last executing test programs: 5.608024123s ago: executing program 0 (id=203): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'macvlan1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r1, 0x89a3, &(0x7f0000000200)='bridge0\x00') (fail_nth: 9) 5.511204474s ago: executing program 3 (id=204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8814) mount(0x0, 0x0, 0x0, 0x8, 0x0) socket$inet(0x2, 0x2, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xff, 0x2, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x101, 0x401, 0x9, 0x8, 0x4, 0x8, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x4]}) socket$nl_netfilter(0x10, 0x3, 0xc) 5.510690812s ago: executing program 1 (id=205): openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x1, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r0, r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV_ZC={0x3a, 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x16d2, 0x0, 0x0, {0x0, 0x0, 0xa}}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) bind$bt_sco(0xffffffffffffffff, &(0x7f00000003c0)={0x1f, @none}, 0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'dummy0\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1f4, 0x0, 0x11, 0x148, 0x0, 0x0, 0x2b0, 0x2a8, 0x2a8, 0x2b0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xff, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x1, 0x7a}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x5, 0x3, 0x0, 0x6, 0x1], 0x1, 0x1}, {0x1, [0x1, 0x0, 0x0, 0x1, 0x1, 0x3], 0x0, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x250) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) sched_setscheduler(r5, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000600)=ANY=[@ANYBLOB="2b706964732021a0b593a1008048"], 0x6) write$cgroup_subtree(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="35d72b7b886ebe6192edcc1aed32061fc833b8015fef7dc81594696a320f397ab4e186580f984abdd4003ef0065b9287031b80bb7abadca7da58f9c813cd5208c28e909b098ced8641868c0eaea05855143f9bec83b5f5fcbced65ad4366fead564f61a6d5b33057a122fd588f"], 0xb) r8 = socket(0x2a, 0x5, 0x20003a) getsockopt$inet_mreqn(r8, 0x0, 0x24, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000900)=ANY=[@ANYBLOB="04130d03c9000100c8000104c900"], 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x18}, @l2cap_cid_signaling={{0x14}, [@l2cap_create_chan_rsp={{0xd, 0x40, 0x8}, {0x6, 0x401, 0x3ff, 0x3}}, @l2cap_disconn_rsp={{0x7, 0xb, 0x4}, {0x7fff, 0x100}}]}}, 0x1d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "804dc5d30a6f1591"}}}, 0x11) syz_usb_connect$uac2(0x2, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x3028000, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000140), 0x0) getpgrp(0xffffffffffffffff) setpgid(0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 5.369405868s ago: executing program 0 (id=206): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="fea87fb7477d641b0087268800000000800400f300e500", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r3, 0x19, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x9f1e}}, 0x40) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(r4) r5 = bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000008000000324900007f00000080010000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00+,UL'], 0x50) r6 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r9, 0x4b47, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001840)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0x2, 0x1}, {0xf, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810000000fd010000000008000100ac141400080005000a0101021800168014000300fc000800000000000000000000000000060015"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) close(r6) open(&(0x7f0000000080)='./file0\x00', 0x20002, 0x1a9) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x53, 0xd8, 0xfff4, {0x20, 0x1}, {0x45}, @cond=[{0x4a7, 0xfff, 0x3, 0x0, 0x100}, {0x8968, 0x6, 0x7, 0x80, 0x1819, 0x9}]}) r12 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r12, &(0x7f0000000040)="e2", 0x12d8) ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f00000001c0)=0x5) 5.138966032s ago: executing program 0 (id=207): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000008280), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f0000008300)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004024}, 0x800) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x7, 0x10}, 0xc) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket(0x400000000010, 0x3, 0x0) futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000400)=0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r8, {0xffff, 0x10}, {0x0, 0xfff1}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf4, 0x0, 0x7, 0xb, 0x3}, 0x31}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r8, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000006125ce882cbf400930bf4533f", 0x20}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0", 0xe}], 0x2}, 0x8000) sendto$inet(r0, &(0x7f0000000000)="6f635cb936bb67840ddd38e89fa03799cc31a64c2232ca9eda4a89896b2304c241822ecf78827892af117c8e24a3ea25047d87ecbc9b44107edc8c076921d2e832b05d95dae8c2c0081ec2c0d0e9b50f4daa14ab058de79446f5ee97d734777b1218815e26e30fe5227a80be576209dbe80b24d086ee6719baafd837dce9ad84c04c0f681cff7695f9406f706aa11980bcd3da89ab0e1f7ba02ef4f59362b6", 0x9f, 0x20040050, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) 4.781424619s ago: executing program 2 (id=208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8814) mount(0x0, 0x0, 0x0, 0x8, 0x0) socket$inet(0x2, 0x2, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xff, 0x2, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x101, 0x401, 0x9, 0x8, 0x4, 0x8, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x4]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 4.721087052s ago: executing program 1 (id=209): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000008280), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f0000008300)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004024}, 0x800) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x7, 0x10}, 0xc) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket(0x400000000010, 0x3, 0x0) futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000400)=0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r8, {0xffff, 0x10}, {0x0, 0xfff1}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf4, 0x0, 0x7, 0xb, 0x3}, 0x31}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r8, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000006125ce882cbf400930bf4533f", 0x20}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0", 0xe}], 0x2}, 0x8000) sendto$inet(r0, &(0x7f0000000000)="6f635cb936bb67840ddd38e89fa03799cc31a64c2232ca9eda4a89896b2304c241822ecf78827892af117c8e24a3ea25047d87ecbc9b44107edc8c076921d2e832b05d95dae8c2c0081ec2c0d0e9b50f4daa14ab058de79446f5ee97d734777b1218815e26e30fe5227a80be576209dbe80b24d086ee6719baafd837dce9ad84c04c0f681cff7695f9406f706aa11980bcd3da89ab0e1f7ba02ef4f59362b6", 0x9f, 0x20040050, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) 2.996586428s ago: executing program 0 (id=210): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getrlimit(0xe, &(0x7f0000002040)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x8000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') r2 = syz_open_dev$video4linux(&(0x7f00000003c0), 0x3fc, 0x4a102) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, {0xecd8, 0x0, 0x3002, 0x0, 0x0, 0x8, 0x2}}) pread64(r1, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008) socket$nl_route(0x10, 0x3, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000001c0)=""/10, 0xa}], 0x1, &(0x7f0000000c40)=""/176, 0xb0}, 0x3}], 0x1, 0x2122, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="280000001c0001040500700003dcdf2507000000", @ANYRES32, @ANYBLOB="420047060a000200aaaaaaaaaa1b0000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x840) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r6, &(0x7f0000000980), 0x0, 0x4400c800) 2.952089211s ago: executing program 1 (id=211): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getrlimit(0xe, &(0x7f0000002040)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x8000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') r2 = syz_open_dev$video4linux(&(0x7f00000003c0), 0x3fc, 0x4a102) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, {0xecd8, 0x0, 0x3002, 0x0, 0x0, 0x8, 0x2}}) pread64(r1, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008) socket$nl_route(0x10, 0x3, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000001c0)=""/10, 0xa}], 0x1, &(0x7f0000000c40)=""/176, 0xb0}, 0x3}], 0x1, 0x2122, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfde1, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba"}}, 0xfdef) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="280000001c0001040500700003dcdf2507000000", @ANYRES32, @ANYBLOB="420047060a000200aaaaaaaaaa1b0000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x840) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r5, &(0x7f0000000980), 0x0, 0x4400c800) 2.903386633s ago: executing program 2 (id=212): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000280)='tcp', 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='127.0.0.1', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='8009', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x6}]}, 0x8) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x44, &(0x7f0000000000)={0x4d, 0x0}, 0x10) write(r2, &(0x7f0000000400)='ipv4', 0x4) write$binfmt_register(r1, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x6, 0x3a, '-', 0x3a, '\'*/', 0x3a, './config/nvmet/ports/1/addr_adrfam', 0x3a, [0x4f, 0x0, 0x46]}, 0x49) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write(r4, &(0x7f0000000500)='transport=tcp,traddr=127.0.0.1,trsvcid=8009,nqn=testnqn', 0x37) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000540)=@llc={0x1a, 0x324, 0x3, 0x3, 0x7, 0xf, @broadcast}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000005c0)="3e8d3804fe2ef724c8a0c17252", 0xd}, {&(0x7f0000000600)="da8f6fb615c3f127debbdd48c4e9bfa87ca9ae983a45cefb60d1090d6ada439cacf9b6bcded585bdc67d0721552a31f67a6e2f5c26281ff4f827a3f90d350ea2a857a712201c446dbf91d72d0b494022a8412558566fa49d31bd762348c9e8d764405c91d5a0898ee6761a3515e2b3f6f6e40e97e6cdba9d08d7a7e074d8fd391747912e90b587414a75a94e24c15f1d", 0x90}, {&(0x7f00000006c0)="f065991fa3d524911bf2dd4cded028011a7f1a1231133e5388532ebc4cc4ffdbbddaaba827976d41ef072a45a19f996268ebfa23c6555452191bc999ed4be061f5552e174e436f2837066892dac395523c5eca7ea221ab05e392804ed3a1fa46b8f54853b3b6e5e4f320b7a227a33b0687fdefbf699a9d1d8d86134aa6d1979a7e8d096c3198498f5dddb8aaa09241ea6e59fb965a1654b1100b2d5cf64f6e9d4cf82ea946cf4ff99fcb10f685073117c5ba0d58d049ed1ab23052ae444c0f55dfa7abf09aa7618dee2139d5e9578f0dd630abd10c7d62829cce5c2136", 0xdd}], 0x3, &(0x7f0000000800)=[@timestamping={{0x10, 0x1, 0x25, 0x80000000}}, @txtime={{0x14, 0x1, 0x3d, 0x3}}, @txtime={{0x14, 0x1, 0x3d, 0x8}}], 0x38}, 0x24000810) 2.86024821s ago: executing program 3 (id=213): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x344f, &(0x7f0000000040)={0x0, 0x716e, 0x40, 0x0, 0x1e1}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x34, r2, 0x501, 0x70bf28, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x10}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20004814) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000001640)=""/117, 0x75}], 0x0, 0x11a}, 0x20) 2.23987614s ago: executing program 2 (id=214): r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = gettid() rt_sigqueueinfo(r6, 0x21, &(0x7f0000001840)={0xfffffffc, 0x8, 0x5}) r7 = dup3(r4, r0, 0x0) syz_clone3(&(0x7f0000000440)={0x146050000, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0xa}, &(0x7f0000000300)=""/106, 0x6a, &(0x7f0000000380)=""/68, &(0x7f0000000400)=[r1, r1, 0xffffffffffffffff, r1, r6, r1, r1], 0x7, {r7}}, 0x58) getsockopt$inet6_tcp_int(r5, 0x6, 0x22, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="1c002000010300000038d845690002000000000000001a000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.179905196s ago: executing program 3 (id=215): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000010040)=""/65548, 0x10000, 0x800, 0xfffffffc, 0x2}, 0x1c) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) bind$xdp(r2, 0x0, 0x0) close(r2) mount$tmpfs(0x0, 0x0, 0x0, 0x21a6022, &(0x7f0000000580)=ANY=[@ANYBLOB="61756469742c67e1506910fc83995f747970653d696d9e2343237846886d617369672c736d61636b"]) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', 0x0, 0x0, 0x0) lchown(0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_clone3(0x0, 0x0) read$FUSE(r3, 0x0, 0x0) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x20}, 0xc) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x33, 0xe7, 0x5, 0x71337e10a18d5d60, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x7800, 0x4, 0x1800}}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') pread64(r6, &(0x7f0000000600)=""/4099, 0x1003, 0x110) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e000000450f0000030000000002000004020000", @ANYRES32=r4, @ANYBLOB='\b\x00'/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0000000005000000040000000300"/28], 0x50) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) 1.558791968s ago: executing program 0 (id=216): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) unshare(0x8000000) syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r3) write(r4, &(0x7f00000000c0)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='1\x00', 0x1) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="58000000090601020000000000000000020000000900020073797a31000000000500010007000000300007801800018014000240fe8000"/67], 0x58}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 1.558270879s ago: executing program 3 (id=217): openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x1, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r0, r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV_ZC={0x3a, 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x16d2, 0x0, 0x0, {0x0, 0x0, 0xa}}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) bind$bt_sco(0xffffffffffffffff, &(0x7f00000003c0)={0x1f, @none}, 0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'dummy0\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1f4, 0x0, 0x11, 0x148, 0x0, 0x0, 0x2b0, 0x2a8, 0x2a8, 0x2b0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xff, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x1, 0x7a}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x5, 0x3, 0x0, 0x6, 0x1], 0x1, 0x1}, {0x1, [0x1, 0x0, 0x0, 0x1, 0x1, 0x3], 0x0, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x250) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) sched_setscheduler(r5, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000600)=ANY=[@ANYBLOB="2b706964732021a0b593a1008048"], 0x6) write$cgroup_subtree(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="35d72b7b886ebe6192edcc1aed32061fc833b8015fef7dc81594696a320f397ab4e186580f984abdd4003ef0065b9287031b80bb7abadca7da58f9c813cd5208c28e909b098ced8641868c0eaea05855143f9bec83b5f5fcbced65ad4366fead564f61a6d5b33057a122fd588f"], 0xb) r8 = socket(0x2a, 0x5, 0x20003a) getsockopt$inet_mreqn(r8, 0x0, 0x24, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000900)=ANY=[@ANYBLOB="04130d03c9000100c8000104c900"], 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x18}, @l2cap_cid_signaling={{0x14}, [@l2cap_create_chan_rsp={{0xd, 0x40, 0x8}, {0x6, 0x401, 0x3ff, 0x3}}, @l2cap_disconn_rsp={{0x7, 0xb, 0x4}, {0x7fff, 0x100}}]}}, 0x1d) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "804dc5d30a6f1591"}}}, 0x11) syz_usb_connect$uac2(0x2, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x3028000, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000140), 0x0) getpgrp(0xffffffffffffffff) setpgid(0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 1.239327971s ago: executing program 2 (id=218): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="fea87fb7477d641b0087268800000000800400f300e500", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r3, 0x19, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x9f1e}}, 