Extracting prog: 2h3m0.122458385s Minimizing prog: 29m8.582155688s Simplifying prog options: 0s Extracting C: 1m42.152258017s Simplifying C: 9m23.71915858s extracting reproducer from 37 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-prlimit64-sched_setscheduler-getpid-socket-openat$sequencer2-prctl$PR_SCHED_CORE-prlimit64-sched_setscheduler-syz_open_dev$sndmidi-writev-fsopen-fsconfig$FSCONFIG_SET_STRING-gettid-fsconfig$FSCONFIG_CMD_CREATE-tkill-fsopen-prlimit64-fsconfig$FSCONFIG_CMD_CREATE-fsmount-fsconfig$FSCONFIG_SET_PATH_EMPTY-fsconfig$FSCONFIG_CMD_RECONFIGURE-sched_setaffinity-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-sched_setaffinity detailed listing: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 37 programs with base timeout 30s testing program (duration=39s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 4, 8, 30, 19, 14, 14, 27, 6, 5, 30, 6, 10, 30, 29, 30, 3, 30, 14, 30, 6, 6, 21, 30, 4, 30, 25, 16, 25, 30, 23, 6, 14, 18, 30, 29, 14] detailed listing: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) executing program 4: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/stat\x00') socket$unix(0x1, 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000100)={0x8, 0x6, 0x4, 0x800, 0x6, {0x77359400}, {0x1, 0x0, 0x4, 0x3, 0x1, 0x86, "ad8a0626"}, 0x80000001, 0x4, {}, 0x0, 0x0, r1}) executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x5cd900, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$nci(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x80000100008b}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000340)=""/102400, 0x19000) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x3, @empty, 0xffffff0e}, 0x1c) r7 = syz_open_procfs$userns(r4, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket(0x1e, 0x4, 0x0) connect$tipc(r8, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) connect$bt_l2cap(r8, &(0x7f0000000380)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) sendmmsg$unix(r8, &(0x7f0000004400), 0x400000000000203, 0x0) epoll_create1(0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) executing program 4: bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x8, 0x4, 0x0, 0x8000, 0x4c, 0xffffffffffffffff, 0x1}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x547}, 0x4, r4}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x2, {0x0, 0xff, 0x6}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x2, 0x6af65bf14888d50a, 0x3}, 0x2}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc001}, 0x800) executing program 32: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x547}, 0x4, r4}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x2, {0x0, 0xff, 0x6}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x2, 0x6af65bf14888d50a, 0x3}, 0x2}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc001}, 0x800) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (async) mount$tmpfs(0x0, &(0x7f0000000700)='./file0/file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000240)={[{@noswap}]}) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000001f80)={0x8, 0x120, 0xfa00, {0x1, {0x7, 0xfffffff8, "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", 0x7f, 0x0, 0x5, 0x6, 0x8, 0x3, 0x9}}}, 0x128) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f5c9ba68820"], 0x7) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x14, 0x1, 0x0, 0x0, {0x2c}}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x1000c000) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) (rerun: 64) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@empty, r3}, 0x14) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) (async) close(0x3) (async) recvmsg$unix(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x62) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) (async, rerun: 64) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/module/ueagle_atm/parameters/sync_wait\x00', 0x1, 0x0) write(r8, &(0x7f0000000200)='0,', 0x2) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x74, r7, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x84}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x10}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}]}, 0x74}, 0x1, 0x0, 0x0, 0x400d8}, 0x24004010) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x2, 0x9, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0x2000c850) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x39188d, &(0x7f0000004280)={[{@uid={'uid', 0x3d, r1}}]}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x5c8, 0x210, 0x3f0, 0xffffffff, 0x210, 0x300, 0x4f8, 0x4f8, 0xffffffff, 0x4f8, 0x4f8, 0x5, &(0x7f0000000040), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3b}, @local, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], [0xff000000, 0xffffff00, 0xff000000, 0xff], 'netpci0\x00', 'veth1_macvtap\x00', {}, {0xff}, 0x11, 0x40, 0x2}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@srh1={{0x90}, {0x4, 0x6, 0x2, 0x5, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xff, 0xff000000, 0xff000000], [0x0, 0xff000000, 0xffffff00, 0xff000000], [0xff, 0xffffff00, 0xff000000, 0xffffff00], 0x2812, 0x200}}, @common=@srh1={{0x90}, {0x2c, 0xc, 0x12, 0x8, 0x52, @mcast2, @remote, @local, [0xff, 0xff000000, 0xff000000, 0xffff00], [0xffffff00, 0xffffff00, 0xff], [0xffffff00, 0xff, 0xffffffff, 0xffffff00], 0x82, 0x108}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@rand_addr=' \x01\x00', @ipv6=@private2, @gre_key=0xc, @icmp_id=0x67}}}, {{@ipv6={@remote, @loopback, [0x0, 0xffffff00, 0xff, 0xff000000], [0xff000000, 0x0, 0xffffff00, 0xffffff00], 'bridge_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x32, 0x47, 0x1, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x14, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}, @ipv4=@dev={0xac, 0x14, 0x14, 0x14}, @gre_key=0x1, @icmp_id=0x64}}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, [0x0, 0x0, 0xff, 0xffffff00], [0x0, 0x0, 0x0, 0xffffff00], 'veth1_to_batadv\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0x62, 0x7, 0x0, 0x4}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x14, @ipv4=@multicast2, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x66, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x14}, [0xffffffff, 0xff, 0xff000000, 0xff000000], 0x4e21, 0x4e21, 0x4e21, 0x4e21, 0xffffccd0, 0x101, 0x3, 0xe, 0xfa}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628) executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f00000000c0)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f00000001c0)={0x0, {0x0, 0x0, @qam}}) executing program 3: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) chdir(&(0x7f0000000540)='./cgroup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf0ffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00'}) openat(0xffffffffffffff9c, 0x0, 0xa0142, 0x121) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000380)={0x3}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$llc(0xffffffffffffffff, 0x0, 0x0) gettid() r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)) sendfile(r1, r1, 0x0, 0x200000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4007) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x100) executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) rmdir(&(0x7f00000002c0)='./file2\x00') r0 = fanotify_init(0xef0, 0x2) fanotify_mark(r0, 0x105, 0x40009965, 0xffffffffffffffff, 0x0) executing program 3: mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='ceph\x00', 0x208000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0000380004804e2d", @ANYRESDEC=r0], 0x4c}, 0x1, 0x0, 0x0, 0x4048411}, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000020, 0x0, 0xb}]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001140)={0xffffffffffffffff, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0xcf, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x7f, 0x8, 0x8, &(0x7f0000001000)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES8=r0, @ANYRES16], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, @fallback=0x15}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x18000000000002a0, 0x11, 0x0, &(0x7f00000002c0)="000000952ba300"/17, 0x0, 0x6639, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(r0, 0x26, &(0x7f00000001c0)={0x2, 0x3, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$kcm(0x23, 0x5, 0x0) listen(r2, 0x800) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000200)={0x23, 0x0, 0xe7}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="180000006a090000000000000000000000080000000800bc"], 0x18}], 0x1}, 0x2000c0d0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0xd, @pix_mp={0x0, 0x3d, 0x33565348, 0x8, 0x1, [{0x6, 0x4001ff}, {0x7fa07c7e, 0x404}, {0x6, 0xffffffff}, {0x678}, {0x2, 0x6}, {0x2, 0x3}, {0xfffffffd, 0x3}, {0x0, 0x61}], 0x4, 0x0, 0x4, 0x2, 0x2}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl(r8, 0x4048aec9, &(0x7f00000000c0)="03000000000000000100000002") io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0xfffffff7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r9}, 0xc) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) executing program 3: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000300)=""/116, 0x74, 0x0, &(0x7f0000000500)=""/201, 0xc9}}, 0x10) mkdir(&(0x7f0000000080)='./file1\x00', 0xe4) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f25541e6f94401d9e231b4e3e4eed8d0f22bc498e3c0bc6acbc7d4d99489"}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'dummy0\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0xc, 0x9, 0x6, 0x3a}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x3c2, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f770c0000002a9000070900"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x2, &(0x7f0000000000)='BB') lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) symlink(0x0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="12015002009620eefb05a8a4400001e2020109021b00010110000709040000020701020609050102f7037f020f1abc4e95c77bd3624f804c88a83f18bf083b948c882d475a8e13dfd0ce880b"], 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, 0x0, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x60040, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000140)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x81, 0x1, 0xa000200000a958, 0x2000000008, 0x7e07, 0x4, 0x48cd, 0x80000003, 0xd6f}) executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x200}], 0x1, 0x0, 0x0, 0x0) executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x50, "6ad66755f7cf69805782d06f64f3c112c8296260108a4ef5cc4975bd43fbef01bef4313f58b02d67890c8656a5b29b1c5204db3c06e28b6d0c0d6e15ecc378857f0ed9328af56c6fd2d55832d779745c"}, &(0x7f0000000080)=0x58) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1, 0x9}, &(0x7f0000000100)=0x8) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) r3 = syz_open_pts(r2, 0x100) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r4, 0x4008af75, &(0x7f0000000180)={0x1}) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00'}, 0x18) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000240)) r6 = fsmount(0xffffffffffffffff, 0x1, 0x8) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r6, 0x80605414, &(0x7f0000000280)) fchdir(0xffffffffffffffff) write$vhost_msg(r6, &(0x7f0000000500)={0x1, {&(0x7f0000000300)=""/208, 0xd0, &(0x7f0000000400)=""/226, 0x2, 0xca69087fb0990a8a}}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) writev(r4, &(0x7f0000000740)=[{&(0x7f00000005c0)="66baee7880ccf6e4f3dfbd1d745380140749a0bedfbbba47c54c767c3c0ad6cf66794cb2a64581ae4df009c4bc27f93665a7a95cad6f3f2a99296efd2f4eb68ebbefd3b9a1e73dcdd34597ef8e2cf03bad190ca5b9f7eb9a53e11fd175e8a1fc677e1a5d5772b1b235e414a052afd920264974f66e4e7ac5b621a21b513da789e4818796404ffff864a3a181c287dcdf0f047298e15b05e382f877c8b4f6a44eab884f649fbf8e4f67dc3674969f01ff2b3abf5e247b27261de978de98d91bc4dda386e5300dc717fb524aacdfc656526032296337f572e634fe968030c15ba991f86442d67f35322c73037220e5cdeb", 0xf0}, {&(0x7f00000006c0)="1b9e59f5768a35edd86585931466b80f9e10815d4d202b7a3e811f09badda47a9cba65f2d763bcd1b7c395c0adde5e1261dc1ea2ae904ada3dc97ab661a135a3f5d6460bdeaae55a3a4928ba40e7ba87", 0x50}], 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000780)) ioctl$VHOST_VDPA_GET_VRING_NUM(r4, 0x8002af76, &(0x7f00000007c0)) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000800)=0xb0, 0xf95b, 0x6) sendfile(r5, r3, 0x0, 0x101) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000c80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x50010002}, 0xc, &(0x7f0000000c40)={&(0x7f00000008c0)={0x368, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "100ed7d41011078b5f9320e64b5a8a1f7e1e6a0ba8ad0db4888efe6656c4d8dbcec341"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "ec8d3b5e6505fdd54be09d0135b5aa9147ab914aa1b6a6fc0bb40f602417543a9afe6df5"}}]}, @TIPC_NLA_LINK={0x190, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x61}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x24b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbe0e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe63}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x13fe}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1e7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffe00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x58f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xec}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa92a}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x45f38c44}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb56}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0x368}, 0x1, 0x0, 0x0, 0x4048000}, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000cc0)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f0000000d40)=0x208, 0x4) ioctl$VIDIOC_ENUM_DV_TIMINGS(r6, 0xc0945662, &(0x7f0000000d80)={0x75c2, 0x0, '\x00', {0x0, @reserved}}) read$FUSE(r6, &(0x7f0000000e40)={0x2020}, 0x2020) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000002e80)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000002ec0)=0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000002f00)={r8, @in6={{0xa, 0x4e20, 0xe0000000, @remote, 0x2}}, 0x400, 0x6}, 0x90) openat(r6, &(0x7f0000002fc0)='./file0\x00', 0x480001, 0x130) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003300), 0x4) executing program 0: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x101, '\x00', r5, 0xffffffffffffffff, 0x2, 0x6}, 0x50) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x80800) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r11, &(0x7f00000000c0)=[{&(0x7f0000000180)='n', 0x1}], 0x1, 0x3) splice(r10, 0x0, r9, 0x0, 0x8000, 0x0) accept4$tipc(r0, 0x0, &(0x7f00000001c0), 0x40800) write$tcp_mem(r0, &(0x7f0000000280)={0x2, 0x20, 0x7f, 0x20, 0xa}, 0x48) r12 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f00000000c0)={0x1, r12}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x2000011, 0x0, 0x52, 0x0, 0x0, 0x0) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') pread64(r13, &(0x7f0000001400)=""/4108, 0x100c, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r14 = syz_usb_connect(0x6, 0x45, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040351201820001010203010902450002010080fa080b0002010020000904000000010120000924010002080900000904010001ff0000000705"], 0x0) syz_usb_control_io(r14, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="a10000000000a60f0ee8a34ee37d2de67cb411cb06f3c408f5849f7492fcb6c75d7cacc8019ab76effa101330b7a26313ff28be5ca69715b932b9c5541be25117de9e83fd6de8b9700"/82], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) rmdir(&(0x7f00000002c0)='./file2\x00') r0 = fanotify_init(0xef0, 0x2) fanotify_mark(r0, 0x105, 0x40009965, 0xffffffffffffffff, 0x0) executing program 1: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x40}, 0xc) setns(0xc9, 0x0) r1 = socket(0x8, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000007640)) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000080)) executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000f80)={0x14, &(0x7f0000000ec0)={0x20, 0xad8a5354353639bf, 0x53, {0x53, 0x23, "e3ad1ea9b1d2a286c267fe1fe1ab9c9daefb5dbb8affa41916dd9de65558e845b601f07a79cb1cb2cff7e338ba06508c7e36dbcef0cad0a85d198971fbebeb4a5cefc0c858240b283d474f3cf9589f0225"}}, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001280)={0x44, &(0x7f0000000fc0)={0x0, 0x16, 0xbb, "7a122eeb9d25687880b6faf5aefdb4299f436e43dcb78ea1bdc2e1a150bee0e6c7bfbbf54b9c4f4222244d781fc5c42ce96663c57fb48a1f7432174b836cbb284da0c8dc91548c6299b66e965101bd2d4a70a43385ad22ce13e57cc5621a931e65c54b23de10979e1c7c8184edcdcbd6cd53bec6cd71f8fcb8072660a85edf6114fdfd1d95f253898b6706e34e67411aafb50e3e97f4df6d27501fdcc0cf5bfd46c2e83e4127863aada9dd0b414385d9618e6446dfa9b47b14572e"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000001100)={0x0, 0x8, 0x1}, &(0x7f0000001140)={0x20, 0x80, 0x1c, {0x4, 0x1ff, 0x9, 0xf, 0x3, 0xdb0d, 0x5977, 0x9, 0x6, 0xff, 0x0, 0x5}}, &(0x7f0000001180)={0x20, 0x85, 0x4, 0xb}, &(0x7f00000011c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001200)={0x20, 0x87, 0x2}, &(0x7f0000001240)={0x20, 0x89, 0x2, 0x1}}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtclass={0x868, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x83c, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000, 0x0, 0x0, 0x10000}}, @TCA_HTB_RTAB={0x404, 0x4, [0x9, 0x4, 0x7, 0x8, 0x11c86bdd, 0x48, 0x1, 0xb1, 0xffff, 0xc, 0x2, 0x1, 0x3, 0x2, 0x1ff, 0x8, 0x1, 0x401, 0x5, 0x0, 0x7fffffff, 0xff, 0x5, 0x5, 0x8, 0x4, 0x3, 0x8cc, 0xffffff7f, 0xf, 0x1, 0x8, 0x2488f245, 0xf8, 0xff, 0xd, 0x7fff, 0x7, 0x3, 0x5, 0x60000, 0x386, 0xb43, 0x79, 0x80000001, 0x200, 0x2, 0x4, 0x9, 0x80, 0xfffffff9, 0x7fffffff, 0x40, 0xd18, 0x0, 0xe, 0x7ff, 0x9, 0x7, 0x1dd, 0x6, 0x0, 0xc, 0x4, 0x6, 0x4, 0x3, 0x8, 0x2, 0x8, 0x80, 0xff, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x7, 0x3, 0xffff, 0x30, 0xa, 0xce, 0xffffffff, 0x2, 0x2, 0x1328, 0xfffffffb, 0x4, 0x2, 0x9, 0x2, 0x4, 0x8, 0xcf25, 0x0, 0xf29, 0xa, 0xfffffff9, 0xa, 0xa, 0x4, 0x800, 0x8, 0x1000, 0x2, 0xfffffffb, 0x1, 0x474, 0x3, 0x1, 0xfffffffc, 0x7, 0x9, 0x3, 0x2, 0x7, 0x764, 0xfffffde3, 0x7, 0x80, 0x2, 0x3632, 0x48, 0x4, 0xd4e, 0x4, 0x907, 0x3ff, 0x2, 0x4, 0x7, 0x401, 0x80, 0x80000001, 0x5, 0x1ff, 0x100, 0x6, 0x6, 0x649, 0xfffffffa, 0x1, 0x6, 0xfffffffe, 0xdb, 0x10000, 0x80000000, 0x1, 0xffff, 0x100, 0x4, 0x6, 0x3, 0x10, 0x902, 0x10, 0x0, 0x6, 0x80000, 0x0, 0x7, 0x0, 0x4, 0x6a82, 0x1, 0x6, 0x0, 0x7, 0x248, 0x7fff, 0x37, 0x5, 0x6, 0x43, 0x949, 0xffffffff, 0x8, 0xb, 0x0, 0x9, 0x0, 0x1, 0x1, 0x6, 0x2, 0x8, 0x4, 0x5, 0x5a69, 0x1, 0x1, 0x55, 0x1, 0x2, 0x8, 0x5, 0x55d, 0x7fffffff, 0x8001, 0x6, 0x81, 0xe752, 0xf59, 0x4c8, 0x7, 0x10, 0x1, 0xb5e, 0x2, 0x2, 0x1, 0x5, 0x697, 0xc, 0x3, 0x6, 0x4, 0x66a6000, 0xc, 0x5, 0x400, 0xd058, 0x6, 0x1, 0x3, 0x1, 0x4, 0x7b, 0x5, 0x8, 0x7, 0x1, 0xf, 0x3, 0x3, 0x7, 0x63e4, 0x7, 0xb0e, 0x401, 0x4, 0x10001, 0x2, 0x7fffffff, 0x800, 0x8, 0xe0, 0x1, 0x2, 0x8000, 0x7f, 0xfd4d, 0x1, 0x9, 0x9]}, @TCA_HTB_CTAB={0x404, 0x3, [0x3, 0xffffffff, 0x7, 0xff, 0x1000, 0x0, 0x0, 0x9, 0x4ae042e5, 0x8, 0xff, 0x4, 0x800, 0x80000000, 0x4, 0x9, 0x10001, 0x0, 0xf78, 0x6, 0x10, 0x190, 0x7, 0x4, 0x835a, 0x3, 0x5, 0x0, 0x5, 0x8, 0x4, 0x9e2, 0x3, 0xfffffff9, 0x7, 0xfff, 0x1000, 0x3, 0x5, 0x100, 0xfff, 0x40, 0x2, 0x400, 0x69a, 0x6, 0x9, 0x1d, 0x0, 0x4e1b, 0x8c, 0xb, 0x8, 0x9, 0x7ff, 0x0, 0x3, 0x400, 0xec, 0x7, 0xe, 0x1, 0x8d, 0x4, 0x2, 0x2, 0x7, 0x3, 0x4, 0x9, 0x9, 0xfffffffe, 0x1, 0x0, 0xd7, 0xc, 0xf, 0x4, 0x6, 0x5, 0x4607, 0x0, 0x3, 0xd32, 0xfffffffc, 0x6, 0x4c87, 0x70, 0x40, 0x2, 0x0, 0xd, 0x2, 0x9a17, 0x4, 0x3, 0x8, 0xfffffffa, 0x9e9f, 0x0, 0x7f, 0xffff, 0xffffff01, 0x8, 0x8, 0x1, 0x101, 0x6, 0x449b4ba5, 0x1, 0x4, 0xfffffffd, 0x200, 0x1, 0x5, 0xffffffff, 0xa9, 0xb, 0x0, 0x0, 0x4a7, 0x3, 0xbc8, 0x0, 0x9f, 0xfffffff7, 0x5, 0x5, 0x100, 0x9, 0xffffffff, 0x7, 0xa, 0x8, 0x7fffffff, 0x4, 0x7f, 0x200, 0x8, 0x4, 0x200, 0x800, 0x8001, 0x8, 0x3, 0x0, 0x7, 0xee, 0x7, 0x7, 0x8001, 0xfffffffb, 0x1c, 0x1, 0x8001, 0x1, 0x2, 0xd, 0x7, 0xcf3, 0x2, 0x4, 0x9, 0x1, 0xfffffb0e, 0x10001, 0x3, 0x6, 0x80, 0x3b3, 0x4, 0x7f, 0x9, 0x5, 0xecc, 0x4, 0x7, 0x7, 0x2, 0x6, 0xbf7, 0xc2, 0x9, 0x8, 0x7, 0x6000, 0x3, 0x2, 0x7f, 0x4, 0x4, 0x5, 0xffff, 0xde, 0x2, 0x4, 0x788f77b1, 0x4, 0x6, 0xffffff80, 0x0, 0x0, 0x3, 0x7, 0x4, 0x17e9, 0x6, 0x6, 0x675, 0xd, 0x4, 0x5, 0xf, 0x2, 0x80000001, 0x8, 0x7fffffff, 0x6, 0x400, 0xe081, 0x1, 0x7f, 0x8, 0x4, 0x1, 0x8, 0x6, 0xb0, 0x3, 0x8, 0x9, 0xd, 0x81, 0x6, 0x400, 0x4, 0x80, 0x80000001, 0x3, 0x7c, 0x2, 0x400, 0x8000, 0xffffffff, 0xdcd, 0x4, 0x10, 0xffff887b, 0x101, 0x25a0, 0x80, 0x1, 0xffffffff, 0x2, 0x5, 0x8]}]}}]}, 0x868}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x2a, 0x4101, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r2, 0x0, 0xffffffbfffff8000, 0x8) close(r8) syz_usb_control_io$lan78xx(r0, &(0x7f0000000140)={0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="00040f0000000f039825ffff2ed007005571bb98e1031e40bb06"], &(0x7f0000000080)={0x0, 0x3, 0x76, @string={0x76, 0x3, "6aa81a3b6227c1c6ebc8d9fe24d07a27df5d54f10265d6d7ebd36d0851144ee1c23c3baa3351be1f5ccd8b9c70e21cc86797fea821392e885cfccdc19d9d96a5728d6c011bd0011731d01d2c826f22c6b27a38fc0b9153f2091528576584e124967d9320e854586d0dd8295a416a12dccd041eea"}}}, &(0x7f0000000300)={0x34, &(0x7f0000000180)={0x40, 0x13, 0x15, "eddfda89a153085f3856d4df04965942e11b0784a7"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000240)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000000280)={0x40, 0xa0, 0x4, 0x9}, &(0x7f00000002c0)={0xc0, 0xa2, 0x2f, "f99e09f1ce60240f1a3710c71d4de3f909237e3b3a8e6cb34861f5740ff1ae7970e68a3f55db9346dca68822ebad8f"}}) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x54c, 0xba0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x91, 0x0, 0x5, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x0, 0xc8, 0x1, {0x22, 0xe13}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x2}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0xf, 0x48, 0x82, 0x8, 0x10}, 0x3b, &(0x7f0000000480)={0x5, 0xf, 0x3b, 0x4, [@ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x1, 0xff00, 0x6, [0xff000f, 0x3f0f, 0xff0030]}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x6, 0x0, 0x9, [0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x8, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0x1, 0x7f}]}, 0x2, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x408}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) syz_open_dev$video4linux(&(0x7f00000001c0), 0xffc, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) r1 = socket$inet6(0xa, 0x800, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b000000000001190780000000000001cdbb42b4e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af5844cc579a4e8cc52243efa8698d0a881c51852e4424251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461c2aa2f19935e6996c7096ffeeb03000000000000649a3bfbc0d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af6e8dafe0900"/190], 0x0) recvmsg(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0xd62, 0x4) syz_emit_ethernet(0x6b, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x31, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x3, 0x5, "45154184d900be79599ddcffb1fa373b586623ce6f244518cbae2cdcf97dc32403f90baed01e21"}]}}}}}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f0000000200)=0x4, 0x4) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) setgroups(0x1, &(0x7f0000000400)=[0xffffffffffffffff]) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000680)="7573a0f680b323d7a1faecf9503b290f3e81e9eaf4164d652ae8ffa9c2c59fce802f8a6b6c868b8af22d2c7a7b2e1f16670e8edcc0b14d176c650600a119de04a595515f3e373a8cfb53dd8cc843c8effcc5d4d52bfc1921ae06f5ad82b688ab28cfad574de4d40c2ea07bbd2b0e79dc47c70e54e8373f8afdd8f0fb1ce168ce19e14c7e50d800d51a556e425d18cde7d9c2a3a2580506c2f1c19bf3e25eaa781a919e9aba1f88b5ad66c3d23c59ba29ff6edce1d06c0ddc448fd91b35576841ea054d4af54e4dc9f0c69cc6922b5c082172a28208e35801cd4e00460000000000", 0xe1) ioctl$CEC_RECEIVE(r4, 0xc0386106, &(0x7f0000000340)={0x3, 0x590c, 0x6, 0x6, 0x65, 0xfffffffe, "3d33e420e2fd24b234d8f6217cadfcec", 0x6, 0xb, 0xb, 0xd, 0x2, 0x2, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000008c40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000008d00)={0x0, 0x0, &(0x7f0000008cc0)={&(0x7f0000008c80)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000000c0)) executing program 5: syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x40, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf251000000008000700000000001800018014000200776c616e310000000000000000000000080008"], 0x3c}}, 0x0) executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="153780ca192407000000232c25a81003", 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$dri(0x0, 0x202, 0x521941) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x191041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000008c0)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, 0x0) syz_create_resource$binfmt(&(0x7f0000000240)='./dev\x00') sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRES64=r1, @ANYBLOB="080002", @ANYRES16=r0, @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x480c4) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000080)={0x1, 0x2, {0x3, 0x0, 0x0, 0xa, 0x0, 0x64}}) preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000040)=""/4, 0x4}], 0x1, 0x1, 0x4) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$SMC_PNETID_DEL(r6, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000002345f3870000000005000000850000002e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x9, 0x0, &(0x7f0000002040)) r1 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/instances/inst1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r6, 0x100000000) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) poll(&(0x7f0000000040)=[{r7, 0x8006}], 0x1, 0xfffffff9) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000980)={0x2, @win={{0x4, 0x7, 0x33565348, 0x40}, 0x2, 0xc, 0x0, 0xd, 0x0, 0x8}}) syz_io_uring_setup(0xefa, &(0x7f0000000400)={0x0, 0x85c9, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000000c0)) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0xc052) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000880010002000000ffff000005"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002200)={0x10, 0x0, r2}, 0x10) syz_emit_ethernet(0x19, &(0x7f00000001c0)={@link_local, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@x25={0x8100, {0x2, 0x0, 0xfb}}}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="89e09c681900100029bd7000fddbdf251c202007ff05ff0b000600000800010000000000"], 0x24}}, 0x0) cachestat(r0, &(0x7f0000000180)={0x8, 0x3}, &(0x7f0000000340), 0x0) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x7, 