(1786128852.235:14619): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16583 res=0 errno=0 [ 831.978166][ T13] hsr_slave_0: left promiscuous mode [ 832.018176][ T13] hsr_slave_1: left promiscuous mode [ 832.020462][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.054844][ T42] audit: type=1800 audit(1786128852.385:14620): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 832.061520][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 832.094286][ T42] audit: type=1800 audit(1786128852.425:14621): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 832.109554][ T42] audit: type=1800 audit(1786128852.435:14622): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 832.133328][ T42] audit: type=1800 audit(1786128852.465:14623): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 832.143188][T16509] binder: 16508:16509 ioctl 4018620d 0 returned -22 [ 832.174988][ T42] audit: type=1800 audit(1786128852.505:14624): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 832.549041][ T13] team0 (unregistering): Port device team_slave_1 removed [ 832.588572][ T13] team0 (unregistering): Port device team_slave_0 removed [ 832.730632][ T36] smc: removing ib device syz1 [ 832.792763][ T36] smbdirect: ib_dev[syz1] removed [ 832.850313][ T5445] 8021q: adding VLAN 0 to HW filter on device eth15 [ 833.042517][T16525] ALSA: seq fatal error: cannot create timer (-19) [ 833.102344][T16528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2932'. [ 833.168707][T11535] Bluetooth: hci3: command tx timeout [ 833.293810][T16534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2933'. [ 833.406985][ T5445] 8021q: adding VLAN 0 to HW filter on device eth16 [ 833.708897][T16400] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 833.750410][T16400] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 833.753524][T16400] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 833.771225][T16400] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 833.774105][T16400] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 833.799060][ T56] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 833.824011][T16400] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 833.827009][T16400] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 833.860891][T16400] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 833.971016][ T56] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 833.974160][ T56] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.042414][ T13] IPVS: stop unused estimator thread 0... [ 834.182473][ T56] cdc_acm 10-1:1.0: ttyACM0: USB ACM device [ 834.238711][T16400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.251274][T16400] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.266933][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.269769][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.418805][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 834.428292][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 834.431758][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 834.435472][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 834.438171][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 834.507889][T16563] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2941'. [ 834.526158][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.580790][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.583355][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.859728][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.225513][T16561] wlan0 speed is unknown, defaulting to 1000 [ 835.249440][T11535] Bluetooth: hci3: command tx timeout [ 835.585595][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.678297][ T42] kauditd_printk_skb: 30 callbacks suppressed [ 835.678314][ T42] audit: type=1800 audit(1786128856.003:14655): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=332752 res=0 errno=0 [ 835.687228][ T42] audit: type=1800 audit(1786128856.013:14656): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=332771 res=0 errno=0 [ 835.699487][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 835.710203][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 835.713445][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 835.717843][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 835.722628][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 835.740473][ T42] audit: type=1800 audit(1786128856.063:14657): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=333367 res=0 errno=0 [ 835.751713][ T42] audit: type=1800 audit(1786128856.083:14658): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=333378 res=0 errno=0 [ 835.901285][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.925131][T16400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.034005][T16561] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.037420][T16561] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.040789][T16561] bridge_slave_0: entered allmulticast mode [ 836.045015][T16561] bridge_slave_0: entered promiscuous mode [ 836.050744][T16561] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.053326][T16561] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.056450][T16561] bridge_slave_1: entered allmulticast mode [ 836.065239][T16561] bridge_slave_1: entered promiscuous mode [ 836.098444][T16561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.105157][T16561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.131718][ T42] audit: type=1800 audit(1786128856.463:14659): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=334903 res=0 errno=0 [ 836.139183][ T42] audit: type=1800 audit(1786128856.463:14660): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=334908 res=0 errno=0 [ 836.147422][ T42] audit: type=1800 audit(1786128856.463:14661): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=334912 res=0 errno=0 [ 836.148228][T16592] wlan0 speed is unknown, defaulting to 1000 [ 836.154866][ T42] audit: type=1800 audit(1786128856.463:14662): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=334911 res=0 errno=0 [ 836.164432][ T42] audit: type=1800 audit(1786128856.463:14663): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=334914 res=0 errno=0 [ 836.171818][ T42] audit: type=1800 audit(1786128856.493:14664): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=335245 res=0 errno=0 [ 836.189296][T16561] team0: Port device team_slave_0 added [ 836.231000][T16561] team0: Port device team_slave_1 added [ 836.401995][T16561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.404791][T16561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.413607][T16561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.425766][T16561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.427930][T16561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.436328][T16561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.450518][T11535] Bluetooth: hci2: command tx timeout [ 836.561363][ T6350] usb 10-1: USB disconnect, device number 5 [ 836.596319][ T13] bridge_slave_1: left allmulticast mode [ 836.598141][ T13] bridge_slave_1: left promiscuous mode [ 836.602282][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.680868][ T13] bridge_slave_0: left allmulticast mode [ 836.682806][ T13] bridge_slave_0: left promiscuous mode [ 836.684861][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.070471][ T6350] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 837.220699][ T6350] usb 10-1: Using ep0 maxpacket: 8 [ 837.226812][ T6350] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 837.231713][ T6350] usb 10-1: config 0 has no interface number 0 [ 837.235264][ T6350] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 837.240733][ T6350] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 837.245904][ T6350] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 837.251009][ T6350] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 837.256695][ T6350] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 837.260708][ T6350] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.266650][ T6350] usb 10-1: config 0 descriptor?? [ 837.282443][ T6350] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 837.721067][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.791127][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.810822][T11535] Bluetooth: hci0: command tx timeout [ 837.862134][ T13] bond0 (unregistering): Released all slaves [ 837.937275][ T5445] 8021q: adding VLAN 0 to HW filter on device eth17 [ 837.941919][ T5810] netdevsim netdevsim2 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.953078][T16561] hsr_slave_0: entered promiscuous mode [ 837.955505][T16561] hsr_slave_1: entered promiscuous mode [ 837.957679][T16561] debugfs: 'hsr0' already exists in 'hsr' [ 837.959452][T16561] Cannot create hsr debugfs directory [ 837.989085][T16630] wlan0 speed is unknown, defaulting to 1000 [ 837.996317][T16400] veth0_vlan: entered promiscuous mode [ 838.103761][T16400] veth1_vlan: entered promiscuous mode [ 838.141544][T14950] usb 10-1: USB disconnect, device number 6 [ 838.148757][T14950] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 838.293213][T16400] veth0_macvtap: entered promiscuous mode [ 838.300894][T16400] veth1_macvtap: entered promiscuous mode [ 838.371342][ T12] netdevsim netdevsim2 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.374940][ T12] netdevsim netdevsim2 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.541278][T11535] Bluetooth: hci2: command tx timeout [ 838.550767][ T5445] 8021q: adding VLAN 0 to HW filter on device eth18 [ 838.583212][T16400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 838.664823][T16400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 838.669151][T16592] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.672676][T16592] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.675877][T16592] bridge_slave_0: entered allmulticast mode [ 838.679762][T16592] bridge_slave_0: entered promiscuous mode [ 838.686155][T16592] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.689005][T16592] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.692449][T16592] bridge_slave_1: entered allmulticast mode [ 838.696579][T16592] bridge_slave_1: entered promiscuous mode [ 838.892214][ T13] hsr_slave_0: left promiscuous mode [ 838.941479][ T13] hsr_slave_1: left promiscuous mode [ 838.944602][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 838.946976][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.982577][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 838.984906][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 839.072451][ T13] veth1_macvtap: left promiscuous mode [ 839.074922][ T13] veth0_macvtap: left promiscuous mode [ 839.076844][ T13] veth1_vlan: left promiscuous mode [ 839.078563][ T13] veth0_vlan: left promiscuous mode [ 839.644397][ T13] team0 (unregistering): Port device team_slave_1 removed [ 839.692330][ T13] team0 (unregistering): Port device team_slave_0 removed [ 839.891790][T11535] Bluetooth: hci0: command tx timeout [ 839.921913][T16647] netdevsim netdevsim2 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.939208][T16561] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 839.984384][T16561] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 839.993726][T16592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.998122][T16561] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 840.025002][T16561] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 840.032828][T16592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.056653][T16561] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 840.072476][T12772] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 840.084568][T16561] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 840.088428][T16561] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 840.163807][T16561] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 840.169687][T16592] team0: Port device team_slave_0 added [ 840.173553][ T5445] 8021q: adding VLAN 0 to HW filter on device eth19 [ 840.183681][T16592] team0: Port device team_slave_1 added [ 840.271212][T12772] usb 10-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 840.276068][T12772] usb 10-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 840.286833][T12772] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 840.290476][T12772] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.292195][T16592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.294259][T12772] usb 10-1: Product: syz [ 840.296617][T16592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.298468][T12772] usb 