0x40) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(r4) bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000008000000324900007f00000080010000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00+,UL'], 0x50) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r8, 0x4b47, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001840)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0x2, 0x1}, {0xf, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810000000fd010000000008000100ac141400080005000a0101021800168014000300fc000800000000000000000000000000060015"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) close(r5) open(&(0x7f0000000080)='./file0\x00', 0x20002, 0x1a9) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x53, 0xd8, 0xfff4, {0x20, 0x1}, {0x45}, @cond=[{0x4a7, 0xfff, 0x3, 0x0, 0x100}, {0x8968, 0x6, 0x7, 0x80, 0x1819, 0x9}]}) r11 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r11, &(0x7f0000000040)="e2", 0x12d8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000fe000000041000000a00000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 1.238676698s ago: executing program 1 (id=219): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000008280), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f0000008300)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004024}, 0x800) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x7, 0x10}, 0xc) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket(0x400000000010, 0x3, 0x0) futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000400)=0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r8, {0xffff, 0x10}, {0x0, 0xfff1}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf4, 0x0, 0x7, 0xb, 0x3}, 0x31}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r8, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000006125ce882cbf400930bf4533f", 0x20}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0", 0xe}], 0x2}, 0x8000) sendto$inet(r0, &(0x7f0000000000)="6f635cb936bb67840ddd38e89fa03799cc31a64c2232ca9eda4a89896b2304c241822ecf78827892af117c8e24a3ea25047d87ecbc9b44107edc8c076921d2e832b05d95dae8c2c0081ec2c0d0e9b50f4daa14ab058de79446f5ee97d734777b1218815e26e30fe5227a80be576209dbe80b24d086ee6719baafd837dce9ad84c04c0f681cff7695f9406f706aa11980bcd3da89ab0e1f7ba02ef4f59362b6", 0x9f, 0x20040050, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) 1.229804241s ago: executing program 2 (id=220): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="fea87fb7477d641b0087268800000000800400f300e500", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r3, 0x19, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x9f1e}}, 0x40) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(r4) r5 = bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000008000000324900007f00000080010000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00+,UL'], 0x50) r6 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r9, 0x4b47, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001840)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0x2, 0x1}, {0xf, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810000000fd010000000008000100ac141400080005000a0101021800168014000300fc000800000000000000000000000000060015"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) close(r6) open(&(0x7f0000000080)='./file0\x00', 0x20002, 0x1a9) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x53, 0xd8, 0xfff4, {0x20, 0x1}, {0x45}, @cond=[{0x4a7, 0xfff, 0x3, 0x0, 0x100}, {0x8968, 0x6, 0x7, 0x80, 0x1819, 0x9}]}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f00000001c0)=0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000fe000000041000000a00000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 1.135504239s ago: executing program 2 (id=221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180302, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000140)={0x500, 0x320, 0x1e0, 0x3f, 0x32, 0x1, 0x20, 0x4, {}, {0x5}, {0x0, 0x0, 0x3}, {}, 0x0, 0x100, 0x0, 0xffffffff, 0x0, 0x0, 0x3ffe, 0x6, 0x0, 0x0, 0x3e6, 0x0, 0x4, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0), 0x2000000, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532302c72713d3078303030313030303030303030303030302c73713d3078303030303030303030303030303030362c74696d656f75743d3078303030303030303030303030306338392c72713d3078666666666666666666666666666666622c73713d3078303030303030303030303030303030312c63616368653d667363616368652c616e616d653d2c6d73697a653d3078303030303030303030303030303030342c73713d307830303030308b303037666666666666662c726f6f74636f6e746578743d73797374656d5f752c00"]) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bridge0/bridge/stp_state\x00', 0x1, 0x0) setuid(0xee00) write(r2, &(0x7f0000000040)="cd", 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000080)={'veth0_to_hsr\x00', &(0x7f0000000100)=@ethtool_channels={0x1, 0xfffffffd, 0xfffffffe, 0xffffff31, 0x3, 0xffffdffc, 0x3, 0x0, 0x2}}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x9], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f0000000200)=0x1f, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0xffff8001, @remote}, 0x1c) memfd_secret(0x80000) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, {0xa, 0x4e23, 0x0, @local, 0x2}, 0xffffffffffffffff, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000580)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500f000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a010400000000000000000100000008000b40000000000900010073797a300000000014000480100001800a000100726564697200000014000000110001"], 0xcc}}, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffff00000000000004000000000000000200000000000000", @ANYRES32=r3, @ANYBLOB="00000000030900000000000000000000000000000000000000000000b64232e70a35a3db799df93d80d8cc4a98a94fedb02d9a2d5ec4c79d563e650bfa2d7e8a627e7375866029402630010b45feee88d9149b16da1321c0ad4df123376ca2ee61183452ecfb8cd6753982c4a00eb1a7695bf75d266922a2d066c54fa2fb63238ced2a3130a59a8629a6f905b26a9a9f4e26b35fae6c64fd7212d19c55b4cf392e70adbd2fa6b443e75e81d636c54b471f35f5309285a92acf90dc9c2b135bc1244cf8ae8cce3cda68008a43901fcc5541d3dd021fd4f5aa82321bd9f0668331f15736e71dcf09eeaa5d6de686339a653fb05a865ce08d24c2bf4136e58798f5ae70f4d34df002a08f4d1a135d25c1a992e36d1958eef5ca9e6d3fcc18bfda7294d02c049feabf048bd44ef92d027ec5cd1f7a0ac39034362fd7075ed5b7deb1369618c21f1f9f2147108961c03c19bafe10caa93e00"/357, @ANYRES32=r4, @ANYBLOB="00000000000100"/28]) syz_emit_ethernet(0x7a, &(0x7f0000002900)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa000086dd61293e2600442ffffe88000000000000000000e9ff0001010debffff010c21880b00000003010200000c00"], 0x0) syz_emit_ethernet(0x4b, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000150640fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e22", @ANYRES32=0x0, @ANYRES32=0x41424344, @ANYBLOB], 0x0) 1.037396088s ago: executing program 1 (id=222): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x264, 0x23b) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r2, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x4002) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r5) recvfrom$inet(r2, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 636.610442ms ago: executing program 3 (id=223): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='tcp', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='127.0.0.1', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='8009', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x6}]}, 0x8) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x44, &(0x7f0000000000)={0x4d, 0x0}, 0x10) write(r3, &(0x7f0000000400)='ipv4', 0x4) write$binfmt_register(r2, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x6, 0x3a, '-', 0x3a, '\'*/', 0x3a, './config/nvmet/ports/1/addr_adrfam', 0x3a, [0x4f, 0x0, 0x46]}, 0x49) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write(r5, &(0x7f0000000500)='transport=tcp,traddr=127.0.0.1,trsvcid=8009,nqn=testnqn', 0x37) sendmsg$sock(r0, &(0x7f0000000840)={&(0x7f0000000540)=@llc={0x1a, 0x324, 0x3, 0x3, 0x7, 0xf, @broadcast}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000005c0)="3e8d3804fe2ef724c8a0c17252", 