0x1000, 0x4, 0xffffffff}}) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8, 0x10000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000200)={0xb, 0x87}) executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000380)={0x9, 0x4000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x84201, 0x0) openat(0xffffffffffffffff, 0x0, 0x246101, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x216, 0x141102) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x183242) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="00000000000017004e9bfa26e0391e0adfbeefa38d549910a43fef125e13bf2e4b69cf03d70386b9ffab6e0d4ec13db52d959a67decd70bb242c49f6372a2dfe6262e5b0fc0a849f69b5baa3ed9acee5c536f7372d563bbf959b3e2560d1be7bd94085cdcc956ac8887cd78f8866fb2bd969117cfc11ee35ed0290449f9f4cea9b9185b8c64d9f213964dece7e5e720df4ad49882bbc81ba43ea1917b716c8c67cf962c6e1858cda42cbc1e8ee9d30766353f5a251bc0def44f2db0d98fc6c573a1e3fa2d40eca963d4c210692e2ef0dc6887ebb0fe2", @ANYRESHEX=r2, @ANYBLOB=',\x00']) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r5, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40802) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x488580, 0x0) executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x474c, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x68, 0x24, 0xe0b, 0x70bd25, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$inet(r3, &(0x7f0000001b40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010101, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x40}}], 0x1, 0xc0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000000)=0x5d81, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x3, 0x10}, 0xc) r7 = dup(r0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000140)={0xa, 0x4}, 0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) socket$inet_sctp(0x2, 0x1, 0x84) executing program 3: read(0xffffffffffffffff, 0x0, 0x20) utime(0x0, 0xfffffffffffffffc) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000"], 0x7c}}, 0x4004850) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x101041) write$sndseq(r2, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x2000000000000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) socket(0x1f, 0x6, 0x800000) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x20000084) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) rmdir(&(0x7f00000002c0)='./file2\x00') r0 = fanotify_init(0xef0, 0x2) fanotify_mark(r0, 0x105, 0x40009965, 0xffffffffffffffff, 0x0) executing program 0: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x101, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x80000001, 0x8001, {0x0}, {0xee00}, 0x10001, 0x663}) prlimit64(r0, 0x2, &(0x7f0000000080)={0x100000000}, &(0x7f00000000c0)) syz_usb_connect$uac2(0x2, 0x83, &(0x7f00000018c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0x6, 0x80, 0x7c, {0x8, 0xb, 0x0, 0x2, 0x1, 0x3, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x2, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x80, 0x7, {0x8, 0x25, 0x1, 0x0, 0x18, 0x2, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xb, 0x4, 0xf7, 0x39}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x4, 0x5, {0x8, 0x25, 0x1, 0x81, 0x3, 0x2}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x1d, 0x0}) (async) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) (rerun: 64) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) (async) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000100)={"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"}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) lsm_set_self_attr(0x64, &(0x7f0000000540)={0x6b, 0x8000000000000001, 0x20}, 0x20, 0x0) (async) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x40000000, 0x1980000}], 0x0) executing program 5: socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x44801, 0x180) fcntl$notify(r0, 0x402, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x80000000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x44014) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) eventfd2(0x5, 0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x400000002, 0x1e1102) writev(r2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000c881}, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r6, 0x802000, r4}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) executing program 0: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) chdir(&(0x7f0000000540)='./cgroup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, 0xffffffffffffffff, 0x3a, 0x0, @val=@tcx}, 0x1c) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0x400c4d07, &(0x7f0000000a00)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) program did not crash replaying the whole log did not cause a kernel crash single: executing 1 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-prlimit64-sched_setscheduler-getpid-socket-openat$sequencer2-prctl$PR_SCHED_CORE-prlimit64-sched_setscheduler-syz_open_dev$sndmidi-writev-fsopen-fsconfig$FSCONFIG_SET_STRING-gettid-fsconfig$FSCONFIG_CMD_CREATE-tkill-fsopen-prlimit64-fsconfig$FSCONFIG_CMD_CREATE-fsmount-fsconfig$FSCONFIG_SET_PATH_EMPTY-fsconfig$FSCONFIG_CMD_RECONFIGURE-sched_setaffinity-sched_setscheduler-mmap-socketpair$unix-connect$unix-sendmmsg$unix-sched_setaffinity detailed listing: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 37 programs with base timeout 1m40s testing program (duration=1m49s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 4, 8, 30, 19, 14, 14, 27, 6, 5, 30, 6, 10, 30, 29, 30, 3, 30, 14, 30, 6, 6, 21, 30, 4, 30, 25, 16, 25, 30, 23, 6, 14, 18, 30, 29, 14] detailed listing: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) executing program 4: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/stat\x00') socket$unix(0x1, 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000100)={0x8, 0x6, 0x4, 0x800, 0x6, {0x77359400}, {0x1, 0x0, 0x4, 0x3, 0x1, 0x86, "ad8a0626"}, 0x80000001, 0x4, {}, 0x0, 0x0, r1}) executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x5cd900, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) executing program 4: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$nci(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x80000100008b}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000340)=""/102400, 0x19000) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x3, @empty, 0xffffff0e}, 0x1c) r7 = syz_open_procfs$userns(r4, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket(0x1e, 0x4, 0x0) connect$tipc(r8, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) connect$bt_l2cap(r8, &(0x7f0000000380)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) sendmmsg$unix(r8, &(0x7f0000004400), 0x400000000000203, 0x0) epoll_create1(0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) executing program 4: bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x8, 0x4, 0x0, 0x8000, 0x4c, 0xffffffffffffffff, 0x1}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x547}, 0x4, r4}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x2, {0x0, 0xff, 0x6}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x2, 0x6af65bf14888d50a, 0x3}, 0x2}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc001}, 0x800) executing program 32: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x547}, 0x4, r4}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x2, {0x0, 0xff, 0x6}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x2, 0x6af65bf14888d50a, 0x3}, 0x2}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc001}, 0x800) executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (async) mount$tmpfs(0x0, &(0x7f0000000700)='./file0/file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000240)={[{@noswap}]}) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000001f80)={0x8, 0x120, 0xfa00, {0x1, {0x7, 0xfffffff8, "e1161e0ff364167e154e26433b94949403f569c8ffc81c0a597becf442052e6450662b1784ddaddbf8e02987e27908eabb7d7ce2d458229b2535f5e7a92618e88f7555cd9eb253208eb6a8a560eda9e3f3f30bb5a0d138478349de0ff90a95a897b5c8bc58c5ebb00210a18eed2373a8932334dad16a5dc508024846cde4e9431e4c941be3f55b0d6e685b39fca72c0ceabec561d2e46ba3cec654f1de6492e64cae89d6df365c86c7ea54cb8156fb618c21ffcbbc808b16b1f05780d1ab40ff4546aff35d6fc4471461b29c772a53300c5dde3487e5e8f5c0040c4a4f8654e6bf4d43436b8e643a67069554df61d1d701599a01d32d0a25d5515a69a8e0bf57", 0x7f, 0x0, 0x5, 0x6, 0x8, 0x3, 0x9}}}, 0x128) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f5c9ba68820"], 0x7) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x14, 0x1, 0x0, 0x0, {0x2c}}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x1000c000) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) (rerun: 64) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) (async) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@empty, r3}, 0x14) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) (async) close(0x3) (async) recvmsg$unix(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x62) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), 0xffffffffffffffff) (async, rerun: 64) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/module/ueagle_atm/parameters/sync_wait\x00', 0x1, 0x0) write(r8, &(0x7f0000000200)='0,', 0x2) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x74, r7, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x84}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x10}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}]}, 0x74}, 0x1, 0x0, 0x0, 0x400d8}, 0x24004010) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x2, 0x9, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0x2000c850) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x39188d, &(0x7f0000004280)={[{@uid={'uid', 0x3d, r1}}]}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x5c8, 0x210, 0x3f0, 0xffffffff, 0x210, 0x300, 0x4f8, 0x4f8, 0xffffffff, 0x4f8, 0x4f8, 0x5, &(0x7f0000000040), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3b}, @local, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], [0xff000000, 0xffffff00, 0xff000000, 0xff], 'netpci0\x00', 'veth1_macvtap\x00', {}, {0xff}, 0x11, 0x40, 0x2}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@srh1={{0x90}, {0x4, 0x6, 0x2, 0x5, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xff, 0xff000000, 0xff000000], [0x0, 0xff000000, 0xffffff00, 0xff000000], [0xff, 0xffffff00, 0xff000000, 0xffffff00], 0x2812, 0x200}}, @common=@srh1={{0x90}, {0x2c, 0xc, 0x12, 0x8, 0x52, @mcast2, @remote, @local, [0xff, 0xff000000, 0xff000000, 0xffff00], [0xffffff00, 0xffffff00, 0xff], [0xffffff00, 0xff, 0xffffffff, 0xffffff00], 0x82, 0x108}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv6=@rand_addr=' \x01\x00', @ipv6=@private2, @gre_key=0xc, @icmp_id=0x67}}}, {{@ipv6={@remote, @loopback, [0x0, 0xffffff00, 0xff, 0xff000000], [0xff000000, 0x0, 0xffffff00, 0xffffff00], 'bridge_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x32, 0x47, 0x1, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x14, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}, @ipv4=@dev={0xac, 0x14, 0x14, 0x14}, @gre_key=0x1, @icmp_id=0x64}}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, [0x0, 0x0, 0xff, 0xffffff00], [0x0, 0x0, 0x0, 0xffffff00], 'veth1_to_batadv\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0x62, 0x7, 0x0, 0x4}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x14, @ipv4=@multicast2, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x66, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x14}, [0xffffffff, 0xff, 0xff000000, 0xff000000], 0x4e21, 0x4e21, 0x4e21, 0x4e21, 0xffffccd0, 0x101, 0x3, 0xe, 0xfa}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628) executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f00000000c0)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f00000001c0)={0x0, {0x0, 0x0, @qam}}) executing program 3: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) chdir(&(0x7f0000000540)='./cgroup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf0ffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00'}) openat(0xffffffffffffff9c, 0x0, 0xa0142, 0x121) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000380)={0x3}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$llc(0xffffffffffffffff, 0x0, 0x0) gettid() r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="14010000200001000000000000000000040100800c0002000900000000000000140001000100000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e98c079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)) sendfile(r1, r1, 0x0, 0x200000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4007) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x100) executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) rmdir(&(0x7f00000002c0)='./file2\x00') r0 = fanotify_init(0xef0, 0x2) fanotify_mark(r0, 0x105, 0x40009965, 0xffffffffffffffff, 0x0) executing program 3: mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='ceph\x00', 0x208000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0000380004804e2d", @ANYRESDEC=r0], 0x4c}, 0x1, 0x0, 0x0, 0x4048411}, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000020, 0x0, 0xb}]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001140)={0xffffffffffffffff, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0xcf, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x7f, 0x8, 0x8, &(0x7f0000001000)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES8=r0, @ANYRES16], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, @fallback=0x15}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x18000000000002a0, 0x11, 0x0, &(0x7f00000002c0)="000000952ba300"/17, 0x0, 0x6639, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(r0, 0x26, &(0x7f00000001c0)={0x2, 0x3, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$kcm(0x23, 0x5, 0x0) listen(r2, 0x800) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000200)={0x23, 0x0, 0xe7}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="180000006a090000000000000000000000080000000800bc"], 0x18}], 0x1}, 0x2000c0d0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0xd, @pix_mp={0x0, 0x3d, 0x33565348, 0x8, 0x1, [{0x6, 0x4001ff}, {0x7fa07c7e, 0x404}, {0x6, 0xffffffff}, {0x678}, {0x2, 0x6}, {0x2, 0x3}, {0xfffffffd, 0x3}, {0x0, 0x61}], 0x4, 0x0, 0x4, 0x2, 0x2}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl(r8, 0x4048aec9, &(0x7f00000000c0)="03000000000000000100000002") io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0xfffffff7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r9}, 0xc) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) executing program 3: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000300)=""/116, 0x74, 0x0, &(0x7f0000000500)=""/201, 0xc9}}, 0x10) mkdir(&(0x7f0000000080)='./file1\x00', 0xe4) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f25541e6f94401d9e231b4e3e4eed8d0f22bc498e3c0bc6acbc7d4d99489"}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'dummy0\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0xc, 0x9, 0x6, 0x3a}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x3c2, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f770c0000002a9000070900"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x2, &(0x7f0000000000)='BB') lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) symlink(0x0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="12015002009620eefb05a8a4400001e2020109021b00010110000709040000020701020609050102f7037f020f1abc4e95c77bd3624f804c88a83f18bf083b948c882d475a8e13dfd0ce880b"], 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, 0x0, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x60040, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000140)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x81, 0x1, 0xa000200000a958, 0x2000000008, 0x7e07, 0x4, 0x48cd, 0x80000003, 0xd6f}) executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x200}], 0x1, 0x0, 0x0, 0x0) executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x50, "6ad66755f7cf69805782d06f64f3c112c8296260108a4ef5cc4975bd43fbef01bef4313f58b02d67890c8656a5b29b1c5204db3c06e28b6d0c0d6e15ecc378857f0ed9328af56c6fd2d55832d779745c"}, &(0x7f0000000080)=0x58) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1, 0x9}, &(0x7f0000000100)=0x8) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) r3 = syz_open_pts(r2, 0x100) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r4, 0x4008af75, &(0x7f0000000180)={0x1}) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00'}, 0x18) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000240)) r6 = fsmount(0xffffffffffffffff, 0x1, 0x8) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r6, 0x80605414, &(0x7f0000000280)) fchdir(0xffffffffffffffff) write$vhost_msg(r6, &(0x7f0000000500)={0x1, {&(0x7f0000000300)=""/208, 0xd0, &(0x7f0000000400)=""/226, 0x2, 0xca69087fb0990a8a}}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) writev(r4, &(0x7f0000000740)=[{&(0x7f00000005c0)="66baee7880ccf6e4f3dfbd1d745380140749a0bedfbbba47c54c767c3c0ad6cf66794cb2a64581ae4df009c4bc27f93665a7a95cad6f3f2a99296efd2f4eb68ebbefd3b9a1e73dcdd34597ef8e2cf03bad190ca5b9f7eb9a53e11fd175e8a1fc677e1a5d5772b1b235e414a052afd920264974f66e4e7ac5b621a21b513da789e4818796404ffff864a3a181c287dcdf0f047298e15b05e382f877c8b4f6a44eab884f649fbf8e4f67dc3674969f01ff2b3abf5e247b27261de978de98d91bc4dda386e5300dc717fb524aacdfc656526032296337f572e634fe968030c15ba991f86442d67f35322c73037220e5cdeb", 0xf0}, {&(0x7f00000006c0)="1b9e59f5768a35edd86585931466b80f9e10815d4d202b7a3e811f09badda47a9cba65f2d763bcd1b7c395c0adde5e1261dc1ea2ae904ada3dc97ab661a135a3f5d6460bdeaae55a3a4928ba40e7ba87", 0x50}], 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000780)) ioctl$VHOST_VDPA_GET_VRING_NUM(r4, 0x8002af76, &(0x7f00000007c0)) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000800)=0xb0, 0xf95b, 0x6) sendfile(r5, r3, 0x0, 0x101) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000c80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x50010002}, 0xc, &(0x7f0000000c40)={&(0x7f00000008c0)={0x368, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "100ed7d41011078b5f9320e64b5a8a1f7e1e6a0ba8ad0db4888efe6656c4d8dbcec341"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "ec8d3b5e6505fdd54be09d0135b5aa9147ab914aa1b6a6fc0bb40f602417543a9afe6df5"}}]}, @TIPC_NLA_LINK={0x190, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x61}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x24b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbe0e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe63}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x13fe}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1e7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffe00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x58f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xec}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa92a}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x45f38c44}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb56}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0x368}, 0x1, 0x0, 0x0, 0x4048000}, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000cc0)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f0000000d40)=0x208, 0x4) ioctl$VIDIOC_ENUM_DV_TIMINGS(r6, 0xc0945662, &(0x7f0000000d80)={0x75c2, 0x0, '\x00', {0x0, @reserved}}) read$FUSE(r6, &(0x7f0000000e40)={0x2020}, 0x2020) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000002e80)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000002ec0)=0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000002f00)={r8, @in6={{0xa, 0x4e20, 0xe0000000, @remote, 0x2}}, 0x400, 0x6}, 0x90) openat(r6, &(0x7f0000002fc0)='./file0\x00', 0x480001, 0x130) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003300), 0x4) executing program 0: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x101, '\x00', r5, 0xffffffffffffffff, 0x2, 0x6}, 0x50) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x80800) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r11, &(0x7f00000000c0)=[{&(0x7f0000000180)='n', 0x1}], 0x1, 0x3) splice(r10, 0x0, r9, 0x0, 0x8000, 0x0) accept4$tipc(r0, 0x0, &(0x7f00000001c0), 0x40800) write$tcp_mem(r0, &(0x7f0000000280)={0x2, 0x20, 0x7f, 0x20, 0xa}, 0x48) r12 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f00000000c0)={0x1, r12}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x2000011, 0x0, 0x52, 0x0, 0x0, 0x0) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') pread64(r13, &(0x7f0000001400)=""/4108, 0x100c, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r14 = syz_usb_connect(0x6, 0x45, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040351201820001010203010902450002010080fa080b0002010020000904000000010120000924010002080900000904010001ff0000000705"], 0x0) syz_usb_control_io(r14, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="a10000000000a60f0ee8a34ee37d2de67cb411cb06f3c408f5849f7492fcb6c75d7cacc8019ab76effa101330b7a26313ff28be5ca69715b932b9c5541be25117de9e83fd6de8b9700"/82], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) rmdir(&(0x7f00000002c0)='./file2\x00') r0 = fanotify_init(0xef0, 0x2) fanotify_mark(r0, 0x105, 0x40009965, 0xffffffffffffffff, 0x0) executing program 1: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x40}, 0xc) setns(0xc9, 0x0) r1 = socket(0x8, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000007640)) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000080)) executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000f80)={0x14, &(0x7f0000000ec0)={0x20, 0xad8a5354353639bf, 0x53, {0x53, 0x23, "e3ad1ea9b1d2a286c267fe1fe1ab9c9daefb5dbb8affa41916dd9de65558e845b601f07a79cb1cb2cff7e338ba06508c7e36dbcef0cad0a85d198971fbebeb4a5cefc0c858240b283d474f3cf9589f0225"}}, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001280)={0x44, &(0x7f0000000fc0)={0x0, 0x16, 0xbb, "7a122eeb9d25687880b6faf5aefdb4299f436e43dcb78ea1bdc2e1a150bee0e6c7bfbbf54b9c4f4222244d781fc5c42ce96663c57fb48a1f7432174b836cbb284da0c8dc91548c6299b66e965101bd2d4a70a43385ad22ce13e57cc5621a931e65c54b23de10979e1c7c8184edcdcbd6cd53bec6cd71f8fcb8072660a85edf6114fdfd1d95f253898b6706e34e67411aafb50e3e97f4df6d27501fdcc0cf5bfd46c2e83e4127863aada9dd0b414385d9618e6446dfa9b47b14572e"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000001100)={0x0, 0x8, 0x1}, &(0x7f0000001140)={0x20, 0x80, 0x1c, {0x4, 0x1ff, 0x9, 0xf, 0x3, 0xdb0d, 0x5977, 0x9, 0x6, 0xff, 0x0, 0x5}}, &(0x7f0000001180)={0x20, 0x85, 0x4, 0xb}, &(0x7f00000011c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001200)={0x20, 0x87, 0x2}, &(0x7f0000001240)={0x20, 0x89, 0x2, 0x1}}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtclass={0x868, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x83c, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000, 0x0, 0x0, 0x10000}}, @TCA_HTB_RTAB={0x404, 0x4, [0x9, 0x4, 0x7, 0x8, 0x11c86bdd, 0x48, 0x1, 0xb1, 0xffff, 0xc, 0x2, 0x1, 0x3, 0x2, 0x1ff, 0x8, 0x1, 0x401, 0x5, 0x0, 0x7fffffff, 0xff, 0x5, 0x5, 0x8, 0x4, 0x3, 0x8cc, 0xffffff7f, 0xf, 0x1, 0x8, 0x2488f245, 0xf8, 0xff, 0xd, 0x7fff, 0x7, 0x3, 0x5, 0x60000, 0x386, 0xb43, 0x79, 0x80000001, 0x200, 0x2, 0x4, 0x9, 0x80, 0xfffffff9, 0x7fffffff, 0x40, 0xd18, 0x0, 0xe, 0x7ff, 0x9, 0x7, 0x1dd, 0x6, 0x0, 0xc, 0x4, 0x6, 0x4, 0x3, 0x8, 0x2, 0x8, 0x80, 0xff, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x7, 0x3, 0xffff, 0x30, 0xa, 0xce, 0xffffffff, 0x2, 0x2, 0x1328, 0xfffffffb, 0x4, 0x2, 0x9, 0x2, 0x4, 0x8, 0xcf25, 0x0, 0xf29, 0xa, 0xfffffff9, 0xa, 0xa, 0x4, 0x800, 0x8, 0x1000, 0x2, 0xfffffffb, 0x1, 0x474, 0x3, 0x1, 0xfffffffc, 0x7, 0x9, 0x3, 0x2, 0x7, 0x764, 0xfffffde3, 0x7, 0x80, 0x2, 0x3632, 0x48, 0x4, 0xd4e, 0x4, 0x907, 0x3ff, 0x2, 0x4, 0x7, 0x401, 0x80, 0x80000001, 0x5, 0x1ff, 0x100, 0x6, 0x6, 0x649, 0xfffffffa, 0x1, 0x6, 0xfffffffe, 0xdb, 0x10000, 0x80000000, 0x1, 0xffff, 0x100, 0x4, 0x6, 0x3, 0x10, 0x902, 0x10, 0x0, 0x6, 0x80000, 0x0, 0x7, 0x0, 0x4, 0x6a82, 0x1, 0x6, 0x0, 0x7, 0x248, 0x7fff, 0x37, 0x5, 0x6, 0x43, 0x949, 0xffffffff, 0x8, 0xb, 0x0, 0x9, 0x0, 0x1, 0x1, 0x6, 0x2, 0x8, 0x4, 0x5, 0x5a69, 0x1, 0x1, 0x55, 0x1, 0x2, 0x8, 0x5, 0x55d, 0x7fffffff, 0x8001, 0x6, 0x81, 0xe752, 0xf59, 0x4c8, 0x7, 0x10, 0x1, 0xb5e, 0x2, 0x2, 0x1, 0x5, 0x697, 0xc, 0x3, 0x6, 0x4, 0x66a6000, 0xc, 0x5, 0x400, 0xd058, 0x6, 0x1, 0x3, 0x1, 0x4, 0x7b, 0x5, 0x8, 0x7, 0x1, 0xf, 0x3, 0x3, 0x7, 0x63e4, 0x7, 0xb0e, 0x401, 0x4, 0x10001, 0x2, 0x7fffffff, 0x800, 0x8, 0xe0, 0x1, 0x2, 0x8000, 0x7f, 0xfd4d, 0x1, 0x9, 0x9]}, @TCA_HTB_CTAB={0x404, 0x3, [0x3, 0xffffffff, 0x7, 0xff, 0x1000, 0x0, 0x0, 0x9, 0x4ae042e5, 0x8, 0xff, 0x4, 0x800, 0x80000000, 0x4, 0x9, 0x10001, 0x0, 0xf78, 0x6, 0x10, 0x190, 0x7, 0x4, 0x835a, 0x3, 0x5, 0x0, 0x5, 0x8, 0x4, 0x9e2, 0x3, 0xfffffff9, 0x7, 0xfff, 0x1000, 0x3, 0x5, 0x100, 0xfff, 0x40, 0x2, 0x400, 0x69a, 0x6, 0x9, 0x1d, 0x0, 0x4e1b, 0x8c, 0xb, 0x8, 0x9, 0x7ff, 0x0, 0x3, 0x400, 0xec, 0x7, 0xe, 0x1, 0x8d, 0x4, 0x2, 0x2, 0x7, 0x3, 0x4, 0x9, 0x9, 0xfffffffe, 0x1, 0x0, 0xd7, 0xc, 0xf, 0x4, 0x6, 0x5, 0x4607, 0x0, 0x3, 0xd32, 0xfffffffc, 0x6, 0x4c87, 0x70, 0x40, 0x2, 0x0, 0xd, 0x2, 0x9a17, 0x4, 0x3, 0x8, 0xfffffffa, 0x9e9f, 0x0, 0x7f, 0xffff, 0xffffff01, 0x8, 0x8, 0x1, 0x101, 0x6, 0x449b4ba5, 0x1, 0x4, 0xfffffffd, 0x200, 0x1, 0x5, 0xffffffff, 0xa9, 0xb, 0x0, 0x0, 0x4a7, 0x3, 0xbc8, 0x0, 0x9f, 0xfffffff7, 0x5, 0x5, 0x100, 0x9, 0xffffffff, 0x7, 0xa, 0x8, 0x7fffffff, 0x4, 0x7f, 0x200, 0x8, 0x4, 0x200, 0x800, 0x8001, 0x8, 0x3, 0x0, 0x7, 0xee, 0x7, 0x7, 0x8001, 0xfffffffb, 0x1c, 0x1, 0x8001, 0x1, 0x2, 0xd, 0x7, 0xcf3, 0x2, 0x4, 0x9, 0x1, 0xfffffb0e, 0x10001, 0x3, 0x6, 0x80, 0x3b3, 0x4, 0x7f, 0x9, 0x5, 0xecc, 0x4, 0x7, 0x7, 0x2, 0x6, 0xbf7, 0xc2, 0x9, 0x8, 0x7, 0x6000, 0x3, 0x2, 0x7f, 0x4, 0x4, 0x5, 0xffff, 0xde, 0x2, 0x4, 0x788f77b1, 0x4, 0x6, 0xffffff80, 0x0, 0x0, 0x3, 0x7, 0x4, 0x17e9, 0x6, 0x6, 0x675, 0xd, 0x4, 0x5, 0xf, 0x2, 0x80000001, 0x8, 0x7fffffff, 0x6, 0x400, 0xe081, 0x1, 0x7f, 0x8, 0x4, 0x1, 0x8, 0x6, 0xb0, 0x3, 0x8, 0x9, 0xd, 0x81, 0x6, 0x400, 0x4, 0x80, 0x80000001, 0x3, 0x7c, 0x2, 0x400, 0x8000, 0xffffffff, 0xdcd, 0x4, 0x10, 0xffff887b, 0x101, 0x25a0, 0x80, 0x1, 0xffffffff, 0x2, 0x5, 0x8]}]}}]}, 0x868}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x2a, 0x4101, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r2, 0x0, 0xffffffbfffff8000, 0x8) close(r8) syz_usb_control_io$lan78xx(r0, &(0x7f0000000140)={0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="00040f0000000f039825ffff2ed007005571bb98e1031e40bb06"], &(0x7f0000000080)={0x0, 0x3, 0x76, @string={0x76, 0x3, "6aa81a3b6227c1c6ebc8d9fe24d07a27df5d54f10265d6d7ebd36d0851144ee1c23c3baa3351be1f5ccd8b9c70e21cc86797fea821392e885cfccdc19d9d96a5728d6c011bd0011731d01d2c826f22c6b27a38fc0b9153f2091528576584e124967d9320e854586d0dd8295a416a12dccd041eea"}}}, &(0x7f0000000300)={0x34, &(0x7f0000000180)={0x40, 