10-1: Manufacturer: syz [ 840.309001][T16592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.310845][T12772] usb 10-1: SerialNumber: syz [ 840.316182][T16592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.319091][T16592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.327266][T16592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.345454][ T1468] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 840.410615][T16592] hsr_slave_0: entered promiscuous mode [ 840.413094][T16592] hsr_slave_1: entered promiscuous mode [ 840.465812][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.470261][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.549250][T14950] usb 10-1: USB disconnect, device number 7 [ 840.612294][T11535] Bluetooth: hci2: command tx timeout [ 840.786677][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.789261][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.844580][ T42] kauditd_printk_skb: 47 callbacks suppressed [ 840.844600][ T42] audit: type=1800 audit(1786128861.171:14712): pid=16592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=27302 res=0 errno=0 [ 840.859281][T16561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 840.860533][ T42] audit: type=1800 audit(1786128861.171:14713): pid=16592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=27301 res=0 errno=0 [ 840.872775][ T42] audit: type=1800 audit(1786128861.171:14714): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=345221 res=0 errno=0 [ 840.874011][T16647] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.927608][T16561] 8021q: adding VLAN 0 to HW filter on device team0 [ 840.974237][ T96] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.977228][ T96] bridge0: port 1(bridge_slave_0) entered forwarding state [ 840.987789][ T42] audit: type=1800 audit(1786128861.311:14715): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 840.990239][ T5445] 8021q: adding VLAN 0 to HW filter on device eth20 [ 841.004063][T16647] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.015397][ T42] audit: type=1800 audit(1786128861.341:14716): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 841.016191][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.024435][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.040702][T16592] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 841.085385][T16592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 841.088901][T16592] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 841.118555][T16592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 841.128378][T16592] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 841.157080][T16592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 841.183316][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.186955][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.221318][T16592] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 841.288041][ T42] audit: type=1800 audit(1786128861.611:14717): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=5226 res=0 errno=0 [ 841.297527][T16592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 841.494067][T16592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.515935][T16592] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.525243][ T1199] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.527665][ T1199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.543928][ T1199] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.546250][ T1199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.587567][ T1468] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 841.853611][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.973755][T11535] Bluetooth: hci0: command tx timeout [ 841.978944][T16561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 842.013496][ T1468] ath9k_htc: Failed to initialize the device [ 842.209416][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.269761][T14950] usb 10-1: ath9k_htc: USB layer deinitialized [ 842.291863][T16592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 842.480402][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.610435][T16561] veth0_vlan: entered promiscuous mode [ 842.636768][T16561] veth1_vlan: entered promiscuous mode [ 842.674046][T16561] veth0_macvtap: entered promiscuous mode [ 842.685691][T16561] veth1_macvtap: entered promiscuous mode [ 842.693254][T11535] Bluetooth: hci2: command tx timeout [ 842.700177][T16561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.764762][T16561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 842.913749][ T42] audit: type=1800 audit(1786128863.230:14718): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 842.953990][ T42] audit: type=1800 audit(1786128863.270:14719): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 842.969141][ T42] audit: type=1800 audit(1786128863.270:14720): pid=16728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2949" name="online" dev="sysfs" ino=478 res=0 errno=0 [ 843.014825][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.139961][T16728] smpboot: CPU 1 is now offline [ 843.191700][ T42] audit: type=1800 audit(1786128863.510:14721): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=475 res=0 errno=0 [ 843.288318][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.300386][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.314077][T16592] veth0_vlan: entered promiscuous mode [ 843.330644][T11878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.335925][T16592] veth1_vlan: entered promiscuous mode [ 843.337791][T11878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.412889][ T96] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.418092][ T96] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.674777][ T12] netdevsim netdevsim6 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.679664][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.689145][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.694254][ T12] netdevsim netdevsim6 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.699528][ T12] netdevsim netdevsim6 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.783325][T16592] veth0_macvtap: entered promiscuous mode [ 843.846774][T16592] veth1_macvtap: entered promiscuous mode [ 843.935363][T16592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 843.984372][T16592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 844.064585][T11535] Bluetooth: hci0: command tx timeout [ 844.264015][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.284979][T16647] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.295400][T15390] netdevsim netdevsim6 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.424281][ T13] bridge_slave_1: left allmulticast mode [ 844.426071][ T13] bridge_slave_1: left promiscuous mode [ 844.427948][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.522074][ T13] bridge_slave_0: left allmulticast mode [ 844.523706][ T13] bridge_slave_0: left promiscuous mode [ 844.526400][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.255466][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 845.366700][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 845.406841][ T13] bond0 (unregistering): Released all slaves [ 845.677893][T16750] bridge1: entered promiscuous mode [ 845.679681][T16750] bridge1: entered allmulticast mode [ 845.685637][T10848] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.716358][T16647] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.737970][ T13] tipc: Left network mode [ 845.855483][ T42] kauditd_printk_skb: 29 callbacks suppressed [ 845.855498][ T42] audit: type=1800 audit(1786128866.178:14751): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 845.866335][ T42] audit: type=1800 audit(1786128866.178:14752): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 845.874995][ T42] audit: type=1800 audit(1786128866.198:14753): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 845.903323][ T42] audit: type=1800 audit(1786128866.218:14754): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=346377 res=0 errno=0 [ 845.912355][ T42] audit: type=1800 audit(1786128866.218:14755): pid=16762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2952" name="in_ports" dev="configfs" ino=71203 res=0 errno=0 [ 846.021715][ T42] audit: type=1800 audit(1786128866.338:14756): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 846.082840][ T5445] 8021q: adding VLAN 0 to HW filter on device eth21 [ 846.094690][ T1199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.098168][T16767] wlan0 speed is unknown, defaulting to 1000 [ 846.099819][ T42] audit: type=1800 audit(1786128866.418:14757): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 846.112193][ T1199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.134316][ T42] audit: type=1800 audit(1786128866.448:14758): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=346597 res=0 errno=0 [ 846.327831][ T96] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.332180][ T96] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.380007][ T42] audit: type=1800 audit(1786128866.708:14759): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302871 res=0 errno=0 [ 846.575866][ T13] hsr_slave_0: left promiscuous mode [ 846.616158][ T13] hsr_slave_1: left promiscuous mode [ 846.619752][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 846.622928][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.656676][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 846.659881][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.736123][ T13] veth1_macvtap: left promiscuous mode [ 846.737963][ T13] veth0_macvtap: left promiscuous mode [ 846.739843][ T13] veth0_vlan: left promiscuous mode [ 847.746411][ T13] team0 (unregistering): Port device team_slave_1 removed [ 847.762098][ T13] team0 (unregistering): Port device team_slave_0 removed [ 848.125488][ T42] audit: type=1800 audit(1786128868.447:14760): pid=5445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=345920 res=0 errno=0 [ 848.320253][T16796] intel_xhci_usb_sw pcspkr: probe with driver intel_xhci_usb_sw failed with error -22 [ 848.587673][T16798] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2957'. [ 848.769381][ T5445] 8021q: adding VLAN 0 to HW filter on device eth22 [ 848.960340][T16804] fuse: Bad value for 'user_id' [ 848.966324][T16804] fuse: Bad value for 'user_id' [ 849.059427][T16814] syzkaller0: entered promiscuous mode [ 849.068060][T16814] syzkaller0: entered allmulticast mode [ 849.125547][T16814] tipc: Started in network mode [ 849.137337][T16814] tipc: Node identity a2631129ebc1, cluster identity 4711 [ 849.143991][T16814] tipc: Enabled bearer , priority 0 [ 849.191343][T16813] tipc: Resetting bearer [ 849.447218][T16813] tipc: Disabling bearer [ 850.099230][T16836] Console: switching to colour dummy device 80x25 [ 850.149554][T16841] syzkaller0: entered promiscuous mode [ 850.151383][T16841] syzkaller0: entered allmulticast mode [ 850.237137][ T6350] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 850.408348][ T6350] usb 14-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 850.416967][ T6350] usb 14-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 850.422490][ T6350] usb 14-1: config 0 interface 0 has no altsetting 0 [ 850.426718][ T6350] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 850.435155][ T6350] usb 14-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 850.441524][ T6350] usb 14-1: Product: syz [ 850.442911][ T6350] usb 14-1: Manufacturer: syz [ 850.447177][ T6350] usb 14-1: SerialNumber: syz [ 850.452461][ T6350] usb 14-1: config 0 descriptor?? [ 850.458052][T16831] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 850.464566][ T6350] usb 14-1: selecting invalid altsetting 0 [ 850.578132][ T5445] 8021q: adding VLAN 0 to HW filter on device eth23 [ 850.678995][ T9] usb 14-1: USB disconnect, device number 2 [ 850.813382][ T5445] 8021q: adding VLAN 0 to HW filter on device eth24 [ 850.932457][ T42] kauditd_printk_skb: 43 callbacks suppressed [ 850.932472][ T42] audit: type=1800 audit(1786128871.256:14804): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 850.972037][ T42] audit: type=1800 audit(1786128871.296:14805): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 851.380883][ T42] audit: type=1800 audit(1786128871.696:14806): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 852.027059][ T42] audit: type=1800 audit(1786128872.345:14807): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 852.309577][ T42] audit: type=1800 audit(1786128872.625:14808): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 852.353926][ T42] audit: type=1800 audit(1786128872.665:14809): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 852.405146][ T42] audit: type=1800 audit(1786128872.725:14810): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=348160 res=0 errno=0 [ 852.441280][ T42] audit: type=1800 audit(1786128872.725:14811): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=348171 res=0 errno=0 [ 852.505355][ T42] audit: type=1800 audit(1786128872.825:14812): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 852.554329][ T42] audit: type=1800 audit(1786128872.875:14813): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 853.252627][T16931] fuse: Bad value for 'user_id' [ 853.254605][T16931] fuse: Bad value for 'user_id' [ 853.897493][T16947] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2974'. [ 854.459370][ T5747] Bluetooth: hci4: command 0xfc11 tx timeout [ 854.465275][T11535] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 854.636256][T16982] net_ratelimit: 2 callbacks suppressed [ 854.636277][T16982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 854.656744][ T1154] Bluetooth: hci4: Frame reassembly failed (-84) [ 854.719480][T16986] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2981'. [ 854.934736][T16999] wlan0 speed is unknown, defaulting to 1000 [ 855.979832][ T64] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 855.981965][ T5747] Bluetooth: hci5: command 0xfc11 tx timeout [ 856.062133][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 856.062153][ T42] audit: type=1800 audit(1786128876.383:14839): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 856.117581][T17021] wlan0 speed is unknown, defaulting to 1000 [ 856.399209][ T42] audit: type=1800 audit(1786128876.713:14840): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 856.460694][ T42] audit: type=1800 audit(1786128876.783:14841): pid=17028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2989" name="UDC" dev="configfs" ino=71622 res=0 errno=0 [ 856.523487][ T42] audit: type=1800 audit(1786128876.843:14842): pid=17032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2989" name="bConfigurationValue" dev="sysfs" ino=29946 res=0 errno=0 [ 856.652776][ T42] audit: type=1800 audit(1786128876.963:14843): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 856.663318][T17037] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2990'. [ 856.701886][ T64] Bluetooth: hci4: command 0xfc11 tx timeout [ 856.705727][T11535] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 856.722670][ T64] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 856.730321][ T42] audit: type=1800 audit(1786128877.043:14844): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 856.741360][ T64] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 856.744530][ T64] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 856.747756][ T64] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 856.763656][ T42] audit: type=1800 audit(1786128877.043:14845): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=349822 res=0 errno=0 [ 856.770251][ T64] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 856.772901][ T42] audit: type=1800 audit(1786128877.043:14846): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=349833 res=0 errno=0 [ 856.793629][ T42] audit: type=1800 audit(1786128877.113:14847): pid=16354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=349852 res=0 errno=0 [ 856.806805][ T42] audit: type=1800 audit(1786128877.123:14848): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=349863 res=0 errno=0 [ 857.226545][T17064] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2996'. [ 857.287120][T17041] wlan0 speed is unknown, defaulting to 1000 [ 857.493013][T17041] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.495436][T17041] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.497845][T17041] bridge_slave_0: entered allmulticast mode [ 857.520614][T17041] bridge_slave_0: entered promiscuous mode [ 857.532981][T17041] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.542079][T17041] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.549457][T17041] bridge_slave_1: entered allmulticast mode [ 857.559357][T17041] bridge_slave_1: entered promiscuous mode [ 857.965642][T16664] bond0: (slave syz_tun): Releasing backup interface [ 858.175754][T17041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.188004][T17041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.237429][T17091] xt_ecn: cannot match TCP bits for non-tcp packets [ 858.238622][T17041] team0: Port device team_slave_0 added [ 858.247566][T17041] team0: Port device team_slave_1 added [ 858.281628][T17041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.288469][T17041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.299693][T17041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.473078][T10848] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.536886][T17041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.539768][T17041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.551428][T17041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.861296][T11535] Bluetooth: hci5: command tx timeout [ 858.867968][T10848] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.910959][T17041] hsr_slave_0: entered promiscuous mode [ 858.914256][T17041] hsr_slave_1: entered promiscuous mode [ 858.916849][T17041] debugfs: 'hsr0' already exists in 'hsr' [ 858.919406][T17041] Cannot create hsr debugfs directory [ 859.112821][T10848] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.341618][ T5747] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 859.344222][T11535] Bluetooth: hci4: command 0xfc11 tx timeout [ 859.540382][T10848] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.723013][ T9] usb 12-1: new full-speed USB device number 2 using dummy_hcd [ 859.789143][T17041] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.863105][ T9] usb 12-1: device descriptor read/64, error -71 [ 860.101971][ T9] usb 12-1: new full-speed USB device number 3 using dummy_hcd [ 860.157254][ T64] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 860.162576][ T5747] Bluetooth: hci1: command 0xfc11 tx timeout [ 860.252332][ T9] usb 12-1: device descriptor read/64, error -71 [ 860.383301][T15390] netdevsim netdevsim5 eth27: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.396057][ T9] usb usb12-port1: attempt power cycle [ 860.413889][T15390] netdevsim netdevsim5 eth26: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.419879][T15390] netdevsim netdevsim5 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.435679][T15390] netdevsim netdevsim5 eth25: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.443709][T17124] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3007'. [ 860.632267][T10848] bridge_slave_1: left allmulticast mode [ 860.634061][T10848] bridge_slave_1: left promiscuous mode [ 860.638265][T10848] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.704382][T10848] bridge_slave_0: left allmulticast mode [ 860.706760][T10848] bridge_slave_0: left promiscuous mode [ 860.709170][T10848] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.742272][ T9] usb 12-1: new full-speed USB device number 4 using dummy_hcd [ 860.762811][ T9] usb 12-1: device descriptor read/8, error -71 [ 860.942596][ T64] Bluetooth: hci5: command tx timeout [ 861.003869][ T9] usb 12-1: new full-speed USB device number 5 using dummy_hcd [ 861.023168][ T9] usb 12-1: device descriptor read/8, error -71 [ 861.133168][ T9] usb usb12-port1: unable to enumerate USB device [ 861.213182][T10848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.303507][T10848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 861.324277][T10848] bond0 (unregistering): Released all slaves [ 861.560809][T17041] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.735367][T10848] tipc: Left network mode [ 861.822148][ T42] kauditd_printk_skb: 51 callbacks suppressed [ 861.822163][ T42] audit: type=1800 audit(1786128882.130:14900): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 861.887200][ T42] audit: type=1800 audit(1786128882.200:14901): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 861.910312][ T42] audit: type=1800 audit(1786128882.220:14902): pid=17153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3013" name="resource0" dev="sysfs" ino=2630 res=0 errno=0 [ 861.943565][ T5445] 8021q: adding VLAN 0 to HW filter on device eth4 [ 862.109042][ T42] audit: type=1800 audit(1786128882.430:14903): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 862.352119][ T5445] 8021q: adding VLAN 0 to HW filter on device eth25 [ 862.567263][ T42] audit: type=1800 audit(1786128882.880:14904): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 862.602006][T17176] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 862.628035][T17041] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.789826][T17179] syz_tun: entered allmulticast mode [ 862.923253][T10848] hsr_slave_0: left promiscuous mode [ 862.963382][T10848] hsr_slave_1: left promiscuous mode [ 862.966309][T10848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 862.969509][T10848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 863.004621][T10848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 863.007755][T10848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 863.023407][ T64] Bluetooth: hci5: command tx timeout [ 863.095357][T10848] veth1_macvtap: left promiscuous mode [ 863.097817][T10848] veth0_macvtap: left promiscuous mode [ 863.101974][T10848] veth1_vlan: left promiscuous mode [ 863.104003][T10848] veth0_vlan: left promiscuous mode [ 863.214226][ T42] audit: type=1800 audit(1786128883.530:14905): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 863.249362][ T42] audit: type=1800 audit(1786128883.560:14906): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 864.014547][T10848] team0 (unregistering): Port device team_slave_1 removed [ 864.064654][T10848] team0 (unregistering): Port device team_slave_0 removed [ 864.149979][ T42] audit: type=1800 audit(1786128884.459:14907): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 864.213985][ T42] audit: type=1800 audit(1786128884.519:14908): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 864.330567][ T42] audit: type=1800 audit(1786128884.639:14909): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 864.386243][ T5445] 8021q: adding VLAN 0 to HW filter on device eth26 [ 864.389709][T17176] syz_tun: left allmulticast mode [ 864.757126][T17041] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.108030][ T5747] Bluetooth: hci5: command tx timeout [ 865.586673][T17041] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 865.686994][T17041] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 865.693846][T17041] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 865.736237][T17041] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 865.743776][T17041] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 865.799563][T17041] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 865.822298][T17041] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 865.876240][T17041] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 865.972467][ T5445] 8021q: adding VLAN 0 to HW filter on device eth27 [ 866.055937][T17041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.077247][T17041] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.115548][T17247] x_tables: duplicate underflow at hook 3 [ 866.135721][T17247] ./bus: Can't lookup blockdev [ 866.154186][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.156985][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 866.180299][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.182491][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 866.545274][ T64] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 866.785648][T17041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 866.852655][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 866.852676][ T42] audit: type=1800 audit(1786128887.168:14923): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 867.011516][T17041] veth0_vlan: entered promiscuous mode [ 867.026923][T17041] veth1_vlan: entered promiscuous mode [ 867.089924][T17041] veth0_macvtap: entered promiscuous mode [ 867.102759][T17041] veth1_macvtap: entered promiscuous mode [ 867.132597][T17041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 867.144009][T17041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 