0xd}, {&(0x7f0000000600)="da8f6fb615c3f127debbdd48c4e9bfa87ca9ae983a45cefb60d1090d6ada439cacf9b6bcded585bdc67d0721552a31f67a6e2f5c26281ff4f827a3f90d350ea2a857a712201c446dbf91d72d0b494022a8412558566fa49d31bd762348c9e8d764405c91d5a0898ee6761a3515e2b3f6f6e40e97e6cdba9d08d7a7e074d8fd391747912e90b587414a75a94e24c15f1d", 0x90}, {&(0x7f00000006c0)="f065991fa3d524911bf2dd4cded028011a7f1a1231133e5388532ebc4cc4ffdbbddaaba827976d41ef072a45a19f996268ebfa23c6555452191bc999ed4be061f5552e174e436f2837066892dac395523c5eca7ea221ab05e392804ed3a1fa46b8f54853b3b6e5e4f320b7a227a33b0687fdefbf699a9d1d8d86134aa6d1979a7e8d096c3198498f5dddb8aaa09241ea6e59fb965a1654b1100b2d5cf64f6e9d4cf82ea946cf4ff99fcb10f685073117c5ba0d58d049ed1ab23052ae444c0f55dfa7abf09aa7618dee2139d5e9578f0dd630abd10c7d62829cce5c2136", 0xdd}], 0x3, &(0x7f0000000800)=[@timestamping={{0x10, 0x1, 0x25, 0x80000000}}, @txtime={{0x14, 0x1, 0x3d, 0x3}}, @txtime={{0x14, 0x1, 0x3d, 0x8}}], 0x38}, 0x24000810) 439.910967ms ago: executing program 3 (id=224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8814) mount(0x0, 0x0, 0x0, 0x8, 0x0) socket$inet(0x2, 0x2, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xff, 0x2, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x101, 0x401, 0x9, 0x8, 0x4, 0x8, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x4]}) socket$nl_netfilter(0x10, 0x3, 0xc) 98.261391ms ago: executing program 1 (id=225): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getrlimit(0xe, &(0x7f0000002040)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x8000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') r2 = syz_open_dev$video4linux(&(0x7f00000003c0), 0x3fc, 0x4a102) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, {0xecd8, 0x0, 0x3002, 0x0, 0x0, 0x8, 0x2}}) pread64(r1, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008) socket$nl_route(0x10, 0x3, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000001c0)=""/10, 0xa}], 0x1, &(0x7f0000000c40)=""/176, 0xb0}, 0x3}], 0x1, 0x2122, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="280000001c0001040500700003dcdf2507000000", @ANYRES32, @ANYBLOB="420047060a000200aaaaaaaaaa1b0000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x840) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r6, &(0x7f0000000980), 0x0, 0x4400c800) 0s ago: executing program 0 (id=226): r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = gettid() rt_sigqueueinfo(r6, 0x21, &(0x7f0000001840)={0xfffffffc, 0x8, 0x5}) r7 = dup3(r4, r0, 0x0) syz_clone3(&(0x7f0000000440)={0x146050000, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0xa}, &(0x7f0000000300)=""/106, 0x6a, &(0x7f0000000380)=""/68, &(0x7f0000000400)=[r1, r1, 0xffffffffffffffff, r1, r6, r1, r1], 0x7, {r7}}, 0x58) getsockopt$inet6_tcp_int(r5, 0x6, 0x22, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="1c002000010300000038d845690002000000000000001a000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:39830' (ED25519) to the list of known hosts. [ 78.168231][ T5689] cgroup: Unknown subsys name 'net' [ 78.318098][ T5689] cgroup: Unknown subsys name 'cpuset' [ 78.322373][ T5689] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.325463][ T5689] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.157338][ T34] cfg80211: failed to load regulatory.db [ 83.521689][ T5741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.526363][ T5741] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.534539][ T5745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.537508][ T5745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.541541][ T5745] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.542944][ T5751] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.545867][ T5745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.549264][ T5753] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.550159][ T5753] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.553807][ T5748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.554240][ T5745] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.556789][ T5745] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.557209][ T5752] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.557850][ T5753] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.558164][ T5753] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.561403][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.563386][ T5752] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.566355][ T5095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.569219][ T5752] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.581804][ T5095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.227253][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.231562][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.234173][ T5746] bridge_slave_0: entered allmulticast mode [ 84.237966][ T5746] bridge_slave_0: entered promiscuous mode [ 84.273036][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.275712][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.278356][ T5746] bridge_slave_1: entered allmulticast mode [ 84.281763][ T5746] bridge_slave_1: entered promiscuous mode [ 84.310889][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.313251][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.319761][ T5739] bridge_slave_0: entered allmulticast mode [ 84.327597][ T5739] bridge_slave_0: entered promiscuous mode [ 84.331091][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.333274][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.335680][ T5739] bridge_slave_1: entered allmulticast mode [ 84.338386][ T5739] bridge_slave_1: entered promiscuous mode [ 84.341080][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.343274][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.346702][ T5742] bridge_slave_0: entered allmulticast mode [ 84.349760][ T5742] bridge_slave_0: entered promiscuous mode [ 84.388151][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.390246][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.392320][ T5742] bridge_slave_1: entered allmulticast mode [ 84.394701][ T5742] bridge_slave_1: entered promiscuous mode [ 84.404243][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.406448][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.408479][ T5747] bridge_slave_0: entered allmulticast mode [ 84.410993][ T5747] bridge_slave_0: entered promiscuous mode [ 84.417864][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.423933][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.429357][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.446218][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.449078][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.452557][ T5747] bridge_slave_1: entered allmulticast mode [ 84.455468][ T5747] bridge_slave_1: entered promiscuous mode [ 84.480750][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.486095][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.490624][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.501602][ T5746] team0: Port device team_slave_0 added [ 84.519288][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.524549][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.531795][ T5746] team0: Port device team_slave_1 added [ 84.551325][ T5739] team0: Port device team_slave_0 added [ 84.559845][ T5739] team0: Port device team_slave_1 added [ 84.574570][ T5742] team0: Port device team_slave_0 added [ 84.592151][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.595451][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.604196][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.610788][ T5742] team0: Port device team_slave_1 added [ 84.613935][ T5747] team0: Port device team_slave_0 added [ 84.626258][ T5747] team0: Port device team_slave_1 added [ 