0x13, 0x15, "eddfda89a153085f3856d4df04965942e11b0784a7"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000240)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000000280)={0x40, 0xa0, 0x4, 0x9}, &(0x7f00000002c0)={0xc0, 0xa2, 0x2f, "f99e09f1ce60240f1a3710c71d4de3f909237e3b3a8e6cb34861f5740ff1ae7970e68a3f55db9346dca68822ebad8f"}}) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x54c, 0xba0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x91, 0x0, 0x5, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x0, 0xc8, 0x1, {0x22, 0xe13}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x2}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0xf, 0x48, 0x82, 0x8, 0x10}, 0x3b, &(0x7f0000000480)={0x5, 0xf, 0x3b, 0x4, [@ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x1, 0xff00, 0x6, [0xff000f, 0x3f0f, 0xff0030]}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x6, 0x0, 0x9, [0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x8, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0x1, 0x7f}]}, 0x2, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x408}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) syz_open_dev$video4linux(&(0x7f00000001c0), 0xffc, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) r1 = socket$inet6(0xa, 0x800, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b000000000001190780000000000001cdbb42b4e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af5844cc579a4e8cc52243efa8698d0a881c51852e4424251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461c2aa2f19935e6996c7096ffeeb03000000000000649a3bfbc0d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af6e8dafe0900"/190], 0x0) recvmsg(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0xd62, 0x4) syz_emit_ethernet(0x6b, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x31, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x3, 0x5, "45154184d900be79599ddcffb1fa373b586623ce6f244518cbae2cdcf97dc32403f90baed01e21"}]}}}}}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f0000000200)=0x4, 0x4) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) setgroups(0x1, &(0x7f0000000400)=[0xffffffffffffffff]) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000680)="7573a0f680b323d7a1faecf9503b290f3e81e9eaf4164d652ae8ffa9c2c59fce802f8a6b6c868b8af22d2c7a7b2e1f16670e8edcc0b14d176c650600a119de04a595515f3e373a8cfb53dd8cc843c8effcc5d4d52bfc1921ae06f5ad82b688ab28cfad574de4d40c2ea07bbd2b0e79dc47c70e54e8373f8afdd8f0fb1ce168ce19e14c7e50d800d51a556e425d18cde7d9c2a3a2580506c2f1c19bf3e25eaa781a919e9aba1f88b5ad66c3d23c59ba29ff6edce1d06c0ddc448fd91b35576841ea054d4af54e4dc9f0c69cc6922b5c082172a28208e35801cd4e00460000000000", 0xe1) ioctl$CEC_RECEIVE(r4, 0xc0386106, &(0x7f0000000340)={0x3, 0x590c, 0x6, 0x6, 0x65, 0xfffffffe, "3d33e420e2fd24b234d8f6217cadfcec", 0x6, 0xb, 0xb, 0xd, 0x2, 0x2, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000008c40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000008d00)={0x0, 0x0, &(0x7f0000008cc0)={&(0x7f0000008c80)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000000c0)) executing program 5: syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x40, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf251000000008000700000000001800018014000200776c616e310000000000000000000000080008"], 0x3c}}, 0x0) executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="153780ca192407000000232c25a81003", 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$dri(0x0, 0x202, 0x521941) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x191041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000008c0)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, 0x0) syz_create_resource$binfmt(&(0x7f0000000240)='./dev\x00') sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRES64=r1, @ANYBLOB="080002", @ANYRES16=r0, @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x480c4) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000080)={0x1, 0x2, {0x3, 0x0, 0x0, 0xa, 0x0, 0x64}}) preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000040)=""/4, 0x4}], 0x1, 0x1, 0x4) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$SMC_PNETID_DEL(r6, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000002345f3870000000005000000850000002e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x9, 0x0, &(0x7f0000002040)) r1 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/instances/inst1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r6, 0x100000000) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) poll(&(0x7f0000000040)=[{r7, 0x8006}], 0x1, 0xfffffff9) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000980)={0x2, @win={{0x4, 0x7, 0x33565348, 0x40}, 0x2, 0xc, 0x0, 0xd, 0x0, 0x8}}) syz_io_uring_setup(0xefa, &(0x7f0000000400)={0x0, 0x85c9, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000000c0)) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0xc052) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000880010002000000ffff000005"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002200)={0x10, 0x0, r2}, 0x10) syz_emit_ethernet(0x19, &(0x7f00000001c0)={@link_local, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@x25={0x8100, {0x2, 0x0, 0xfb}}}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="89e09c681900100029bd7000fddbdf251c202007ff05ff0b000600000800010000000000"], 0x24}}, 0x0) cachestat(r0, &(0x7f0000000180)={0x8, 0x3}, &(0x7f0000000340), 0x0) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x7, 0x1000, 0x4, 0xffffffff}}) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8, 0x10000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000200)={0xb, 0x87}) executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000380)={0x9, 0x4000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x84201, 0x0) openat(0xffffffffffffffff, 0x0, 0x246101, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x216, 0x141102) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x183242) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="00000000000017004e9bfa26e0391e0adfbeefa38d549910a43fef125e13bf2e4b69cf03d70386b9ffab6e0d4ec13db52d959a67decd70bb242c49f6372a2dfe6262e5b0fc0a849f69b5baa3ed9acee5c536f7372d563bbf959b3e2560d1be7bd94085cdcc956ac8887cd78f8866fb2bd969117cfc11ee35ed0290449f9f4cea9b9185b8c64d9f213964dece7e5e720df4ad49882bbc81ba43ea1917b716c8c67cf962c6e1858cda42cbc1e8ee9d30766353f5a251bc0def44f2db0d98fc6c573a1e3fa2d40eca963d4c210692e2ef0dc6887ebb0fe2", @ANYRESHEX=r2, @ANYBLOB=',\x00']) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r5, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40802) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x488580, 0x0) executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x474c, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x68, 0x24, 0xe0b, 0x70bd25, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$inet(r3, &(0x7f0000001b40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010101, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x40}}], 0x1, 0xc0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000000)=0x5d81, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x3, 0x10}, 0xc) r7 = dup(r0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000140)={0xa, 0x4}, 0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) socket$inet_sctp(0x2, 0x1, 0x84) executing program 3: read(0xffffffffffffffff, 0x0, 0x20) utime(0x0, 0xfffffffffffffffc) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000"], 0x7c}}, 0x4004850) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x101041) write$sndseq(r2, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x2000000000000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) socket(0x1f, 0x6, 0x800000) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x20000084) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) rmdir(&(0x7f00000002c0)='./file2\x00') r0 = fanotify_init(0xef0, 0x2) fanotify_mark(r0, 0x105, 0x40009965, 0xffffffffffffffff, 0x0) executing program 0: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x101, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x80000001, 0x8001, {0x0}, {0xee00}, 0x10001, 0x663}) prlimit64(r0, 0x2, &(0x7f0000000080)={0x100000000}, &(0x7f00000000c0)) syz_usb_connect$uac2(0x2, 0x83, &(0x7f00000018c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0x6, 0x80, 0x7c, {0x8, 0xb, 0x0, 0x2, 0x1, 0x3, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x2, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x80, 0x7, {0x8, 0x25, 0x1, 0x0, 0x18, 0x2, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xb, 0x4, 0xf7, 0x39}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x4, 0x5, {0x8, 0x25, 0x1, 0x81, 0x3, 0x2}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x1d, 0x0}) (async) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) (rerun: 64) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) (async) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4300fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e040000000000000019cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2509b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f980763802788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06470635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b5af41c4bce81eda040ab8583c9f2e73233d74b84f4877ce6b35bb1180300"}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) lsm_set_self_attr(0x64, &(0x7f0000000540)={0x6b, 0x8000000000000001, 0x20}, 0x20, 0x0) (async) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x40000000, 0x1980000}], 0x0) executing program 5: socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x44801, 0x180) fcntl$notify(r0, 0x402, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x80000000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x44014) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) eventfd2(0x5, 0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x400000002, 0x1e1102) writev(r2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000c881}, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r6, 0x802000, r4}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) executing program 0: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) chdir(&(0x7f0000000540)='./cgroup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, 0xffffffffffffffff, 0x3a, 0x0, @val=@tcx}, 0x1c) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0x400c4d07, &(0x7f0000000a00)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync bisect: bisecting 37 programs bisect: split chunks (needed=false): <36> bisect: split chunk #0 of len 36 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=1m46s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 30, 29, 30, 3, 30, 14, 30, 6, 6, 21, 30, 4, 30, 25, 16, 25, 30, 23, 6, 14, 18, 30, 29, 14] detailed listing: executing program 3: mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='ceph\x00', 0x208000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0000380004804e2d", @ANYRESDEC=r0], 0x4c}, 0x1, 0x0, 0x0, 0x4048411}, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000020, 0x0, 0xb}]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001140)={0xffffffffffffffff, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0xcf, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x7f, 0x8, 0x8, &(0x7f0000001000)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES8=r0, @ANYRES16], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, @fallback=0x15}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x18000000000002a0, 0x11, 0x0, &(0x7f00000002c0)="000000952ba300"/17, 0x0, 0x6639, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(r0, 0x26, &(0x7f00000001c0)={0x2, 0x3, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$kcm(0x23, 0x5, 0x0) listen(r2, 0x800) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000200)={0x23, 0x0, 0xe7}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="180000006a090000000000000000000000080000000800bc"], 0x18}], 0x1}, 0x2000c0d0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0xd, @pix_mp={0x0, 0x3d, 0x33565348, 0x8, 0x1, [{0x6, 0x4001ff}, {0x7fa07c7e, 0x404}, {0x6, 0xffffffff}, {0x678}, {0x2, 0x6}, {0x2, 0x3}, {0xfffffffd, 0x3}, {0x0, 0x61}], 0x4, 0x0, 0x4, 0x2, 0x2}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl(r8, 0x4048aec9, &(0x7f00000000c0)="03000000000000000100000002") io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0xfffffff7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r9}, 0xc) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) executing program 3: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000300)=""/116, 0x74, 0x0, &(0x7f0000000500)=""/201, 0xc9}}, 0x10) mkdir(&(0x7f0000000080)='./file1\x00', 0xe4) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f25541e6f94401d9e231b4e3e4eed8d0f22bc498e3c0bc6acbc7d4d99489"}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'dummy0\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0xc, 0x9, 0x6, 0x3a}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x3c2, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f770c0000002a9000070900"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x2, &(0x7f0000000000)='BB') lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) symlink(0x0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="12015002009620eefb05a8a4400001e2020109021b00010110000709040000020701020609050102f7037f020f1abc4e95c77bd3624f804c88a83f18bf083b948c882d475a8e13dfd0ce880b"], 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, 0x0, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x60040, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000140)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x81, 0x1, 0xa000200000a958, 0x2000000008, 0x7e07, 0x4, 0x48cd, 0x80000003, 0xd6f}) executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x200}], 0x1, 0x0, 0x0, 0x0) executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x50, "6ad66755f7cf69805782d06f64f3c112c8296260108a4ef5cc4975bd43fbef01bef4313f58b02d67890c8656a5b29b1c5204db3c06e28b6d0c0d6e15ecc378857f0ed9328af56c6fd2d55832d779745c"}, &(0x7f0000000080)=0x58) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1, 0x9}, &(0x7f0000000100)=0x8) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) r3 = syz_open_pts(r2, 0x100) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r4, 0x4008af75, &(0x7f0000000180)={0x1}) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00'}, 0x18) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000240)) r6 = fsmount(0xffffffffffffffff, 0x1, 0x8) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r6, 0x80605414, &(0x7f0000000280)) fchdir(0xffffffffffffffff) write$vhost_msg(r6, &(0x7f0000000500)={0x1, {&(0x7f0000000300)=""/208, 0xd0, &(0x7f0000000400)=""/226, 0x2, 0xca69087fb0990a8a}}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) writev(r4, &(0x7f0000000740)=[{&(0x7f00000005c0)="66baee7880ccf6e4f3dfbd1d745380140749a0bedfbbba47c54c767c3c0ad6cf66794cb2a64581ae4df009c4bc27f93665a7a95cad6f3f2a99296efd2f4eb68ebbefd3b9a1e73dcdd34597ef8e2cf03bad190ca5b9f7eb9a53e11fd175e8a1fc677e1a5d5772b1b235e414a052afd920264974f66e4e7ac5b621a21b513da789e4818796404ffff864a3a181c287dcdf0f047298e15b05e382f877c8b4f6a44eab884f649fbf8e4f67dc3674969f01ff2b3abf5e247b27261de978de98d91bc4dda386e5300dc717fb524aacdfc656526032296337f572e634fe968030c15ba991f86442d67f35322c73037220e5cdeb", 0xf0}, {&(0x7f00000006c0)="1b9e59f5768a35edd86585931466b80f9e10815d4d202b7a3e811f09badda47a9cba65f2d763bcd1b7c395c0adde5e1261dc1ea2ae904ada3dc97ab661a135a3f5d6460bdeaae55a3a4928ba40e7ba87", 0x50}], 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000780)) ioctl$VHOST_VDPA_GET_VRING_NUM(r4, 0x8002af76, &(0x7f00000007c0)) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000800)=0xb0, 0xf95b, 0x6) sendfile(r5, r3, 0x0, 0x101) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000c80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x50010002}, 0xc, &(0x7f0000000c40)={&(0x7f00000008c0)={0x368, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "100ed7d41011078b5f9320e64b5a8a1f7e1e6a0ba8ad0db4888efe6656c4d8dbcec341"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "ec8d3b5e6505fdd54be09d0135b5aa9147ab914aa1b6a6fc0bb40f602417543a9afe6df5"}}]}, @TIPC_NLA_LINK={0x190, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x61}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x24b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbe0e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe63}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x13fe}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1e7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffe00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x58f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xec}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa92a}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x45f38c44}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb56}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0x368}, 0x1, 0x0, 0x0, 0x4048000}, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000cc0)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f0000000d40)=0x208, 0x4) ioctl$VIDIOC_ENUM_DV_TIMINGS(r6, 0xc0945662, &(0x7f0000000d80)={0x75c2, 0x0, '\x00', {0x0, @reserved}}) read$FUSE(r6, &(0x7f0000000e40)={0x2020}, 0x2020) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000002e80)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000002ec0)=0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000002f00)={r8, @in6={{0xa, 0x4e20, 0xe0000000, @remote, 0x2}}, 0x400, 0x6}, 0x90) openat(r6, &(0x7f0000002fc0)='./file0\x00', 0x480001, 0x130) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003300), 0x4) executing program 0: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x101, '\x00', r5, 0xffffffffffffffff, 0x2, 0x6}, 0x50) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x80800) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r11, &(0x7f00000000c0)=[{&(0x7f0000000180)='n', 0x1}], 0x1, 0x3) splice(r10, 0x0, r9, 0x0, 0x8000, 0x0) accept4$tipc(r0, 0x0, &(0x7f00000001c0), 0x40800) write$tcp_mem(r0, &(0x7f0000000280)={0x2, 0x20, 0x7f, 0x20, 0xa}, 0x48) r12 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f00000000c0)={0x1, r12}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x2000011, 0x0, 0x52, 0x0, 0x0, 0x0) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') pread64(r13, &(0x7f0000001400)=""/4108, 0x100c, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r14 = syz_usb_connect(0x6, 0x45, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040351201820001010203010902450002010080fa080b0002010020000904000000010120000924010002080900000904010001ff0000000705"], 0x0) syz_usb_control_io(r14, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="a10000000000a60f0ee8a34ee37d2de67cb411cb06f3c408f5849f7492fcb6c75d7cacc8019ab76effa101330b7a26313ff28be5ca69715b932b9c5541be25117de9e83fd6de8b9700"/82], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) rmdir(&(0x7f00000002c0)='./file2\x00') r0 = fanotify_init(0xef0, 0x2) fanotify_mark(r0, 0x105, 0x40009965, 0xffffffffffffffff, 0x0) executing program 1: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x40}, 0xc) setns(0xc9, 0x0) r1 = socket(0x8, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000007640)) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000080)) executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000f80)={0x14, &(0x7f0000000ec0)={0x20, 0xad8a5354353639bf, 0x53, {0x53, 0x23, "e3ad1ea9b1d2a286c267fe1fe1ab9c9daefb5dbb8affa41916dd9de65558e845b601f07a79cb1cb2cff7e338ba06508c7e36dbcef0cad0a85d198971fbebeb4a5cefc0c858240b283d474f3cf9589f0225"}}, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001280)={0x44, &(0x7f0000000fc0)={0x0, 0x16, 0xbb, "7a122eeb9d25687880b6faf5aefdb4299f436e43dcb78ea1bdc2e1a150bee0e6c7bfbbf54b9c4f4222244d781fc5c42ce96663c57fb48a1f7432174b836cbb284da0c8dc91548c6299b66e965101bd2d4a70a43385ad22ce13e57cc5621a931e65c54b23de10979e1c7c8184edcdcbd6cd53bec6cd71f8fcb8072660a85edf6114fdfd1d95f253898b6706e34e67411aafb50e3e97f4df6d27501fdcc0cf5bfd46c2e83e4127863aada9dd0b414385d9618e6446dfa9b47b14572e"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000001100)={0x0, 0x8, 0x1}, &(0x7f0000001140)={0x20, 0x80, 0x1c, {0x4, 0x1ff, 0x9, 0xf, 0x3, 0xdb0d, 0x5977, 0x9, 0x6, 0xff, 0x0, 0x5}}, &(0x7f0000001180)={0x20, 0x85, 0x4, 0xb}, &(0x7f00000011c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001200)={0x20, 0x87, 0x2}, &(0x7f0000001240)={0x20, 0x89, 0x2, 0x1}}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtclass={0x868, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x83c, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000, 0x0, 0x0, 0x10000}}, @TCA_HTB_RTAB={0x404, 0x4, [0x9, 0x4, 0x7, 0x8, 0x11c86bdd, 0x48, 0x1, 0xb1, 0xffff, 0xc, 0x2, 0x1, 0x3, 0x2, 0x1ff, 0x8, 0x1, 0x401, 0x5, 0x0, 0x7fffffff, 0xff, 0x5, 0x5, 0x8, 0x4, 0x3, 0x8cc, 0xffffff7f, 0xf, 0x1, 0x8, 0x2488f245, 0xf8, 0xff, 0xd, 0x7fff, 0x7, 0x3, 0x5, 0x60000, 0x386, 0xb43, 0x79, 0x80000001, 0x200, 0x2, 0x4, 0x9, 0x80, 0xfffffff9, 0x7fffffff, 0x40, 0xd18, 0x0, 0xe, 0x7ff, 0x9, 0x7, 0x1dd, 0x6, 0x0, 0xc, 0x4, 0x6, 0x4, 0x3, 0x8, 0x2, 0x8, 0x80, 0xff, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x7, 0x3, 0xffff, 0x30, 0xa, 0xce, 0xffffffff, 0x2, 0x2, 0x1328, 0xfffffffb, 0x4, 0x2, 0x9, 0x2, 0x4, 0x8, 0xcf25, 0x0, 0xf29, 0xa, 0xfffffff9, 0xa, 0xa, 0x4, 0x800, 0x8, 0x1000, 0x2, 0xfffffffb, 0x1, 0x474, 0x3, 0x1, 0xfffffffc, 0x7, 0x9, 0x3, 0x2, 0x7, 0x764, 0xfffffde3, 0x7, 0x80, 0x2, 0x3632, 0x48, 0x4, 0xd4e, 0x4, 0x907, 0x3ff, 0x2, 0x4, 0x7, 0x401, 0x80, 0x80000001, 0x5, 0x1ff, 0x100, 0x6, 0x6, 0x649, 0xfffffffa, 0x1, 0x6, 0xfffffffe, 0xdb, 0x10000, 0x80000000, 0x1, 0xffff, 0x100, 0x4, 0x6, 0x3, 0x10, 0x902, 0x10, 0x0, 0x6, 0x80000, 0x0, 0x7, 0x0, 0x4, 0x6a82, 0x1, 0x6, 0x0, 0x7, 0x248, 0x7fff, 0x37, 0x5, 0x6, 0x43, 0x949, 0xffffffff, 0x8, 0xb, 0x0, 0x9, 0x0, 0x1, 0x1, 0x6, 0x2, 0x8, 0x4, 0x5, 0x5a69, 0x1, 0x1, 0x55, 0x1, 0x2, 0x8, 0x5, 0x55d, 0x7fffffff, 0x8001, 0x6, 0x81, 0xe752, 0xf59, 0x4c8, 0x7, 0x10, 0x1, 0xb5e, 0x2, 0x2, 0x1, 0x5, 0x697, 0xc, 0x3, 0x6, 0x4, 0x66a6000, 0xc, 0x5, 0x400, 0xd058, 0x6, 0x1, 0x3, 0x1, 0x4, 0x7b, 0x5, 0x8, 0x7, 0x1, 0xf, 0x3, 0x3, 0x7, 0x63e4, 0x7, 0xb0e, 0x401, 0x4, 0x10001, 0x2, 0x7fffffff, 0x800, 0x8, 0xe0, 0x1, 0x2, 0x8000, 0x7f, 0xfd4d, 0x1, 0x9, 0x9]}, @TCA_HTB_CTAB={0x404, 0x3, [0x3, 0xffffffff, 0x7, 0xff, 0x1000, 0x0, 0x0, 0x9, 0x4ae042e5, 0x8, 0xff, 0x4, 0x800, 0x80000000, 0x4, 0x9, 0x10001, 0x0, 0xf78, 0x6, 0x10, 0x190, 0x7, 0x4, 0x835a, 0x3, 0x5, 0x0, 0x5, 0x8, 0x4, 0x9e2, 0x3, 0xfffffff9, 0x7, 0xfff, 0x1000, 0x3, 0x5, 0x100, 0xfff, 0x40, 0x2, 0x400, 0x69a, 0x6, 0x9, 0x1d, 0x0, 0x4e1b, 0x8c, 0xb, 0x8, 0x9, 0x7ff, 0x0, 0x3, 0x400, 0xec, 0x7, 0xe, 0x1, 0x8d, 0x4, 0x2, 0x2, 0x7, 0x3, 0x4, 0x9, 0x9, 0xfffffffe, 0x1, 0x0, 0xd7, 0xc, 0xf, 0x4, 0x6, 0x5, 0x4607, 0x0, 0x3, 0xd32, 0xfffffffc, 0x6, 0x4c87, 0x70, 0x40, 0x2, 0x0, 0xd, 0x2, 0x9a17, 0x4, 0x3, 0x8, 0xfffffffa, 0x9e9f, 0x0, 0x7f, 0xffff, 0xffffff01, 0x8, 0x8, 0x1, 0x101, 0x6, 0x449b4ba5, 0x1, 0x4, 0xfffffffd, 0x200, 0x1, 0x5, 0xffffffff, 0xa9, 0xb, 0x0, 0x0, 0x4a7, 0x3, 0xbc8, 0x0, 0x9f, 0xfffffff7, 0x5, 0x5, 0x100, 0x9, 0xffffffff, 0x7, 0xa, 0x8, 0x7fffffff, 0x4, 0x7f, 0x200, 0x8, 0x4, 0x200, 0x800, 0x8001, 0x8, 0x3, 0x0, 0x7, 0xee, 0x7, 0x7, 0x8001, 0xfffffffb, 0x1c, 0x1, 0x8001, 0x1, 0x2, 0xd, 0x7, 0xcf3, 0x2, 0x4, 0x9, 0x1, 0xfffffb0e, 0x10001, 0x3, 0x6, 0x80, 0x3b3, 0x4, 0x7f, 0x9, 0x5, 0xecc, 0x4, 0x7, 0x7, 0x2, 0x6, 0xbf7, 0xc2, 0x9, 0x8, 0x7, 0x6000, 0x3, 0x2, 0x7f, 0x4, 0x4, 0x5, 0xffff, 0xde, 0x2, 0x4, 0x788f77b1, 0x4, 0x6, 0xffffff80, 0x0, 0x0, 0x3, 0x7, 0x4, 0x17e9, 0x6, 0x6, 0x675, 0xd, 0x4, 0x5, 0xf, 0x2, 0x80000001, 0x8, 0x7fffffff, 0x6, 0x400, 0xe081, 0x1, 0x7f, 0x8, 0x4, 0x1, 0x8, 0x6, 0xb0, 0x3, 0x8, 0x9, 0xd, 0x81, 0x6, 0x400, 0x4, 0x80, 0x80000001, 0x3, 0x7c, 0x2, 0x400, 0x8000, 0xffffffff, 0xdcd, 0x4, 0x10, 0xffff887b, 0x101, 0x25a0, 0x80, 0x1, 0xffffffff, 0x2, 0x5, 0x8]}]}}]}, 0x868}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x2a, 0x4101, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r2, 0x0, 0xffffffbfffff8000, 0x8) close(r8) syz_usb_control_io$lan78xx(r0, &(0x7f0000000140)={0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="00040f0000000f039825ffff2ed007005571bb98e1031e40bb06"], &(0x7f0000000080)={0x0, 0x3, 0x76, @string={0x76, 0x3, "6aa81a3b6227c1c6ebc8d9fe24d07a27df5d54f10265d6d7ebd36d0851144ee1c23c3baa3351be1f5ccd8b9c70e21cc86797fea821392e885cfccdc19d9d96a5728d6c011bd0011731d01d2c826f22c6b27a38fc0b9153f2091528576584e124967d9320e854586d0dd8295a416a12dccd041eea"}}}, &(0x7f0000000300)={0x34, &(0x7f0000000180)={0x40, 0x13, 0x15, "eddfda89a153085f3856d4df04965942e11b0784a7"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000240)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000000280)={0x40, 0xa0, 0x4, 0x9}, &(0x7f00000002c0)={0xc0, 0xa2, 0x2f, "f99e09f1ce60240f1a3710c71d4de3f909237e3b3a8e6cb34861f5740ff1ae7970e68a3f55db9346dca68822ebad8f"}}) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x54c, 0xba0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x91, 0x0, 0x5, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x0, 0xc8, 0x1, {0x22, 0xe13}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x2}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0xf, 0x48, 0x82, 0x8, 0x10}, 0x3b, &(0x7f0000000480)={0x5, 0xf, 0x3b, 0x4, [@ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x1, 0xff00, 0x6, [0xff000f, 0x3f0f, 0xff0030]}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x6, 0x0, 0x9, [0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x8, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0x1, 0x7f}]}, 0x2, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x408}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) syz_open_dev$video4linux(&(0x7f00000001c0), 0xffc, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) r1 = socket$inet6(0xa, 0x800, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b000000000001190780000000000001cdbb42b4e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af5844cc579a4e8cc52243efa8698d0a881c51852e4424251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461c2aa2f19935e6996c7096ffeeb03000000000000649a3bfbc0d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af6e8dafe0900"/190], 0x0) recvmsg(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0xd62, 0x4) syz_emit_ethernet(0x6b, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x31, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x3, 0x5, "45154184d900be79599ddcffb1fa373b586623ce6f244518cbae2cdcf97dc32403f90baed01e21"}]}}}}}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f0000000200)=0x4, 