867.276802][T15390] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.383614][T11878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.386323][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.394889][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.399911][T11878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.402609][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.432262][ T96] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.444394][ T96] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.601341][ T42] audit: type=1800 audit(1786128887.908:14924): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 867.687588][ T42] audit: type=1800 audit(1786128887.908:14925): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=356586 res=0 errno=0 [ 867.731449][ T42] audit: type=1800 audit(1786128888.037:14926): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 867.881259][ T42] audit: type=1800 audit(1786128888.167:14927): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 868.142592][ T42] audit: type=1800 audit(1786128888.417:14928): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=356712 res=0 errno=0 [ 868.483984][ T42] audit: type=1800 audit(1786128888.797:14929): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15809 res=0 errno=0 [ 868.498686][ T42] audit: type=1800 audit(1786128888.817:14930): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15809 res=0 errno=0 [ 868.509802][T17302] FAULT_INJECTION: forcing a failure. [ 868.509802][T17302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 868.514389][T17302] CPU: 0 UID: 0 PID: 17302 Comm: syz.0.2991 Tainted: G L syzkaller #0 PREEMPT(full) [ 868.514409][T17302] Tainted: [L]=SOFTLOCKUP [ 868.514413][T17302] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 868.514427][T17302] Call Trace: [ 868.514432][T17302] [ 868.514437][T17302] dump_stack_lvl+0x100/0x190 [ 868.514522][T17302] should_fail_ex.cold+0x5/0xa [ 868.514548][T17302] _copy_to_user+0x32/0xd0 [ 868.514578][T17302] simple_read_from_buffer+0xcb/0x170 [ 868.514622][T17302] proc_fail_nth_read+0x1af/0x230 [ 868.514654][T17302] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 868.514679][T17302] ? rw_verify_area+0xce/0x6d0 [ 868.514708][T17302] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 868.514725][T17302] vfs_read+0x1e4/0xb40 [ 868.514738][T17302] ? __pfx_vfs_read+0x10/0x10 [ 868.514748][T17302] ? find_held_lock+0x2b/0x80 [ 868.514774][T17302] ? __fget_files+0x215/0x3d0 [ 868.514788][T17302] ? __fget_files+0x21f/0x3d0 [ 868.514802][T17302] ksys_read+0x12a/0x250 [ 868.514813][T17302] ? __pfx_ksys_read+0x10/0x10 [ 868.514828][T17302] do_int80_emulation+0x14b/0x720 [ 868.514892][T17302] asm_int80_emulation+0x1a/0x20 [ 868.514905][T17302] RIP: 0023:0xf71d74eb [ 868.514915][T17302] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 868.514927][T17302] RSP: 002b:00000000f54964bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 868.514952][T17302] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54965d0 [ 868.514959][T17302] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 868.514966][T17302] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 868.514972][T17302] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 868.514979][T17302] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 868.514994][T17302] [ 868.844244][ T42] audit: type=1800 audit(1786128889.157:14931): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 868.997827][ T42] audit: type=1800 audit(1786128889.317:14932): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15809 res=0 errno=0 [ 869.022414][T17316] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3037'. [ 869.780968][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.806784][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.815673][T17352] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3039'. [ 871.109459][ T64] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 871.246783][T17362] 8021q: adding VLAN 0 to HW filter on device bond1 [ 872.130862][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 872.130880][ T42] audit: type=1800 audit(1786128891.447:14944): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 872.140698][T17371] ima: policy update completed [ 872.164468][ T42] audit: type=1802 audit(1786128891.457:14945): pid=17371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.0.3042" res=1 errno=0 [ 872.300306][ T42] audit: type=1800 audit(1786128891.607:14946): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15809 res=0 errno=0 [ 872.322290][ T42] audit: type=1800 audit(1786128891.637:14947): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 872.346772][ T42] audit: type=1800 audit(1786128891.657:14948): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15809 res=0 errno=0 [ 872.397437][ T42] audit: type=1800 audit(1786128891.707:14949): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15809 res=0 errno=0 [ 872.455920][T17404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3048'. [ 872.475709][ T42] audit: type=1800 audit(1786128891.787:14950): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 872.695621][ T5879] IPVS: starting estimator thread 0... [ 872.778165][T17411] IPVS: using max 44 ests per chain, 105600 per kthread [ 873.491691][ T42] audit: type=1800 audit(1786128892.787:14951): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 873.627611][ T42] audit: type=1800 audit(1786128892.936:14952): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 873.675905][T15390] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.723822][ T42] audit: type=1800 audit(1786128893.036:14953): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=357514 res=0 errno=0 [ 873.745278][ T5747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 873.754430][ T5747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 873.763070][ T5747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 873.771475][ T5747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 873.774537][ T5747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 874.471403][T15390] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.134543][T15390] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.299223][ T5747] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 875.305775][ T5747] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 875.318804][ T5747] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 875.333195][ T5747] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 875.336445][ T5747] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 875.503534][T15390] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.530354][T17420] wlan0 speed is unknown, defaulting to 1000 [ 875.675028][T17451] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3058'. [ 875.809886][ T13] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.839772][ T5747] Bluetooth: hci0: command tx timeout [ 875.867018][T17434] wlan0 speed is unknown, defaulting to 1000 [ 875.919088][T17420] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.922939][T17420] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.925313][T17420] bridge_slave_0: entered allmulticast mode [ 875.928132][T17420] bridge_slave_0: entered promiscuous mode [ 875.935356][T17420] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.937769][T17420] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.940607][T17420] bridge_slave_1: entered allmulticast mode [ 875.943501][T17420] bridge_slave_1: entered promiscuous mode [ 875.996329][T17420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 876.100032][T15390] bridge_slave_1: left allmulticast mode [ 876.101883][T15390] bridge_slave_1: left promiscuous mode [ 876.110091][T15390] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.170644][T15390] bridge_slave_0: left allmulticast mode [ 876.172889][T15390] bridge_slave_0: left promiscuous mode [ 876.175119][T15390] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.712192][T15390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 876.780601][T15390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 876.824186][T15390] bond0 (unregistering): Released all slaves [ 876.882080][T17420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.142150][ T5445] 8021q: adding VLAN 0 to HW filter on device eth1 [ 877.187392][ T42] kauditd_printk_skb: 30 callbacks suppressed [ 877.187408][ T42] audit: type=1800 audit(1786128896.495:14984): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 877.232098][ T13] netdevsim netdevsim9 eth28: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.234923][ T13] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.440651][ T5747] Bluetooth: hci1: command tx timeout [ 877.695807][T17420] team0: Port device team_slave_0 added [ 877.700288][T17420] team0: Port device team_slave_1 added [ 877.811201][T17420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.816071][T17420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.841341][T17420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.920853][ T42] audit: type=1800 audit(1786128897.104:14985): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=346597 res=0 errno=0 [ 877.923105][ T5747] Bluetooth: hci0: command tx timeout [ 878.066807][ T42] audit: type=1800 audit(1786128897.374:14986): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=362655 res=0 errno=0 [ 878.096896][ T42] audit: type=1800 audit(1786128897.404:14987): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=362666 res=0 errno=0 [ 878.101417][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 878.116274][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 878.123007][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 878.129009][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 878.136149][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 878.165012][ T42] audit: type=1800 audit(1786128897.474:14988): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=362685 res=0 errno=0 [ 878.219521][ T42] audit: type=1800 audit(1786128897.494:14989): pid=16354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=362696 res=0 errno=0 [ 878.306145][ T42] audit: type=1800 audit(1786128897.614:14990): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 878.336794][T16647] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.345879][T17420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 878.348065][T17420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 878.356311][T17420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.388552][ T42] audit: type=1800 audit(1786128897.694:14991): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 878.448842][ T42] audit: type=1800 audit(1786128897.754:14992): pid=17489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3065" name="unbind_clocksource" dev="sysfs" ino=5410 res=0 errno=0 [ 878.538445][ T42] audit: type=1800 audit(1786128897.844:14993): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 878.592844][T15390] hsr_slave_0: left promiscuous mode [ 878.631810][T15390] hsr_slave_1: left promiscuous mode [ 878.634680][T15390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 878.637139][T15390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 878.681893][T15390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 878.685172][T15390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.734655][T17501] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3066'. [ 878.762294][T15390] veth1_macvtap: left promiscuous mode [ 878.764546][T15390] veth0_macvtap: left promiscuous mode [ 878.766637][T15390] veth1_vlan: left promiscuous mode [ 878.768436][T15390] veth0_vlan: left promiscuous mode [ 879.402290][T15390] team0 (unregistering): Port device team_slave_1 removed [ 879.442035][T15390] team0 (unregistering): Port device team_slave_0 removed [ 879.521642][ T64] Bluetooth: hci1: command tx timeout [ 879.732991][ T5445] 8021q: adding VLAN 0 to HW filter on device eth2 [ 879.765884][T17420] hsr_slave_0: entered promiscuous mode [ 879.773372][T17420] hsr_slave_1: entered promiscuous mode [ 879.879908][T17481] wlan0 speed is unknown, defaulting to 1000 [ 879.993342][ T64] Bluetooth: hci0: command tx timeout [ 880.022082][T17434] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.024630][T17434] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.028937][T17434] bridge_slave_0: entered allmulticast mode [ 880.034442][T17434] bridge_slave_0: entered promiscuous mode [ 880.040246][T17434] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.044320][T17434] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.046738][T17434] bridge_slave_1: entered allmulticast mode [ 880.049486][T17434] bridge_slave_1: entered promiscuous mode [ 880.061045][ T5445] 8021q: adding VLAN 0 to HW filter on device eth3 [ 