84.628348][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.630619][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.638135][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.648404][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.651037][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.660028][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.669479][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.671964][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.681008][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.702440][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.704555][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.712863][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.724291][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.726613][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.736327][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.740993][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.743076][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.751018][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.769801][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.771876][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.779358][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.812240][ T5746] hsr_slave_0: entered promiscuous mode [ 84.815243][ T5746] hsr_slave_1: entered promiscuous mode [ 84.827289][ T5739] hsr_slave_0: entered promiscuous mode [ 84.830155][ T5739] hsr_slave_1: entered promiscuous mode [ 84.832344][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 84.834683][ T5739] Cannot create hsr debugfs directory [ 84.852211][ T5742] hsr_slave_0: entered promiscuous mode [ 84.854492][ T5742] hsr_slave_1: entered promiscuous mode [ 84.856771][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 84.858748][ T5742] Cannot create hsr debugfs directory [ 84.870364][ T5747] hsr_slave_0: entered promiscuous mode [ 84.872572][ T5747] hsr_slave_1: entered promiscuous mode [ 84.874615][ T5747] debugfs: 'hsr0' already exists in 'hsr' [ 84.876456][ T5747] Cannot create hsr debugfs directory [ 85.146809][ T5739] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.156582][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.159371][ T5739] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.164124][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.168421][ T5739] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.172489][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.175284][ T5739] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.178888][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.226860][ T5742] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.233382][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.237097][ T5742] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.243025][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.247900][ T5742] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.254517][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.270975][ T5742] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.275832][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.331192][ T5747] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.340455][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.343319][ T5747] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.349713][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.353653][ T5747] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.358740][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.361264][ T5747] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.365261][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.419056][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.431039][ T5746] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.435501][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.438158][ T5746] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.445841][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.448659][ T5746] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.454148][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.457493][ T5746] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.461151][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.485212][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.499845][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.502018][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.513055][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.515497][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.533331][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.560310][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.577752][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.580343][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.589955][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.592378][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.605688][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.626510][ T5095] Bluetooth: hci2: command tx timeout [ 85.626534][ T64] Bluetooth: hci3: command tx timeout [ 85.626784][ T64] Bluetooth: hci0: command tx timeout [ 85.628082][ T5741] Bluetooth: hci1: command tx timeout [ 85.646683][ T5742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.653155][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.658189][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.675639][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.677823][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.681044][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.683276][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.696979][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.706792][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.708947][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.719246][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.721481][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.871600][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.903261][ T5739] veth0_vlan: entered promiscuous mode [ 85.909574][ T5739] veth1_vlan: entered promiscuous mode [ 85.946083][ T5739] veth0_macvtap: entered promiscuous mode [ 85.955190][ T5739] veth1_macvtap: entered promiscuous mode [ 85.964703][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.973359][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.981451][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.005971][ T5815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.036183][ T5742] veth0_vlan: entered promiscuous mode [ 86.044916][ T5815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.052824][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.061729][ T5742] veth1_vlan: entered promiscuous mode [ 86.087288][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.106738][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.110933][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.137063][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.139578][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.150516][ T5746] veth0_vlan: entered promiscuous mode [ 86.154467][ T5747] veth0_vlan: entered promiscuous mode [ 86.161093][ T5742] veth0_macvtap: entered promiscuous mode [ 86.167443][ T5747] veth1_vlan: entered promiscuous mode [ 86.172673][ T5746] veth1_vlan: entered promiscuous mode [ 86.180297][ T5742] veth1_macvtap: entered promiscuous mode [ 86.193568][ T5739] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.197052][ T5587] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.212974][ T5739] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 86.219558][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.220236][ T5739] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 86.229512][ T5739] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 86.238215][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.240505][ T5739] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 86.255029][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.298785][ T5747] veth0_macvtap: entered promiscuous mode [ 86.305512][ T5815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.328796][ T5746] veth0_macvtap: entered promiscuous mode [ 86.334244][ T5746] veth1_macvtap: entered promiscuous mode [ 86.338132][ T5747] veth1_macvtap: entered promiscuous mode [ 