0x4) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) setgroups(0x1, &(0x7f0000000400)=[0xffffffffffffffff]) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000680)="7573a0f680b323d7a1faecf9503b290f3e81e9eaf4164d652ae8ffa9c2c59fce802f8a6b6c868b8af22d2c7a7b2e1f16670e8edcc0b14d176c650600a119de04a595515f3e373a8cfb53dd8cc843c8effcc5d4d52bfc1921ae06f5ad82b688ab28cfad574de4d40c2ea07bbd2b0e79dc47c70e54e8373f8afdd8f0fb1ce168ce19e14c7e50d800d51a556e425d18cde7d9c2a3a2580506c2f1c19bf3e25eaa781a919e9aba1f88b5ad66c3d23c59ba29ff6edce1d06c0ddc448fd91b35576841ea054d4af54e4dc9f0c69cc6922b5c082172a28208e35801cd4e00460000000000", 0xe1) ioctl$CEC_RECEIVE(r4, 0xc0386106, &(0x7f0000000340)={0x3, 0x590c, 0x6, 0x6, 0x65, 0xfffffffe, "3d33e420e2fd24b234d8f6217cadfcec", 0x6, 0xb, 0xb, 0xd, 0x2, 0x2, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000008c40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000008d00)={0x0, 0x0, &(0x7f0000008cc0)={&(0x7f0000008c80)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000000c0)) executing program 5: syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x40, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf251000000008000700000000001800018014000200776c616e310000000000000000000000080008"], 0x3c}}, 0x0) executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="153780ca192407000000232c25a81003", 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$dri(0x0, 0x202, 0x521941) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x191041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000008c0)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, 0x0) syz_create_resource$binfmt(&(0x7f0000000240)='./dev\x00') sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRES64=r1, @ANYBLOB="080002", @ANYRES16=r0, @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x480c4) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000080)={0x1, 0x2, {0x3, 0x0, 0x0, 0xa, 0x0, 0x64}}) preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000040)=""/4, 0x4}], 0x1, 0x1, 0x4) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$SMC_PNETID_DEL(r6, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000002345f3870000000005000000850000002e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x9, 0x0, &(0x7f0000002040)) r1 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/instances/inst1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r6, 0x100000000) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) poll(&(0x7f0000000040)=[{r7, 0x8006}], 0x1, 0xfffffff9) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000980)={0x2, @win={{0x4, 0x7, 0x33565348, 0x40}, 0x2, 0xc, 0x0, 0xd, 0x0, 0x8}}) syz_io_uring_setup(0xefa, &(0x7f0000000400)={0x0, 0x85c9, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000000c0)) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0xc052) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000880010002000000ffff000005"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002200)={0x10, 0x0, r2}, 0x10) syz_emit_ethernet(0x19, &(0x7f00000001c0)={@link_local, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@x25={0x8100, {0x2, 0x0, 0xfb}}}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="89e09c681900100029bd7000fddbdf251c202007ff05ff0b000600000800010000000000"], 0x24}}, 0x0) cachestat(r0, &(0x7f0000000180)={0x8, 0x3}, &(0x7f0000000340), 0x0) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x7, 0x1000, 0x4, 0xffffffff}}) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8, 0x10000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000200)={0xb, 0x87}) executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000380)={0x9, 0x4000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x84201, 0x0) openat(0xffffffffffffffff, 0x0, 0x246101, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x216, 0x141102) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x183242) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="00000000000017004e9bfa26e0391e0adfbeefa38d549910a43fef125e13bf2e4b69cf03d70386b9ffab6e0d4ec13db52d959a67decd70bb242c49f6372a2dfe6262e5b0fc0a849f69b5baa3ed9acee5c536f7372d563bbf959b3e2560d1be7bd94085cdcc956ac8887cd78f8866fb2bd969117cfc11ee35ed0290449f9f4cea9b9185b8c64d9f213964dece7e5e720df4ad49882bbc81ba43ea1917b716c8c67cf962c6e1858cda42cbc1e8ee9d30766353f5a251bc0def44f2db0d98fc6c573a1e3fa2d40eca963d4c210692e2ef0dc6887ebb0fe2", @ANYRESHEX=r2, @ANYBLOB=',\x00']) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r5, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40802) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x488580, 0x0) executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x474c, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x68, 0x24, 0xe0b, 0x70bd25, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$inet(r3, &(0x7f0000001b40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010101, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x40}}], 0x1, 0xc0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000000)=0x5d81, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x3, 0x10}, 0xc) r7 = dup(r0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000140)={0xa, 0x4}, 0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) socket$inet_sctp(0x2, 0x1, 0x84) executing program 3: read(0xffffffffffffffff, 0x0, 0x20) utime(0x0, 0xfffffffffffffffc) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000"], 0x7c}}, 0x4004850) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x101041) write$sndseq(r2, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x2000000000000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) socket(0x1f, 0x6, 0x800000) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x20000084) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) rmdir(&(0x7f00000002c0)='./file2\x00') r0 = fanotify_init(0xef0, 0x2) fanotify_mark(r0, 0x105, 0x40009965, 0xffffffffffffffff, 0x0) executing program 0: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x101, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x80000001, 0x8001, {0x0}, {0xee00}, 0x10001, 0x663}) prlimit64(r0, 0x2, &(0x7f0000000080)={0x100000000}, &(0x7f00000000c0)) syz_usb_connect$uac2(0x2, 0x83, &(0x7f00000018c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0x6, 0x80, 0x7c, {0x8, 0xb, 0x0, 0x2, 0x1, 0x3, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x2, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x80, 0x7, {0x8, 0x25, 0x1, 0x0, 0x18, 0x2, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xb, 0x4, 0xf7, 0x39}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x4, 0x5, {0x8, 0x25, 0x1, 0x81, 0x3, 0x2}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x1d, 0x0}) (async) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) (rerun: 64) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) (async) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000100)={"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"}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) lsm_set_self_attr(0x64, &(0x7f0000000540)={0x6b, 0x8000000000000001, 0x20}, 0x20, 0x0) (async) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x40000000, 0x1980000}], 0x0) executing program 5: socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x44801, 0x180) fcntl$notify(r0, 0x402, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x80000000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x44014) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) eventfd2(0x5, 0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x400000002, 0x1e1102) writev(r2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000c881}, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r6, 0x802000, r4}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) executing program 0: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) chdir(&(0x7f0000000540)='./cgroup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, 0xffffffffffffffff, 0x3a, 0x0, @val=@tcx}, 0x1c) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0x400c4d07, &(0x7f0000000a00)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync bisect: the chunk can be dropped bisect: testing without sub-chunk 2/3 testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 30, 25, 16, 25, 30, 23, 6, 14, 18, 30, 29, 14] detailed listing: executing program 5: syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x40, 0x20002, 0x1e2}, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf251000000008000700000000001800018014000200776c616e310000000000000000000000080008"], 0x3c}}, 0x0) executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="153780ca192407000000232c25a81003", 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$dri(0x0, 0x202, 0x521941) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x191041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000008c0)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, 0x0) syz_create_resource$binfmt(&(0x7f0000000240)='./dev\x00') sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRES64=r1, @ANYBLOB="080002", @ANYRES16=r0, @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x480c4) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000080)={0x1, 0x2, {0x3, 0x0, 0x0, 0xa, 0x0, 0x64}}) preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000040)=""/4, 0x4}], 0x1, 0x1, 0x4) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$SMC_PNETID_DEL(r6, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000002345f3870000000005000000850000002e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x9, 0x0, &(0x7f0000002040)) r1 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/instances/inst1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r6, 0x100000000) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) poll(&(0x7f0000000040)=[{r7, 0x8006}], 0x1, 0xfffffff9) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000980)={0x2, @win={{0x4, 0x7, 0x33565348, 0x40}, 0x2, 0xc, 0x0, 0xd, 0x0, 0x8}}) syz_io_uring_setup(0xefa, &(0x7f0000000400)={0x0, 0x85c9, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000000c0)) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0xc052) executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000880010002000000ffff000005"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002200)={0x10, 0x0, r2}, 0x10) syz_emit_ethernet(0x19, &(0x7f00000001c0)={@link_local, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@x25={0x8100, {0x2, 0x0, 0xfb}}}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="89e09c681900100029bd7000fddbdf251c202007ff05ff0b000600000800010000000000"], 0x24}}, 0x0) cachestat(r0, &(0x7f0000000180)={0x8, 0x3}, &(0x7f0000000340), 0x0) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x7, 0x1000, 0x4, 0xffffffff}}) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8, 0x10000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000200)={0xb, 0x87}) executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000380)={0x9, 0x4000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x84201, 0x0) openat(0xffffffffffffffff, 0x0, 0x246101, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x216, 0x141102) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x183242) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="00000000000017004e9bfa26e0391e0adfbeefa38d549910a43fef125e13bf2e4b69cf03d70386b9ffab6e0d4ec13db52d959a67decd70bb242c49f6372a2dfe6262e5b0fc0a849f69b5baa3ed9acee5c536f7372d563bbf959b3e2560d1be7bd94085cdcc956ac8887cd78f8866fb2bd969117cfc11ee35ed0290449f9f4cea9b9185b8c64d9f213964dece7e5e720df4ad49882bbc81ba43ea1917b716c8c67cf962c6e1858cda42cbc1e8ee9d30766353f5a251bc0def44f2db0d98fc6c573a1e3fa2d40eca963d4c210692e2ef0dc6887ebb0fe2", @ANYRESHEX=r2, @ANYBLOB=',\x00']) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r5, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40802) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x488580, 0x0) executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x474c, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x68, 0x24, 0xe0b, 0x70bd25, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$inet(r3, &(0x7f0000001b40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010101, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x40}}], 0x1, 0xc0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000000)=0x5d81, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x3, 0x10}, 0xc) r7 = dup(r0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000140)={0xa, 0x4}, 0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) socket$inet_sctp(0x2, 0x1, 0x84) executing program 3: read(0xffffffffffffffff, 0x0, 0x20) utime(0x0, 0xfffffffffffffffc) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000"], 0x7c}}, 0x4004850) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x101041) write$sndseq(r2, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x2000000000000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) socket(0x1f, 0x6, 0x800000) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x20000084) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) rmdir(&(0x7f00000002c0)='./file2\x00') r0 = fanotify_init(0xef0, 0x2) fanotify_mark(r0, 0x105, 0x40009965, 0xffffffffffffffff, 0x0) executing program 0: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x101, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x80000001, 0x8001, {0x0}, {0xee00}, 0x10001, 0x663}) prlimit64(r0, 0x2, &(0x7f0000000080)={0x100000000}, &(0x7f00000000c0)) syz_usb_connect$uac2(0x2, 0x83, &(0x7f00000018c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0x6, 0x80, 0x7c, {0x8, 0xb, 0x0, 0x2, 0x1, 0x3, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x2, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x80, 0x7, {0x8, 0x25, 0x1, 0x0, 0x18, 0x2, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xb, 0x4, 0xf7, 0x39}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x4, 0x5, {0x8, 0x25, 0x1, 0x81, 0x3, 0x2}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x1d, 0x0}) (async) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) (rerun: 64) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) (async) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000100)={"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"}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) lsm_set_self_attr(0x64, &(0x7f0000000540)={0x6b, 0x8000000000000001, 0x20}, 0x20, 0x0) (async) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x40000000, 0x1980000}], 0x0) executing program 5: socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x44801, 0x180) fcntl$notify(r0, 0x402, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x80000000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x44014) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) eventfd2(0x5, 0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x400000002, 0x1e1102) writev(r2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000c881}, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r6, 0x802000, r4}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) executing program 0: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) chdir(&(0x7f0000000540)='./cgroup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, 0xffffffffffffffff, 0x3a, 0x0, @val=@tcx}, 0x1c) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0x400c4d07, &(0x7f0000000a00)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) program did not crash bisect: testing without sub-chunk 3/3 testing program (duration=1m43s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 30, 29, 30, 3, 30, 14, 30, 6, 6, 21, 30, 29] detailed listing: executing program 3: mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='ceph\x00', 0x208000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0000380004804e2d", @ANYRESDEC=r0], 0x4c}, 0x1, 0x0, 0x0, 0x4048411}, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000020, 0x0, 0xb}]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001140)={0xffffffffffffffff, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0xcf, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x7f, 0x8, 0x8, &(0x7f0000001000)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES8=r0, @ANYRES16], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, @fallback=0x15}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x18000000000002a0, 0x11, 0x0, &(0x7f00000002c0)="000000952ba300"/17, 0x0, 0x6639, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(r0, 0x26, &(0x7f00000001c0)={0x2, 0x3, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$kcm(0x23, 0x5, 0x0) listen(r2, 0x800) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000200)={0x23, 0x0, 0xe7}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="180000006a090000000000000000000000080000000800bc"], 0x18}], 0x1}, 0x2000c0d0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0xd, @pix_mp={0x0, 0x3d, 0x33565348, 0x8, 0x1, [{0x6, 0x4001ff}, {0x7fa07c7e, 0x404}, {0x6, 0xffffffff}, {0x678}, {0x2, 0x6}, {0x2, 0x3}, {0xfffffffd, 0x3}, {0x0, 0x61}], 0x4, 0x0, 0x4, 0x2, 0x2}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl(r8, 0x4048aec9, &(0x7f00000000c0)="03000000000000000100000002") io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0xfffffff7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r9}, 0xc) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) executing program 3: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000300)=""/116, 0x74, 0x0, &(0x7f0000000500)=""/201, 0xc9}}, 0x10) mkdir(&(0x7f0000000080)='./file1\x00', 0xe4) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f25541e6f94401d9e231b4e3e4eed8d0f22bc498e3c0bc6acbc7d4d99489"}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'dummy0\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0xc, 0x9, 0x6, 0x3a}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x3c2, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f770c0000002a9000070900"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x2, &(0x7f0000000000)='BB') lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) symlink(0x0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="12015002009620eefb05a8a4400001e2020109021b00010110000709040000020701020609050102f7037f020f1abc4e95c77bd3624f804c88a83f18bf083b948c882d475a8e13dfd0ce880b"], 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, 0x0, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x60040, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000140)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x81, 0x1, 0xa000200000a958, 0x2000000008, 0x7e07, 0x4, 0x48cd, 0x80000003, 0xd6f}) executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x200}], 0x1, 0x0, 0x0, 0x0) executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x50, "6ad66755f7cf69805782d06f64f3c112c8296260108a4ef5cc4975bd43fbef01bef4313f58b02d67890c8656a5b29b1c5204db3c06e28b6d0c0d6e15ecc378857f0ed9328af56c6fd2d55832d779745c"}, &(0x7f0000000080)=0x58) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1, 0x9}, &(0x7f0000000100)=0x8) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) r3 = syz_open_pts(r2, 0x100) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r4, 0x4008af75, &(0x7f0000000180)={0x1}) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00'}, 0x18) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000240)) r6 = fsmount(0xffffffffffffffff, 0x1, 0x8) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r6, 0x80605414, &(0x7f0000000280)) fchdir(0xffffffffffffffff) write$vhost_msg(r6, &(0x7f0000000500)={0x1, {&(0x7f0000000300)=""/208, 0xd0, &(0x7f0000000400)=""/226, 0x2, 0xca69087fb0990a8a}}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) writev(r4, &(0x7f0000000740)=[{&(0x7f00000005c0)="66baee7880ccf6e4f3dfbd1d745380140749a0bedfbbba47c54c767c3c0ad6cf66794cb2a64581ae4df009c4bc27f93665a7a95cad6f3f2a99296efd2f4eb68ebbefd3b9a1e73dcdd34597ef8e2cf03bad190ca5b9f7eb9a53e11fd175e8a1fc677e1a5d5772b1b235e414a052afd920264974f66e4e7ac5b621a21b513da789e4818796404ffff864a3a181c287dcdf0f047298e15b05e382f877c8b4f6a44eab884f649fbf8e4f67dc3674969f01ff2b3abf5e247b27261de978de98d91bc4dda386e5300dc717fb524aacdfc656526032296337f572e634fe968030c15ba991f86442d67f35322c73037220e5cdeb", 0xf0}, {&(0x7f00000006c0)="1b9e59f5768a35edd86585931466b80f9e10815d4d202b7a3e811f09badda47a9cba65f2d763bcd1b7c395c0adde5e1261dc1ea2ae904ada3dc97ab661a135a3f5d6460bdeaae55a3a4928ba40e7ba87", 0x50}], 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000780)) ioctl$VHOST_VDPA_GET_VRING_NUM(r4, 0x8002af76, &(0x7f00000007c0)) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000800)=0xb0, 0xf95b, 0x6) sendfile(r5, r3, 0x0, 0x101) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000c80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x50010002}, 0xc, &(0x7f0000000c40)={&(0x7f00000008c0)={0x368, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "100ed7d41011078b5f9320e64b5a8a1f7e1e6a0ba8ad0db4888efe6656c4d8dbcec341"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "ec8d3b5e6505fdd54be09d0135b5aa9147ab914aa1b6a6fc0bb40f602417543a9afe6df5"}}]}, @TIPC_NLA_LINK={0x190, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x61}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x24b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbe0e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe63}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x13fe}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1e7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffe00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x58f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xec}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa92a}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x45f38c44}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb56}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0x368}, 0x1, 0x0, 0x0, 0x4048000}, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000cc0)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f0000000d40)=0x208, 0x4) ioctl$VIDIOC_ENUM_DV_TIMINGS(r6, 0xc0945662, &(0x7f0000000d80)={0x75c2, 0x0, '\x00', {0x0, @reserved}}) read$FUSE(r6, &(0x7f0000000e40)={0x2020}, 0x2020) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000002e80)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000002ec0)=0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000002f00)={r8, @in6={{0xa, 0x4e20, 0xe0000000, @remote, 0x2}}, 0x400, 0x6}, 0x90) openat(r6, &(0x7f0000002fc0)='./file0\x00', 0x480001, 0x130) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003300), 0x4) executing program 0: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x101, '\x00', r5, 0xffffffffffffffff, 0x2, 0x6}, 0x50) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x80800) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r11, &(0x7f00000000c0)=[{&(0x7f0000000180)='n', 0x1}], 0x1, 0x3) splice(r10, 0x0, r9, 0x0, 0x8000, 0x0) accept4$tipc(r0, 0x0, &(0x7f00000001c0), 0x40800) write$tcp_mem(r0, &(0x7f0000000280)={0x2, 0x20, 0x7f, 0x20, 0xa}, 0x48) r12 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f00000000c0)={0x1, r12}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x2000011, 0x0, 0x52, 0x0, 0x0, 0x0) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') pread64(r13, &(0x7f0000001400)=""/4108, 0x100c, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r14 = syz_usb_connect(0x6, 0x45, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040351201820001010203010902450002010080fa080b0002010020000904000000010120000924010002080900000904010001ff0000000705"], 0x0) syz_usb_control_io(r14, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="a10000000000a60f0ee8a34ee37d2de67cb411cb06f3c408f5849f7492fcb6c75d7cacc8019ab76effa101330b7a26313ff28be5ca69715b932b9c5541be25117de9e83fd6de8b9700"/82], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) rmdir(&(0x7f00000002c0)='./file2\x00') r0 = fanotify_init(0xef0, 0x2) fanotify_mark(r0, 0x105, 0x40009965, 0xffffffffffffffff, 0x0) executing program 1: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x40}, 0xc) setns(0xc9, 0x0) r1 = socket(0x8, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000007640)) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000080)) executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000f80)={0x14, &(0x7f0000000ec0)={0x20, 0xad8a5354353639bf, 0x53, {0x53, 0x23, "e3ad1ea9b1d2a286c267fe1fe1ab9c9daefb5dbb8affa41916dd9de65558e845b601f07a79cb1cb2cff7e338ba06508c7e36dbcef0cad0a85d198971fbebeb4a5cefc0c858240b283d474f3cf9589f0225"}}, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001280)={0x44, &(0x7f0000000fc0)={0x0, 0x16, 0xbb, "7a122eeb9d25687880b6faf5aefdb4299f436e43dcb78ea1bdc2e1a150bee0e6c7bfbbf54b9c4f4222244d781fc5c42ce96663c57fb48a1f7432174b836cbb284da0c8dc91548c6299b66e965101bd2d4a70a43385ad22ce13e57cc5621a931e65c54b23de10979e1c7c8184edcdcbd6cd53bec6cd71f8fcb8072660a85edf6114fdfd1d95f253898b6706e34e67411aafb50e3e97f4df6d27501fdcc0cf5bfd46c2e83e4127863aada9dd0b414385d9618e6446dfa9b47b14572e"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000001100)={0x0, 0x8, 0x1}, &(0x7f0000001140)={0x20, 0x80, 0x1c, {0x4, 0x1ff, 0x9, 0xf, 0x3, 0xdb0d, 0x5977, 0x9, 0x6, 0xff, 0x0, 0x5}}, &(0x7f0000001180)={0x20, 0x85, 0x4, 0xb}, &(0x7f00000011c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001200)={0x20, 0x87, 0x2}, &(0x7f0000001240)={0x20, 0x89, 0x2, 0x1}}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtclass={0x868, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x83c, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000, 0x0, 0x0, 0x10000}}, @TCA_HTB_RTAB={0x404, 0x4, [0x9, 0x4, 0x7, 0x8, 0x11c86bdd, 0x48, 0x1, 0xb1, 0xffff, 0xc, 0x2, 0x1, 0x3, 0x2, 0x1ff, 0x8, 0x1, 0x401, 0x5, 0x0, 0x7fffffff, 0xff, 0x5, 0x5, 0x8, 0x4, 0x3, 0x8cc, 0xffffff7f, 0xf, 0x1, 0x8, 0x2488f245, 0xf8, 0xff, 0xd, 0x7fff, 0x7, 0x3, 0x5, 0x60000, 0x386, 0xb43, 0x79, 0x80000001, 0x200, 0x2, 0x4, 0x9, 0x80, 0xfffffff9, 0x7fffffff, 0x40, 0xd18, 0x0, 0xe, 0x7ff, 0x9, 0x7, 0x1dd, 0x6, 0x0, 0xc, 0x4, 0x6, 0x4, 0x3, 0x8, 0x2, 0x8, 0x80, 0xff, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x7, 0x3, 0xffff, 0x30, 0xa, 0xce, 0xffffffff, 0x2, 0x2, 0x1328, 0xfffffffb, 0x4, 0x2, 0x9, 0x2, 0x4, 0x8, 0xcf25, 0x0, 0xf29, 0xa, 0xfffffff9, 0xa, 0xa, 0x4, 0x800, 0x8, 0x1000, 0x2, 0xfffffffb, 0x1, 0x474, 0x3, 0x1, 0xfffffffc, 0x7, 0x9, 0x3, 0x2, 0x7, 0x764, 0xfffffde3, 0x7, 0x80, 0x2, 0x3632, 0x48, 0x4, 0xd4e, 0x4, 0x907, 0x3ff, 0x2, 0x4, 0x7, 0x401, 0x80, 0x80000001, 0x5, 0x1ff, 0x100, 0x6, 0x6, 0x649, 0xfffffffa, 0x1, 0x6, 0xfffffffe, 0xdb, 0x10000, 0x80000000, 0x1, 0xffff, 0x100, 0x4, 0x6, 0x3, 0x10, 0x902, 0x10, 0x0, 0x6, 0x80000, 0x0, 0x7, 0x0, 0x4, 0x6a82, 0x1, 0x6, 0x0, 0x7, 0x248, 0x7fff, 