880.228451][T17434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 880.242311][ T64] Bluetooth: hci3: command tx timeout [ 880.265356][T17434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 880.300685][T17434] team0: Port device team_slave_0 added [ 880.463793][T17420] netdevsim netdevsim1 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.565613][T17434] team0: Port device team_slave_1 added [ 880.603235][ T5445] 8021q: adding VLAN 0 to HW filter on device eth28 [ 880.623500][T17434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 880.625820][T17434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.637503][T17434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 880.647354][T17434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 880.649986][T17434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.658603][T17434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 880.817542][T17420] netdevsim netdevsim1 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.893011][T17434] hsr_slave_0: entered promiscuous mode [ 880.895718][T17434] hsr_slave_1: entered promiscuous mode [ 880.898091][T17434] debugfs: 'hsr0' already exists in 'hsr' [ 880.900089][T17434] Cannot create hsr debugfs directory [ 881.296228][T17420] netdevsim netdevsim1 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.592962][ T64] Bluetooth: hci1: command tx timeout [ 881.632860][T15390] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.018800][T17420] netdevsim netdevsim1 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.073013][ T64] Bluetooth: hci0: command tx timeout [ 882.176883][ T177] Bluetooth: hci4: Frame reassembly failed (-84) [ 882.179062][T11878] Bluetooth: hci4: Frame reassembly failed (-84) [ 882.236843][T15390] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.275982][T17481] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.279223][T17481] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.282469][T17481] bridge_slave_0: entered allmulticast mode [ 882.288767][T17481] bridge_slave_0: entered promiscuous mode [ 882.294076][T17481] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.297233][T17481] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.300477][T17481] bridge_slave_1: entered allmulticast mode [ 882.305037][T17481] bridge_slave_1: entered promiscuous mode [ 882.313207][ T5747] Bluetooth: hci3: command tx timeout [ 882.328583][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 882.328603][ T42] audit: type=1800 audit(1786128901.632:15002): pid=17434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=27302 res=0 errno=0 [ 882.354077][T17481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 882.361078][T17481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.400236][ T42] audit: type=1800 audit(1786128901.702:15003): pid=17420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=27301 res=0 errno=0 [ 882.412167][ T42] audit: type=1800 audit(1786128901.712:15004): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=373060 res=0 errno=0 [ 882.530675][T15390] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.591533][T17481] team0: Port device team_slave_0 added [ 882.604065][T17481] team0: Port device team_slave_1 added [ 882.650394][T17481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.656950][T17481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.669178][T17481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.839304][T15390] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.888943][T17481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.891161][T17481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.898793][T17481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.984054][T17481] hsr_slave_0: entered promiscuous mode [ 882.987329][T17481] hsr_slave_1: entered promiscuous mode [ 882.990325][T17481] debugfs: 'hsr0' already exists in 'hsr' [ 882.992710][T17481] Cannot create hsr debugfs directory [ 883.028726][T17420] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 883.065178][T17420] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 883.288152][T17434] netdevsim netdevsim4 eth12 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.329235][T17420] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 883.365503][T17420] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 883.368749][T17420] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 883.405345][T17420] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 883.626791][ T42] audit: type=1800 audit(1786128902.931:15005): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=375046 res=0 errno=0 [ 883.638201][ T42] audit: type=1800 audit(1786128902.931:15006): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=375051 res=0 errno=0 [ 883.638331][T17420] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 883.647724][ T42] audit: type=1800 audit(1786128902.931:15007): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=375055 res=0 errno=0 [ 883.655018][ T42] audit: type=1800 audit(1786128902.931:15008): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=375054 res=0 errno=0 [ 883.661286][ T42] audit: type=1800 audit(1786128902.931:15009): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=375057 res=0 errno=0 [ 883.670417][ T42] audit: type=1800 audit(1786128902.941:15010): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=375132 res=0 errno=0 [ 883.676450][T17420] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 883.677314][ T42] audit: type=1800 audit(1786128902.941:15011): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=375137 res=0 errno=0 [ 883.684225][ T5747] Bluetooth: hci1: command tx timeout [ 883.904146][T15390] bridge_slave_1: left allmulticast mode [ 883.906330][T15390] bridge_slave_1: left promiscuous mode [ 883.908615][T15390] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.994710][T15390] bridge_slave_0: left allmulticast mode [ 883.997197][T15390] bridge_slave_0: left promiscuous mode [ 883.999084][T15390] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.234089][ T5747] Bluetooth: hci4: command 0xfc11 tx timeout [ 884.234397][ T64] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 884.394067][ T64] Bluetooth: hci3: command tx timeout [ 884.410383][T17626] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 884.614622][T15390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 884.694555][T15390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 884.735337][T15390] bond0 (unregistering): Released all slaves [ 884.742247][T15390] bond1 (unregistering): Released all slaves [ 884.803710][T17627] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 884.847725][T17420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.034527][T17434] netdevsim netdevsim4 eth11 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.292021][T17420] 8021q: adding VLAN 0 to HW filter on device team0 [ 885.299065][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.301781][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 885.311972][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.314972][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 885.467380][T17434] netdevsim netdevsim4 eth10 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.555546][ T5810] netdevsim netdevsim0 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.559939][ T5810] netdevsim netdevsim0 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.008019][T17434] netdevsim netdevsim4 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.075589][ T5810] netdevsim netdevsim0 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.079799][ T5810] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.315462][T15390] hsr_slave_0: left promiscuous mode [ 886.355285][T15390] hsr_slave_1: left promiscuous mode [ 886.364193][T15390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 886.368915][T15390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 886.420234][T15390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 886.423605][T15390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 886.485409][ T64] Bluetooth: hci3: command tx timeout [ 886.561235][T15390] veth1_macvtap: left promiscuous mode [ 886.563538][T15390] veth0_macvtap: left promiscuous mode [ 886.570263][T15390] veth1_vlan: left promiscuous mode [ 886.572697][T15390] veth0_vlan: left promiscuous mode [ 887.227045][T15390] team0 (unregistering): Port device team_slave_1 removed [ 887.266322][T15390] team0 (unregistering): Port device team_slave_0 removed [ 887.414930][T17420] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 887.598464][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 887.598479][ T42] audit: type=1800 audit(1786128906.899:15031): pid=17434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=27301 res=0 errno=0 [ 887.632079][ T42] audit: type=1800 audit(1786128906.899:15032): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=376077 res=0 errno=0 [ 887.831339][ T42] audit: type=1800 audit(1786128907.119:15033): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 887.891935][ T42] audit: type=1800 audit(1786128907.189:15034): pid=17684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3074" name="resource0" dev="sysfs" ino=2630 res=0 errno=0 [ 887.899552][ T5445] 8021q: adding VLAN 0 to HW filter on device eth5 [ 887.912697][T17684] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3074'. [ 887.942593][T17434] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 887.967956][T17434] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 888.003221][ T42] audit: type=1800 audit(1786128907.299:15035): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 888.102559][ T42] audit: type=1800 audit(1786128907.399:15036): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 888.149712][T17481] netdevsim netdevsim3 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.173009][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3076'. [ 888.212216][T17434] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 888.237696][T17434] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 888.241153][T17434] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 888.277843][T17434] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 888.284291][T17434] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 888.319301][T17434] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 888.323740][T17420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.495625][T17481] netdevsim netdevsim3 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.574809][T17699] wlan0 speed is unknown, defaulting to 1000 [ 888.658408][T17420] veth0_vlan: entered promiscuous mode [ 888.805511][T17481] netdevsim netdevsim3 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.857900][T17420] veth1_vlan: entered promiscuous mode [ 888.862169][ T5445] 8021q: adding VLAN 0 to HW filter on device eth6 [ 888.894603][T17434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.911623][T17420] veth0_macvtap: entered promiscuous mode [ 888.926590][T17434] 8021q: adding VLAN 0 to HW filter on device team0 [ 888.929375][T17420] veth1_macvtap: entered promiscuous mode [ 888.935620][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.938158][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 888.951846][ T177] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.954224][ T177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.104791][T17481] netdevsim netdevsim3 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.161213][ T5445] 8021q: adding VLAN 0 to HW filter on device eth7 [ 889.175420][T17420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 889.191830][T17420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 889.298348][ T5810] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.355297][ T42] audit: type=1800 audit(1786128908.659:15037): pid=17481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=27301 res=0 errno=0 [ 889.372299][ T5810] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.392615][ T5810] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.394977][ T42] audit: type=1800 audit(1786128908.659:15038): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=377223 res=0 errno=0 [ 889.410240][ T42] audit: type=1800 audit(1786128908.689:15039): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=377238 res=0 errno=0 [ 889.459849][T15390] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.486718][T11878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.493071][ T42] audit: type=1800 audit(1786128908.788:15040): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=377364 res=0 errno=0 [ 