86.368224][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.373719][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.376542][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.378634][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.403046][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.412814][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.426854][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.431836][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.476317][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.497210][ T5815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.501242][ T5815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.545310][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.592940][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.596558][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.603212][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.607816][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.655327][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.686743][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.695318][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.761783][ T5815] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.766817][ T5815] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.796296][ T5815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.803859][ T5815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.999933][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.002479][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.589063][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.594570][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.597008][ T5587] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.715367][ T64] Bluetooth: hci0: command tx timeout [ 87.717617][ T64] Bluetooth: hci1: command tx timeout [ 87.719504][ T64] Bluetooth: hci3: command tx timeout [ 87.721147][ T64] Bluetooth: hci2: command tx timeout [ 88.484967][ T5845] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 88.638461][ T5845] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 88.651049][ T5845] usb 6-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.658883][ T5845] usb 6-1: config 0 interface 0 has no altsetting 0 [ 88.675443][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 88.684028][ T5845] usb 6-1: Product: syz [ 88.688631][ T5845] usb 6-1: Manufacturer: syz [ 88.690625][ T5845] usb 6-1: SerialNumber: syz [ 88.699607][ T5845] usb 6-1: config 0 descriptor?? [ 88.756579][ T5845] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 88.824534][ T42] audit: type=1326 audit(1787035580.359:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.0.18" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 88.834758][ T42] audit: type=1326 audit(1787035580.359:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.0.18" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 88.840504][ T5730] udevd[5730]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.844170][ T42] audit: type=1326 audit(1787035580.359:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.0.18" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 88.857322][ T42] audit: type=1326 audit(1787035580.359:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.0.18" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 88.864611][ T42] audit: type=1326 audit(1787035580.359:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.0.18" exe="/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 88.871548][ T42] audit: type=1326 audit(1787035580.359:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.0.18" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 88.878475][ T42] audit: type=1326 audit(1787035580.359:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.0.18" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 88.885272][ T42] audit: type=1326 audit(1787035580.359:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.0.18" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 88.895738][ T42] audit: type=1326 audit(1787035580.359:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.0.18" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 88.902996][ T42] audit: type=1326 audit(1787035580.359:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5939 comm="syz.0.18" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 88.921324][ T5903] usb 6-1: USB disconnect, device number 2 [ 89.795207][ T5095] Bluetooth: hci2: command tx timeout [ 89.796023][ T64] Bluetooth: hci3: command tx timeout [ 89.797709][ T5741] Bluetooth: hci0: command tx timeout [ 89.798194][ T5095] Bluetooth: hci1: command tx timeout [ 89.842802][ T5980] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 89.878079][ T5980] kvm: pic: single mode not supported [ 89.879506][ T5980] kvm: pic: non byte read [ 89.888696][ T5980] kvm: pic: level sensitive irq not supported [ 89.889642][ T5980] kvm: pic: non byte read [ 89.896662][ T5980] kvm: pic: level sensitive irq not supported [ 89.897097][ T5980] kvm: pic: non byte read [ 89.903907][ T5980] kvm: pic: level sensitive irq not supported [ 89.904645][ T5980] kvm: pic: non byte read [ 89.911069][ T5980] kvm: pic: level sensitive irq not supported [ 89.911359][ T5980] kvm: pic: non byte read [ 89.918884][ T5980] kvm: pic: level sensitive irq not supported [ 89.919898][ T5980] kvm: pic: non byte read [ 89.927902][ T5980] kvm: pic: level sensitive irq not supported [ 89.928835][ T5980] kvm: pic: non byte read [ 90.057922][ T5986] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 90.304678][ T5996] loop9: detected capacity change from 0 to 7 [ 90.317418][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.321129][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 90.325940][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.329522][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 90.332535][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.336044][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 90.338970][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.342336][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 90.345346][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.349205][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 90.352413][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.356286][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 90.360661][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.364149][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 90.366530][ T5996] ldm_validate_partition_table(): Disk read failed. [ 90.369248][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.373484][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.377358][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 90.381773][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.385372][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 90.389035][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 90.392549][ T5996] Dev loop9: unable to read RDB block 0 [ 90.396864][ T5996] loop9: unable to read partition table [ 90.399305][ T5996] loop9: partition table beyond EOD, truncated [ 90.401664][ T5996] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 91.542939][ T6034] bridge_slave_0: default FDB implementation only supports local addresses [ 91.547836][ T6034] bridge_slave_0: default FDB implementation only supports local addresses [ 91.551990][ T6034] Zero length message leads to an empty skb [ 91.864984][ T5095] Bluetooth: hci1: command tx timeout [ 91.865114][ T64] Bluetooth: hci3: command tx timeout [ 91.867532][ T5741] Bluetooth: hci2: command tx timeout [ 91.868278][ T5752] Bluetooth: hci0: command tx timeout [ 92.257167][ T6055] netlink: 44 bytes leftover after parsing attributes in process `syz.0.63'. [ 92.261151][ T6055] netlink: 43 bytes leftover after parsing attributes in process `syz.0.63'. [ 92.268714][ T6055] netlink: 'syz.0.63': attribute type 6 has an invalid length. [ 92.273912][ T6055] netlink: 'syz.0.63': attribute type 5 has an invalid length. [ 92.276792][ T6055] netlink: 43 bytes leftover after parsing attributes in