0x37, 0x5, 0x6, 0x43, 0x949, 0xffffffff, 0x8, 0xb, 0x0, 0x9, 0x0, 0x1, 0x1, 0x6, 0x2, 0x8, 0x4, 0x5, 0x5a69, 0x1, 0x1, 0x55, 0x1, 0x2, 0x8, 0x5, 0x55d, 0x7fffffff, 0x8001, 0x6, 0x81, 0xe752, 0xf59, 0x4c8, 0x7, 0x10, 0x1, 0xb5e, 0x2, 0x2, 0x1, 0x5, 0x697, 0xc, 0x3, 0x6, 0x4, 0x66a6000, 0xc, 0x5, 0x400, 0xd058, 0x6, 0x1, 0x3, 0x1, 0x4, 0x7b, 0x5, 0x8, 0x7, 0x1, 0xf, 0x3, 0x3, 0x7, 0x63e4, 0x7, 0xb0e, 0x401, 0x4, 0x10001, 0x2, 0x7fffffff, 0x800, 0x8, 0xe0, 0x1, 0x2, 0x8000, 0x7f, 0xfd4d, 0x1, 0x9, 0x9]}, @TCA_HTB_CTAB={0x404, 0x3, [0x3, 0xffffffff, 0x7, 0xff, 0x1000, 0x0, 0x0, 0x9, 0x4ae042e5, 0x8, 0xff, 0x4, 0x800, 0x80000000, 0x4, 0x9, 0x10001, 0x0, 0xf78, 0x6, 0x10, 0x190, 0x7, 0x4, 0x835a, 0x3, 0x5, 0x0, 0x5, 0x8, 0x4, 0x9e2, 0x3, 0xfffffff9, 0x7, 0xfff, 0x1000, 0x3, 0x5, 0x100, 0xfff, 0x40, 0x2, 0x400, 0x69a, 0x6, 0x9, 0x1d, 0x0, 0x4e1b, 0x8c, 0xb, 0x8, 0x9, 0x7ff, 0x0, 0x3, 0x400, 0xec, 0x7, 0xe, 0x1, 0x8d, 0x4, 0x2, 0x2, 0x7, 0x3, 0x4, 0x9, 0x9, 0xfffffffe, 0x1, 0x0, 0xd7, 0xc, 0xf, 0x4, 0x6, 0x5, 0x4607, 0x0, 0x3, 0xd32, 0xfffffffc, 0x6, 0x4c87, 0x70, 0x40, 0x2, 0x0, 0xd, 0x2, 0x9a17, 0x4, 0x3, 0x8, 0xfffffffa, 0x9e9f, 0x0, 0x7f, 0xffff, 0xffffff01, 0x8, 0x8, 0x1, 0x101, 0x6, 0x449b4ba5, 0x1, 0x4, 0xfffffffd, 0x200, 0x1, 0x5, 0xffffffff, 0xa9, 0xb, 0x0, 0x0, 0x4a7, 0x3, 0xbc8, 0x0, 0x9f, 0xfffffff7, 0x5, 0x5, 0x100, 0x9, 0xffffffff, 0x7, 0xa, 0x8, 0x7fffffff, 0x4, 0x7f, 0x200, 0x8, 0x4, 0x200, 0x800, 0x8001, 0x8, 0x3, 0x0, 0x7, 0xee, 0x7, 0x7, 0x8001, 0xfffffffb, 0x1c, 0x1, 0x8001, 0x1, 0x2, 0xd, 0x7, 0xcf3, 0x2, 0x4, 0x9, 0x1, 0xfffffb0e, 0x10001, 0x3, 0x6, 0x80, 0x3b3, 0x4, 0x7f, 0x9, 0x5, 0xecc, 0x4, 0x7, 0x7, 0x2, 0x6, 0xbf7, 0xc2, 0x9, 0x8, 0x7, 0x6000, 0x3, 0x2, 0x7f, 0x4, 0x4, 0x5, 0xffff, 0xde, 0x2, 0x4, 0x788f77b1, 0x4, 0x6, 0xffffff80, 0x0, 0x0, 0x3, 0x7, 0x4, 0x17e9, 0x6, 0x6, 0x675, 0xd, 0x4, 0x5, 0xf, 0x2, 0x80000001, 0x8, 0x7fffffff, 0x6, 0x400, 0xe081, 0x1, 0x7f, 0x8, 0x4, 0x1, 0x8, 0x6, 0xb0, 0x3, 0x8, 0x9, 0xd, 0x81, 0x6, 0x400, 0x4, 0x80, 0x80000001, 0x3, 0x7c, 0x2, 0x400, 0x8000, 0xffffffff, 0xdcd, 0x4, 0x10, 0xffff887b, 0x101, 0x25a0, 0x80, 0x1, 0xffffffff, 0x2, 0x5, 0x8]}]}}]}, 0x868}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x2a, 0x4101, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r2, 0x0, 0xffffffbfffff8000, 0x8) close(r8) syz_usb_control_io$lan78xx(r0, &(0x7f0000000140)={0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="00040f0000000f039825ffff2ed007005571bb98e1031e40bb06"], &(0x7f0000000080)={0x0, 0x3, 0x76, @string={0x76, 0x3, "6aa81a3b6227c1c6ebc8d9fe24d07a27df5d54f10265d6d7ebd36d0851144ee1c23c3baa3351be1f5ccd8b9c70e21cc86797fea821392e885cfccdc19d9d96a5728d6c011bd0011731d01d2c826f22c6b27a38fc0b9153f2091528576584e124967d9320e854586d0dd8295a416a12dccd041eea"}}}, &(0x7f0000000300)={0x34, &(0x7f0000000180)={0x40, 0x13, 0x15, "eddfda89a153085f3856d4df04965942e11b0784a7"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000240)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000000280)={0x40, 0xa0, 0x4, 0x9}, &(0x7f00000002c0)={0xc0, 0xa2, 0x2f, "f99e09f1ce60240f1a3710c71d4de3f909237e3b3a8e6cb34861f5740ff1ae7970e68a3f55db9346dca68822ebad8f"}}) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x54c, 0xba0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x91, 0x0, 0x5, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x0, 0xc8, 0x1, {0x22, 0xe13}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x2}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0xf, 0x48, 0x82, 0x8, 0x10}, 0x3b, &(0x7f0000000480)={0x5, 0xf, 0x3b, 0x4, [@ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x1, 0xff00, 0x6, [0xff000f, 0x3f0f, 0xff0030]}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x6, 0x0, 0x9, [0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x8, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0x1, 0x7f}]}, 0x2, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x408}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) syz_open_dev$video4linux(&(0x7f00000001c0), 0xffc, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) r1 = socket$inet6(0xa, 0x800, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b000000000001190780000000000001cdbb42b4e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af5844cc579a4e8cc52243efa8698d0a881c51852e4424251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461c2aa2f19935e6996c7096ffeeb03000000000000649a3bfbc0d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af6e8dafe0900"/190], 0x0) recvmsg(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0xd62, 0x4) syz_emit_ethernet(0x6b, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x31, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x3, 0x5, "45154184d900be79599ddcffb1fa373b586623ce6f244518cbae2cdcf97dc32403f90baed01e21"}]}}}}}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f0000000200)=0x4, 0x4) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) setgroups(0x1, &(0x7f0000000400)=[0xffffffffffffffff]) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000680)="7573a0f680b323d7a1faecf9503b290f3e81e9eaf4164d652ae8ffa9c2c59fce802f8a6b6c868b8af22d2c7a7b2e1f16670e8edcc0b14d176c650600a119de04a595515f3e373a8cfb53dd8cc843c8effcc5d4d52bfc1921ae06f5ad82b688ab28cfad574de4d40c2ea07bbd2b0e79dc47c70e54e8373f8afdd8f0fb1ce168ce19e14c7e50d800d51a556e425d18cde7d9c2a3a2580506c2f1c19bf3e25eaa781a919e9aba1f88b5ad66c3d23c59ba29ff6edce1d06c0ddc448fd91b35576841ea054d4af54e4dc9f0c69cc6922b5c082172a28208e35801cd4e00460000000000", 0xe1) ioctl$CEC_RECEIVE(r4, 0xc0386106, &(0x7f0000000340)={0x3, 0x590c, 0x6, 0x6, 0x65, 0xfffffffe, "3d33e420e2fd24b234d8f6217cadfcec", 0x6, 0xb, 0xb, 0xd, 0x2, 0x2, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000008c40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000008d00)={0x0, 0x0, &(0x7f0000008cc0)={&(0x7f0000008c80)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000000c0)) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync bisect: the chunk can be dropped bisect: split chunks (needed=true): <12> bisect: split chunk #0 of len 12 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 30, 6, 6, 21, 30, 29] detailed listing: executing program 0: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x101, '\x00', r5, 0xffffffffffffffff, 0x2, 0x6}, 0x50) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x80800) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r11, &(0x7f00000000c0)=[{&(0x7f0000000180)='n', 0x1}], 0x1, 0x3) splice(r10, 0x0, r9, 0x0, 0x8000, 0x0) accept4$tipc(r0, 0x0, &(0x7f00000001c0), 0x40800) write$tcp_mem(r0, &(0x7f0000000280)={0x2, 0x20, 0x7f, 0x20, 0xa}, 0x48) r12 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f00000000c0)={0x1, r12}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x2000011, 0x0, 0x52, 0x0, 0x0, 0x0) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') pread64(r13, &(0x7f0000001400)=""/4108, 0x100c, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r14 = syz_usb_connect(0x6, 0x45, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040351201820001010203010902450002010080fa080b0002010020000904000000010120000924010002080900000904010001ff0000000705"], 0x0) syz_usb_control_io(r14, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="a10000000000a60f0ee8a34ee37d2de67cb411cb06f3c408f5849f7492fcb6c75d7cacc8019ab76effa101330b7a26313ff28be5ca69715b932b9c5541be25117de9e83fd6de8b9700"/82], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) rmdir(&(0x7f00000002c0)='./file2\x00') r0 = fanotify_init(0xef0, 0x2) fanotify_mark(r0, 0x105, 0x40009965, 0xffffffffffffffff, 0x0) executing program 1: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x40}, 0xc) setns(0xc9, 0x0) r1 = socket(0x8, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000007640)) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000080)) executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000f80)={0x14, &(0x7f0000000ec0)={0x20, 0xad8a5354353639bf, 0x53, {0x53, 0x23, "e3ad1ea9b1d2a286c267fe1fe1ab9c9daefb5dbb8affa41916dd9de65558e845b601f07a79cb1cb2cff7e338ba06508c7e36dbcef0cad0a85d198971fbebeb4a5cefc0c858240b283d474f3cf9589f0225"}}, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001280)={0x44, &(0x7f0000000fc0)={0x0, 0x16, 0xbb, "7a122eeb9d25687880b6faf5aefdb4299f436e43dcb78ea1bdc2e1a150bee0e6c7bfbbf54b9c4f4222244d781fc5c42ce96663c57fb48a1f7432174b836cbb284da0c8dc91548c6299b66e965101bd2d4a70a43385ad22ce13e57cc5621a931e65c54b23de10979e1c7c8184edcdcbd6cd53bec6cd71f8fcb8072660a85edf6114fdfd1d95f253898b6706e34e67411aafb50e3e97f4df6d27501fdcc0cf5bfd46c2e83e4127863aada9dd0b414385d9618e6446dfa9b47b14572e"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000001100)={0x0, 0x8, 0x1}, &(0x7f0000001140)={0x20, 0x80, 0x1c, {0x4, 0x1ff, 0x9, 0xf, 0x3, 0xdb0d, 0x5977, 0x9, 0x6, 0xff, 0x0, 0x5}}, &(0x7f0000001180)={0x20, 0x85, 0x4, 0xb}, &(0x7f00000011c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001200)={0x20, 0x87, 0x2}, &(0x7f0000001240)={0x20, 0x89, 0x2, 0x1}}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtclass={0x868, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x83c, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000, 0x0, 0x0, 0x10000}}, @TCA_HTB_RTAB={0x404, 0x4, [0x9, 0x4, 0x7, 0x8, 0x11c86bdd, 0x48, 0x1, 0xb1, 0xffff, 0xc, 0x2, 0x1, 0x3, 0x2, 0x1ff, 0x8, 0x1, 0x401, 0x5, 0x0, 0x7fffffff, 0xff, 0x5, 0x5, 0x8, 0x4, 0x3, 0x8cc, 0xffffff7f, 0xf, 0x1, 0x8, 0x2488f245, 0xf8, 0xff, 0xd, 0x7fff, 0x7, 0x3, 0x5, 0x60000, 0x386, 0xb43, 0x79, 0x80000001, 0x200, 0x2, 0x4, 0x9, 0x80, 0xfffffff9, 0x7fffffff, 0x40, 0xd18, 0x0, 0xe, 0x7ff, 0x9, 0x7, 0x1dd, 0x6, 0x0, 0xc, 0x4, 0x6, 0x4, 0x3, 0x8, 0x2, 0x8, 0x80, 0xff, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x7, 0x3, 0xffff, 0x30, 0xa, 0xce, 0xffffffff, 0x2, 0x2, 0x1328, 0xfffffffb, 0x4, 0x2, 0x9, 0x2, 0x4, 0x8, 0xcf25, 0x0, 0xf29, 0xa, 0xfffffff9, 0xa, 0xa, 0x4, 0x800, 0x8, 0x1000, 0x2, 0xfffffffb, 0x1, 0x474, 0x3, 0x1, 0xfffffffc, 0x7, 0x9, 0x3, 0x2, 0x7, 0x764, 0xfffffde3, 0x7, 0x80, 0x2, 0x3632, 0x48, 0x4, 0xd4e, 0x4, 0x907, 0x3ff, 0x2, 0x4, 0x7, 0x401, 0x80, 0x80000001, 0x5, 0x1ff, 0x100, 0x6, 0x6, 0x649, 0xfffffffa, 0x1, 0x6, 0xfffffffe, 0xdb, 0x10000, 0x80000000, 0x1, 0xffff, 0x100, 0x4, 0x6, 0x3, 0x10, 0x902, 0x10, 0x0, 0x6, 0x80000, 0x0, 0x7, 0x0, 0x4, 0x6a82, 0x1, 0x6, 0x0, 0x7, 0x248, 0x7fff, 0x37, 0x5, 0x6, 0x43, 0x949, 0xffffffff, 0x8, 0xb, 0x0, 0x9, 0x0, 0x1, 0x1, 0x6, 0x2, 0x8, 0x4, 0x5, 0x5a69, 0x1, 0x1, 0x55, 0x1, 0x2, 0x8, 0x5, 0x55d, 0x7fffffff, 0x8001, 0x6, 0x81, 0xe752, 0xf59, 0x4c8, 0x7, 0x10, 0x1, 0xb5e, 0x2, 0x2, 0x1, 0x5, 0x697, 0xc, 0x3, 0x6, 0x4, 0x66a6000, 0xc, 0x5, 0x400, 0xd058, 0x6, 0x1, 0x3, 0x1, 0x4, 0x7b, 0x5, 0x8, 0x7, 0x1, 0xf, 0x3, 0x3, 0x7, 0x63e4, 0x7, 0xb0e, 0x401, 0x4, 0x10001, 0x2, 0x7fffffff, 0x800, 0x8, 0xe0, 0x1, 0x2, 0x8000, 0x7f, 0xfd4d, 0x1, 0x9, 0x9]}, @TCA_HTB_CTAB={0x404, 0x3, [0x3, 0xffffffff, 0x7, 0xff, 0x1000, 0x0, 0x0, 0x9, 0x4ae042e5, 0x8, 0xff, 0x4, 0x800, 0x80000000, 0x4, 0x9, 0x10001, 0x0, 0xf78, 0x6, 0x10, 0x190, 0x7, 0x4, 0x835a, 0x3, 0x5, 0x0, 0x5, 0x8, 0x4, 0x9e2, 0x3, 0xfffffff9, 0x7, 0xfff, 0x1000, 0x3, 0x5, 0x100, 0xfff, 0x40, 0x2, 0x400, 0x69a, 0x6, 0x9, 0x1d, 0x0, 0x4e1b, 0x8c, 0xb, 0x8, 0x9, 0x7ff, 0x0, 0x3, 0x400, 0xec, 0x7, 0xe, 0x1, 0x8d, 0x4, 0x2, 0x2, 0x7, 0x3, 0x4, 0x9, 0x9, 0xfffffffe, 0x1, 0x0, 0xd7, 0xc, 0xf, 0x4, 0x6, 0x5, 0x4607, 0x0, 0x3, 0xd32, 0xfffffffc, 0x6, 0x4c87, 0x70, 0x40, 0x2, 0x0, 0xd, 0x2, 0x9a17, 0x4, 0x3, 0x8, 0xfffffffa, 0x9e9f, 0x0, 0x7f, 0xffff, 0xffffff01, 0x8, 0x8, 0x1, 0x101, 0x6, 0x449b4ba5, 0x1, 0x4, 0xfffffffd, 0x200, 0x1, 0x5, 0xffffffff, 0xa9, 0xb, 0x0, 0x0, 0x4a7, 0x3, 0xbc8, 0x0, 0x9f, 0xfffffff7, 0x5, 0x5, 0x100, 0x9, 0xffffffff, 0x7, 0xa, 0x8, 0x7fffffff, 0x4, 0x7f, 0x200, 0x8, 0x4, 0x200, 0x800, 0x8001, 0x8, 0x3, 0x0, 0x7, 0xee, 0x7, 0x7, 0x8001, 0xfffffffb, 0x1c, 0x1, 0x8001, 0x1, 0x2, 0xd, 0x7, 0xcf3, 0x2, 0x4, 0x9, 0x1, 0xfffffb0e, 0x10001, 0x3, 0x6, 0x80, 0x3b3, 0x4, 0x7f, 0x9, 0x5, 0xecc, 0x4, 0x7, 0x7, 0x2, 0x6, 0xbf7, 0xc2, 0x9, 0x8, 0x7, 0x6000, 0x3, 0x2, 0x7f, 0x4, 0x4, 0x5, 0xffff, 0xde, 0x2, 0x4, 0x788f77b1, 0x4, 0x6, 0xffffff80, 0x0, 0x0, 0x3, 0x7, 0x4, 0x17e9, 0x6, 0x6, 0x675, 0xd, 0x4, 0x5, 0xf, 0x2, 0x80000001, 0x8, 0x7fffffff, 0x6, 0x400, 0xe081, 0x1, 0x7f, 0x8, 0x4, 0x1, 0x8, 0x6, 0xb0, 0x3, 0x8, 0x9, 0xd, 0x81, 0x6, 0x400, 0x4, 0x80, 0x80000001, 0x3, 0x7c, 0x2, 0x400, 0x8000, 0xffffffff, 0xdcd, 0x4, 0x10, 0xffff887b, 0x101, 0x25a0, 0x80, 0x1, 0xffffffff, 0x2, 0x5, 0x8]}]}}]}, 0x868}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x2a, 0x4101, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r2, 0x0, 0xffffffbfffff8000, 0x8) close(r8) syz_usb_control_io$lan78xx(r0, &(0x7f0000000140)={0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="00040f0000000f039825ffff2ed007005571bb98e1031e40bb06"], &(0x7f0000000080)={0x0, 0x3, 0x76, @string={0x76, 0x3, "6aa81a3b6227c1c6ebc8d9fe24d07a27df5d54f10265d6d7ebd36d0851144ee1c23c3baa3351be1f5ccd8b9c70e21cc86797fea821392e885cfccdc19d9d96a5728d6c011bd0011731d01d2c826f22c6b27a38fc0b9153f2091528576584e124967d9320e854586d0dd8295a416a12dccd041eea"}}}, &(0x7f0000000300)={0x34, &(0x7f0000000180)={0x40, 0x13, 0x15, "eddfda89a153085f3856d4df04965942e11b0784a7"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000240)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000000280)={0x40, 0xa0, 0x4, 0x9}, &(0x7f00000002c0)={0xc0, 0xa2, 0x2f, "f99e09f1ce60240f1a3710c71d4de3f909237e3b3a8e6cb34861f5740ff1ae7970e68a3f55db9346dca68822ebad8f"}}) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x54c, 0xba0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x91, 0x0, 0x5, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x0, 0xc8, 0x1, {0x22, 0xe13}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x2}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0xf, 0x48, 0x82, 0x8, 0x10}, 0x3b, &(0x7f0000000480)={0x5, 0xf, 0x3b, 0x4, [@ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x1, 0xff00, 0x6, [0xff000f, 0x3f0f, 0xff0030]}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x6, 0x0, 0x9, [0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x8, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0x1, 0x7f}]}, 0x2, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x408}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) syz_open_dev$video4linux(&(0x7f00000001c0), 0xffc, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) r1 = socket$inet6(0xa, 0x800, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b000000000001190780000000000001cdbb42b4e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af5844cc579a4e8cc52243efa8698d0a881c51852e4424251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461c2aa2f19935e6996c7096ffeeb03000000000000649a3bfbc0d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af6e8dafe0900"/190], 0x0) recvmsg(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0xd62, 0x4) syz_emit_ethernet(0x6b, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x31, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x3, 0x5, "45154184d900be79599ddcffb1fa373b586623ce6f244518cbae2cdcf97dc32403f90baed01e21"}]}}}}}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f0000000200)=0x4, 0x4) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) setgroups(0x1, &(0x7f0000000400)=[0xffffffffffffffff]) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000680)="7573a0f680b323d7a1faecf9503b290f3e81e9eaf4164d652ae8ffa9c2c59fce802f8a6b6c868b8af22d2c7a7b2e1f16670e8edcc0b14d176c650600a119de04a595515f3e373a8cfb53dd8cc843c8effcc5d4d52bfc1921ae06f5ad82b688ab28cfad574de4d40c2ea07bbd2b0e79dc47c70e54e8373f8afdd8f0fb1ce168ce19e14c7e50d800d51a556e425d18cde7d9c2a3a2580506c2f1c19bf3e25eaa781a919e9aba1f88b5ad66c3d23c59ba29ff6edce1d06c0ddc448fd91b35576841ea054d4af54e4dc9f0c69cc6922b5c082172a28208e35801cd4e00460000000000", 0xe1) ioctl$CEC_RECEIVE(r4, 0xc0386106, &(0x7f0000000340)={0x3, 0x590c, 0x6, 0x6, 0x65, 0xfffffffe, "3d33e420e2fd24b234d8f6217cadfcec", 0x6, 0xb, 0xb, 0xd, 0x2, 0x2, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000008c40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000008d00)={0x0, 0x0, &(0x7f0000008cc0)={&(0x7f0000008c80)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000000c0)) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <6> bisect: split chunk #0 of len 6 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m41s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 21, 30, 29] detailed listing: executing program 1: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x40}, 0xc) setns(0xc9, 0x0) r1 = socket(0x8, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000007640)) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000080)) executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000f80)={0x14, &(0x7f0000000ec0)={0x20, 0xad8a5354353639bf, 0x53, {0x53, 0x23, "e3ad1ea9b1d2a286c267fe1fe1ab9c9daefb5dbb8affa41916dd9de65558e845b601f07a79cb1cb2cff7e338ba06508c7e36dbcef0cad0a85d198971fbebeb4a5cefc0c858240b283d474f3cf9589f0225"}}, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001280)={0x44, &(0x7f0000000fc0)={0x0, 0x16, 0xbb, "7a122eeb9d25687880b6faf5aefdb4299f436e43dcb78ea1bdc2e1a150bee0e6c7bfbbf54b9c4f4222244d781fc5c42ce96663c57fb48a1f7432174b836cbb284da0c8dc91548c6299b66e965101bd2d4a70a43385ad22ce13e57cc5621a931e65c54b23de10979e1c7c8184edcdcbd6cd53bec6cd71f8fcb8072660a85edf6114fdfd1d95f253898b6706e34e67411aafb50e3e97f4df6d27501fdcc0cf5bfd46c2e83e4127863aada9dd0b414385d9618e6446dfa9b47b14572e"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000001100)={0x0, 0x8, 0x1}, &(0x7f0000001140)={0x20, 0x80, 0x1c, {0x4, 0x1ff, 0x9, 0xf, 0x3, 0xdb0d, 0x5977, 0x9, 0x6, 0xff, 0x0, 0x5}}, &(0x7f0000001180)={0x20, 0x85, 0x4, 0xb}, &(0x7f00000011c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001200)={0x20, 0x87, 0x2}, &(0x7f0000001240)={0x20, 0x89, 0x2, 0x1}}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtclass={0x868, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x83c, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000, 0x0, 0x0, 0x10000}}, @TCA_HTB_RTAB={0x404, 0x4, [0x9, 0x4, 0x7, 0x8, 0x11c86bdd, 0x48, 0x1, 0xb1, 0xffff, 0xc, 0x2, 0x1, 0x3, 0x2, 0x1ff, 0x8, 0x1, 0x401, 0x5, 0x0, 0x7fffffff, 0xff, 0x5, 0x5, 0x8, 0x4, 0x3, 0x8cc, 0xffffff7f, 0xf, 0x1, 0x8, 0x2488f245, 0xf8, 0xff, 0xd, 0x7fff, 0x7, 0x3, 0x5, 0x60000, 0x386, 0xb43, 0x79, 0x80000001, 0x200, 0x2, 0x4, 0x9, 0x80, 0xfffffff9, 0x7fffffff, 0x40, 0xd18, 0x0, 0xe, 0x7ff, 0x9, 0x7, 0x1dd, 0x6, 0x0, 0xc, 0x4, 0x6, 0x4, 0x3, 0x8, 0x2, 0x8, 0x80, 0xff, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x7, 0x3, 0xffff, 0x30, 0xa, 0xce, 0xffffffff, 0x2, 0x2, 0x1328, 0xfffffffb, 0x4, 0x2, 0x9, 0x2, 0x4, 0x8, 0xcf25, 0x0, 0xf29, 0xa, 0xfffffff9, 0xa, 0xa, 0x4, 0x800, 0x8, 0x1000, 0x2, 0xfffffffb, 0x1, 0x474, 0x3, 0x1, 0xfffffffc, 0x7, 0x9, 0x3, 0x2, 0x7, 0x764, 0xfffffde3, 0x7, 0x80, 0x2, 0x3632, 0x48, 0x4, 0xd4e, 0x4, 0x907, 0x3ff, 0x2, 0x4, 0x7, 0x401, 0x80, 0x80000001, 0x5, 0x1ff, 0x100, 0x6, 0x6, 0x649, 0xfffffffa, 0x1, 0x6, 0xfffffffe, 0xdb, 0x10000, 0x80000000, 0x1, 0xffff, 0x100, 0x4, 0x6, 0x3, 0x10, 0x902, 0x10, 0x0, 0x6, 0x80000, 0x0, 0x7, 0x0, 0x4, 0x6a82, 0x1, 0x6, 0x0, 0x7, 0x248, 0x7fff, 0x37, 0x5, 0x6, 0x43, 0x949, 0xffffffff, 0x8, 0xb, 0x0, 0x9, 0x0, 0x1, 0x1, 0x6, 0x2, 0x8, 0x4, 0x5, 0x5a69, 0x1, 0x1, 0x55, 0x1, 0x2, 0x8, 0x5, 0x55d, 0x7fffffff, 0x8001, 0x6, 0x81, 0xe752, 0xf59, 0x4c8, 0x7, 0x10, 0x1, 0xb5e, 0x2, 0x2, 0x1, 0x5, 0x697, 0xc, 0x3, 0x6, 0x4, 0x66a6000, 0xc, 0x5, 0x400, 0xd058, 0x6, 0x1, 0x3, 0x1, 0x4, 0x7b, 0x5, 0x8, 0x7, 0x1, 0xf, 0x3, 0x3, 0x7, 0x63e4, 0x7, 0xb0e, 0x401, 0x4, 0x10001, 0x2, 0x7fffffff, 0x800, 0x8, 0xe0, 0x1, 0x2, 0x8000, 0x7f, 0xfd4d, 0x1, 0x9, 0x9]}, @TCA_HTB_CTAB={0x404, 0x3, [0x3, 0xffffffff, 0x7, 0xff, 0x1000, 0x0, 0x0, 0x9, 0x4ae042e5, 0x8, 0xff, 0x4, 0x800, 0x80000000, 0x4, 0x9, 0x10001, 0x0, 0xf78, 0x6, 0x10, 0x190, 0x7, 0x4, 0x835a, 0x3, 0x5, 0x0, 0x5, 0x8, 0x4, 0x9e2, 0x3, 0xfffffff9, 0x7, 0xfff, 0x1000, 0x3, 0x5, 0x100, 0xfff, 0x40, 0x2, 0x400, 0x69a, 0x6, 0x9, 0x1d, 0x0, 0x4e1b, 0x8c, 0xb, 0x8, 0x9, 0x7ff, 0x0, 0x3, 0x400, 0xec, 0x7, 0xe, 0x1, 0x8d, 0x4, 0x2, 0x2, 0x7, 0x3, 0x4, 0x9, 0x9, 0xfffffffe, 0x1, 0x0, 0xd7, 0xc, 0xf, 0x4, 0x6, 0x5, 0x4607, 0x0, 0x3, 0xd32, 0xfffffffc, 0x6, 0x4c87, 0x70, 0x40, 0x2, 0x0, 0xd, 0x2, 0x9a17, 0x4, 0x3, 0x8, 0xfffffffa, 0x9e9f, 0x0, 0x7f, 0xffff, 0xffffff01, 0x8, 0x8, 0x1, 0x101, 0x6, 0x449b4ba5, 0x1, 0x4, 0xfffffffd, 0x200, 0x1, 0x5, 0xffffffff, 0xa9, 0xb, 0x0, 0x0, 0x4a7, 0x3, 0xbc8, 0x0, 0x9f, 0xfffffff7, 0x5, 0x5, 0x100, 0x9, 0xffffffff, 0x7, 0xa, 0x8, 0x7fffffff, 0x4, 0x7f, 0x200, 0x8, 0x4, 0x200, 0x800, 0x8001, 0x8, 0x3, 0x0, 0x7, 0xee, 0x7, 0x7, 0x8001, 0xfffffffb, 0x1c, 0x1, 0x8001, 0x1, 0x2, 0xd, 0x7, 0xcf3, 0x2, 0x4, 0x9, 0x1, 0xfffffb0e, 0x10001, 0x3, 0x6, 0x80, 0x3b3, 0x4, 0x7f, 0x9, 0x5, 0xecc, 0x4, 0x7, 0x7, 0x2, 0x6, 0xbf7, 0xc2, 0x9, 0x8, 0x7, 0x6000, 0x3, 0x2, 0x7f, 0x4, 0x4, 0x5, 0xffff, 0xde, 0x2, 0x4, 0x788f77b1, 0x4, 0x6, 0xffffff80, 0x0, 0x0, 0x3, 0x7, 0x4, 0x17e9, 0x6, 0x6, 0x675, 0xd, 0x4, 0x5, 0xf, 0x2, 0x80000001, 0x8, 0x7fffffff, 0x6, 0x400, 0xe081, 0x1, 0x7f, 0x8, 0x4, 0x1, 0x8, 0x6, 0xb0, 0x3, 0x8, 0x9, 0xd, 0x81, 0x6, 0x400, 0x4, 0x80, 0x80000001, 0x3, 0x7c, 0x2, 0x400, 0x8000, 0xffffffff, 0xdcd, 0x4, 0x10, 0xffff887b, 0x101, 0x25a0, 0x80, 0x1, 0xffffffff, 0x2, 0x5, 0x8]}]}}]}, 0x868}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x2a, 0x4101, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r2, 0x0, 0xffffffbfffff8000, 0x8) close(r8) syz_usb_control_io$lan78xx(r0, &(0x7f0000000140)={0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="00040f0000000f039825ffff2ed007005571bb98e1031e40bb06"], &(0x7f0000000080)={0x0, 0x3, 0x76, @string={0x76, 0x3, "6aa81a3b6227c1c6ebc8d9fe24d07a27df5d54f10265d6d7ebd36d0851144ee1c23c3baa3351be1f5ccd8b9c70e21cc86797fea821392e885cfccdc19d9d96a5728d6c011bd0011731d01d2c826f22c6b27a38fc0b9153f2091528576584e124967d9320e854586d0dd8295a416a12dccd041eea"}}}, &(0x7f0000000300)={0x34, &(0x7f0000000180)={0x40, 0x13, 0x15, "eddfda89a153085f3856d4df04965942e11b0784a7"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000240)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000000280)={0x40, 0xa0, 0x4, 0x9}, &(0x7f00000002c0)={0xc0, 0xa2, 0x2f, "f99e09f1ce60240f1a3710c71d4de3f909237e3b3a8e6cb34861f5740ff1ae7970e68a3f55db9346dca68822ebad8f"}}) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x54c, 0xba0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x91, 0x0, 0x5, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x0, 0xc8, 0x1, {0x22, 0xe13}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x2}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0xf, 0x48, 0x82, 0x8, 0x10}, 0x3b, &(0x7f0000000480)={0x5, 0xf, 0x3b, 0x4, [@ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x1, 0xff00, 0x6, [0xff000f, 0x3f0f, 0xff0030]}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x6, 0x0, 0x9, [0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x8, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0x1, 0x7f}]}, 0x2, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x408}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) syz_open_dev$video4linux(&(0x7f00000001c0), 0xffc, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) r1 = socket$inet6(0xa, 0x800, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b000000000001190780000000000001cdbb42b4e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af5844cc579a4e8cc52243efa8698d0a881c51852e4424251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461c2aa2f19935e6996c7096ffeeb03000000000000649a3bfbc0d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af6e8dafe0900"/190], 0x0) recvmsg(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0xd62, 0x4) syz_emit_ethernet(0x6b, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x31, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x3, 0x5, "45154184d900be79599ddcffb1fa373b586623ce6f244518cbae2cdcf97dc32403f90baed01e21"}]}}}}}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f0000000200)=0x4, 0x4) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) setgroups(0x1, &(0x7f0000000400)=[0xffffffffffffffff]) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000680)="7573a0f680b323d7a1faecf9503b290f3e81e9eaf4164d652ae8ffa9c2c59fce802f8a6b6c868b8af22d2c7a7b2e1f16670e8edcc0b14d176c650600a119de04a595515f3e373a8cfb53dd8cc843c8effcc5d4d52bfc1921ae06f5ad82b688ab28cfad574de4d40c2ea07bbd2b0e79dc47c70e54e8373f8afdd8f0fb1ce168ce19e14c7e50d800d51a556e425d18cde7d9c2a3a2580506c2f1c19bf3e25eaa781a919e9aba1f88b5ad66c3d23c59ba29ff6edce1d06c0ddc448fd91b35576841ea054d4af54e4dc9f0c69cc6922b5c082172a28208e35801cd4e00460000000000", 0xe1) ioctl$CEC_RECEIVE(r4, 0xc0386106, &(0x7f0000000340)={0x3, 0x590c, 0x6, 0x6, 0x65, 0xfffffffe, "3d33e420e2fd24b234d8f6217cadfcec", 0x6, 0xb, 0xb, 0xd, 0x2, 0x2, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000008c40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000008d00)={0x0, 0x0, &(0x7f0000008cc0)={&(0x7f0000008c80)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000000c0)) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <3> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 29] detailed listing: executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) syz_open_dev$video4linux(&(0x7f00000001c0), 0xffc, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) r1 = socket$inet6(0xa, 0x800, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b000000000001190780000000000001cdbb42b4e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af5844cc579a4e8cc52243efa8698d0a881c51852e4424251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461c2aa2f19935e6996c7096ffeeb03000000000000649a3bfbc0d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af6e8dafe0900"/190], 0x0) recvmsg(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0xd62, 0x4) syz_emit_ethernet(0x6b, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x31, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x3, 0x5, "45154184d900be79599ddcffb1fa373b586623ce6f244518cbae2cdcf97dc32403f90baed01e21"}]}}}}}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f0000000200)=0x4, 0x4) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) setgroups(0x1, &(0x7f0000000400)=[0xffffffffffffffff]) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000680)="7573a0f680b323d7a1faecf9503b290f3e81e9eaf4164d652ae8ffa9c2c59fce802f8a6b6c868b8af22d2c7a7b2e1f16670e8edcc0b14d176c650600a119de04a595515f3e373a8cfb53dd8cc843c8effcc5d4d52bfc1921ae06f5ad82b688ab28cfad574de4d40c2ea07bbd2b0e79dc47c70e54e8373f8afdd8f0fb1ce168ce19e14c7e50d800d51a556e425d18cde7d9c2a3a2580506c2f1c19bf3e25eaa781a919e9aba1f88b5ad66c3d23c59ba29ff6edce1d06c0ddc448fd91b35576841ea054d4af54e4dc9f0c69cc6922b5c082172a28208e35801cd4e00460000000000", 