889.505185][T11878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.569146][ T5445] 8021q: adding VLAN 0 to HW filter on device eth8 [ 889.625805][T11878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.635411][T11878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.662168][T17481] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 889.692182][T17481] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 889.695989][T17481] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 889.740092][T17481] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 889.745182][T17481] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 889.772055][T17481] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 889.780883][T17481] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 889.830302][T17481] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 889.952246][T17481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 889.967405][T17481] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.008440][ T177] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.011610][ T177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 890.019186][ T177] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.022131][ T177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 890.274828][T17434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.585520][T17481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.682700][T17481] veth0_vlan: entered promiscuous mode [ 890.705361][T17481] veth1_vlan: entered promiscuous mode [ 890.779161][T17434] veth0_vlan: entered promiscuous mode [ 890.788381][T17481] veth0_macvtap: entered promiscuous mode [ 890.796998][T17481] veth1_macvtap: entered promiscuous mode [ 890.804931][T17434] veth1_vlan: entered promiscuous mode [ 890.816757][T17481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 890.835320][T17481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 890.878038][T17434] veth0_macvtap: entered promiscuous mode [ 890.950199][T17434] veth1_macvtap: entered promiscuous mode [ 891.002702][T17434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 891.029386][T16647] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.057077][T17434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 891.074618][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.079941][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.087322][ T5810] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.090140][ T5810] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.453191][ T5810] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.538290][ T96] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.553085][ T96] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.972433][ T5810] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.101160][T10848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.136289][T10848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.228139][T15390] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.264966][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.274704][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.534429][ T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.542375][ T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.611132][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 892.611146][ T42] audit: type=1800 audit(1786128911.917:15046): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 892.760800][ T42] audit: type=1800 audit(1786128912.057:15047): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 892.827385][T17843] FAULT_INJECTION: forcing a failure. [ 892.827385][T17843] name failslab, interval 1, probability 0, space 0, times 0 [ 892.831425][T17843] CPU: 3 UID: 0 PID: 17843 Comm: syz.3.3081 Tainted: G L syzkaller #0 PREEMPT(full) [ 892.831445][T17843] Tainted: [L]=SOFTLOCKUP [ 892.831449][T17843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 892.831457][T17843] Call Trace: [ 892.831462][T17843] [ 892.831467][T17843] dump_stack_lvl+0x100/0x190 [ 892.831487][T17843] should_fail_ex.cold+0x5/0xa [ 892.831501][T17843] should_failslab+0xc2/0x120 [ 892.831554][T17843] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 892.831581][T17843] ? ip6_setup_cork+0xf89/0x14c0 [ 892.831639][T17843] kmemdup_noprof+0x29/0x60 [ 892.831660][T17843] ip6_setup_cork+0xf89/0x14c0 [ 892.831679][T17843] ip6_make_skb+0x23c/0x3b0 [ 892.831697][T17843] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 892.831715][T17843] ? __pfx_ip6_make_skb+0x10/0x10 [ 892.831735][T17843] ? find_held_lock+0x2b/0x80 [ 892.831750][T17843] ? ip6_dst_hoplimit+0xf3/0x4d0 [ 892.831765][T17843] ? ip6_dst_hoplimit+0xf3/0x4d0 [ 892.831783][T17843] ? udpv6_sendmsg+0x2231/0x2c20 [ 892.831797][T17843] udpv6_sendmsg+0x2231/0x2c20 [ 892.831815][T17843] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 892.831829][T17843] ? __lock_acquire+0x49f/0x1a40 [ 892.831863][T17843] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 892.831884][T17843] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 892.831898][T17843] ? inet6_sendmsg+0x105/0x140 [ 892.831914][T17843] inet6_sendmsg+0x105/0x140 [ 892.831928][T17843] ____sys_sendmsg+0x704/0xbe0 [ 892.831954][T17843] ? __pfx_____sys_sendmsg+0x10/0x10 [ 892.831968][T17843] ? _kstrtoull+0x13c/0x1f0 [ 892.831981][T17843] ? __pfx__kstrtoull+0x10/0x10 [ 892.831994][T17843] ___sys_sendmsg+0x190/0x1e0 [ 892.832008][T17843] ? __pfx____sys_sendmsg+0x10/0x10 [ 892.832019][T17843] ? __lock_acquire+0x49f/0x1a40 [ 892.832052][T17843] __sys_sendmmsg+0x309/0x440 [ 892.832071][T17843] ? __pfx___sys_sendmmsg+0x10/0x10 [ 892.832086][T17843] ? find_held_lock+0x2b/0x80 [ 892.832104][T17843] ? __mutex_unlock_slowpath+0x35d/0x930 [ 892.832131][T17843] ? fput+0x79/0x100 [ 892.832145][T17843] ? ksys_write+0x1ac/0x250 [ 892.832158][T17843] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 892.832179][T17843] ? lockdep_hardirqs_on+0x78/0x100 [ 892.832194][T17843] __do_fast_syscall_32+0xe7/0x970 [ 892.832211][T17843] ? lockdep_hardirqs_on+0x78/0x100 [ 892.832228][T17843] do_fast_syscall_32+0x32/0x70 [ 892.832245][T17843] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 892.832261][T17843] RIP: 0023:0xf7f78fec [ 892.832277][T17843] Code: Unable to access opcode bytes at 0xf7f78fc2. [ 892.832283][T17843] RSP: 002b:00000000f541550c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 892.832295][T17843] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080002940 [ 892.832303][T17843] RDX: 000000000000017d RSI: 0000000000000888 RDI: 0000000000000000 [ 892.832310][T17843] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 892.832318][T17843] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 892.832325][T17843] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 892.832339][T17843] [ 892.970571][T17852] device-mapper: ioctl: device name cannot contain '/' [ 892.977492][ T42] audit: type=1800 audit(1786128912.277:15048): pid=17852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3083" name="resume" dev="sysfs" ino=605 res=0 errno=0 [ 893.100790][T17857] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3056'. [ 893.103259][ T42] audit: type=1800 audit(1786128912.407:15049): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 893.173316][T17863] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3085'. [ 893.250982][T17860] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 893.312590][ T42] audit: type=1800 audit(1786128912.617:15050): pid=17871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3085" name="unbind" dev="sysfs" ino=29911 res=0 errno=0 [ 893.716043][ T42] audit: type=1800 audit(1786128913.016:15051): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 893.752564][T17882] vlan2: entered allmulticast mode [ 893.754297][T17882] bond0: entered allmulticast mode [ 893.755922][T17882] bond_slave_0: entered allmulticast mode [ 893.757713][T17882] bond_slave_1: entered allmulticast mode [ 893.761256][T17882] bridge0: port 3(vlan2) entered blocking state [ 893.763912][T17882] bridge0: port 3(vlan2) entered disabled state [ 893.767392][T17882] vlan2: entered promiscuous mode [ 893.769815][T17882] bond0: entered promiscuous mode [ 893.778696][T17882] bond_slave_0: entered promiscuous mode [ 893.780677][T17882] bond_slave_1: entered promiscuous mode [ 893.784146][T17882] bridge0: port 3(vlan2) entered blocking state [ 893.788753][T17882] bridge0: port 3(vlan2) entered forwarding state [ 893.886782][ T42] audit: type=1800 audit(1786128913.186:15052): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 894.967762][ T42] audit: type=1800 audit(1786128914.266:15053): pid=17897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3091" name="disk" dev="sysfs" ino=603 res=0 errno=0 [ 895.334356][T17901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3090'. [ 895.346250][T17901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3090'. [ 895.710131][ T42] audit: type=1800 audit(1786128915.005:15054): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 896.598253][ T42] audit: type=1800 audit(1786128915.895:15055): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 897.622170][T17983] lo speed is unknown, defaulting to 1000 [ 897.629252][T17983] lo speed is unknown, defaulting to 1000 [ 897.639502][T17983] lo speed is unknown, defaulting to 1000 [ 897.641748][ T6796] IPVS: starting estimator thread 0... [ 897.688341][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 897.688356][ T42] audit: type=1800 audit(1786128916.984:15057): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 897.752912][T17986] IPVS: using max 43 ests per chain, 103200 per kthread [ 897.778535][ T6796] lo speed is unknown, defaulting to 1000 [ 897.783014][T17983] infiniband syz1: set active [ 897.784530][T17983] infiniband syz1: added lo [ 897.801968][ T42] audit: type=1800 audit(1786128917.104:15058): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 897.816141][T17983] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 897.824107][T17983] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 897.824188][T17994] program syz.8.3103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 897.829450][T17983] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 897.839428][ T42] audit: type=1800 audit(1786128917.134:15059): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=381930 res=0 errno=0 [ 897.854730][ T42] audit: type=1800 audit(1786128917.154:15060): pid=17996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3104" name="UDC" dev="configfs" ino=77544 res=0 errno=0 [ 897.854797][T17994] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 897.862511][ T42] audit: type=1800 audit(1786128917.154:15061): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=381944 res=0 errno=0 [ 897.870823][T17994] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 897.872150][T17983] RDS/IB: syz1: added [ 897.874236][ T42] audit: type=1800 audit(1786128917.174:15062): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=381958 res=0 errno=0 [ 897.881947][T17983] smc: adding ib device syz1 with port count 1 [ 897.881970][T17983] smc: ib device syz1 port 1 has no pnetid [ 897.882468][T17983] lo speed is unknown, defaulting to 1000 [ 897.883119][T17998] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3101'. [ 897.889441][ T42] audit: type=1804 audit(1786128917.174:15063): pid=17998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3101" name="/newroot/3/file0" dev="tmpfs" ino=36 res=1 errno=0 [ 897.891695][T16732] lo speed is unknown, defaulting to 1000 [ 897.916055][ T42] audit: type=1800 audit(1786128917.214:15064): pid=17999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3104" name="bConfigurationValue" dev="sysfs" ino=29946 res=0 errno=0 [ 898.013485][ T42] audit: type=1800 audit(1786128917.304:15065): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 898.028591][T17983] lo speed is unknown, defaulting to 1000 [ 898.136230][T18007] NILFS (loop4): device size too small [ 898.290571][T17983] lo speed is unknown, defaulting to 1000 [ 898.789468][T18020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3109'. [ 898.796649][T17983] lo speed is unknown, defaulting to 1000 [ 898.967151][ T42] audit: type=1800 audit(1786128918.264:15066): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 899.008178][T18027] tmpfs: Unknown parameter 'mpolw$&' [ 899.240448][T18030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 899.324402][T18027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 899.582133][T17983] lo speed is unknown, defaulting to 1000 [ 899.759513][T18037] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3113'. [ 899.763108][T18037] openvswitch: netlink: IPv4 frag type 110 is out of range max 2 [ 900.096677][ T5747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 900.104006][ T5747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 900.111615][ T5747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 900.115231][ T5747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 900.116336][T15390] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.118061][ T5747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 900.450858][T18045] bridge0: port 3(vlan2) entered disabled state [ 900.453103][T18045] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.455559][T18045] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.668293][T18045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 900.675382][T18045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 901.251100][T12769] IPVS: starting estimator thread 0... [ 901.264506][T18054] rdma_rxe: rxe_newlink: failed to add lo [ 901.342597][T18057] IPVS: using max 43 ests per chain, 103200 per kthread [ 901.472633][ T5810] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.480400][ T5810] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.534822][T18062] FAULT_INJECTION: forcing a failure. [ 901.534822][T18062] name failslab, interval 1, probability 0, space 0, times 0 [ 901.539588][T18062] CPU: 3 UID: 0 PID: 18062 Comm: syz.8.3122 Tainted: G L syzkaller #0 PREEMPT(full) [ 901.539608][T18062] Tainted: [L]=SOFTLOCKUP [ 901.539612][T18062] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 901.539631][T18062] Call Trace: [ 901.539639][T18062] [ 901.539644][T18062] dump_stack_lvl+0x100/0x190 [ 901.539663][T18062] should_fail_ex.cold+0x5/0xa [ 901.539677][T18062] should_failslab+0xc2/0x120 [ 901.539694][T18062] __kmalloc_noprof+0xfc/0x820 [ 901.539709][T18062] ? rcu_is_watching+0x12/0xc0 [ 901.539735][T18062] ? tomoyo_realpath_from_path+0xb6/0x690 [ 901.539756][T18062] tomoyo_realpath_from_path+0xb6/0x690 [ 901.539777][T18062] tomoyo_path_number_perm+0x23c/0x580 [ 901.539791][T18062] ? tomoyo_path_number_perm+0x22e/0x580 [ 901.539806][T18062] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 901.539822][T18062] ? get_pid_task+0x106/0x250 [ 901.539862][T18062] ? find_held_lock+0x2b/0x80 [ 901.539876][T18062] ? __fget_files+0x215/0x3d0 [ 901.539888][T18062] ? hook_file_ioctl_common+0x140/0x440 [ 901.539902][T18062] ? __fget_files+0x215/0x3d0 [ 901.539915][T18062] ? __fget_files+0x21f/0x3d0 [ 901.539928][T18062] security_file_ioctl_compat+0xd3/0x230 [ 901.539944][T18062] __ia32_compat_sys_ioctl+0xc2/0x360 [ 901.539964][T18062] __do_fast_syscall_32+0xe7/0x970 [ 901.539983][T18062] ? lockdep_hardirqs_on+0x78/0x100 [ 901.540000][T18062] do_fast_syscall_32+0x32/0x70 [ 901.540017][T18062] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 901.540033][T18062] RIP: 0023:0xf7fc5fec [ 901.540048][T18062] Code: Unable to access opcode bytes at 0xf7fc5fc2. [ 901.540054][T18062] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 901.540066][T18062] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008020640c [ 901.540073][T18062] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 901.540080][T18062] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 901.540087][T18062] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 901.540094][T18062] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 901.540107][T18062] [ 901.540125][T18062] ERROR: Out of memory at tomoyo_realpath_from_path. [ 901.879101][T15390] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.933040][ T5810] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.938240][ T5810] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.145030][T18042] wlan0 speed is unknown, defaulting to 1000 [ 902.173023][ T64] Bluetooth: hci0: command tx timeout [ 902.348262][T15390] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.393346][T18042] lo speed is unknown, defaulting to 1000 [ 902.705456][T15390] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.812549][T18083] wlan0 speed is unknown, defaulting to 1000 [ 902.832015][T18083] lo speed is unknown, defaulting to 1000 [ 903.058330][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 903.058416][ T42] audit: type=1800 audit(1786128922.342:15080): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=403802 res=0 errno=0 [ 903.079734][ T42] audit: type=1800 audit(1786128922.372:15081): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=403807 res=0 errno=0 [ 903.092198][ T42] audit: type=1800 audit(1786128922.372:15082): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=403811 res=0 errno=0 [ 903.100587][ T42] audit: type=1800 audit(1786128922.382:15083): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=403810 res=0 errno=0 [ 903.119289][ T42] audit: type=1800 audit(1786128922.382:15084): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=403813 res=0 errno=0 [ 903.126651][ T5810] netdevsim netdevsim1 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.141549][ T42] audit: type=1800 audit(1786128922.402:15085): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=404630 res=0 errno=0 [ 903.154055][ T42] audit: type=1800 audit(1786128922.412:15086): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=404635 res=0 errno=0 [ 903.166859][ T42] audit: type=1800 audit(1786128922.422:15087): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=404639 res=0 errno=0 [ 903.173118][ T42] audit: type=1800 audit(1786128922.422:15088): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=404638 res=0 errno=0 [ 903.180676][ T42] audit: type=1800 audit(1786128922.432:15089): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=404641 res=0 errno=0 [ 903.193375][ T5810] netdevsim netdevsim1 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.315098][T15390] bridge_slave_1: left allmulticast mode [ 903.318338][T15390] bridge_slave_1: left promiscuous mode [ 903.320556][T15390] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.394090][T15390] bridge_slave_0: left allmulticast mode [ 903.398041][T15390] bridge_slave_0: left promiscuous mode [ 903.399950][T15390] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.944546][T15390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 904.004408][T15390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 904.025657][T15390] bond0 (unregistering): Released all slaves [ 904.245071][ T64] Bluetooth: hci0: command tx timeout [ 904.283736][T18042] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.286506][T18042] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.289155][T18042] bridge_slave_0: entered allmulticast mode [ 904.292120][T18042] bridge_slave_0: entered promiscuous mode [ 904.295663][T18042] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.298066][T18042] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.300486][T18042] bridge_slave_1: entered allmulticast mode [ 904.303494][T18042] bridge_slave_1: entered promiscuous mode [ 904.632707][T18101] ip6gretap0: entered promiscuous mode [ 904.641845][T18042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 904.706646][T18042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 905.048456][T18108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3131'. [ 905.106376][T18042] team0: Port device team_slave_0 added [ 905.112865][T18107] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 905.113912][T18042] team0: Port device team_slave_1 added [ 905.336167][T18042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.338525][T18042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.348619][T18042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.554699][T15390] hsr_slave_0: left promiscuous mode [ 905.596382][T15390] hsr_slave_1: left promiscuous mode [ 905.599635][T15390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 905.602724][T15390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 905.645660][T15390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 905.648739][T15390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 905.708339][T15390] veth1_macvtap: left promiscuous mode [ 905.716170][T15390] veth0_macvtap: left promiscuous mode [ 905.718840][T15390] veth1_vlan: left promiscuous mode [ 905.721115][T15390] veth0_vlan: left promiscuous mode [ 906.335046][ T64] Bluetooth: hci0: command tx timeout [ 906.728736][T15390] team0 (unregistering): Port device team_slave_1 removed [ 906.776037][T15390] team0 (unregistering): Port device team_slave_0 removed [ 906.963726][T18042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.966941][T18042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.978365][T18042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 907.239078][T18042] hsr_slave_0: entered promiscuous mode [ 907.248310][T18042] hsr_slave_1: entered promiscuous mode [ 907.395781][T10848] netdevsim netdevsim1 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.402614][T10848] netdevsim netdevsim1 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.814936][T18042] netdevsim netdevsim2 eth20 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.947387][T18144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3138'. [ 907.950729][T18144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3138'. [ 907.985819][ T5445] 8021q: adding VLAN 0 to HW filter on device eth9 [ 908.093769][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 908.093789][ T42] audit: type=1800 audit(1786128927.379:15105): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 908.224765][T18151] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3140'. [ 908.274723][T18042] netdevsim netdevsim2 eth19 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.407442][ T64] Bluetooth: hci0: command tx timeout [ 908.658163][T18042] netdevsim netdevsim2 eth18 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.926924][T18042] netdevsim netdevsim2 eth17 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.978731][ T5445] 8021q: adding VLAN 0 to HW filter on device eth10 [ 909.044764][ T42] audit: type=1800 audit(1786128928.329:15106): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 909.147747][ T42] audit: type=1800 audit(1786128928.429:15107): pid=18042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=27301 res=0 errno=0 [ 909.172545][ T42] audit: type=1800 audit(1786128928.449:15108): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=410672 res=0 errno=0 [ 909.208063][ T42] audit: type=1800 audit(1786128928.479:15109): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35289 res=0 errno=0 [ 909.233062][ T42] audit: type=1800 audit(1786128928.479:15110): pid=5143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35312 res=0 errno=0 [ 909.301201][ T5445] 8021q: adding VLAN 0 to HW filter on device eth11 [ 909.330480][ T42] audit: type=1800 audit(1786128928.619:15111): pid=18177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3144" name="wakeup_count" dev="sysfs" ino=580 res=0 errno=0 [ 909.338949][T18042] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 909.368692][T18042] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 909.371795][T18042] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 909.419727][T18042] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 909.428562][ T4035] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 909.428616][T18042] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 909.465730][T18042] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 909.479159][T18042] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 909.518663][T18042] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 909.572801][T18042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.583682][T18042] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.588442][ T4035] usb 13-1: Using ep0 maxpacket: 32 [ 909.596331][ T4035] usb 13-1: config 0 has an invalid interface number: 1 but max is 0 [ 909.602880][ T96] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.605496][ T96] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.611506][ T4035] usb 13-1: config 0 has no interface number 0 [ 909.634613][ T4035] usb 13-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 909.642393][ T4035] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.646718][ T4035] usb 13-1: Product: syz [ 909.648601][ T4035] usb 13-1: Manufacturer: syz [ 909.657797][ T4035] usb 13-1: SerialNumber: syz [ 909.663565][ T4035] usb 13-1: config 0 descriptor?? [ 909.669956][ T96] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.672804][T18191] rdma_rxe: rxe_newlink: failed to add lo [ 909.672851][ T96] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.679269][ T42] audit: type=1800 audit(1786128928.948:15112): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=411040 res=0 errno=0 [ 909.691617][ T4035] usb 13-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 909.695086][ T4035] usb 13-1: selecting invalid altsetting 1 [ 909.699684][ T42] audit: type=1800 audit(1786128928.978:15113): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=411072 res=0 errno=0 [ 909.707766][ T4035] usb 13-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 909.727857][ T42] audit: type=1800 audit(1786128928.978:15114): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=411047 res=0 errno=0 [ 909.751773][ T4035] usb 13-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 909.765492][ T4035] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 909.784879][ T4035] usb 13-1: media controller created [ 909.835011][ T4035] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 909.895748][ T5445] 8021q: adding VLAN 0 to HW filter on device eth12 [ 910.747277][T18210] ================================================================== [ 910.750358][T18210] BUG: KASAN: use-after-free in __release_resource+0x233/0x2c0 [ 910.753318][T18210] Read of size 8 at addr ffff888055fca5b0 by task syz.8.3142/18210 [ 910.757182][T18210] [ 910.758714][T18210] CPU: 0 UID: 0 PID: 18210 Comm: syz.8.3142 Tainted: G L syzkaller #0 PREEMPT(full) [ 910.758741][T18210] Tainted: [L]=SOFTLOCKUP [ 910.758750][T18210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 910.758762][T18210] Call Trace: [ 910.758774][T18210] [ 910.758782][T18210] dump_stack_lvl+0x100/0x190 [ 910.758806][T18210] print_report+0x13d/0x4b0 [ 910.758842][T18210] ? __virt_addr_valid+0x239/0x430 [ 910.758873][T18210] ? __release_resource+0x233/0x2c0 [ 910.758895][T18210] kasan_report+0xdf/0x1c0 [ 910.758923][T18210] ? __release_resource+0x233/0x2c0 [ 910.758944][T18210] __release_resource+0x233/0x2c0 [ 910.758968][T18210] release_resource+0x26/0x40 [ 910.758988][T18210] pci_remove_bus_device+0x2d3/0x3b0 [ 910.759013][T18210] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 910.759033][T18210] remove_store+0x123/0x140 [ 910.759056][T18210] ? __pfx_remove_store+0x10/0x10 [ 910.759080][T18210] ? find_held_lock+0x2b/0x80 [ 910.759101][T18210] ? sysfs_file_kobj+0xe4/0x290 [ 910.759125][T18210] ? sysfs_file_kobj+0xe4/0x290 [ 910.759148][T18210] ? __pfx_remove_store+0x10/0x10 [ 910.759166][T18210] dev_attr_store+0x58/0x80 [ 910.759206][T18210] ? __pfx_dev_attr_store+0x10/0x10 [ 910.759233][T18210] sysfs_kf_write+0xf2/0x150 [ 910.759253][T18210] kernfs_fop_write_iter+0x3e0/0x5f0 [ 910.759274][T18210] ? __pfx_sysfs_kf_write+0x10/0x10 [ 910.759298][T18210] vfs_write+0x6ac/0x1050 [ 910.759315][T18210] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 910.759338][T18210] ? __pfx_vfs_write+0x10/0x10 [ 910.759350][T18210] ? find_held_lock+0x2b/0x80 [ 910.759374][T18210] ksys_write+0x12a/0x250 [ 910.759390][T18210] ? __pfx_ksys_write+0x10/0x10 [ 910.759409][T18210] __do_fast_syscall_32+0xe7/0x970 [ 910.759437][T18210] do_fast_syscall_32+0x32/0x70 [ 910.759457][T18210] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 910.759478][T18210] RIP: 0023:0xf7fc5fec [ 910.759494][T18210] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 910.759511][T18210] RSP: 002b:00000000f544450c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 910.759530][T18210] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000140 [ 910.759541][T18210] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 910.759548][T18210] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 910.759556][T18210] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 910.759566][T18210] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 910.759583][T18210] [ 910.759590][T18210] [ 910.859170][T18210] The buggy address belongs to the physical page: [ 910.861646][T18210] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55fca [ 910.864994][T18210] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 910.867809][T18210] raw: 04fff00000000000 0000000000000000 ffffea000157f290 0000000000000000 [ 910.871153][T18210] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 910.874525][T18210] page dumped because: kasan: bad access detected [ 910.876980][T18210] page_owner tracks the page as freed [ 910.879003][T18210] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 18120, tgid 18119 (syz.4.3135), ts 906603875518, free_ts 909456905644 [ 910.887142][T18210] post_alloc_hook+0xfd/0x120 [ 910.889013][T18210] get_page_from_freelist+0xf48/0x3530 [ 910.891159][T18210] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 910.893516][T18210] new_slab+0xa2/0x640 [ 910.895136][T18210] refill_objects+0xe3/0x410 [ 910.896968][T18210] __pcs_replace_empty_main+0x376/0x680 [ 910.899140][T18210] kmem_cache_alloc_node_noprof+0x52c/0x6b0 [ 910.901465][T18210] kmalloc_reserve+0x148/0x350 [ 910.903364][T18210] __alloc_skb+0x185/0x710 [ 910.905141][T18210] tcp_stream_alloc_skb+0x34/0x660 [ 910.907187][T18210] tcp_sendmsg_locked+0x13b2/0x44d0 [ 910.909243][T18210] tls_push_sg+0x227/0x8c0 [ 910.911010][T18210] tls_tx_records+0x37a/0x720 [ 910.912909][T18210] bpf_exec_tx_verdict+0x1658/0x24a0 [ 910.914993][T18210] tls_sw_sendmsg+0x236c/0x2e00 [ 910.916898][T18210] inet6_sendmsg+0x11c/0x140 [ 910.918717][T18210] page last free pid 18042 tgid 18042 stack trace: [ 910.921238][T18210] __free_frozen_pages+0x79f/0x1090 [ 910.923320][T18210] qlist_free_all+0x47/0xf0 [ 910.925127][T18210] kasan_quarantine_reduce+0x1a0/0x1f0 [ 910.927284][T18210] __kasan_slab_alloc+0x69/0x90 [ 910.929211][T18210] kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 910.931567][T18210] __alloc_skb+0x140/0x710 [ 910.933355][T18210] rtmsg_ifinfo_build_skb+0x81/0x260 [ 910.935361][T18210] rtnetlink_event+0x137/0x1f0 [ 910.937157][T18210] notifier_call_chain+0x99/0x3f0 [ 910.939154][T18210] call_netdevice_notifiers_info+0xbe/0x110 [ 910.941480][T18210] netif_change_name+0x4d9/0x830 [ 910.943466][T18210] do_setlink.isra.0+0x31e4/0x3e60 [ 910.945468][T18210] rtnl_newlink+0x11c2/0x2380 [ 910.947379][T18210] rtnetlink_rcv_msg+0x95e/0xe90 [ 910.949344][T18210] netlink_rcv_skb+0x159/0x420 [ 910.951252][T18210] netlink_unicast+0x585/0x850 [ 910.953176][T18210] [ 910.954137][T18210] Memory state around the buggy address: [ 910.956342][T18210] ffff888055fca480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 910.959472][T18210] ffff888055fca500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 910.962585][T18210] >ffff888055fca580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 910.965648][T18210] ^ [ 910.967836][T18210] ffff888055fca600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 910.970963][T18210] ffff888055fca680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 910.974143][T18210] ================================================================== [ 910.978017][T18210] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 910.980861][T18210] CPU: 0 UID: 0 PID: 18210 Comm: syz.8.3142 Tainted: G L syzkaller #0 PREEMPT(full) [ 910.985105][T18210] Tainted: [L]=SOFTLOCKUP [ 910.986812][T18210] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 910.990701][T18210] Call Trace: [ 910.992038][T18210] [ 910.993210][T18210] dump_stack_lvl+0x100/0x190 [ 910.994960][T18210] vpanic+0x552/0x970 [ 910.996538][T18210] ? __pfx_vpanic+0x10/0x10 [ 910.998326][T18210] ? mark_held_locks+0x40/0x70 [ 911.000213][T18210] ? irqentry_exit+0x24d/0xa00 [ 911.002149][T18210] ? __release_resource+0x233/0x2c0 [ 911.004196][T18210] panic+0xd1/0xe0 [ 911.005688][T18210] ? __pfx_panic+0x10/0x10 [ 911.007450][T18210] check_panic_on_warn.cold+0x19/0x34 [ 911.009570][T18210] end_report.part.0+0x3a/0x90 [ 911.011454][T18210] kasan_report.cold+0xe/0x18 [ 911.013367][T18210] ? __release_resource+0x233/0x2c0 [ 911.015433][T18210] __release_resource+0x233/0x2c0 [ 911.017407][T18210] release_resource+0x26/0x40 [ 911.019285][T18210] pci_remove_bus_device+0x2d3/0x3b0 [ 911.021360][T18210] pci_stop_and_remove_bus_device_locked+0x1a/0x20 SYZFAIL: failed to recv rpc [ 911.023933][T18210] remove_store+0x123/0x140 [ 911.025997][T18210] ? __pfx_remove_store+0x10/0x10 [ 911.027823][T18210] ? find_held_lock+0x2b/0x80 [ 911.029461][T18210] ? sysfs_file_kobj+0xe4/0x290 [ 911.031036][T18210] ? sysfs_file_kobj+0xe4/0x290 [ 911.032982][T18210] ? __pfx_remove_store+0x10/0x10 [ 911.034926][T18210] dev_attr_store+0x58/0x80 [ 911.036824][T18210] ? __pfx_dev_attr_store+0x10/0x10 [ 911.038844][T18210] sysfs_kf_write+0xf2/0x150 [ 911.040767][T18210] kernfs_fop_write_iter+0x3e0/0x5f0 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 911.043026][T18210] ? __pfx_sysfs_kf_write+0x10/0x10 [ 911.045364][T18210] vfs_write+0x6ac/0x1050 [ 911.047220][T18210] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 911.049676][T18210] ? __pfx_vfs_write+0x10/0x10 [ 911.051699][T18210] ? find_held_lock+0x2b/0x80 [ 911.053749][T18210] ksys_write+0x12a/0x250 [ 911.055181][T18210] ? __pfx_ksys_write+0x10/0x10 [ 911.056758][T18210] __do_fast_syscall_32+0xe7/0x970 [ 911.058461][T18210] do_fast_syscall_32+0x32/0x70 [ 911.060072][T18210] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 911.062162][T18210] RIP: 0023:0xf7fc5fec [ 911.063581][T18210] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 911.071477][T18210] RSP: 002b:00000000f544450c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 911.074932][T18210] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000140 [ 911.078168][T18210] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 911.081377][T18210] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 911.084660][T18210] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 911.087938][T18210] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 911.091158][T18210] [ 911.093215][T18210] Kernel Offset: disabled [ 911.095045][T18210] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:55:31 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a0cbb5 RDI=ffffffff9b9e2520 RBP=ffffffff9b9e24e0 RSP=ffffc90004df7530 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3530383838666666 R12=0000000000000000 R13=0000000000000038 R14=ffffffff9b6e222b R15=ffffffff85a0cb50 RIP=ffffffff85a0cbdf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096bf4000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005632ea50c830 CR3=000000006dcb5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b51eaa RDX=ffff88801c742540 RSI=ffffffff81b51ece RDI=ffff88801c742540 RBP=0000000000000001 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=0000000000000000 RIP=ffffffff81b51ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cf4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f540cda4 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000df000000000 0000002e00000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff9b727148 RBP=ffffffff9b727148 RSP=ffffc90000538df8 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000 R12=0000000000000002 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e55eab RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096df4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002e6f5ff8 CR3=000000006d1dc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000e08e000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff94695840 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88802b43b660 RBP=ffff88802b43b660 RSP=ffffc900032f77c8 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000 R12=0000000000000001 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e542e6 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ef4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000006d1dc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fd1d2695472a9077 a01cd1532267a7d3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 55c83cad7cd12c55 3e62a29140dc4ee3 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 46ae17685dfc3749 383c70eff2442e44 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e48b7ddb988e38e1 f22edde50e8a48f1 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000054c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3830900059919200 0002287c5dbbde00 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8001000080010000 80010000607b7200 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002287c80010000 3a6f8a000002287c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 800100000002287c 0002287c80010000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7678926bb3ec5e2a be92c5acd90254f7 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d5ed1f982e099abf 0a7ccf644f585f6b ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000