process `syz.0.63'. [ 92.508657][ T6074] bond1: (slave vlan2): making interface the new active one [ 92.512034][ T6074] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 93.126873][ T6120] bond1: (slave vlan2): making interface the new active one [ 93.131917][ T6120] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 93.206376][ T6125] Console: switching to colour dummy device 80x25 [ 93.283853][ T6130] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 93.318488][ T6130] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 93.321421][ T6130] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 93.323942][ T6130] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 93.327310][ T6130] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 93.369280][ T6130] pci 0000:00:01.0: Adding to iommu group 1 [ 93.388773][ T6130] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 93.391048][ T6130] pci 0000:00:01.0: vgaarb: bridge control possible [ 93.393196][ T6130] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 93.393450][ T6134] openvswitch: netlink: nsh attr 363 is out of range max 3 [ 93.408736][ T6130] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 93.420401][ T6130] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 93.429331][ T6130] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 93.442479][ T6130] [drm] Found bochs VGA, ID 0xb0c5. [ 93.447853][ T6130] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 93.499206][ T6130] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 93.674407][ T6130] Console: switching to colour frame buffer device 160x50 [ 93.714783][ T6130] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 93.767240][ T6132] syzkaller1: entered promiscuous mode [ 93.769685][ T6132] syzkaller1: entered allmulticast mode [ 93.782869][ T6132] bridge_slave_0: default FDB implementation only supports local addresses [ 94.864961][ T42] kauditd_printk_skb: 572 callbacks suppressed [ 94.864981][ T42] audit: type=1800 audit(1787035586.389:584): pid=6147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.98" name="addr_trtype" dev="configfs" ino=10703 res=0 errno=0 [ 94.884059][ T6147] nvmet: Invalid value ':syz2:M:00000000000000000006:-:'*/:./config/nvmet/ports/1/addr_adrfam:O' for trsvcid [ 94.890598][ T42] audit: type=1800 audit(1787035586.409:585): pid=6147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.98" name="addr_traddr" dev="configfs" ino=10704 res=0 errno=0 [ 94.920503][ T42] audit: type=1800 audit(1787035586.409:586): pid=6147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.98" name="addr_trsvcid" dev="configfs" ino=10705 res=0 errno=0 [ 94.957675][ T6147] nvme nvme0: failed to connect socket: -111 [ 96.111120][ T6134] Set syz1 is full, maxelem 65536 reached [ 96.575633][ T6170] syzkaller1: entered promiscuous mode [ 96.578155][ T6170] syzkaller1: entered allmulticast mode [ 96.697853][ T6171] syzkaller1: entered promiscuous mode [ 96.700587][ T6171] syzkaller1: entered allmulticast mode [ 97.636879][ T6162] Console: switching to colour dummy device 80x25 [ 98.721284][ T6163] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 98.758776][ T6163] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 98.763197][ T6163] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 98.766174][ T6163] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 98.769351][ T6163] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 98.799013][ T6163] pci 0000:00:01.0: Adding to iommu group 1 [ 98.842262][ T6163] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 98.844299][ T42] audit: type=1800 audit(1787035590.369:587): pid=6178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.106" name="addr_trtype" dev="configfs" ino=10745 res=0 errno=0 [ 98.844596][ T6163] pci 0000:00:01.0: vgaarb: bridge control possible [ 98.852614][ T42] audit: type=1800 audit(1787035590.379:588): pid=6178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.106" name="addr_traddr" dev="configfs" ino=10746 res=0 errno=0 [ 98.852974][ T6163] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 98.868390][ T6163] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 98.868741][ T6178] nvmet: Invalid value ':syz2:M:00000000000000000006:-:'*/:./config/nvmet/ports/1/addr_adrfam:O' for trsvcid [ 98.873607][ T6163] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 98.876546][ T42] audit: type=1800 audit(1787035590.389:589): pid=6178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.106" name="addr_trsvcid" dev="configfs" ino=10747 res=0 errno=0 [ 98.876570][ T42] audit: type=1800 audit(1787035590.399:590): pid=6178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.106" name="addr_adrfam" dev="configfs" ino=10748 res=0 errno=0 [ 98.897900][ T6163] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 98.911858][ T6178] nvme nvme0: failed to connect socket: -111 [ 98.911889][ T6163] [drm] Found bochs VGA, ID 0xb0c5. [ 98.921181][ T6163] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 98.935258][ T6163] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 99.122613][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.108'. [ 99.158642][ T6163] Console: switching to colour frame buffer device 160x50 [ 99.257793][ T6163] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 99.504983][ T149] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.664934][ T149] usb 5-1: Using ep0 maxpacket: 8 [ 99.667381][ T149] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 99.673457][ T149] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.677524][ T149] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.680700][ T149] usb 5-1: config 0 interface 0 has no altsetting 0 [ 99.682810][ T149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.690514][ T149] usb 5-1: config 0 descriptor?? [ 100.768268][ T149] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 100.779648][ T149] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 100.792060][ T149] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 100.802156][ T149] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 100.819201][ T149] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 100.836120][ T149] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 101.241196][ T5903] usb 5-1: USB disconnect, device number 2 [ 102.499535][ T6220] syzkaller1: entered promiscuous mode [ 102.501405][ T6220] syzkaller1: entered allmulticast mode [ 104.676368][ T6241] syzkaller1: entered promiscuous mode [ 104.678226][ T6241] syzkaller1: entered allmulticast mode [ 104.787660][ T6240] syzkaller1: entered promiscuous mode [ 104.789596][ T6240] syzkaller1: entered allmulticast mode [ 105.570331][ T6244] Bluetooth: MGMT ver 1.23 [ 105.827096][ T6247] syzkaller1: entered promiscuous mode [ 105.829029][ T6247] syzkaller1: entered allmulticast mode [ 107.032433][ T42] audit: type=1800 audit(1787035598.559:591): pid=6263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.132" name="addr_trtype" dev="configfs" ino=10855 res=0 errno=0 [ 107.038876][ T42] audit: type=1800 audit(1787035598.569:592): pid=6263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.132" name="addr_traddr" dev="configfs" ino=12385 res=0 errno=0 [ 107.047317][ T42] audit: type=1800 audit(1787035598.569:593): pid=6263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.132" name="addr_trsvcid" dev="configfs" ino=12386 res=0 errno=0 [ 107.053725][ T42] audit: type=1800 audit(1787035598.569:594): pid=6263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.132" name="addr_adrfam" dev="configfs" ino=12387 res=0 errno=0 [ 107.063803][ T6263] nvmet: Invalid value ':syz2:M:00000000000000000006:-:'*/:./config/nvmet/ports/1/addr_adrfam:O' for trsvcid [ 107.128067][ T6263] nvme nvme0: failed to connect socket: -111 [ 109.419305][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'. [ 109.510616][ T6305] Cannot find add_set index 2 as target [ 109.516603][ T5741] Bluetooth: hci2: hcon ffff8880508ac000 sent 1 < count 1025 [ 109.524432][ T42] audit: type=1800 audit(1787035601.049:595): pid=6304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.142" name="addr_trtype" dev="configfs" ino=12448 