0xe1) ioctl$CEC_RECEIVE(r4, 0xc0386106, &(0x7f0000000340)={0x3, 0x590c, 0x6, 0x6, 0x65, 0xfffffffe, "3d33e420e2fd24b234d8f6217cadfcec", 0x6, 0xb, 0xb, 0xd, 0x2, 0x2, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000008c40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000008d00)={0x0, 0x0, &(0x7f0000008cc0)={&(0x7f0000008c80)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000000c0)) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 21, 29] detailed listing: executing program 1: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x40}, 0xc) setns(0xc9, 0x0) r1 = socket(0x8, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000007640)) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000080)) executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000f80)={0x14, &(0x7f0000000ec0)={0x20, 0xad8a5354353639bf, 0x53, {0x53, 0x23, "e3ad1ea9b1d2a286c267fe1fe1ab9c9daefb5dbb8affa41916dd9de65558e845b601f07a79cb1cb2cff7e338ba06508c7e36dbcef0cad0a85d198971fbebeb4a5cefc0c858240b283d474f3cf9589f0225"}}, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001280)={0x44, &(0x7f0000000fc0)={0x0, 0x16, 0xbb, "7a122eeb9d25687880b6faf5aefdb4299f436e43dcb78ea1bdc2e1a150bee0e6c7bfbbf54b9c4f4222244d781fc5c42ce96663c57fb48a1f7432174b836cbb284da0c8dc91548c6299b66e965101bd2d4a70a43385ad22ce13e57cc5621a931e65c54b23de10979e1c7c8184edcdcbd6cd53bec6cd71f8fcb8072660a85edf6114fdfd1d95f253898b6706e34e67411aafb50e3e97f4df6d27501fdcc0cf5bfd46c2e83e4127863aada9dd0b414385d9618e6446dfa9b47b14572e"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000001100)={0x0, 0x8, 0x1}, &(0x7f0000001140)={0x20, 0x80, 0x1c, {0x4, 0x1ff, 0x9, 0xf, 0x3, 0xdb0d, 0x5977, 0x9, 0x6, 0xff, 0x0, 0x5}}, &(0x7f0000001180)={0x20, 0x85, 0x4, 0xb}, &(0x7f00000011c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001200)={0x20, 0x87, 0x2}, &(0x7f0000001240)={0x20, 0x89, 0x2, 0x1}}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtclass={0x868, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x83c, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000, 0x0, 0x0, 0x10000}}, @TCA_HTB_RTAB={0x404, 0x4, [0x9, 0x4, 0x7, 0x8, 0x11c86bdd, 0x48, 0x1, 0xb1, 0xffff, 0xc, 0x2, 0x1, 0x3, 0x2, 0x1ff, 0x8, 0x1, 0x401, 0x5, 0x0, 0x7fffffff, 0xff, 0x5, 0x5, 0x8, 0x4, 0x3, 0x8cc, 0xffffff7f, 0xf, 0x1, 0x8, 0x2488f245, 0xf8, 0xff, 0xd, 0x7fff, 0x7, 0x3, 0x5, 0x60000, 0x386, 0xb43, 0x79, 0x80000001, 0x200, 0x2, 0x4, 0x9, 0x80, 0xfffffff9, 0x7fffffff, 0x40, 0xd18, 0x0, 0xe, 0x7ff, 0x9, 0x7, 0x1dd, 0x6, 0x0, 0xc, 0x4, 0x6, 0x4, 0x3, 0x8, 0x2, 0x8, 0x80, 0xff, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x7, 0x3, 0xffff, 0x30, 0xa, 0xce, 0xffffffff, 0x2, 0x2, 0x1328, 0xfffffffb, 0x4, 0x2, 0x9, 0x2, 0x4, 0x8, 0xcf25, 0x0, 0xf29, 0xa, 0xfffffff9, 0xa, 0xa, 0x4, 0x800, 0x8, 0x1000, 0x2, 0xfffffffb, 0x1, 0x474, 0x3, 0x1, 0xfffffffc, 0x7, 0x9, 0x3, 0x2, 0x7, 0x764, 0xfffffde3, 0x7, 0x80, 0x2, 0x3632, 0x48, 0x4, 0xd4e, 0x4, 0x907, 0x3ff, 0x2, 0x4, 0x7, 0x401, 0x80, 0x80000001, 0x5, 0x1ff, 0x100, 0x6, 0x6, 0x649, 0xfffffffa, 0x1, 0x6, 0xfffffffe, 0xdb, 0x10000, 0x80000000, 0x1, 0xffff, 0x100, 0x4, 0x6, 0x3, 0x10, 0x902, 0x10, 0x0, 0x6, 0x80000, 0x0, 0x7, 0x0, 0x4, 0x6a82, 0x1, 0x6, 0x0, 0x7, 0x248, 0x7fff, 0x37, 0x5, 0x6, 0x43, 0x949, 0xffffffff, 0x8, 0xb, 0x0, 0x9, 0x0, 0x1, 0x1, 0x6, 0x2, 0x8, 0x4, 0x5, 0x5a69, 0x1, 0x1, 0x55, 0x1, 0x2, 0x8, 0x5, 0x55d, 0x7fffffff, 0x8001, 0x6, 0x81, 0xe752, 0xf59, 0x4c8, 0x7, 0x10, 0x1, 0xb5e, 0x2, 0x2, 0x1, 0x5, 0x697, 0xc, 0x3, 0x6, 0x4, 0x66a6000, 0xc, 0x5, 0x400, 0xd058, 0x6, 0x1, 0x3, 0x1, 0x4, 0x7b, 0x5, 0x8, 0x7, 0x1, 0xf, 0x3, 0x3, 0x7, 0x63e4, 0x7, 0xb0e, 0x401, 0x4, 0x10001, 0x2, 0x7fffffff, 0x800, 0x8, 0xe0, 0x1, 0x2, 0x8000, 0x7f, 0xfd4d, 0x1, 0x9, 0x9]}, @TCA_HTB_CTAB={0x404, 0x3, [0x3, 0xffffffff, 0x7, 0xff, 0x1000, 0x0, 0x0, 0x9, 0x4ae042e5, 0x8, 0xff, 0x4, 0x800, 0x80000000, 0x4, 0x9, 0x10001, 0x0, 0xf78, 0x6, 0x10, 0x190, 0x7, 0x4, 0x835a, 0x3, 0x5, 0x0, 0x5, 0x8, 0x4, 0x9e2, 0x3, 0xfffffff9, 0x7, 0xfff, 0x1000, 0x3, 0x5, 0x100, 0xfff, 0x40, 0x2, 0x400, 0x69a, 0x6, 0x9, 0x1d, 0x0, 0x4e1b, 0x8c, 0xb, 0x8, 0x9, 0x7ff, 0x0, 0x3, 0x400, 0xec, 0x7, 0xe, 0x1, 0x8d, 0x4, 0x2, 0x2, 0x7, 0x3, 0x4, 0x9, 0x9, 0xfffffffe, 0x1, 0x0, 0xd7, 0xc, 0xf, 0x4, 0x6, 0x5, 0x4607, 0x0, 0x3, 0xd32, 0xfffffffc, 0x6, 0x4c87, 0x70, 0x40, 0x2, 0x0, 0xd, 0x2, 0x9a17, 0x4, 0x3, 0x8, 0xfffffffa, 0x9e9f, 0x0, 0x7f, 0xffff, 0xffffff01, 0x8, 0x8, 0x1, 0x101, 0x6, 0x449b4ba5, 0x1, 0x4, 0xfffffffd, 0x200, 0x1, 0x5, 0xffffffff, 0xa9, 0xb, 0x0, 0x0, 0x4a7, 0x3, 0xbc8, 0x0, 0x9f, 0xfffffff7, 0x5, 0x5, 0x100, 0x9, 0xffffffff, 0x7, 0xa, 0x8, 0x7fffffff, 0x4, 0x7f, 0x200, 0x8, 0x4, 0x200, 0x800, 0x8001, 0x8, 0x3, 0x0, 0x7, 0xee, 0x7, 0x7, 0x8001, 0xfffffffb, 0x1c, 0x1, 0x8001, 0x1, 0x2, 0xd, 0x7, 0xcf3, 0x2, 0x4, 0x9, 0x1, 0xfffffb0e, 0x10001, 0x3, 0x6, 0x80, 0x3b3, 0x4, 0x7f, 0x9, 0x5, 0xecc, 0x4, 0x7, 0x7, 0x2, 0x6, 0xbf7, 0xc2, 0x9, 0x8, 0x7, 0x6000, 0x3, 0x2, 0x7f, 0x4, 0x4, 0x5, 0xffff, 0xde, 0x2, 0x4, 0x788f77b1, 0x4, 0x6, 0xffffff80, 0x0, 0x0, 0x3, 0x7, 0x4, 0x17e9, 0x6, 0x6, 0x675, 0xd, 0x4, 0x5, 0xf, 0x2, 0x80000001, 0x8, 0x7fffffff, 0x6, 0x400, 0xe081, 0x1, 0x7f, 0x8, 0x4, 0x1, 0x8, 0x6, 0xb0, 0x3, 0x8, 0x9, 0xd, 0x81, 0x6, 0x400, 0x4, 0x80, 0x80000001, 0x3, 0x7c, 0x2, 0x400, 0x8000, 0xffffffff, 0xdcd, 0x4, 0x10, 0xffff887b, 0x101, 0x25a0, 0x80, 0x1, 0xffffffff, 0x2, 0x5, 0x8]}]}}]}, 0x868}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x2a, 0x4101, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r2, 0x0, 0xffffffbfffff8000, 0x8) close(r8) syz_usb_control_io$lan78xx(r0, &(0x7f0000000140)={0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="00040f0000000f039825ffff2ed007005571bb98e1031e40bb06"], &(0x7f0000000080)={0x0, 0x3, 0x76, @string={0x76, 0x3, "6aa81a3b6227c1c6ebc8d9fe24d07a27df5d54f10265d6d7ebd36d0851144ee1c23c3baa3351be1f5ccd8b9c70e21cc86797fea821392e885cfccdc19d9d96a5728d6c011bd0011731d01d2c826f22c6b27a38fc0b9153f2091528576584e124967d9320e854586d0dd8295a416a12dccd041eea"}}}, &(0x7f0000000300)={0x34, &(0x7f0000000180)={0x40, 0x13, 0x15, "eddfda89a153085f3856d4df04965942e11b0784a7"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000240)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000000280)={0x40, 0xa0, 0x4, 0x9}, &(0x7f00000002c0)={0xc0, 0xa2, 0x2f, "f99e09f1ce60240f1a3710c71d4de3f909237e3b3a8e6cb34861f5740ff1ae7970e68a3f55db9346dca68822ebad8f"}}) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x54c, 0xba0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x91, 0x0, 0x5, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x0, 0xc8, 0x1, {0x22, 0xe13}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x2}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0xf, 0x48, 0x82, 0x8, 0x10}, 0x3b, &(0x7f0000000480)={0x5, 0xf, 0x3b, 0x4, [@ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x1, 0xff00, 0x6, [0xff000f, 0x3f0f, 0xff0030]}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x6, 0x0, 0x9, [0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x8, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0x1, 0x7f}]}, 0x2, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x408}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync bisect: the chunk can be dropped bisect: split chunks (needed=true): <2> bisect: split chunk #0 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [21, 29] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000f80)={0x14, &(0x7f0000000ec0)={0x20, 0xad8a5354353639bf, 0x53, {0x53, 0x23, "e3ad1ea9b1d2a286c267fe1fe1ab9c9daefb5dbb8affa41916dd9de65558e845b601f07a79cb1cb2cff7e338ba06508c7e36dbcef0cad0a85d198971fbebeb4a5cefc0c858240b283d474f3cf9589f0225"}}, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001280)={0x44, &(0x7f0000000fc0)={0x0, 0x16, 0xbb, "7a122eeb9d25687880b6faf5aefdb4299f436e43dcb78ea1bdc2e1a150bee0e6c7bfbbf54b9c4f4222244d781fc5c42ce96663c57fb48a1f7432174b836cbb284da0c8dc91548c6299b66e965101bd2d4a70a43385ad22ce13e57cc5621a931e65c54b23de10979e1c7c8184edcdcbd6cd53bec6cd71f8fcb8072660a85edf6114fdfd1d95f253898b6706e34e67411aafb50e3e97f4df6d27501fdcc0cf5bfd46c2e83e4127863aada9dd0b414385d9618e6446dfa9b47b14572e"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000001100)={0x0, 0x8, 0x1}, &(0x7f0000001140)={0x20, 0x80, 0x1c, {0x4, 0x1ff, 0x9, 0xf, 0x3, 0xdb0d, 0x5977, 0x9, 0x6, 0xff, 0x0, 0x5}}, &(0x7f0000001180)={0x20, 0x85, 0x4, 0xb}, &(0x7f00000011c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001200)={0x20, 0x87, 0x2}, &(0x7f0000001240)={0x20, 0x89, 0x2, 0x1}}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtclass={0x868, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x83c, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000, 0x0, 0x0, 0x10000}}, @TCA_HTB_RTAB={0x404, 0x4, [0x9, 0x4, 0x7, 0x8, 0x11c86bdd, 0x48, 0x1, 0xb1, 0xffff, 0xc, 0x2, 0x1, 0x3, 0x2, 0x1ff, 0x8, 0x1, 0x401, 0x5, 0x0, 0x7fffffff, 0xff, 0x5, 0x5, 0x8, 0x4, 0x3, 0x8cc, 0xffffff7f, 0xf, 0x1, 0x8, 0x2488f245, 0xf8, 0xff, 0xd, 0x7fff, 0x7, 0x3, 0x5, 0x60000, 0x386, 0xb43, 0x79, 0x80000001, 0x200, 0x2, 0x4, 0x9, 0x80, 0xfffffff9, 0x7fffffff, 0x40, 0xd18, 0x0, 0xe, 0x7ff, 0x9, 0x7, 0x1dd, 0x6, 0x0, 0xc, 0x4, 0x6, 0x4, 0x3, 0x8, 0x2, 0x8, 0x80, 0xff, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x7, 0x3, 0xffff, 0x30, 0xa, 0xce, 0xffffffff, 0x2, 0x2, 0x1328, 0xfffffffb, 0x4, 0x2, 0x9, 0x2, 0x4, 0x8, 0xcf25, 0x0, 0xf29, 0xa, 0xfffffff9, 0xa, 0xa, 0x4, 0x800, 0x8, 0x1000, 0x2, 0xfffffffb, 0x1, 0x474, 0x3, 0x1, 0xfffffffc, 0x7, 0x9, 0x3, 0x2, 0x7, 0x764, 0xfffffde3, 0x7, 0x80, 0x2, 0x3632, 0x48, 0x4, 0xd4e, 0x4, 0x907, 0x3ff, 0x2, 0x4, 0x7, 0x401, 0x80, 0x80000001, 0x5, 0x1ff, 0x100, 0x6, 0x6, 0x649, 0xfffffffa, 0x1, 0x6, 0xfffffffe, 0xdb, 0x10000, 0x80000000, 0x1, 0xffff, 0x100, 0x4, 0x6, 0x3, 0x10, 0x902, 0x10, 0x0, 0x6, 0x80000, 0x0, 0x7, 0x0, 0x4, 0x6a82, 0x1, 0x6, 0x0, 0x7, 0x248, 0x7fff, 0x37, 0x5, 0x6, 0x43, 0x949, 0xffffffff, 0x8, 0xb, 0x0, 0x9, 0x0, 0x1, 0x1, 0x6, 0x2, 0x8, 0x4, 0x5, 0x5a69, 0x1, 0x1, 0x55, 0x1, 0x2, 0x8, 0x5, 0x55d, 0x7fffffff, 0x8001, 0x6, 0x81, 0xe752, 0xf59, 0x4c8, 0x7, 0x10, 0x1, 0xb5e, 0x2, 0x2, 0x1, 0x5, 0x697, 0xc, 0x3, 0x6, 0x4, 0x66a6000, 0xc, 0x5, 0x400, 0xd058, 0x6, 0x1, 0x3, 0x1, 0x4, 0x7b, 0x5, 0x8, 0x7, 0x1, 0xf, 0x3, 0x3, 0x7, 0x63e4, 0x7, 0xb0e, 0x401, 0x4, 0x10001, 0x2, 0x7fffffff, 0x800, 0x8, 0xe0, 0x1, 0x2, 0x8000, 0x7f, 0xfd4d, 0x1, 0x9, 0x9]}, @TCA_HTB_CTAB={0x404, 0x3, [0x3, 0xffffffff, 0x7, 0xff, 0x1000, 0x0, 0x0, 0x9, 0x4ae042e5, 0x8, 0xff, 0x4, 0x800, 0x80000000, 0x4, 0x9, 0x10001, 0x0, 0xf78, 0x6, 0x10, 0x190, 0x7, 0x4, 0x835a, 0x3, 0x5, 0x0, 0x5, 0x8, 0x4, 0x9e2, 0x3, 0xfffffff9, 0x7, 0xfff, 0x1000, 0x3, 0x5, 0x100, 0xfff, 0x40, 0x2, 0x400, 0x69a, 0x6, 0x9, 0x1d, 0x0, 0x4e1b, 0x8c, 0xb, 0x8, 0x9, 0x7ff, 0x0, 0x3, 0x400, 0xec, 0x7, 0xe, 0x1, 0x8d, 0x4, 0x2, 0x2, 0x7, 0x3, 0x4, 0x9, 0x9, 0xfffffffe, 0x1, 0x0, 0xd7, 0xc, 0xf, 0x4, 0x6, 0x5, 0x4607, 0x0, 0x3, 0xd32, 0xfffffffc, 0x6, 0x4c87, 0x70, 0x40, 0x2, 0x0, 0xd, 0x2, 0x9a17, 0x4, 0x3, 0x8, 0xfffffffa, 0x9e9f, 0x0, 0x7f, 0xffff, 0xffffff01, 0x8, 0x8, 0x1, 0x101, 0x6, 0x449b4ba5, 0x1, 0x4, 0xfffffffd, 0x200, 0x1, 0x5, 0xffffffff, 0xa9, 0xb, 0x0, 0x0, 0x4a7, 0x3, 0xbc8, 0x0, 0x9f, 0xfffffff7, 0x5, 0x5, 0x100, 0x9, 0xffffffff, 0x7, 0xa, 0x8, 0x7fffffff, 0x4, 0x7f, 0x200, 0x8, 0x4, 0x200, 0x800, 0x8001, 0x8, 0x3, 0x0, 0x7, 0xee, 0x7, 0x7, 0x8001, 0xfffffffb, 0x1c, 0x1, 0x8001, 0x1, 0x2, 0xd, 0x7, 0xcf3, 0x2, 0x4, 0x9, 0x1, 0xfffffb0e, 0x10001, 0x3, 0x6, 0x80, 0x3b3, 0x4, 0x7f, 0x9, 0x5, 0xecc, 0x4, 0x7, 0x7, 0x2, 0x6, 0xbf7, 0xc2, 0x9, 0x8, 0x7, 0x6000, 0x3, 0x2, 0x7f, 0x4, 0x4, 0x5, 0xffff, 0xde, 0x2, 0x4, 0x788f77b1, 0x4, 0x6, 0xffffff80, 0x0, 0x0, 0x3, 0x7, 0x4, 0x17e9, 0x6, 0x6, 0x675, 0xd, 0x4, 0x5, 0xf, 0x2, 0x80000001, 0x8, 0x7fffffff, 0x6, 0x400, 0xe081, 0x1, 0x7f, 0x8, 0x4, 0x1, 0x8, 0x6, 0xb0, 0x3, 0x8, 0x9, 0xd, 0x81, 0x6, 0x400, 0x4, 0x80, 0x80000001, 0x3, 0x7c, 0x2, 0x400, 0x8000, 0xffffffff, 0xdcd, 0x4, 0x10, 0xffff887b, 0x101, 0x25a0, 0x80, 0x1, 0xffffffff, 0x2, 0x5, 0x8]}]}}]}, 0x868}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x2a, 0x4101, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r2, 0x0, 0xffffffbfffff8000, 0x8) close(r8) syz_usb_control_io$lan78xx(r0, &(0x7f0000000140)={0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="00040f0000000f039825ffff2ed007005571bb98e1031e40bb06"], &(0x7f0000000080)={0x0, 0x3, 0x76, @string={0x76, 0x3, "6aa81a3b6227c1c6ebc8d9fe24d07a27df5d54f10265d6d7ebd36d0851144ee1c23c3baa3351be1f5ccd8b9c70e21cc86797fea821392e885cfccdc19d9d96a5728d6c011bd0011731d01d2c826f22c6b27a38fc0b9153f2091528576584e124967d9320e854586d0dd8295a416a12dccd041eea"}}}, &(0x7f0000000300)={0x34, &(0x7f0000000180)={0x40, 0x13, 0x15, "eddfda89a153085f3856d4df04965942e11b0784a7"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000240)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000000280)={0x40, 0xa0, 0x4, 0x9}, &(0x7f00000002c0)={0xc0, 0xa2, 0x2f, "f99e09f1ce60240f1a3710c71d4de3f909237e3b3a8e6cb34861f5740ff1ae7970e68a3f55db9346dca68822ebad8f"}}) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x54c, 0xba0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x91, 0x0, 0x5, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x0, 0xc8, 0x1, {0x22, 0xe13}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x2}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0xf, 0x48, 0x82, 0x8, 0x10}, 0x3b, &(0x7f0000000480)={0x5, 0xf, 0x3b, 0x4, [@ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x1, 0xff00, 0x6, [0xff000f, 0x3f0f, 0xff0030]}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x6, 0x0, 0x9, [0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x8, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0x1, 0x7f}]}, 0x2, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x408}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <1> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 2 programs left: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000f80)={0x14, &(0x7f0000000ec0)={0x20, 0xad8a5354353639bf, 0x53, {0x53, 0x23, "e3ad1ea9b1d2a286c267fe1fe1ab9c9daefb5dbb8affa41916dd9de65558e845b601f07a79cb1cb2cff7e338ba06508c7e36dbcef0cad0a85d198971fbebeb4a5cefc0c858240b283d474f3cf9589f0225"}}, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001280)={0x44, &(0x7f0000000fc0)={0x0, 0x16, 0xbb, "7a122eeb9d25687880b6faf5aefdb4299f436e43dcb78ea1bdc2e1a150bee0e6c7bfbbf54b9c4f4222244d781fc5c42ce96663c57fb48a1f7432174b836cbb284da0c8dc91548c6299b66e965101bd2d4a70a43385ad22ce13e57cc5621a931e65c54b23de10979e1c7c8184edcdcbd6cd53bec6cd71f8fcb8072660a85edf6114fdfd1d95f253898b6706e34e67411aafb50e3e97f4df6d27501fdcc0cf5bfd46c2e83e4127863aada9dd0b414385d9618e6446dfa9b47b14572e"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000001100)={0x0, 0x8, 0x1}, &(0x7f0000001140)={0x20, 0x80, 0x1c, {0x4, 0x1ff, 0x9, 0xf, 0x3, 0xdb0d, 0x5977, 0x9, 0x6, 0xff, 0x0, 0x5}}, &(0x7f0000001180)={0x20, 0x85, 0x4, 0xb}, &(0x7f00000011c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001200)={0x20, 0x87, 0x2}, &(0x7f0000001240)={0x20, 0x89, 0x2, 0x1}}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtclass={0x868, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x83c, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000, 0x0, 0x0, 0x10000}}, @TCA_HTB_RTAB={0x404, 0x4, [0x9, 0x4, 0x7, 0x8, 0x11c86bdd, 0x48, 0x1, 0xb1, 0xffff, 0xc, 0x2, 0x1, 0x3, 0x2, 0x1ff, 0x8, 0x1, 0x401, 0x5, 0x0, 0x7fffffff, 0xff, 0x5, 0x5, 0x8, 0x4, 0x3, 0x8cc, 0xffffff7f, 0xf, 0x1, 0x8, 0x2488f245, 0xf8, 0xff, 0xd, 0x7fff, 0x7, 0x3, 0x5, 0x60000, 0x386, 0xb43, 0x79, 0x80000001, 0x200, 0x2, 0x4, 0x9, 0x80, 0xfffffff9, 0x7fffffff, 0x40, 0xd18, 0x0, 0xe, 0x7ff, 0x9, 0x7, 0x1dd, 0x6, 0x0, 0xc, 0x4, 0x6, 0x4, 0x3, 0x8, 0x2, 0x8, 0x80, 0xff, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x7, 0x3, 0xffff, 0x30, 0xa, 0xce, 0xffffffff, 0x2, 0x2, 0x1328, 0xfffffffb, 0x4, 0x2, 0x9, 0x2, 0x4, 0x8, 0xcf25, 0x0, 0xf29, 0xa, 0xfffffff9, 0xa, 0xa, 0x4, 0x800, 0x8, 0x1000, 0x2, 0xfffffffb, 0x1, 0x474, 0x3, 0x1, 0xfffffffc, 0x7, 0x9, 0x3, 0x2, 0x7, 0x764, 0xfffffde3, 0x7, 0x80, 0x2, 0x3632, 0x48, 0x4, 0xd4e, 0x4, 0x907, 0x3ff, 0x2, 0x4, 0x7, 0x401, 0x80, 0x80000001, 0x5, 0x1ff, 0x100, 0x6, 0x6, 0x649, 0xfffffffa, 0x1, 0x6, 0xfffffffe, 0xdb, 0x10000, 0x80000000, 0x1, 0xffff, 0x100, 0x4, 0x6, 0x3, 0x10, 0x902, 0x10, 0x0, 0x6, 0x80000, 0x0, 0x7, 0x0, 0x4, 0x6a82, 0x1, 0x6, 0x0, 0x7, 0x248, 0x7fff, 0x37, 0x5, 0x6, 0x43, 0x949, 0xffffffff, 0x8, 0xb, 0x0, 0x9, 0x0, 0x1, 0x1, 0x6, 0x2, 0x8, 0x4, 0x5, 0x5a69, 0x1, 0x1, 0x55, 0x1, 0x2, 0x8, 0x5, 0x55d, 0x7fffffff, 0x8001, 0x6, 0x81, 0xe752, 0xf59, 0x4c8, 0x7, 0x10, 0x1, 0xb5e, 0x2, 0x2, 0x1, 0x5, 0x697, 0xc, 0x3, 0x6, 0x4, 0x66a6000, 0xc, 0x5, 0x400, 0xd058, 0x6, 0x1, 0x3, 0x1, 0x4, 0x7b, 0x5, 0x8, 0x7, 0x1, 0xf, 0x3, 0x3, 0x7, 0x63e4, 0x7, 0xb0e, 0x401, 0x4, 0x10001, 0x2, 0x7fffffff, 0x800, 0x8, 0xe0, 0x1, 0x2, 0x8000, 0x7f, 0xfd4d, 0x1, 0x9, 0x9]}, @TCA_HTB_CTAB={0x404, 0x3, [0x3, 0xffffffff, 0x7, 0xff, 0x1000, 0x0, 0x0, 0x9, 0x4ae042e5, 0x8, 0xff, 0x4, 0x800, 0x80000000, 0x4, 0x9, 0x10001, 0x0, 0xf78, 0x6, 0x10, 0x190, 0x7, 0x4, 0x835a, 0x3, 0x5, 0x0, 0x5, 0x8, 0x4, 0x9e2, 0x3, 0xfffffff9, 0x7, 0xfff, 0x1000, 0x3, 0x5, 0x100, 0xfff, 0x40, 0x2, 0x400, 0x69a, 0x6, 0x9, 0x1d, 0x0, 0x4e1b, 0x8c, 0xb, 0x8, 0x9, 0x7ff, 0x0, 0x3, 0x400, 0xec, 0x7, 0xe, 0x1, 0x8d, 0x4, 0x2, 0x2, 0x7, 0x3, 0x4, 0x9, 0x9, 0xfffffffe, 0x1, 0x0, 0xd7, 0xc, 0xf, 0x4, 0x6, 0x5, 0x4607, 0x0, 0x3, 0xd32, 0xfffffffc, 0x6, 0x4c87, 0x70, 0x40, 0x2, 0x0, 0xd, 0x2, 0x9a17, 0x4, 0x3, 0x8, 0xfffffffa, 0x9e9f, 0x0, 0x7f, 0xffff, 0xffffff01, 0x8, 0x8, 0x1, 0x101, 0x6, 0x449b4ba5, 0x1, 0x4, 0xfffffffd, 0x200, 0x1, 0x5, 0xffffffff, 0xa9, 0xb, 0x0, 0x0, 0x4a7, 0x3, 0xbc8, 0x0, 0x9f, 0xfffffff7, 0x5, 0x5, 0x100, 0x9, 0xffffffff, 0x7, 0xa, 0x8, 0x7fffffff, 0x4, 0x7f, 0x200, 0x8, 0x4, 0x200, 0x800, 0x8001, 0x8, 0x3, 0x0, 0x7, 0xee, 0x7, 0x7, 0x8001, 0xfffffffb, 0x1c, 0x1, 0x8001, 0x1, 0x2, 0xd, 0x7, 0xcf3, 0x2, 0x4, 0x9, 0x1, 0xfffffb0e, 0x10001, 0x3, 0x6, 0x80, 0x3b3, 0x4, 0x7f, 0x9, 0x5, 0xecc, 0x4, 0x7, 0x7, 0x2, 0x6, 0xbf7, 0xc2, 0x9, 0x8, 0x7, 0x6000, 0x3, 0x2, 0x7f, 0x4, 0x4, 0x5, 0xffff, 0xde, 0x2, 0x4, 0x788f77b1, 0x4, 0x6, 0xffffff80, 0x0, 0x0, 0x3, 0x7, 0x4, 0x17e9, 0x6, 0x6, 0x675, 0xd, 0x4, 0x5, 0xf, 0x2, 0x80000001, 0x8, 0x7fffffff, 0x6, 0x400, 0xe081, 0x1, 0x7f, 0x8, 0x4, 0x1, 0x8, 0x6, 0xb0, 0x3, 0x8, 0x9, 0xd, 0x81, 0x6, 0x400, 0x4, 0x80, 0x80000001, 0x3, 0x7c, 0x2, 0x400, 0x8000, 0xffffffff, 0xdcd, 0x4, 0x10, 0xffff887b, 0x101, 0x25a0, 0x80, 0x1, 0xffffffff, 0x2, 0x5, 0x8]}]}}]}, 0x868}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x2a, 0x4101, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r2, 0x0, 0xffffffbfffff8000, 0x8) close(r8) syz_usb_control_io$lan78xx(r0, &(0x7f0000000140)={0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="00040f0000000f039825ffff2ed007005571bb98e1031e40bb06"], &(0x7f0000000080)={0x0, 0x3, 0x76, @string={0x76, 0x3, "6aa81a3b6227c1c6ebc8d9fe24d07a27df5d54f10265d6d7ebd36d0851144ee1c23c3baa3351be1f5ccd8b9c70e21cc86797fea821392e885cfccdc19d9d96a5728d6c011bd0011731d01d2c826f22c6b27a38fc0b9153f2091528576584e124967d9320e854586d0dd8295a416a12dccd041eea"}}}, &(0x7f0000000300)={0x34, &(0x7f0000000180)={0x40, 0x13, 0x15, "eddfda89a153085f3856d4df04965942e11b0784a7"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000240)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000000280)={0x40, 0xa0, 0x4, 0x9}, &(0x7f00000002c0)={0xc0, 0xa2, 0x2f, "f99e09f1ce60240f1a3710c71d4de3f909237e3b3a8e6cb34861f5740ff1ae7970e68a3f55db9346dca68822ebad8f"}}) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x54c, 0xba0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x91, 0x0, 0x5, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x0, 0xc8, 0x1, {0x22, 0xe13}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x2}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0xf, 0x48, 0x82, 0x8, 0x10}, 0x3b, &(0x7f0000000480)={0x5, 0xf, 0x3b, 0x4, [@ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x1, 0xff00, 0x6, [0xff000f, 0x3f0f, 0xff0030]}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x6, 0x0, 0x9, [0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x8, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0x1, 0x7f}]}, 0x2, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x408}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) bisect: trying to concatenate bisect: concatenate 2 entries minimizing program #0 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [20, 29] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000f80)={0x14, &(0x7f0000000ec0)={0x20, 0xad8a5354353639bf, 0x53, {0x53, 0x23, "e3ad1ea9b1d2a286c267fe1fe1ab9c9daefb5dbb8affa41916dd9de65558e845b601f07a79cb1cb2cff7e338ba06508c7e36dbcef0cad0a85d198971fbebeb4a5cefc0c858240b283d474f3cf9589f0225"}}, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001280)={0x44, &(0x7f0000000fc0)={0x0, 0x16, 0xbb, "7a122eeb9d25687880b6faf5aefdb4299f436e43dcb78ea1bdc2e1a150bee0e6c7bfbbf54b9c4f4222244d781fc5c42ce96663c57fb48a1f7432174b836cbb284da0c8dc91548c6299b66e965101bd2d4a70a43385ad22ce13e57cc5621a931e65c54b23de10979e1c7c8184edcdcbd6cd53bec6cd71f8fcb8072660a85edf6114fdfd1d95f253898b6706e34e67411aafb50e3e97f4df6d27501fdcc0cf5bfd46c2e83e4127863aada9dd0b414385d9618e6446dfa9b47b14572e"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000001100)={0x0, 0x8, 0x1}, &(0x7f0000001140)={0x20, 0x80, 0x1c, {0x4, 0x1ff, 0x9, 0xf, 0x3, 0xdb0d, 0x5977, 0x9, 0x6, 0xff, 0x0, 0x5}}, &(0x7f0000001180)={0x20, 0x85, 0x4, 0xb}, &(0x7f00000011c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001200)={0x20, 0x87, 0x2}, &(0x7f0000001240)={0x20, 0x89, 0x2, 0x1}}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtclass={0x868, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x83c, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000, 0x0, 0x0, 0x10000}}, @TCA_HTB_RTAB={0x404, 0x4, [0x9, 0x4, 0x7, 0x8, 0x11c86bdd, 0x48, 0x1, 0xb1, 0xffff, 0xc, 0x2, 0x1, 0x3, 0x2, 0x1ff, 0x8, 0x1, 0x401, 0x5, 0x0, 0x7fffffff, 0xff, 0x5, 0x5, 0x8, 0x4, 0x3, 0x8cc, 0xffffff7f, 0xf, 0x1, 0x8, 0x2488f245, 0xf8, 0xff, 0xd, 0x7fff, 0x7, 0x3, 0x5, 0x60000, 0x386, 0xb43, 0x79, 0x80000001, 0x200, 0x2, 0x4, 0x9, 0x80, 0xfffffff9, 0x7fffffff, 0x40, 0xd18, 0x0, 0xe, 0x7ff, 0x9, 0x7, 0x1dd, 0x6, 0x0, 0xc, 0x4, 0x6, 0x4, 0x3, 0x8, 0x2, 0x8, 0x80, 0xff, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x7, 0x3, 0xffff, 0x30, 0xa, 0xce, 0xffffffff, 0x2, 0x2, 0x1328, 0xfffffffb, 0x4, 0x2, 0x9, 0x2, 0x4, 0x8, 0xcf25, 0x0, 0xf29, 0xa, 0xfffffff9, 0xa, 0xa, 0x4, 0x800, 0x8, 0x1000, 0x2, 0xfffffffb, 0x1, 0x474, 0x3, 0x1, 0xfffffffc, 0x7, 0x9, 0x3, 0x2, 0x7, 0x764, 0xfffffde3, 0x7, 0x80, 0x2, 0x3632, 0x48, 0x4, 0xd4e, 0x4, 0x907, 0x3ff, 0x2, 0x4, 0x7, 0x401, 0x80, 0x80000001, 0x5, 0x1ff, 0x100, 0x6, 0x6, 0x649, 0xfffffffa, 0x1, 0x6, 0xfffffffe, 0xdb, 0x10000, 0x80000000, 0x1, 0xffff, 0x100, 0x4, 0x6, 0x3, 0x10, 0x902, 0x10, 0x0, 0x6, 0x80000, 0x0, 0x7, 0x0, 0x4, 0x6a82, 0x1, 0x6, 0x0, 0x7, 0x248, 0x7fff, 0x37, 0x5, 0x6, 0x43, 0x949, 0xffffffff, 0x8, 0xb, 0x0, 0x9, 0x0, 0x1, 0x1, 0x6, 0x2, 0x8, 0x4, 0x5, 0x5a69, 0x1, 0x1, 0x55, 0x1, 0x2, 0x8, 0x5, 0x55d, 0x7fffffff, 0x8001, 0x6, 0x81, 0xe752, 0xf59, 0x4c8, 0x7, 0x10, 0x1, 0xb5e, 0x2, 0x2, 0x1, 0x5, 0x697, 0xc, 0x3, 0x6, 0x4, 0x66a6000, 0xc, 0x5, 0x400, 0xd058, 0x6, 0x1, 0x3, 0x1, 0x4, 0x7b, 0x5, 0x8, 0x7, 0x1, 0xf, 0x3, 0x3, 0x7, 0x63e4, 0x7, 0xb0e, 0x401, 0x4, 0x10001, 0x2, 0x7fffffff, 0x800, 0x8, 0xe0, 0x1, 0x2, 0x8000, 0x7f, 0xfd4d, 0x1, 0x9, 0x9]}, @TCA_HTB_CTAB={0x404, 0x3, [0x3, 0xffffffff, 0x7, 0xff, 0x1000, 0x0, 0x0, 0x9, 0x4ae042e5, 0x8, 0xff, 0x4, 0x800, 0x80000000, 0x4, 0x9, 0x10001, 0x0, 0xf78, 0x6, 0x10, 0x190, 0x7, 0x4, 0x835a, 0x3, 0x5, 0x0, 0x5, 0x8, 0x4, 0x9e2, 0x3, 0xfffffff9, 0x7, 0xfff, 0x1000, 0x3, 0x5, 0x100, 0xfff, 0x40, 0x2, 0x400, 0x69a, 0x6, 0x9, 0x1d, 0x0, 0x4e1b, 0x8c, 0xb, 0x8, 0x9, 0x7ff, 0x0, 0x3, 0x400, 0xec, 0x7, 0xe, 0x1, 0x8d, 0x4, 0x2, 0x2, 0x7, 0x3, 0x4, 0x9, 0x9, 0xfffffffe, 0x1, 0x0, 0xd7, 0xc, 0xf, 0x4, 0x6, 0x5, 0x4607, 0x0, 0x3, 0xd32, 0xfffffffc, 0x6, 0x4c87, 0x70, 0x40, 0x2, 0x0, 0xd, 0x2, 0x9a17, 0x4, 0x3, 0x8, 0xfffffffa, 0x9e9f, 0x0, 0x7f, 0xffff, 0xffffff01, 0x8, 0x8, 0x1, 0x101, 0x6, 0x449b4ba5, 0x1, 0x4, 0xfffffffd, 0x200, 0x1, 0x5, 0xffffffff, 0xa9, 0xb, 0x0, 0x0, 0x4a7, 0x3, 0xbc8, 0x0, 0x9f, 0xfffffff7, 0x5, 0x5, 0x100, 0x9, 0xffffffff, 0x7, 0xa, 0x8, 0x7fffffff, 0x4, 0x7f, 0x200, 0x8, 0x4, 0x200, 0x800, 0x8001, 0x8, 0x3, 0x0, 0x7, 0xee, 0x7, 0x7, 0x8001, 0xfffffffb, 0x1c, 0x1, 0x8001, 0x1, 0x2, 0xd, 0x7, 0xcf3, 0x2, 0x4, 0x9, 0x1, 0xfffffb0e, 0x10001, 0x3, 0x6, 0x80, 0x3b3, 0x4, 0x7f, 0x9, 0x5, 0xecc, 0x4, 0x7, 0x7, 0x2, 0x6, 0xbf7, 0xc2, 0x9, 0x8, 0x7, 0x6000, 0x3, 0x2, 0x7f, 0x4, 0x4, 0x5, 0xffff, 0xde, 0x2, 0x4, 0x788f77b1, 0x4, 0x6, 0xffffff80, 0x0, 0x0, 0x3, 0x7, 0x4, 0x17e9, 0x6, 0x6, 0x675, 0xd, 0x4, 0x5, 0xf, 0x2, 0x80000001, 0x8, 0x7fffffff, 0x6, 0x400, 0xe081, 0x1, 0x7f, 0x8, 0x4, 0x1, 0x8, 0x6, 0xb0, 0x3, 0x8, 0x9, 0xd, 0x81, 0x6, 0x400, 0x4, 0x80, 0x80000001, 0x3, 0x7c, 0x2, 0x400, 0x8000, 0xffffffff, 0xdcd, 0x4, 0x10, 0xffff887b, 0x101, 0x25a0, 0x80, 0x1, 0xffffffff, 0x2, 0x5, 0x8]}]}}]}, 0x868}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x2a, 0x4101, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r2, 0x0, 0xffffffbfffff8000, 0x8) close(r8) syz_usb_control_io$lan78xx(r0, &(0x7f0000000140)={0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="00040f0000000f039825ffff2ed007005571bb98e1031e40bb06"], &(0x7f0000000080)={0x0, 0x3, 0x76, @string={0x76, 0x3, "6aa81a3b6227c1c6ebc8d9fe24d07a27df5d54f10265d6d7ebd36d0851144ee1c23c3baa3351be1f5ccd8b9c70e21cc86797fea821392e885cfccdc19d9d96a5728d6c011bd0011731d01d2c826f22c6b27a38fc0b9153f2091528576584e124967d9320e854586d0dd8295a416a12dccd041eea"}}}, &(0x7f0000000300)={0x34, &(0x7f0000000180)={0x40, 0x13, 0x15, "eddfda89a153085f3856d4df04965942e11b0784a7"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000240)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000000280)={0x40, 0xa0, 0x4, 0x9}, &(0x7f00000002c0)={0xc0, 0xa2, 0x2f, "f99e09f1ce60240f1a3710c71d4de3f909237e3b3a8e6cb34861f5740ff1ae7970e68a3f55db9346dca68822ebad8f"}}) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x54c, 0xba0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x91, 0x0, 0x5, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x0, 0xc8, 0x1, {0x22, 0xe13}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x2}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0xf, 0x48, 0x82, 0x8, 0x10}, 0x3b, &(0x7f0000000480)={0x5, 0xf, 0x3b, 0x4, [@ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x1, 0xff00, 0x6, [0xff000f, 0x3f0f, 0xff0030]}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x6, 0x0, 0x9, [0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x8, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0x1, 0x7f}]}, 0x2, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x408}}]}) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [19, 29] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000f80)={0x14, &(0x7f0000000ec0)={0x20, 0xad8a5354353639bf, 0x53, {0x53, 0x23, "e3ad1ea9b1d2a286c267fe1fe1ab9c9daefb5dbb8affa41916dd9de65558e845b601f07a79cb1cb2cff7e338ba06508c7e36dbcef0cad0a85d198971fbebeb4a5cefc0c858240b283d474f3cf9589f0225"}}, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001280)={0x44, &(0x7f0000000fc0)={0x0, 0x16, 0xbb, "7a122eeb9d25687880b6faf5aefdb4299f436e43dcb78ea1bdc2e1a150bee0e6c7bfbbf54b9c4f4222244d781fc5c42ce96663c57fb48a1f7432174b836cbb284da0c8dc91548c6299b66e965101bd2d4a70a43385ad22ce13e57cc5621a931e65c54b23de10979e1c7c8184edcdcbd6cd53bec6cd71f8fcb8072660a85edf6114fdfd1d95f253898b6706e34e67411aafb50e3e97f4df6d27501fdcc0cf5bfd46c2e83e4127863aada9dd0b414385d9618e6446dfa9b47b14572e"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000001100)={0x0, 0x8, 0x1}, &(0x7f0000001140)={0x20, 0x80, 0x1c, {0x4, 0x1ff, 0x9, 0xf, 0x3, 0xdb0d, 0x5977, 0x9, 0x6, 0xff, 0x0, 0x5}}, &(0x7f0000001180)={0x20, 0x85, 0x4, 0xb}, &(0x7f00000011c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001200)={0x20, 0x87, 0x2}, &(0x7f0000001240)={0x20, 0x89, 0x2, 0x1}}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtclass={0x868, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x83c, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000, 0x0, 0x0, 0x10000}}, @TCA_HTB_RTAB={0x404, 0x4, [0x9, 0x4, 0x7, 0x8, 0x11c86bdd, 0x48, 0x1, 0xb1, 0xffff, 0xc, 0x2, 0x1, 0x3, 0x2, 0x1ff, 0x8, 0x1, 0x401, 0x5, 0x0, 0x7fffffff, 0xff, 0x5, 0x5, 0x8, 0x4, 0x3, 0x8cc, 0xffffff7f, 0xf, 0x1, 0x8, 0x2488f245, 0xf8, 0xff, 0xd, 0x7fff, 0x7, 0x3, 0x5, 0x60000, 0x386, 0xb43, 0x79, 0x80000001, 0x200, 0x2, 0x4, 0x9, 0x80, 0xfffffff9, 0x7fffffff, 0x40, 0xd18, 0x0, 0xe, 0x7ff, 0x9, 0x7, 0x1dd, 0x6, 0x0, 0xc, 0x4, 0x6, 0x4, 0x3, 0x8, 0x2, 0x8, 0x80, 0xff, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x7, 0x3, 0xffff, 0x30, 0xa, 0xce, 0xffffffff, 0x2, 0x2, 0x1328, 0xfffffffb, 0x4, 0x2, 0x9, 0x2, 0x4, 0x8, 0xcf25, 0x0, 0xf29, 0xa, 0xfffffff9, 0xa, 0xa, 0x4, 0x800, 0x8, 0x1000, 0x2, 0xfffffffb, 0x1, 0x474, 0x3, 0x1, 0xfffffffc, 0x7, 0x9, 0x3, 0x2, 0x7, 0x764, 0xfffffde3, 0x7, 0x80, 0x2, 0x3632, 0x48, 0x4, 0xd4e, 0x4, 0x907, 0x3ff, 0x2, 0x4, 0x7, 0x401, 0x80, 0x80000001, 0x5, 0x1ff, 0x100, 0x6, 0x6, 0x649, 0xfffffffa, 0x1, 0x6, 0xfffffffe, 0xdb, 0x10000, 0x80000000, 0x1, 0xffff, 0x100, 0x4, 0x6, 0x3, 0x10, 0x902, 0x10, 0x0, 0x6, 0x80000, 0x0, 0x7, 0x0, 0x4, 0x6a82, 0x1, 0x6, 0x0, 0x7, 0x248, 0x7fff, 0x37, 0x5, 0x6, 0x43, 0x949, 0xffffffff, 0x8, 0xb, 0x0, 0x9, 0x0, 0x1, 0x1, 0x6, 0x2, 0x8, 0x4, 0x5, 0x5a69, 0x1, 0x1, 0x55, 0x1, 0x2, 0x8, 0x5, 0x55d, 0x7fffffff, 0x8001, 0x6, 0x81, 0xe752, 0xf59, 0x4c8, 0x7, 0x10, 0x1, 0xb5e, 0x2, 0x2, 0x1, 0x5, 0x697, 0xc, 0x3, 0x6, 0x4, 0x66a6000, 0xc, 0x5, 0x400, 0xd058, 0x6, 0x1, 0x3, 0x1, 0x4, 0x7b, 0x5, 0x8, 0x7, 0x1, 0xf, 0x3, 0x3, 0x7, 0x63e4, 0x7, 0xb0e, 0x401, 0x4, 0x10001, 0x2, 0x7fffffff, 0x800, 0x8, 0xe0, 0x1, 0x2, 0x8000, 0x7f, 0xfd4d, 0x1, 0x9, 0x9]}, @TCA_HTB_CTAB={0x404, 0x3, [0x3, 0xffffffff, 0x7, 0xff, 0x1000, 0x0, 0x0, 0x9, 0x4ae042e5, 0x8, 0xff, 0x4, 0x800, 0x80000000, 0x4, 0x9, 0x10001, 0x0, 0xf78, 0x6, 0x10, 0x190, 0x7, 0x4, 0x835a, 0x3, 0x5, 0x0, 0x5, 0x8, 0x4, 0x9e2, 0x3, 0xfffffff9, 0x7, 0xfff, 0x1000, 0x3, 0x5, 0x100, 0xfff, 0x40, 0x2, 0x400, 0x69a, 0x6, 0x9, 0x1d, 0x0, 0x4e1b, 0x8c, 0xb, 0x8, 0x9, 0x7ff, 0x0, 0x3, 0x400, 0xec, 0x7, 0xe, 0x1, 0x8d, 0x4, 0x2, 0x2, 0x7, 0x3, 0x4, 0x9, 0x9, 0xfffffffe, 0x1, 0x0, 0xd7, 0xc, 0xf, 0x4, 0x6, 0x5, 0x4607, 0x0, 0x3, 0xd32, 0xfffffffc, 0x6, 0x4c87, 0x70, 0x40, 0x2, 0x0, 0xd, 0x2, 0x9a17, 0x4, 0x3, 0x8, 0xfffffffa, 0x9e9f, 0x0, 0x7f, 0xffff, 0xffffff01, 0x8, 0x8, 0x1, 0x101, 0x6, 0x449b4ba5, 0x1, 0x4, 0xfffffffd, 0x200, 0x1, 0x5, 0xffffffff, 0xa9, 0xb, 0x0, 0x0, 0x4a7, 0x3, 0xbc8, 0x0, 0x9f, 0xfffffff7, 0x5, 0x5, 0x100, 0x9, 0xffffffff, 0x7, 0xa, 0x8, 0x7fffffff, 0x4, 0x7f, 0x200, 0x8, 0x4, 0x200, 0x800, 0x8001, 0x8, 0x3, 0x0, 0x7, 0xee, 0x7, 0x7, 0x8001, 0xfffffffb, 0x1c, 0x1, 0x8001, 0x1, 0x2, 0xd, 0x7, 0xcf3, 0x2, 0x4, 0x9, 0x1, 0xfffffb0e, 0x10001, 0x3, 0x6, 0x80, 0x3b3, 0x4, 0x7f, 0x9, 0x5, 0xecc, 0x4, 0x7, 0x7, 0x2, 0x6, 0xbf7, 0xc2, 0x9, 0x8, 0x7, 0x6000, 0x3, 0x2, 0x7f, 0x4, 0x4, 0x5, 0xffff, 0xde, 0x2, 0x4, 0x788f77b1, 0x4, 0x6, 0xffffff80, 0x0, 0x0, 0x3, 0x7, 0x4, 0x17e9, 0x6, 0x6, 0x675, 0xd, 0x4, 0x5, 0xf, 0x2, 0x80000001, 0x8, 0x7fffffff, 0x6, 0x400, 0xe081, 0x1, 0x7f, 0x8, 0x4, 0x1, 0x8, 0x6, 0xb0, 0x3, 0x8, 0x9, 0xd, 0x81, 0x6, 0x400, 0x4, 0x80, 0x80000001, 0x3, 0x7c, 0x2, 0x400, 0x8000, 0xffffffff, 0xdcd, 0x4, 0x10, 0xffff887b, 0x101, 0x25a0, 0x80, 0x1, 0xffffffff, 0x2, 0x5, 0x8]}]}}]}, 0x868}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x2a, 0x4101, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r2, 0x0, 0xffffffbfffff8000, 0x8) close(r8) syz_usb_control_io$lan78xx(r0, &(0x7f0000000140)={0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="00040f0000000f039825ffff2ed007005571bb98e1031e40bb06"], &(0x7f0000000080)={0x0, 0x3, 0x76, @string={0x76, 0x3, "6aa81a3b6227c1c6ebc8d9fe24d07a27df5d54f10265d6d7ebd36d0851144ee1c23c3baa3351be1f5ccd8b9c70e21cc86797fea821392e885cfccdc19d9d96a5728d6c011bd0011731d01d2c826f22c6b27a38fc0b9153f2091528576584e124967d9320e854586d0dd8295a416a12dccd041eea"}}}, &(0x7f0000000300)={0x34, &(0x7f0000000180)={0x40, 0x13, 0x15, "eddfda89a153085f3856d4df04965942e11b0784a7"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000240)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000000280)={0x40, 0xa0, 0x4, 0x9}, &(0x7f00000002c0)={0xc0, 0xa2, 0x2f, "f99e09f1ce60240f1a3710c71d4de3f909237e3b3a8e6cb34861f5740ff1ae7970e68a3f55db9346dca68822ebad8f"}}) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [18, 29] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000f80)={0x14, &(0x7f0000000ec0)={0x20, 0xad8a5354353639bf, 0x53, {0x53, 0x23, "e3ad1ea9b1d2a286c267fe1fe1ab9c9daefb5dbb8affa41916dd9de65558e845b601f07a79cb1cb2cff7e338ba06508c7e36dbcef0cad0a85d198971fbebeb4a5cefc0c858240b283d474f3cf9589f0225"}}, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001280)={0x44, &(0x7f0000000fc0)={0x0, 0x16, 0xbb, "7a122eeb9d25687880b6faf5aefdb4299f436e43dcb78ea1bdc2e1a150bee0e6c7bfbbf54b9c4f4222244d781fc5c42ce96663c57fb48a1f7432174b836cbb284da0c8dc91548c6299b66e965101bd2d4a70a43385ad22ce13e57cc5621a931e65c54b23de10979e1c7c8184edcdcbd6cd53bec6cd71f8fcb8072660a85edf6114fdfd1d95f253898b6706e34e67411aafb50e3e97f4df6d27501fdcc0cf5bfd46c2e83e4127863aada9dd0b414385d9618e6446dfa9b47b14572e"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000001100)={0x0, 0x8, 0x1}, &(0x7f0000001140)={0x20, 0x80, 0x1c, {0x4, 0x1ff, 0x9, 0xf, 0x3, 0xdb0d, 0x5977, 0x9, 0x6, 0xff, 0x0, 0x5}}, &(0x7f0000001180)={0x20, 0x85, 0x4, 0xb}, &(0x7f00000011c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001200)={0x20, 0x87, 0x2}, &(0x7f0000001240)={0x20, 0x89, 0x2, 0x1}}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtclass={0x868, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x83c, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000, 0x0, 0x0, 0x10000}}, @TCA_HTB_RTAB={0x404, 0x4, [0x9, 0x4, 0x7, 0x8, 0x11c86bdd, 0x48, 0x1, 0xb1, 0xffff, 0xc, 0x2, 0x1, 0x3, 0x2, 0x1ff, 0x8, 0x1, 0x401, 0x5, 0x0, 0x7fffffff, 0xff, 0x5, 0x5, 0x8, 0x4, 0x3, 0x8cc, 0xffffff7f, 0xf, 0x1, 0x8, 0x2488f245, 0xf8, 0xff, 0xd, 0x7fff, 0x7, 0x3, 0x5, 0x60000, 0x386, 0xb43, 0x79, 0x80000001, 0x200, 0x2, 0x4, 0x9, 0x80, 0xfffffff9, 0x7fffffff, 0x40, 0xd18, 0x0, 0xe, 0x7ff, 0x9, 0x7, 0x1dd, 0x6, 0x0, 0xc, 0x4, 0x6, 0x4, 0x3, 0x8, 0x2, 0x8, 0x80, 0xff, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x7, 0x3, 0xffff, 0x30, 0xa, 0xce, 0xffffffff, 0x2, 0x2, 0x1328, 0xfffffffb, 0x4, 0x2, 0x9, 0x2, 0x4, 0x8, 0xcf25, 0x0, 0xf29, 0xa, 0xfffffff9, 0xa, 0xa, 0x4, 0x800, 0x8, 0x1000, 0x2, 0xfffffffb, 0x1, 0x474, 0x3, 0x1, 0xfffffffc, 0x7, 0x9, 0x3, 0x2, 0x7, 0x764, 0xfffffde3, 0x7, 0x80, 0x2, 0x3632, 0x48, 0x4, 0xd4e, 0x4, 0x907, 0x3ff, 0x2, 0x4, 0x7, 0x401, 0x80, 0x80000001, 0x5, 0x1ff, 0x100, 0x6, 0x6, 0x649, 0xfffffffa, 0x1, 0x6, 0xfffffffe, 0xdb, 0x10000, 0x80000000, 0x1, 0xffff, 0x100, 0x4, 0x6, 0x3, 0x10, 0x902, 0x10, 0x0, 0x6, 0x80000, 0x0, 0x7, 0x0, 0x4, 0x6a82, 0x1, 0x6, 0x0, 0x7, 0x248, 0x7fff, 0x37, 0x5, 0x6, 0x43, 0x949, 0xffffffff, 0x8, 0xb, 0x0, 0x9, 0x0, 0x1, 0x1, 0x6, 0x2, 0x8, 0x4, 0x5, 0x5a69, 0x1, 0x1, 0x55, 0x1, 0x2, 0x8, 0x5, 0x55d, 0x7fffffff, 0x8001, 0x6, 0x81, 0xe752, 0xf59, 0x4c8, 0x7, 0x10, 0x1, 0xb5e, 0x2, 0x2, 0x1, 0x5, 0x697, 0xc, 0x3, 0x6, 0x4, 0x66a6000, 0xc, 0x5, 0x400, 0xd058, 0x6, 0x1, 0x3, 0x1, 0x4, 0x7b, 0x5, 0x8, 0x7, 0x1, 0xf, 0x3, 0x3, 0x7, 0x63e4, 0x7, 0xb0e, 0x401, 0x4, 0x10001, 0x2, 0x7fffffff, 0x800, 0x8, 0xe0, 0x1, 0x2, 0x8000, 0x7f, 0xfd4d, 0x1, 0x9, 0x9]}, @TCA_HTB_CTAB={0x404, 0x3, [0x3, 0xffffffff, 0x7, 0xff, 0x1000, 0x0, 0x0, 0x9, 0x4ae042e5, 0x8, 0xff, 0x4, 0x800, 0x80000000, 0x4, 0x9, 0x10001, 0x0, 0xf78, 0x6, 0x10, 0x190, 0x7, 0x4, 0x835a, 0x3, 0x5, 0x0, 0x5, 0x8, 0x4, 0x9e2, 0x3, 0xfffffff9, 0x7, 0xfff, 0x1000, 0x3, 0x5, 0x100, 0xfff, 0x40, 0x2, 0x400, 0x69a, 0x6, 0x9, 0x1d, 0x0, 0x4e1b, 0x8c, 0xb, 0x8, 0x9, 0x7ff, 0x0, 0x3, 0x400, 0xec, 0x7, 0xe, 0x1, 0x8d, 0x4, 0x2, 0x2, 0x7, 0x3, 0x4, 0x9, 0x9, 0xfffffffe, 0x1, 0x0, 0xd7, 0xc, 0xf, 0x4, 0x6, 0x5, 0x4607, 0x0, 0x3, 0xd32, 0xfffffffc, 0x6, 0x4c87, 0x70, 0x40, 0x2, 0x0, 0xd, 0x2, 0x9a17, 0x4, 0x3, 0x8, 0xfffffffa, 0x9e9f, 0x0, 0x7f, 0xffff, 0xffffff01, 0x8, 0x8, 0x1, 0x101, 0x6, 0x449b4ba5, 0x1, 0x4, 0xfffffffd, 0x200, 0x1, 0x5, 0xffffffff, 0xa9, 0xb, 0x0, 0x0, 0x4a7, 0x3, 0xbc8, 0x0, 0x9f, 0xfffffff7, 0x5, 0x5, 0x100, 0x9, 0xffffffff, 0x7, 0xa, 0x8, 0x7fffffff, 0x4, 0x7f, 0x200, 0x8, 0x4, 0x200, 0x800, 0x8001, 0x8, 0x3, 0x0, 0x7, 0xee, 0x7, 0x7, 0x8001, 0xfffffffb, 0x1c, 0x1, 0x8001, 0x1, 0x2, 0xd, 0x7, 0xcf3, 0x2, 0x4, 0x9, 0x1, 0xfffffb0e, 0x10001, 0x3, 0x6, 0x80, 0x3b3, 0x4, 0x7f, 0x9, 0x5, 0xecc, 0x4, 0x7, 0x7, 0x2, 0x6, 0xbf7, 0xc2, 0x9, 0x8, 0x7, 0x6000, 0x3, 0x2, 0x7f, 0x4, 0x4, 0x5, 0xffff, 0xde, 0x2, 0x4, 0x788f77b1, 0x4, 0x6, 0xffffff80, 0x0, 0x0, 0x3, 0x7, 0x4, 0x17e9, 0x6, 0x6, 0x675, 0xd, 0x4, 0x5, 0xf, 0x2, 0x80000001, 0x8, 0x7fffffff, 0x6, 0x400, 0xe081, 0x1, 0x7f, 0x8, 0x4, 0x1, 0x8, 0x6, 0xb0, 0x3, 0x8, 0x9, 0xd, 0x81, 0x6, 0x400, 0x4, 0x80, 0x80000001, 0x3, 0x7c, 0x2, 0x400, 0x8000, 0xffffffff, 0xdcd, 0x4, 0x10, 0xffff887b, 0x101, 0x25a0, 0x80, 0x1, 0xffffffff, 0x2, 0x5, 0x8]}]}}]}, 0x868}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x2a, 0x4101, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r2, 0x0, 0xffffffbfffff8000, 0x8) close(r8) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [17, 29] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000f80)={0x14, &(0x7f0000000ec0)={0x20, 0xad8a5354353639bf, 0x53, {0x53, 0x23, "e3ad1ea9b1d2a286c267fe1fe1ab9c9daefb5dbb8affa41916dd9de65558e845b601f07a79cb1cb2cff7e338ba06508c7e36dbcef0cad0a85d198971fbebeb4a5cefc0c858240b283d474f3cf9589f0225"}}, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001280)={0x44, &(0x7f0000000fc0)={0x0, 0x16, 0xbb, "7a122eeb9d25687880b6faf5aefdb4299f436e43dcb78ea1bdc2e1a150bee0e6c7bfbbf54b9c4f4222244d781fc5c42ce96663c57fb48a1f7432174b836cbb284da0c8dc91548c6299b66e965101bd2d4a70a43385ad22ce13e57cc5621a931e65c54b23de10979e1c7c8184edcdcbd6cd53bec6cd71f8fcb8072660a85edf6114fdfd1d95f253898b6706e34e67411aafb50e3e97f4df6d27501fdcc0cf5bfd46c2e83e4127863aada9dd0b414385d9618e6446dfa9b47b14572e"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000001100)={0x0, 0x8, 0x1}, &(0x7f0000001140)={0x20, 0x80, 0x1c, {0x4, 0x1ff, 0x9, 0xf, 0x3, 0xdb0d, 0x5977, 0x9, 0x6, 0xff, 0x0, 0x5}}, &(0x7f0000001180)={0x20, 0x85, 0x4, 0xb}, &(0x7f00000011c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001200)={0x20, 0x87, 0x2}, &(0x7f0000001240)={0x20, 0x89, 0x2, 0x1}}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtclass={0x868, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x83c, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000, 0x0, 0x0, 0x10000}}, @TCA_HTB_RTAB={0x404, 0x4, [0x9, 0x4, 0x7, 0x8, 0x11c86bdd, 0x48, 0x1, 0xb1, 0xffff, 0xc, 0x2, 0x1, 0x3, 0x2, 0x1ff, 0x8, 0x1, 0x401, 0x5, 0x0, 0x7fffffff, 0xff, 0x5, 0x5, 0x8, 0x4, 0x3, 0x8cc, 0xffffff7f, 0xf, 0x1, 0x8, 0x2488f245, 0xf8, 0xff, 0xd, 0x7fff, 0x7, 0x3, 0x5, 0x60000, 0x386, 0xb43, 0x79, 0x80000001, 0x200, 0x2, 0x4, 0x9, 0x80, 0xfffffff9, 0x7fffffff, 0x40, 0xd18, 0x0, 0xe, 0x7ff, 0x9, 0x7, 0x1dd, 0x6, 0x0, 0xc, 0x4, 0x6, 0x4, 0x3, 0x8, 0x2, 0x8, 0x80, 0xff, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x7, 0x3, 0xffff, 0x30, 0xa, 0xce, 0xffffffff, 0x2, 0x2, 0x1328, 0xfffffffb, 0x4, 0x2, 0x9, 0x2, 0x4, 0x8, 0xcf25, 0x0, 0xf29, 0xa, 0xfffffff9, 0xa, 0xa, 0x4, 0x800, 0x8, 0x1000, 0x2, 0xfffffffb, 0x1, 0x474, 0x3, 0x1, 0xfffffffc, 0x7, 0x9, 0x3, 0x2, 0x7, 0x764, 0xfffffde3, 0x7, 0x80, 0x2, 0x3632, 0x48, 0x4, 0xd4e, 0x4, 0x907, 0x3ff, 0x2, 0x4, 0x7, 0x401, 0x80, 0x80000001, 0x5, 0x1ff, 0x100, 0x6, 0x6, 0x649, 0xfffffffa, 0x1, 0x6, 0xfffffffe, 0xdb, 0x10000, 0x80000000, 0x1, 0xffff, 0x100, 0x4, 0x6, 0x3, 0x10, 0x902, 0x10, 0x0, 0x6, 0x80000, 0x0, 0x7, 0x0, 0x4, 0x6a82, 0x1, 0x6, 0x0, 0x7, 0x248, 0x7fff, 0x37, 0x5, 0x6, 0x43, 0x949, 0xffffffff, 0x8, 0xb, 0x0, 0x9, 0x0, 0x1, 0x1, 0x6, 0x2, 0x8, 0x4, 0x5, 0x5a69, 0x1, 0x1, 0x55, 0x1, 0x2, 0x8, 0x5, 0x55d, 0x7fffffff, 0x8001, 0x6, 0x81, 0xe752, 0xf59, 0x4c8, 0x7, 0x10, 0x1, 0xb5e, 0x2, 0x2, 0x1, 0x5, 0x697, 0xc, 0x3, 0x6, 0x4, 0x66a6000, 0xc, 0x5, 0x400, 0xd058, 0x6, 0x1, 0x3, 0x1, 0x4, 0x7b, 0x5, 0x8, 0x7, 0x1, 0xf, 0x3, 0x3, 0x7, 0x63e4, 0x7, 0xb0e, 0x401, 0x4, 0x10001, 0x2, 0x7fffffff, 0x800, 0x8, 0xe0, 0x1, 0x2, 0x8000, 0x7f, 0xfd4d, 0x1, 0x9, 0x9]}, @TCA_HTB_CTAB={0x404, 0x3, [0x3, 0xffffffff, 0x7, 0xff, 0x1000, 0x0, 0x0, 0x9, 0x4ae042e5, 0x8, 0xff, 0x4, 0x800, 0x80000000, 0x4, 0x9, 0x10001, 0x0, 0xf78, 0x6, 0x10, 0x190, 0x7, 0x4, 0x835a, 0x3, 0x5, 0x0, 0x5, 0x8, 0x4, 0x9e2, 0x3, 0xfffffff9, 0x7, 0xfff, 0x1000, 0x3, 0x5, 0x100, 0xfff, 0x40, 0x2, 0x400, 0x69a, 0x6, 0x9, 0x1d, 0x0, 0x4e1b, 0x8c, 0xb, 0x8, 0x9, 0x7ff, 0x0, 0x3, 0x400, 0xec, 0x7, 0xe, 0x1, 0x8d, 0x4, 0x2, 0x2, 0x7, 0x3, 0x4, 0x9, 0x9, 0xfffffffe, 0x1, 0x0, 0xd7, 0xc, 0xf, 0x4, 0x6, 0x5, 0x4607, 0x0, 0x3, 0xd32, 0xfffffffc, 0x6, 0x4c87, 0x70, 0x40, 0x2, 0x0, 0xd, 0x2, 0x9a17, 0x4, 0x3, 0x8, 0xfffffffa, 0x9e9f, 0x0, 0x7f, 0xffff, 0xffffff01, 0x8, 0x8, 0x1, 0x101, 0x6, 0x449b4ba5, 0x1, 0x4, 0xfffffffd, 0x200, 0x1, 0x5, 0xffffffff, 0xa9, 0xb, 0x0, 0x0, 0x4a7, 0x3, 0xbc8, 0x0, 0x9f, 0xfffffff7, 0x5, 0x5, 0x100, 0x9, 0xffffffff, 0x7, 0xa, 0x8, 0x7fffffff, 0x4, 0x7f, 0x200, 0x8, 0x4, 0x200, 0x800, 0x8001, 0x8, 0x3, 0x0, 0x7, 0xee, 0x7, 0x7, 0x8001, 0xfffffffb, 0x1c, 0x1, 0x8001, 0x1, 0x2, 0xd, 0x7, 0xcf3, 0x2, 0x4, 0x9, 0x1, 0xfffffb0e, 0x10001, 0x3, 0x6, 0x80, 0x3b3, 0x4, 0x7f, 0x9, 0x5, 0xecc, 0x4, 0x7, 0x7, 0x2, 0x6, 0xbf7, 0xc2, 0x9, 0x8, 0x7, 0x6000, 0x3, 0x2, 0x7f, 0x4, 0x4, 0x5, 0xffff, 0xde, 0x2, 0x4, 0x788f77b1, 0x4, 0x6, 0xffffff80, 0x0, 0x0, 0x3, 0x7, 0x4, 0x17e9, 0x6, 0x6, 0x675, 0xd, 0x4, 0x5, 0xf, 0x2, 0x80000001, 0x8, 0x7fffffff, 0x6, 0x400, 0xe081, 0x1, 0x7f, 0x8, 0x4, 0x1, 0x8, 0x6, 0xb0, 0x3, 0x8, 0x9, 0xd, 0x81, 0x6, 0x400, 0x4, 0x80, 0x80000001, 0x3, 0x7c, 0x2, 0x400, 0x8000, 0xffffffff, 0xdcd, 0x4, 0x10, 0xffff887b, 0x101, 0x25a0, 0x80, 0x1, 0xffffffff, 0x2, 0x5, 0x8]}]}}]}, 0x868}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x2a, 0x4101, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r7, 0x0, r2, 0x0, 0xffffffbfffff8000, 0x8) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 29] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000f80)={0x14, &(0x7f0000000ec0)={0x20, 0xad8a5354353639bf, 0x53, {0x53, 0x23, "e3ad1ea9b1d2a286c267fe1fe1ab9c9daefb5dbb8affa41916dd9de65558e845b601f07a79cb1cb2cff7e338ba06508c7e36dbcef0cad0a85d198971fbebeb4a5cefc0c858240b283d474f3cf9589f0225"}}, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001280)={0x44, &(0x7f0000000fc0)={0x0, 0x16, 0xbb, "7a122eeb9d25687880b6faf5aefdb4299f436e43dcb78ea1bdc2e1a150bee0e6c7bfbbf54b9c4f4222244d781fc5c42ce96663c57fb48a1f7432174b836cbb284da0c8dc91548c6299b66e965101bd2d4a70a43385ad22ce13e57cc5621a931e65c54b23de10979e1c7c8184edcdcbd6cd53bec6cd71f8fcb8072660a85edf6114fdfd1d95f253898b6706e34e67411aafb50e3e97f4df6d27501fdcc0cf5bfd46c2e83e4127863aada9dd0b414385d9618e6446dfa9b47b14572e"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000001100)={0x0, 0x8, 0x1}, &(0x7f0000001140)={0x20, 0x80, 0x1c, {0x4, 0x1ff, 0x9, 0xf, 0x3, 0xdb0d, 0x5977, 0x9, 0x6, 0xff, 0x0, 0x5}}, &(0x7f0000001180)={0x20, 0x85, 0x4, 0xb}, &(0x7f00000011c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001200)={0x20, 0x87, 0x2}, &(0x7f0000001240)={0x20, 0x89, 0x2, 0x1}}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtclass={0x868, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x83c, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000, 0x0, 0x0, 0x10000}}, @TCA_HTB_RTAB={0x404, 0x4, [0x9, 0x4, 0x7, 0x8, 0x11c86bdd, 0x48, 0x1, 0xb1, 0xffff, 0xc, 0x2, 0x1, 0x3, 0x2, 0x1ff, 0x8, 0x1, 0x401, 0x5, 0x0, 0x7fffffff, 0xff, 0x5, 0x5, 0x8, 0x4, 0x3, 0x8cc, 0xffffff7f, 0xf, 0x1, 0x8, 0x2488f245, 0xf8, 0xff, 0xd, 0x7fff, 0x7, 0x3, 0x5, 0x60000, 0x386, 0xb43, 0x79, 0x80000001, 0x200, 0x2, 0x4, 0x9, 0x80, 0xfffffff9, 0x7fffffff, 0x40, 0xd18, 0x0, 0xe, 0x7ff, 0x9, 0x7, 0x1dd, 0x6, 0x0, 0xc, 0x4, 0x6, 0x4, 0x3, 0x8, 0x2, 0x8, 0x80, 0xff, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x7, 0x3, 0xffff, 0x30, 0xa, 0xce, 0xffffffff, 0x2, 0x2, 0x1328, 0xfffffffb, 0x4, 0x2, 0x9, 0x2, 0x4, 0x8, 0xcf25, 0x0, 0xf29, 0xa, 0xfffffff9, 0xa, 0xa, 0x4, 0x800, 0x8, 0x1000, 0x2, 0xfffffffb, 0x1, 0x474, 0x3, 0x1, 0xfffffffc, 0x7, 0x9, 0x3, 0x2, 0x7, 0x764, 0xfffffde3, 0x7, 0x80, 0x2, 0x3632, 0x48, 0x4, 0xd4e, 0x4, 0x907, 0x3ff, 0x2, 0x4, 0x7, 0x401, 0x80, 0x80000001, 0x5, 0x1ff, 0x100, 0x6, 0x6, 0x649, 0xfffffffa, 0x1, 0x6, 0xfffffffe, 0xdb, 0x10000, 0x80000000, 0x1, 0xffff, 0x100, 0x4, 0x6, 0x3, 0x10, 0x902, 0x10, 0x0, 0x6, 0x80000, 0x0, 0x7, 0x0, 0x4, 0x6a82, 0x1, 0x6, 0x0, 0x7, 0x248, 0x7fff, 0x37, 0x5, 0x6, 0x43, 0x949, 0xffffffff, 0x8, 0xb, 0x0, 0x9, 0x0, 0x1, 0x1, 0x6, 0x2, 0x8, 0x4, 0x5, 0x5a69, 0x1, 0x1, 0x55, 0x1, 0x2, 0x8, 0x5, 0x55d, 0x7fffffff, 0x8001, 0x6, 0x81, 0xe752, 0xf59, 0x4c8, 0x7, 0x10, 0x1, 0xb5e, 0x2, 0x2, 0x1, 0x5, 0x697, 0xc, 0x3, 0x6, 0x4, 0x66a6000, 0xc, 0x5, 0x400, 0xd058, 0x6, 0x1, 0x3, 0x1, 0x4, 0x7b, 0x5, 0x8, 0x7, 0x1, 0xf, 0x3, 0x3, 0x7, 0x63e4, 0x7, 0xb0e, 0x401, 0x4, 0x10001, 0x2, 0x7fffffff, 0x800, 0x8, 0xe0, 0x1, 0x2, 0x8000, 0x7f, 0xfd4d, 0x1, 0x9, 0x9]}, @TCA_HTB_CTAB={0x404, 0x3, [0x3, 0xffffffff, 0x7, 0xff, 0x1000, 0x0, 0x0, 0x9, 0x4ae042e5, 0x8, 0xff, 0x4, 0x800, 0x80000000, 0x4, 0x9, 0x10001, 0x0, 0xf78, 0x6, 0x10, 0x190, 0x7, 0x4, 0x835a, 0x3, 0x5, 0x0, 0x5, 0x8, 0x4, 0x9e2, 0x3, 0xfffffff9, 0x7, 0xfff, 0x1000, 0x3, 0x5, 0x100, 0xfff, 0x40, 0x2, 0x400, 0x69a, 0x6, 0x9, 0x1d, 0x0, 0x4e1b, 0x8c, 0xb, 0x8, 0x9, 0x7ff, 0x0, 0x3, 0x400, 0xec, 0x7, 0xe, 0x1, 0x8d, 0x4, 0x2, 0x2, 0x7, 0x3, 0x4, 0x9, 0x9, 0xfffffffe, 0x1, 0x0, 0xd7, 0xc, 0xf, 0x4, 0x6, 0x5, 0x4607, 0x0, 0x3, 0xd32, 0xfffffffc, 0x6, 0x4c87, 0x70, 0x40, 0x2, 0x0, 0xd, 0x2, 0x9a17, 0x4, 0x3, 0x8, 0xfffffffa, 0x9e9f, 0x0, 0x7f, 0xffff, 0xffffff01, 0x8, 0x8, 0x1, 0x101, 0x6, 0x449b4ba5, 0x1, 0x4, 0xfffffffd, 0x200, 0x1, 0x5, 0xffffffff, 0xa9, 0xb, 0x0, 0x0, 0x4a7, 0x3, 0xbc8, 0x0, 0x9f, 0xfffffff7, 0x5, 0x5, 0x100, 0x9, 0xffffffff, 0x7, 0xa, 0x8, 0x7fffffff, 0x4, 0x7f, 0x200, 0x8, 0x4, 0x200, 0x800, 0x8001, 0x8, 0x3, 0x0, 0x7, 0xee, 0x7, 0x7, 0x8001, 0xfffffffb, 0x1c, 0x1, 0x8001, 0x1, 0x2, 0xd, 0x7, 0xcf3, 0x2, 0x4, 0x9, 0x1, 0xfffffb0e, 0x10001, 0x3, 0x6, 0x80, 0x3b3, 0x4, 0x7f, 0x9, 0x5, 0xecc, 0x4, 0x7, 0x7, 0x2, 0x6, 0xbf7, 0xc2, 0x9, 0x8, 0x7, 0x6000, 0x3, 0x2, 0x7f, 0x4, 0x4, 0x5, 0xffff, 0xde, 0x2, 0x4, 0x788f77b1, 0x4, 0x6, 0xffffff80, 0x0, 0x0, 0x3, 0x7, 0x4, 0x17e9, 0x6, 0x6, 0x675, 0xd, 0x4, 0x5, 0xf, 0x2, 0x80000001, 0x8, 0x7fffffff, 0x6, 0x400, 0xe081, 0x1, 0x7f, 0x8, 0x4, 0x1, 0x8, 0x6, 0xb0, 0x3, 0x8, 0x9, 0xd, 0x81, 0x6, 0x400, 0x4, 0x80, 0x80000001, 0x3, 0x7c, 0x2, 0x400, 0x8000, 0xffffffff, 0xdcd, 0x4, 0x10, 0xffff887b, 0x101, 0x25a0, 0x80, 0x1, 0xffffffff, 0x2, 0x5, 0x8]}]}}]}, 0x868}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x2a, 0x4101, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) pipe(&(0x7f0000000500)) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [15, 29] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000f80)={0x14, &(0x7f0000000ec0)={0x20, 0xad8a5354353639bf, 0x53, {0x53, 0x23, "e3ad1ea9b1d2a286c267fe1fe1ab9c9daefb5dbb8affa41916dd9de65558e845b601f07a79cb1cb2cff7e338ba06508c7e36dbcef0cad0a85d198971fbebeb4a5cefc0c858240b283d474f3cf9589f0225"}}, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001280)={0x44, &(0x7f0000000fc0)={0x0, 0x16, 0xbb, "7a122eeb9d25687880b6faf5aefdb4299f436e43dcb78ea1bdc2e1a150bee0e6c7bfbbf54b9c4f4222244d781fc5c42ce96663c57fb48a1f7432174b836cbb284da0c8dc91548c6299b66e965101bd2d4a70a43385ad22ce13e57cc5621a931e65c54b23de10979e1c7c8184edcdcbd6cd53bec6cd71f8fcb8072660a85edf6114fdfd1d95f253898b6706e34e67411aafb50e3e97f4df6d27501fdcc0cf5bfd46c2e83e4127863aada9dd0b414385d9618e6446dfa9b47b14572e"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000001100)={0x0, 0x8, 0x1}, &(0x7f0000001140)={0x20, 0x80, 0x1c, {0x4, 0x1ff, 0x9, 0xf, 0x3, 0xdb0d, 0x5977, 0x9, 0x6, 0xff, 0x0, 0x5}}, &(0x7f0000001180)={0x20, 0x85, 0x4, 0xb}, &(0x7f00000011c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001200)={0x20, 0x87, 0x2}, &(0x7f0000001240)={0x20, 0x89, 0x2, 0x1}}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtclass={0x868, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x83c, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000, 0x0, 0x0, 0x10000}}, @TCA_HTB_RTAB={0x404, 0x4, [0x9, 0x4, 0x7, 0x8, 0x11c86bdd, 0x48, 0x1, 0xb1, 0xffff, 0xc, 0x2, 0x1, 0x3, 0x2, 0x1ff, 0x8, 0x1, 0x401, 0x5, 0x0, 0x7fffffff, 0xff, 0x5, 0x5, 0x8, 0x4, 0x3, 0x8cc, 0xffffff7f, 0xf, 0x1, 0x8, 0x2488f245, 0xf8, 0xff, 0xd, 0x7fff, 0x7, 0x3, 0x5, 0x60000, 0x386, 0xb43, 0x79, 0x80000001, 0x200, 0x2, 0x4, 0x9, 0x80, 0xfffffff9, 0x7fffffff, 0x40, 0xd18, 0x0, 0xe, 0x7ff, 0x9, 0x7, 0x1dd, 0x6, 0x0, 0xc, 0x4, 0x6, 0x4, 0x3, 0x8, 0x2, 0x8, 0x80, 0xff, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x7, 0x3, 0xffff, 0x30, 0xa, 0xce, 0xffffffff, 0x2, 0x2, 0x1328, 0xfffffffb, 0x4, 0x2, 0x9, 0x2, 0x4, 0x8, 0xcf25, 0x0, 0xf29, 0xa, 0xfffffff9, 0xa, 0xa, 0x4, 0x800, 0x8, 0x1000, 0x2, 0xfffffffb, 0x1, 0x474, 0x3, 0x1, 0xfffffffc, 0x7, 0x9, 0x3, 0x2, 0x7, 0x764, 0xfffffde3, 0x7, 0x80, 0x2, 0x3632, 0x48, 0x4, 0xd4e, 0x4, 0x907, 0x3ff, 0x2, 0x4, 0x7, 0x401, 0x80, 0x80000001, 0x5, 0x1ff, 0x100, 0x6, 0x6, 0x649, 0xfffffffa, 0x1, 0x6, 0xfffffffe, 0xdb, 0x10000, 0x80000000, 0x1, 0xffff, 0x100, 0x4, 0x6, 0x3, 0x10, 0x902, 0x10, 0x0, 0x6, 0x80000, 0x0, 0x7, 0x0, 0x4, 0x6a82, 0x1, 0x6, 0x0, 0x7, 0x248, 0x7fff, 0x37, 0x5, 0x6, 0x43, 0x949, 0xffffffff, 0x8, 0xb, 0x0, 0x9, 0x0, 0x1, 0x1, 0x6, 0x2, 0x8, 0x4, 0x5, 0x5a69, 0x1, 0x1, 0x55, 0x1, 0x2, 0x8, 0x5, 0x55d, 0x7fffffff, 0x8001, 0x6, 0x81, 0xe752, 0xf59, 0x4c8, 0x7, 0x10, 0x1, 0xb5e, 0x2, 0x2, 0x1, 0x5, 0x697, 0xc, 0x3, 0x6, 0x4, 0x66a6000, 0xc, 0x5, 0x400, 0xd058, 0x6, 0x1, 0x3, 0x1, 0x4, 0x7b, 0x5, 0x8, 0x7, 0x1, 0xf, 0x3, 0x3, 0x7, 0x63e4, 0x7, 0xb0e, 0x401, 0x4, 0x10001, 0x2, 0x7fffffff, 0x800, 0x8, 0xe0, 0x1, 0x2, 0x8000, 0x7f, 0xfd4d, 0x1, 0x9, 0x9]}, @TCA_HTB_CTAB={0x404, 0x3, [0x3, 0xffffffff, 0x7, 0xff, 0x1000, 0x0, 0x0, 0x9, 0x4ae042e5, 0x8, 0xff, 0x4, 0x800, 0x80000000, 0x4, 0x9, 0x10001, 0x0, 0xf78, 0x6, 0x10, 0x190, 0x7, 0x4, 0x835a, 0x3, 0x5, 0x0, 0x5, 0x8, 0x4, 0x9e2, 0x3, 0xfffffff9, 0x7, 0xfff, 0x1000, 0x3, 0x5, 0x100, 0xfff, 0x40, 0x2, 0x400, 0x69a, 0x6, 0x9, 0x1d, 0x0, 0x4e1b, 0x8c, 0xb, 0x8, 0x9, 0x7ff, 0x0, 0x3, 0x400, 0xec, 0x7, 0xe, 0x1, 0x8d, 0x4, 0x2, 0x2, 0x7, 0x3, 0x4, 0x9, 0x9, 0xfffffffe, 0x1, 0x0, 0xd7, 0xc, 0xf, 0x4, 0x6, 0x5, 0x4607, 0x0, 0x3, 0xd32, 0xfffffffc, 0x6, 0x4c87, 0x70, 0x40, 0x2, 0x0, 0xd, 0x2, 0x9a17, 0x4, 0x3, 0x8, 0xfffffffa, 0x9e9f, 0x0, 0x7f, 0xffff, 0xffffff01, 0x8, 0x8, 0x1, 0x101, 0x6, 0x449b4ba5, 0x1, 0x4, 0xfffffffd, 0x200, 0x1, 0x5, 0xffffffff, 0xa9, 0xb, 0x0, 0x0, 0x4a7, 0x3, 0xbc8, 0x0, 0x9f, 0xfffffff7, 0x5, 0x5, 0x100, 0x9, 0xffffffff, 0x7, 0xa, 0x8, 0x7fffffff, 0x4, 0x7f, 0x200, 0x8, 0x4, 0x200, 0x800, 0x8001, 0x8, 0x3, 0x0, 0x7, 0xee, 0x7, 0x7, 0x8001, 0xfffffffb, 0x1c, 0x1, 0x8001, 0x1, 0x2, 0xd, 0x7, 0xcf3, 0x2, 0x4, 0x9, 0x1, 0xfffffb0e, 0x10001, 0x3, 0x6, 0x80, 0x3b3, 0x4, 0x7f, 0x9, 0x5, 0xecc, 0x4, 0x7, 0x7, 0x2, 0x6, 0xbf7, 0xc2, 0x9, 0x8, 0x7, 0x6000, 0x3, 0x2, 0x7f, 0x4, 0x4, 0x5, 0xffff, 0xde, 0x2, 0x4, 0x788f77b1, 0x4, 0x6, 0xffffff80, 0x0, 0x0, 0x3, 0x7, 0x4, 0x17e9, 0x6, 0x6, 0x675, 0xd, 0x4, 0x5, 0xf, 0x2, 0x80000001, 0x8, 0x7fffffff, 0x6, 0x400, 0xe081, 0x1, 0x7f, 0x8, 0x4, 0x1, 0x8, 0x6, 0xb0, 0x3, 0x8, 0x9, 0xd, 0x81, 0x6, 0x400, 0x4, 0x80, 0x80000001, 0x3, 0x7c, 0x2, 0x400, 0x8000, 0xffffffff, 0xdcd, 0x4, 0x10, 0xffff887b, 0x101, 0x25a0, 0x80, 0x1, 0xffffffff, 0x2, 0x5, 0x8]}]}}]}, 0x868}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x2a, 0x4101, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [14, 29] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000f80)={0x14, &(0x7f0000000ec0)={0x20, 0xad8a5354353639bf, 0x53, {0x53, 0x23, "e3ad1ea9b1d2a286c267fe1fe1ab9c9daefb5dbb8affa41916dd9de65558e845b601f07a79cb1cb2cff7e338ba06508c7e36dbcef0cad0a85d198971fbebeb4a5cefc0c858240b283d474f3cf9589f0225"}}, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001280)={0x44, &(0x7f0000000fc0)={0x0, 0x16, 0xbb, "7a122eeb9d25687880b6faf5aefdb4299f436e43dcb78ea1bdc2e1a150bee0e6c7bfbbf54b9c4f4222244d781fc5c42ce96663c57fb48a1f7432174b836cbb284da0c8dc91548c6299b66e965101bd2d4a70a43385ad22ce13e57cc5621a931e65c54b23de10979e1c7c8184edcdcbd6cd53bec6cd71f8fcb8072660a85edf6114fdfd1d95f253898b6706e34e67411aafb50e3e97f4df6d27501fdcc0cf5bfd46c2e83e4127863aada9dd0b414385d9618e6446dfa9b47b14572e"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000001100)={0x0, 0x8, 0x1}, &(0x7f0000001140)={0x20, 0x80, 0x1c, {0x4, 0x1ff, 0x9, 0xf, 0x3, 0xdb0d, 0x5977, 0x9, 0x6, 0xff, 0x0, 0x5}}, &(0x7f0000001180)={0x20, 0x85, 0x4, 0xb}, &(0x7f00000011c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001200)={0x20, 0x87, 0x2}, &(0x7f0000001240)={0x20, 0x89, 0x2, 0x1}}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtclass={0x868, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x83c, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000, 0x0, 0x0, 0x10000}}, @TCA_HTB_RTAB={0x404, 0x4, [0x9, 0x4, 0x7, 0x8, 0x11c86bdd, 0x48, 0x1, 0xb1, 0xffff, 0xc, 0x2, 0x1, 0x3, 0x2, 0x1ff, 0x8, 0x1, 0x401, 0x5, 0x0, 0x7fffffff, 0xff, 0x5, 0x5, 0x8, 0x4, 0x3, 0x8cc, 0xffffff7f, 0xf, 0x1, 0x8, 0x2488f245, 0xf8, 0xff, 0xd, 0x7fff, 0x7, 0x3, 0x5, 0x60000, 0x386, 0xb43, 0x79, 0x80000001, 0x200, 0x2, 0x4, 0x9, 0x80, 0xfffffff9, 0x7fffffff, 0x40, 0xd18, 0x0, 0xe, 0x7ff, 0x9, 0x7, 0x1dd, 0x6, 0x0, 0xc, 0x4, 0x6, 0x4, 0x3, 0x8, 0x2, 0x8, 0x80, 0xff, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x7, 0x3, 0xffff, 0x30, 0xa, 0xce, 0xffffffff, 0x2, 0x2, 0x1328, 0xfffffffb, 0x4, 0x2, 0x9, 0x2, 0x4, 0x8, 0xcf25, 0x0, 0xf29, 0xa, 0xfffffff9, 0xa, 0xa, 0x4, 0x800, 0x8, 0x1000, 0x2, 0xfffffffb, 0x1, 0x474, 0x3, 0x1, 0xfffffffc, 0x7, 0x9, 0x3, 0x2, 0x7, 0x764, 0xfffffde3, 0x7, 0x80, 0x2, 0x3632, 0x48, 0x4, 0xd4e, 0x4, 0x907, 0x3ff, 0x2, 0x4, 0x7, 0x401, 0x80, 0x80000001, 0x5, 0x1ff, 0x100, 0x6, 0x6, 0x649, 0xfffffffa, 0x1, 0x6, 0xfffffffe, 0xdb, 0x10000, 0x80000000, 0x1, 0xffff, 0x100, 0x4, 0x6, 0x3, 0x10, 0x902, 0x10, 0x0, 0x6, 0x80000, 0x0, 0x7, 0x0, 0x4, 0x6a82, 0x1, 0x6, 0x0, 0x7, 0x248, 0x7fff, 0x37, 0x5, 0x6, 0x43, 0x949, 0xffffffff, 0x8, 0xb, 0x0, 0x9, 0x0, 0x1, 0x1, 0x6, 0x2, 0x8, 0x4, 0x5, 0x5a69, 0x1, 0x1, 0x55, 0x1, 0x2, 0x8, 0x5, 0x55d, 0x7fffffff, 0x8001, 0x6, 0x81, 0xe752, 0xf59, 0x4c8, 0x7, 0x10, 0x1, 0xb5e, 0x2, 0x2, 0x1, 0x5, 0x697, 0xc, 0x3, 0x6, 0x4, 0x66a6000, 0xc, 0x5, 0x400, 0xd058, 0x6, 0x1, 0x3, 0x1, 0x4, 0x7b, 0x5, 0x8, 0x7, 0x1, 0xf, 0x3, 0x3, 0x7, 0x63e4, 0x7, 0xb0e, 0x401, 0x4, 0x10001, 0x2, 0x7fffffff, 0x800, 0x8, 0xe0, 0x1, 0x2, 0x8000, 0x7f, 0xfd4d, 0x1, 0x9, 0x9]}, @TCA_HTB_CTAB={0x404, 0x3, [0x3, 0xffffffff, 0x7, 0xff, 0x1000, 0x0, 0x0, 0x9, 0x4ae042e5, 0x8, 0xff, 0x4, 0x800, 0x80000000, 0x4, 0x9, 0x10001, 0x0, 0xf78, 0x6, 0x10, 0x190, 0x7, 0x4, 0x835a, 0x3, 0x5, 0x0, 0x5, 0x8, 0x4, 0x9e2, 0x3, 0xfffffff9, 0x7, 0xfff, 0x1000, 0x3, 0x5, 0x100, 0xfff, 0x40, 0x2, 0x400, 0x69a, 0x6, 0x9, 0x1d, 0x0, 0x4e1b, 0x8c, 0xb, 0x8, 0x9, 0x7ff, 0x0, 0x3, 0x400, 0xec, 0x7, 0xe, 0x1, 0x8d, 0x4, 0x2, 0x2, 0x7, 0x3, 0x4, 0x9, 0x9, 0xfffffffe, 0x1, 0x0, 0xd7, 0xc, 0xf, 0x4, 0x6, 0x5, 0x4607, 0x0, 0x3, 0xd32, 0xfffffffc, 0x6, 0x4c87, 0x70, 0x40, 0x2, 0x0, 0xd, 0x2, 0x9a17, 0x4, 0x3, 0x8, 0xfffffffa, 0x9e9f, 0x0, 0x7f, 0xffff, 0xffffff01, 0x8, 0x8, 0x1, 0x101, 0x6, 0x449b4ba5, 0x1, 0x4, 0xfffffffd, 0x200, 0x1, 0x5, 0xffffffff, 0xa9, 0xb, 0x0, 0x0, 0x4a7, 0x3, 0xbc8, 0x0, 0x9f, 0xfffffff7, 0x5, 0x5, 0x100, 0x9, 0xffffffff, 0x7, 0xa, 0x8, 0x7fffffff, 0x4, 0x7f, 0x200, 0x8, 0x4, 0x200, 0x800, 0x8001, 0x8, 0x3, 0x0, 0x7, 0xee, 0x7, 0x7, 0x8001, 0xfffffffb, 0x1c, 0x1, 0x8001, 0x1, 0x2, 0xd, 0x7, 0xcf3, 0x2, 0x4, 0x9, 0x1, 0xfffffb0e, 0x10001, 0x3, 0x6, 0x80, 0x3b3, 0x4, 0x7f, 0x9, 0x5, 0xecc, 0x4, 0x7, 0x7, 0x2, 0x6, 0xbf7, 0xc2, 0x9, 0x8, 0x7, 0x6000, 0x3, 0x2, 0x7f, 0x4, 0x4, 0x5, 0xffff, 0xde, 0x2, 0x4, 0x788f77b1, 0x4, 0x6, 0xffffff80, 0x0, 0x0, 0x3, 0x7, 0x4, 0x17e9, 0x6, 0x6, 0x675, 0xd, 0x4, 0x5, 0xf, 0x2, 0x80000001, 0x8, 0x7fffffff, 0x6, 0x400, 0xe081, 0x1, 0x7f, 0x8, 0x4, 0x1, 0x8, 0x6, 0xb0, 0x3, 0x8, 0x9, 0xd, 0x81, 0x6, 0x400, 0x4, 0x80, 0x80000001, 0x3, 0x7c, 0x2, 0x400, 0x8000, 0xffffffff, 0xdcd, 0x4, 0x10, 0xffff887b, 0x101, 0x25a0, 0x80, 0x1, 0xffffffff, 0x2, 0x5, 0x8]}]}}]}, 0x868}}, 0x0) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [13, 29] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000f80)={0x14, &(0x7f0000000ec0)={0x20, 0xad8a5354353639bf, 0x53, {0x53, 0x23, "e3ad1ea9b1d2a286c267fe1fe1ab9c9daefb5dbb8affa41916dd9de65558e845b601f07a79cb1cb2cff7e338ba06508c7e36dbcef0cad0a85d198971fbebeb4a5cefc0c858240b283d474f3cf9589f0225"}}, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001280)={0x44, &(0x7f0000000fc0)={0x0, 0x16, 0xbb, "7a122eeb9d25687880b6faf5aefdb4299f436e43dcb78ea1bdc2e1a150bee0e6c7bfbbf54b9c4f4222244d781fc5c42ce96663c57fb48a1f7432174b836cbb284da0c8dc91548c6299b66e965101bd2d4a70a43385ad22ce13e57cc5621a931e65c54b23de10979e1c7c8184edcdcbd6cd53bec6cd71f8fcb8072660a85edf6114fdfd1d95f253898b6706e34e67411aafb50e3e97f4df6d27501fdcc0cf5bfd46c2e83e4127863aada9dd0b414385d9618e6446dfa9b47b14572e"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000001100)={0x0, 0x8, 0x1}, &(0x7f0000001140)={0x20, 0x80, 0x1c, {0x4, 0x1ff, 0x9, 0xf, 0x3, 0xdb0d, 0x5977, 0x9, 0x6, 0xff, 0x0, 0x5}}, &(0x7f0000001180)={0x20, 0x85, 0x4, 0xb}, &(0x7f00000011c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001200)={0x20, 0x87, 0x2}, &(0x7f0000001240)={0x20, 0x89, 0x2, 0x1}}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [12, 29] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000f80)={0x14, &(0x7f0000000ec0)={0x20, 0xad8a5354353639bf, 0x53, {0x53, 0x23, "e3ad1ea9b1d2a286c267fe1fe1ab9c9daefb5dbb8affa41916dd9de65558e845b601f07a79cb1cb2cff7e338ba06508c7e36dbcef0cad0a85d198971fbebeb4a5cefc0c858240b283d474f3cf9589f0225"}}, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001280)={0x44, &(0x7f0000000fc0)={0x0, 0x16, 0xbb, "7a122eeb9d25687880b6faf5aefdb4299f436e43dcb78ea1bdc2e1a150bee0e6c7bfbbf54b9c4f4222244d781fc5c42ce96663c57fb48a1f7432174b836cbb284da0c8dc91548c6299b66e965101bd2d4a70a43385ad22ce13e57cc5621a931e65c54b23de10979e1c7c8184edcdcbd6cd53bec6cd71f8fcb8072660a85edf6114fdfd1d95f253898b6706e34e67411aafb50e3e97f4df6d27501fdcc0cf5bfd46c2e83e4127863aada9dd0b414385d9618e6446dfa9b47b14572e"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000001100)={0x0, 0x8, 0x1}, &(0x7f0000001140)={0x20, 0x80, 0x1c, {0x4, 0x1ff, 0x9, 0xf, 0x3, 0xdb0d, 0x5977, 0x9, 0x6, 0xff, 0x0, 0x5}}, &(0x7f0000001180)={0x20, 0x85, 0x4, 0xb}, &(0x7f00000011c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001200)={0x20, 0x87, 0x2}, &(0x7f0000001240)={0x20, 0x89, 0x2, 0x1}}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 29] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000f80)={0x14, &(0x7f0000000ec0)={0x20, 0xad8a5354353639bf, 0x53, {0x53, 0x23, "e3ad1ea9b1d2a286c267fe1fe1ab9c9daefb5dbb8affa41916dd9de65558e845b601f07a79cb1cb2cff7e338ba06508c7e36dbcef0cad0a85d198971fbebeb4a5cefc0c858240b283d474f3cf9589f0225"}}, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001280)={0x44, &(0x7f0000000fc0)={0x0, 0x16, 0xbb, "7a122eeb9d25687880b6faf5aefdb4299f436e43dcb78ea1bdc2e1a150bee0e6c7bfbbf54b9c4f4222244d781fc5c42ce96663c57fb48a1f7432174b836cbb284da0c8dc91548c6299b66e965101bd2d4a70a43385ad22ce13e57cc5621a931e65c54b23de10979e1c7c8184edcdcbd6cd53bec6cd71f8fcb8072660a85edf6114fdfd1d95f253898b6706e34e67411aafb50e3e97f4df6d27501fdcc0cf5bfd46c2e83e4127863aada9dd0b414385d9618e6446dfa9b47b14572e"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000001100)={0x0, 0x8, 0x1}, &(0x7f0000001140)={0x20, 0x80, 0x1c, {0x4, 0x1ff, 0x9, 0xf, 0x3, 0xdb0d, 0x5977, 0x9, 0x6, 0xff, 0x0, 0x5}}, &(0x7f0000001180)={0x20, 0x85, 0x4, 0xb}, &(0x7f00000011c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001200)={0x20, 0x87, 0x2}, &(0x7f0000001240)={0x20, 0x89, 0x2, 0x1}}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 29] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000f80)={0x14, &(0x7f0000000ec0)={0x20, 0xad8a5354353639bf, 0x53, {0x53, 0x23, "e3ad1ea9b1d2a286c267fe1fe1ab9c9daefb5dbb8affa41916dd9de65558e845b601f07a79cb1cb2cff7e338ba06508c7e36dbcef0cad0a85d198971fbebeb4a5cefc0c858240b283d474f3cf9589f0225"}}, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001280)={0x44, &(0x7f0000000fc0)={0x0, 0x16, 0xbb, "7a122eeb9d25687880b6faf5aefdb4299f436e43dcb78ea1bdc2e1a150bee0e6c7bfbbf54b9c4f4222244d781fc5c42ce96663c57fb48a1f7432174b836cbb284da0c8dc91548c6299b66e965101bd2d4a70a43385ad22ce13e57cc5621a931e65c54b23de10979e1c7c8184edcdcbd6cd53bec6cd71f8fcb8072660a85edf6114fdfd1d95f253898b6706e34e67411aafb50e3e97f4df6d27501fdcc0cf5bfd46c2e83e4127863aada9dd0b414385d9618e6446dfa9b47b14572e"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000001100)={0x0, 0x8, 0x1}, &(0x7f0000001140)={0x20, 0x80, 0x1c, {0x4, 0x1ff, 0x9, 0xf, 0x3, 0xdb0d, 0x5977, 0x9, 0x6, 0xff, 0x0, 0x5}}, &(0x7f0000001180)={0x20, 0x85, 0x4, 0xb}, &(0x7f00000011c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001200)={0x20, 0x87, 0x2}, &(0x7f0000001240)={0x20, 0x89, 0x2, 0x1}}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) program crashed: WARNING: ODEBUG bug in vub300_disconnect testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [9, 29] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000f80)={0x14, &(0x7f0000000ec0)={0x20, 0xad8a5354353639bf, 0x53, {0x53, 0x23, "e3ad1ea9b1d2a286c267fe1fe1ab9c9daefb5dbb8affa41916dd9de65558e845b601f07a79cb1cb2cff7e338ba06508c7e36dbcef0cad0a85d198971fbebeb4a5cefc0c858240b283d474f3cf9589f0225"}}, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001280)={0x44, &(0x7f0000000fc0)={0x0, 0x16, 0xbb, "7a122eeb9d25687880b6faf5aefdb4299f436e43dcb78ea1bdc2e1a150bee0e6c7bfbbf54b9c4f4222244d781fc5c42ce96663c57fb48a1f7432174b836cbb284da0c8dc91548c6299b66e965101bd2d4a70a43385ad22ce13e57cc5621a931e65c54b23de10979e1c7c8184edcdcbd6cd53bec6cd71f8fcb8072660a85edf6114fdfd1d95f253898b6706e34e67411aafb50e3e97f4df6d27501fdcc0cf5bfd46c2e83e4127863aada9dd0b414385d9618e6446dfa9b47b14572e"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000001100)={0x0, 0x8, 0x1}, &(0x7f0000001140)={0x20, 0x80, 0x1c, {0x4, 0x1ff, 0x9, 0xf, 0x3, 0xdb0d, 0x5977, 0x9, 0x6, 0xff, 0x0, 0x5}}, &(0x7f0000001180)={0x20, 0x85, 0x4, 0xb}, &(0x7f00000011c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001200)={0x20, 0x87, 0x2}, &(0x7f0000001240)={0x20, 0x89, 0x2, 0x1}}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) close(r1) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [8, 29] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000f80)={0x14, &(0x7f0000000ec0)={0x20, 0xad8a5354353639bf, 0x53, {0x53, 0x23, "e3ad1ea9b1d2a286c267fe1fe1ab9c9daefb5dbb8affa41916dd9de65558e845b601f07a79cb1cb2cff7e338ba06508c7e36dbcef0cad0a85d198971fbebeb4a5cefc0c858240b283d474f3cf9589f0225"}}, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001280)={0x44, &(0x7f0000000fc0)={0x0, 0x16, 0xbb, "7a122eeb9d25687880b6faf5aefdb4299f436e43dcb78ea1bdc2e1a150bee0e6c7bfbbf54b9c4f4222244d781fc5c42ce96663c57fb48a1f7432174b836cbb284da0c8dc91548c6299b66e965101bd2d4a70a43385ad22ce13e57cc5621a931e65c54b23de10979e1c7c8184edcdcbd6cd53bec6cd71f8fcb8072660a85edf6114fdfd1d95f253898b6706e34e67411aafb50e3e97f4df6d27501fdcc0cf5bfd46c2e83e4127863aada9dd0b414385d9618e6446dfa9b47b14572e"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000001100)={0x0, 0x8, 0x1}, &(0x7f0000001140)={0x20, 0x80, 0x1c, {0x4, 0x1ff, 0x9, 0xf, 0x3, 0xdb0d, 0x5977, 0x9, 0x6, 0xff, 0x0, 0x5}}, &(0x7f0000001180)={0x20, 0x85, 0x4, 0xb}, &(0x7f00000011c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001200)={0x20, 0x87, 0x2}, &(0x7f0000001240)={0x20, 0x89, 0x2, 0x1}}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) close(r1) socket$nl_route(0x10, 0x3, 0x0) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 29] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000f80)={0x14, &(0x7f0000000ec0)={0x20, 0xad8a5354353639bf, 0x53, {0x53, 0x23, "e3ad1ea9b1d2a286c267fe1fe1ab9c9daefb5dbb8affa41916dd9de65558e845b601f07a79cb1cb2cff7e338ba06508c7e36dbcef0cad0a85d198971fbebeb4a5cefc0c858240b283d474f3cf9589f0225"}}, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001280)={0x44, &(0x7f0000000fc0)={0x0, 0x16, 0xbb, "7a122eeb9d25687880b6faf5aefdb4299f436e43dcb78ea1bdc2e1a150bee0e6c7bfbbf54b9c4f4222244d781fc5c42ce96663c57fb48a1f7432174b836cbb284da0c8dc91548c6299b66e965101bd2d4a70a43385ad22ce13e57cc5621a931e65c54b23de10979e1c7c8184edcdcbd6cd53bec6cd71f8fcb8072660a85edf6114fdfd1d95f253898b6706e34e67411aafb50e3e97f4df6d27501fdcc0cf5bfd46c2e83e4127863aada9dd0b414385d9618e6446dfa9b47b14572e"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000001100)={0x0, 0x8, 0x1}, &(0x7f0000001140)={0x20, 0x80, 0x1c, {0x4, 0x1ff, 0x9, 0xf, 0x3, 0xdb0d, 0x5977, 0x9, 0x6, 0xff, 0x0, 0x5}}, &(0x7f0000001180)={0x20, 0x85, 0x4, 0xb}, &(0x7f00000011c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001200)={0x20, 0x87, 0x2}, &(0x7f0000001240)={0x20, 0x89, 0x2, 0x1}}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) close(r1) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 29] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000f80)={0x14, &(0x7f0000000ec0)={0x20, 0xad8a5354353639bf, 0x53, {0x53, 0x23, "e3ad1ea9b1d2a286c267fe1fe1ab9c9daefb5dbb8affa41916dd9de65558e845b601f07a79cb1cb2cff7e338ba06508c7e36dbcef0cad0a85d198971fbebeb4a5cefc0c858240b283d474f3cf9589f0225"}}, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001280)={0x44, &(0x7f0000000fc0)={0x0, 0x16, 0xbb, "7a122eeb9d25687880b6faf5aefdb4299f436e43dcb78ea1bdc2e1a150bee0e6c7bfbbf54b9c4f4222244d781fc5c42ce96663c57fb48a1f7432174b836cbb284da0c8dc91548c6299b66e965101bd2d4a70a43385ad22ce13e57cc5621a931e65c54b23de10979e1c7c8184edcdcbd6cd53bec6cd71f8fcb8072660a85edf6114fdfd1d95f253898b6706e34e67411aafb50e3e97f4df6d27501fdcc0cf5bfd46c2e83e4127863aada9dd0b414385d9618e6446dfa9b47b14572e"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000001100)={0x0, 0x8, 0x1}, &(0x7f0000001140)={0x20, 0x80, 0x1c, {0x4, 0x1ff, 0x9, 0xf, 0x3, 0xdb0d, 0x5977, 0x9, 0x6, 0xff, 0x0, 0x5}}, &(0x7f0000001180)={0x20, 0x85, 0x4, 0xb}, &(0x7f00000011c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001200)={0x20, 0x87, 0x2}, &(0x7f0000001240)={0x20, 0x89, 0x2, 0x1}}) pipe(&(0x7f0000000600)) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 29] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000f80)={0x14, &(0x7f0000000ec0)={0x20, 0xad8a5354353639bf, 0x53, {0x53, 0x23, "e3ad1ea9b1d2a286c267fe1fe1ab9c9daefb5dbb8affa41916dd9de65558e845b601f07a79cb1cb2cff7e338ba06508c7e36dbcef0cad0a85d198971fbebeb4a5cefc0c858240b283d474f3cf9589f0225"}}, &(0x7f0000000f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001280)={0x44, &(0x7f0000000fc0)={0x0, 0x16, 0xbb, "7a122eeb9d25687880b6faf5aefdb4299f436e43dcb78ea1bdc2e1a150bee0e6c7bfbbf54b9c4f4222244d781fc5c42ce96663c57fb48a1f7432174b836cbb284da0c8dc91548c6299b66e965101bd2d4a70a43385ad22ce13e57cc5621a931e65c54b23de10979e1c7c8184edcdcbd6cd53bec6cd71f8fcb8072660a85edf6114fdfd1d95f253898b6706e34e67411aafb50e3e97f4df6d27501fdcc0cf5bfd46c2e83e4127863aada9dd0b414385d9618e6446dfa9b47b14572e"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000001100)={0x0, 0x8, 0x1}, &(0x7f0000001140)={0x20, 0x80, 0x1c, {0x4, 0x1ff, 0x9, 0xf, 0x3, 0xdb0d, 0x5977, 0x9, 0x6, 0xff, 0x0, 0x5}}, &(0x7f0000001180)={0x20, 0x85, 0x4, 0xb}, &(0x7f00000011c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001200)={0x20, 0x87, 0x2}, &(0x7f0000001240)={0x20, 0x89, 0x2, 0x1}}) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 29] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 29] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 29] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 29] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 29] detailed listing: executing program 0: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) program did not crash minimized 21 calls -> 4 calls minimizing program #1 before concatenation testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 28] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 27] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 26] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 25] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 24] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 23] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) tkill(r2, 0xb) r3 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 22] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) tkill(r2, 0xb) r3 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 21] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) tkill(r2, 0xb) r3 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) program crashed: WARNING in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 20] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) tkill(r2, 0xb) r3 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x1) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 19] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) tkill(r2, 0xb) r3 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 18] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) tkill(r2, 0xb) fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 17] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) tkill(r2, 0xb) fsopen(&(0x7f0000000080)='binder\x00', 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 16] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) tkill(r2, 0xb) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 15] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 14] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 13] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 12] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 11] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 10] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 9] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 8] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 7] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 6] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 5] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket(0x2, 0x80805, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 4] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 3] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 2] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 1] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 0] detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) executing program 0: program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync minimized 29 calls -> 0 calls testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync bisect: concatenation succeeded found reproducer with 4 syscalls minimizing guilty program testing program (duration=1m13.245325854s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) program did not crash testing program (duration=1m13.245325854s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m13.245325854s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m13.245325854s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m13.245325854s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m13.245325854s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m13.245325854s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m13.245325854s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m13.245325854s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) program did not crash testing program (duration=1m13.245325854s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash testing program (duration=1m13.245325854s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program did not crash extracting C reproducer testing compiled C program (duration=1m13.245325854s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync simplifying C reproducer testing compiled C program (duration=1m13.245325854s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing compiled C program (duration=1m13.245325854s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing compiled C program (duration=1m13.245325854s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing compiled C program (duration=1m13.245325854s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing compiled C program (duration=1m13.245325854s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing compiled C program (duration=1m13.245325854s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing compiled C program (duration=1m13.245325854s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync testing program (duration=1m13.245325854s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync validation run: crashed=true testing program (duration=1m13.245325854s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync validation run: crashed=true testing program (duration=1m13.245325854s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$hid-syz_usb_control_io$printer-syz_usb_control_io$uac3 detailed listing: executing program 0: r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) program crashed: BUG: sleeping function called from invalid context in cancel_delayed_work_sync validation run: crashed=true reproducing took 2h48m2.627282314s repro crashed as (corrupted=false): BUG: sleeping function called from invalid context at kernel/workqueue.c:4487 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/1 preempt_count: 101, expected: 0 RCU nest depth: 0, expected: 0 1 lock held by swapper/1/0: #0: ffffc90000a08ca0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11f/0x610 kernel/time/timer.c:1745 Preemption disabled at: [<0000000000000000>] 0x0 CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 __might_resched.cold+0x1ec/0x232 kernel/sched/core.c:9197 __cancel_work_sync kernel/workqueue.c:4487 [inline] cancel_delayed_work_sync+0xb8/0xf0 kernel/workqueue.c:4568 mmc_free_host+0x19/0x30 drivers/mmc/core/host.c:700 vub300_delete drivers/mmc/host/vub300.c:379 [inline] kref_put include/linux/kref.h:65 [inline] vub300_inactivity_timer_expired drivers/mmc/host/vub300.c:747 [inline] vub300_inactivity_timer_expired+0x42f/0x550 drivers/mmc/host/vub300.c:742 call_timer_fn+0x19a/0x610 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1799 [inline] __run_timers+0x757/0xb00 kernel/time/timer.c:2374 __run_timer_base kernel/time/timer.c:2386 [inline] __run_timer_base kernel/time/timer.c:2378 [inline] run_timer_base+0x114/0x190 kernel/time/timer.c:2395 run_timer_softirq+0x1a/0x50 kernel/time/timer.c:2405 handle_softirqs+0x1ea/0x9b0 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0x162/0x210 kernel/softirq.c:735 irq_exit_rcu+0x9/0x30 kernel/softirq.c:752 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa3/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: d5 aa 02 e9 83 4b 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 0f 2f 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 RSP: 0018:ffffc90000197e00 EFLAGS: 00000242 RAX: 000000000006e779 RBX: ffff88801eec2540 RCX: ffffffff8bbc9335 RDX: 0000000000000000 RSI: ffffffff8e3aced0 RDI: ffffffff8c600380 RBP: ffffed1003dd84a8 R08: 0000000000000001 R09: ffffed10170a678d R10: ffff8880b8533c6b R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 arch_safe_halt arch/x86/include/asm/paravirt.h:62 [inline] default_idle+0x9/0x10 arch/x86/kernel/process.c:768 default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x3a7/0x5b0 kernel/sched/idle.c:355 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:454 start_secondary+0x21d/0x2d0 arch/x86/kernel/smpboot.c:312 common_startup_64+0x13e/0x158 ODEBUG: object ffffc90000a08a70 is NOT on stack ffffc90000190000, but annotated. ====================================================== ---------------- Code disassembly (best guess): 0: d5 aa 02 e9 {rex2 0xaa} lar %rcx,%rbp 4: 83 4b 03 00 orl $0x0,0x3(%rbx) 8: 0f 1f 00 nopl (%rax) b: 90 nop c: 90 nop d: 90 nop e: 90 nop f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: 90 nop 18: 90 nop 19: 90 nop 1a: 90 nop 1b: f3 0f 1e fa endbr64 1f: 66 90 xchg %ax,%ax 21: 0f 00 2d 83 0f 2f 00 verw 0x2f0f83(%rip) # 0x2f0fab 28: fb sti 29: f4 hlt * 2a: c3 ret <-- trapping instruction 2b: cc int3 2c: cc int3 2d: cc int3 2e: cc int3 2f: 66 2e 0f 1f 84 00 00 cs nopw 0x0(%rax,%rax,1) 36: 00 00 00 39: 66 90 xchg %ax,%ax 3b: 90 nop 3c: 90 nop 3d: 90 nop 3e: 90 nop 3f: 90 nop final repro crashed as (corrupted=false): BUG: sleeping function called from invalid context at kernel/workqueue.c:4487 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/1 preempt_count: 101, expected: 0 RCU nest depth: 0, expected: 0 1 lock held by swapper/1/0: #0: ffffc90000a08ca0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0x11f/0x610 kernel/time/timer.c:1745 Preemption disabled at: [<0000000000000000>] 0x0 CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120 __might_resched.cold+0x1ec/0x232 kernel/sched/core.c:9197 __cancel_work_sync kernel/workqueue.c:4487 [inline] cancel_delayed_work_sync+0xb8/0xf0 kernel/workqueue.c:4568 mmc_free_host+0x19/0x30 drivers/mmc/core/host.c:700 vub300_delete drivers/mmc/host/vub300.c:379 [inline] kref_put include/linux/kref.h:65 [inline] vub300_inactivity_timer_expired drivers/mmc/host/vub300.c:747 [inline] vub300_inactivity_timer_expired+0x42f/0x550 drivers/mmc/host/vub300.c:742 call_timer_fn+0x19a/0x610 kernel/time/timer.c:1748 expire_timers kernel/time/timer.c:1799 [inline] __run_timers+0x757/0xb00 kernel/time/timer.c:2374 __run_timer_base kernel/time/timer.c:2386 [inline] __run_timer_base kernel/time/timer.c:2378 [inline] run_timer_base+0x114/0x190 kernel/time/timer.c:2395 run_timer_softirq+0x1a/0x50 kernel/time/timer.c:2405 handle_softirqs+0x1ea/0x9b0 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] invoke_softirq kernel/softirq.c:496 [inline] __irq_exit_rcu+0x162/0x210 kernel/softirq.c:735 irq_exit_rcu+0x9/0x30 kernel/softirq.c:752 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline] sysvec_apic_timer_interrupt+0xa3/0xc0 arch/x86/kernel/apic/apic.c:1062 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674 RIP: 0010:pv_native_safe_halt+0xf/0x20 arch/x86/kernel/paravirt.c:64 Code: d5 aa 02 e9 83 4b 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 0f 2f 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 RSP: 0018:ffffc90000197e00 EFLAGS: 00000242 RAX: 000000000006e779 RBX: ffff88801eec2540 RCX: ffffffff8bbc9335 RDX: 0000000000000000 RSI: ffffffff8e3aced0 RDI: ffffffff8c600380 RBP: ffffed1003dd84a8 R08: 0000000000000001 R09: ffffed10170a678d R10: ffff8880b8533c6b R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 arch_safe_halt arch/x86/include/asm/paravirt.h:62 [inline] default_idle+0x9/0x10 arch/x86/kernel/process.c:768 default_idle_call+0x6c/0xb0 kernel/sched/idle.c:122 cpuidle_idle_call kernel/sched/idle.c:199 [inline] do_idle+0x3a7/0x5b0 kernel/sched/idle.c:355 cpu_startup_entry+0x4f/0x60 kernel/sched/idle.c:454 start_secondary+0x21d/0x2d0 arch/x86/kernel/smpboot.c:312 common_startup_64+0x13e/0x158 ODEBUG: object ffffc90000a08a70 is NOT on stack ffffc90000190000, but annotated. ====================================================== ---------------- Code disassembly (best guess): 0: d5 aa 02 e9 {rex2 0xaa} lar %rcx,%rbp 4: 83 4b 03 00 orl $0x0,0x3(%rbx) 8: 0f 1f 00 nopl (%rax) b: 90 nop c: 90 nop d: 90 nop e: 90 nop f: 90 nop 10: 90 nop 11: 90 nop 12: 90 nop 13: 90 nop 14: 90 nop 15: 90 nop 16: 90 nop 17: 90 nop 18: 90 nop 19: 90 nop 1a: 90 nop 1b: f3 0f 1e fa endbr64 1f: 66 90 xchg %ax,%ax 21: 0f 00 2d 83 0f 2f 00 verw 0x2f0f83(%rip) # 0x2f0fab 28: fb sti 29: f4 hlt * 2a: c3 ret <-- trapping instruction 2b: cc int3 2c: cc int3 2d: cc int3 2e: cc int3 2f: 66 2e 0f 1f 84 00 00 cs nopw 0x0(%rax,%rax,1) 36: 00 00 00 39: 66 90 xchg %ax,%ax 3b: 90 nop 3c: 90 nop 3d: 90 nop 3e: 90 nop 3f: 90 nop