res=0 errno=0 [ 109.535684][ T6304] nvmet: Invalid value ':syz2:M:00000000000000000006:-:'*/:./config/nvmet/ports/1/addr_adrfam:O' for trsvcid [ 109.543613][ T42] audit: type=1800 audit(1787035601.059:596): pid=6304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.142" name="addr_trsvcid" dev="configfs" ino=12449 res=0 errno=0 [ 109.556071][ T42] audit: type=1800 audit(1787035601.059:597): pid=6304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.142" name="addr_adrfam" dev="configfs" ino=12450 res=0 errno=0 [ 109.611881][ T6304] nvme nvme0: failed to connect socket: -111 [ 109.638790][ T6301] block nbd1: shutting down sockets [ 111.047635][ T6323] Cannot find add_set index 2 as target [ 111.303174][ T6325] syzkaller1: entered promiscuous mode [ 111.305241][ T6325] syzkaller1: entered allmulticast mode [ 113.718283][ T42] audit: type=1800 audit(1787035605.249:598): pid=6348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.152" name="addr_trtype" dev="configfs" ino=13397 res=0 errno=0 [ 113.726414][ T42] audit: type=1800 audit(1787035605.249:599): pid=6348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.152" name="addr_traddr" dev="configfs" ino=13398 res=0 errno=0 [ 113.729742][ T6348] nvmet: Invalid value ':syz2:M:00000000000000000006:-:'*/:./config/nvmet/ports/1/addr_adrfam:O' for trsvcid [ 113.734386][ T42] audit: type=1800 audit(1787035605.249:600): pid=6348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.152" name="addr_trsvcid" dev="configfs" ino=13399 res=0 errno=0 [ 113.746497][ T42] audit: type=1800 audit(1787035605.249:601): pid=6348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.152" name="addr_adrfam" dev="configfs" ino=13400 res=0 errno=0 [ 113.776926][ T6348] nvme nvme0: failed to connect socket: -111 [ 116.987979][ T42] audit: type=1800 audit(1787035608.519:602): pid=6405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.164" name="addr_trtype" dev="configfs" ino=12549 res=0 errno=0 [ 116.999617][ T42] audit: type=1800 audit(1787035608.529:603): pid=6405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.164" name="addr_traddr" dev="configfs" ino=12550 res=0 errno=0 [ 117.008214][ T6405] nvmet: Invalid value ':syz2:M:00000000000000000006:-:'*/:./config/nvmet/ports/1/addr_adrfam:O' for trsvcid [ 117.013103][ T42] audit: type=1800 audit(1787035608.529:604): pid=6405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.164" name="addr_trsvcid" dev="configfs" ino=12551 res=0 errno=0 [ 117.023327][ T42] audit: type=1800 audit(1787035608.529:605): pid=6405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.164" name="addr_adrfam" dev="configfs" ino=12552 res=0 errno=0 [ 117.086381][ T6405] nvme nvme0: failed to connect socket: -111 [ 117.880372][ T6395] syzkaller1: entered promiscuous mode [ 117.882993][ T6395] syzkaller1: entered allmulticast mode [ 117.925262][ T6411] syzkaller1: entered promiscuous mode [ 117.930864][ T6411] syzkaller1: entered allmulticast mode [ 118.353690][ T5741] Bluetooth: hci3: hcon ffff88804c590000 sent 1 < count 1025 [ 118.432856][ T6418] syzkaller1: entered promiscuous mode [ 118.435566][ T6418] syzkaller1: entered allmulticast mode [ 118.499197][ T6418] bridge_slave_0: default FDB implementation only supports local addresses [ 119.307695][ T6437] netlink: 'syz.1.174': attribute type 13 has an invalid length. [ 120.473963][ T6445] smpboot: CPU 1 is now offline [ 120.956800][ T6460] netlink: 52 bytes leftover after parsing attributes in process `syz.1.180'. [ 122.491814][ T5741] Bluetooth: hci1: hcon ffff888046b6c000 sent 1 < count 1025 [ 122.693069][ T6488] 9p: Bad value for 'rq' [ 122.789282][ T6491] netlink: 52 bytes leftover after parsing attributes in process `syz.3.189'. [ 122.929180][ T6494] netlink: 'syz.0.190': attribute type 13 has an invalid length. [ 122.934028][ T6496] FAULT_INJECTION: forcing a failure. [ 122.934028][ T6496] name failslab, interval 1, probability 0, space 0, times 1 [ 122.955212][ T6496] CPU: 0 UID: 0 PID: 6496 Comm: syz.3.191 Not tainted syzkaller #0 PREEMPT(full) [ 122.955231][ T6496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 122.955238][ T6496] Call Trace: [ 122.955256][ T6496] [ 122.955260][ T6496] dump_stack_lvl+0x100/0x190 [ 122.955338][ T6496] should_fail_ex.cold+0x5/0xa [ 122.955351][ T6496] should_failslab+0xc2/0x120 [ 122.955367][ T6496] __kmalloc_noprof+0xfc/0x820 [ 122.955380][ T6496] ? rcu_is_watching+0x12/0xc0 [ 122.955393][ T6496] ? tomoyo_encode2+0xfb/0x3c0 [ 122.955439][ T6496] tomoyo_encode2+0xfb/0x3c0 [ 122.955470][ T6496] tomoyo_encode+0x29/0x50 [ 122.955485][ T6496] tomoyo_realpath_from_path+0x18c/0x690 [ 122.955504][ T6496] tomoyo_check_open_permission+0x2af/0x3c0 [ 122.955519][ T6496] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 122.955532][ T6496] ? __lock_acquire+0x49f/0x1a40 [ 122.955543][ T6496] ? __lock_acquire+0x49f/0x1a40 [ 122.955555][ T6496] ? hook_file_open+0x24f/0x8f0 [ 122.955580][ T6496] ? path_get+0x61/0x80 [ 122.955595][ T6496] tomoyo_file_open+0x6b/0x90 [ 122.955607][ T6496] security_file_open+0xb5/0x1e0 [ 122.955686][ T6496] do_dentry_open+0x588/0x14d0 [ 122.955702][ T6496] vfs_open+0x82/0x3f0 [ 122.955717][ T6496] path_openat+0x19fa/0x2440 [ 122.955732][ T6496] ? __pfx_path_openat+0x10/0x10 [ 122.955748][ T6496] do_file_open+0x20e/0x430 [ 122.955759][ T6496] ? __lock_acquire+0x49f/0x1a40 [ 122.955770][ T6496] ? __pfx_do_file_open+0x10/0x10 [ 122.955791][ T6496] ? _raw_spin_unlock+0x28/0x50 [ 122.955827][ T6496] ? alloc_fd+0x471/0x7a0 [ 122.955843][ T6496] do_sys_openat2+0x10f/0x1e0 [ 122.955858][ T6496] ? __pfx_do_sys_openat2+0x10/0x10 [ 122.955874][ T6496] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 122.955892][ T6496] __ia32_compat_sys_openat+0x12d/0x210 [ 122.955908][ T6496] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 122.955928][ T6496] ? fput+0x79/0x100 [ 122.955941][ T6496] ? ksys_write+0x1ac/0x250 [ 122.955951][ T6496] ? __pfx_ksys_write+0x10/0x10 [ 122.955964][ T6496] __do_fast_syscall_32+0xe7/0x970 [ 122.955980][ T6496] ? lockdep_hardirqs_on+0x78/0x100 [ 122.955995][ T6496] do_fast_syscall_32+0x32/0x70 [ 122.956010][ T6496] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 122.956024][ T6496] RIP: 0023:0xf7f18fec [ 122.956039][ T6496] Code: Unable to access opcode bytes at 0xf7f18fc2. [ 122.956049][ T6496] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 122.956061][ T6496] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000180 [ 122.956067][ T6496] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 122.956073][ T6496] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.956079][ T6496] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 122.956085][ T6496] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 122.956098][ T6496] [ 122.956154][ T6496] ERROR: Out of memory at tomoyo_realpath_from_path. [ 123.081018][ T42] audit: type=1800 audit(1787035614.609:606): pid=6496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.191" name="features" dev="configfs" ino=12669 res=0 errno=0 [ 123.142208][ T5741] Bluetooth: hci2: hcon ffff8880508a8000 sent 0 < count 1 [ 123.145339][ T5741] Bluetooth: hci2: hcon ffff8880508ac000 sent 0 < count 1025 [ 123.415368][ T6510] syzkaller1: entered promiscuous mode [ 123.417390][ T6510] syzkaller1: entered allmulticast mode [ 124.601471][ T6530] netlink: 52 bytes leftover after parsing attributes in process `syz.3.201'. [ 124.669055][ T6536] bridge0: port 3(macvlan1) entered blocking state [ 124.676877][ T6536] bridge0: port 3(macvlan1) entered disabled state [ 124.681536][ T6536] macvlan1: entered allmulticast mode [ 124.688299][ T6536] veth1_vlan: entered allmulticast mode [ 124.702356][ T6536] macvlan1: entered promiscuous mode [ 124.708193][ T6536] bridge0: port 3(macvlan1) entered blocking state [ 124.711360][ T6536] bridge0: port 3(macvlan1) entered listening state [ 124.731846][ T6539] macvlan1: left allmulticast mode [ 124.735316][ T6539] veth1_vlan: left allmulticast mode [ 124.738817][ T6539] macvlan1: left promiscuous mode [ 124.738864][ T5741] Bluetooth: hci1: hcon ffff888046b68000 sent 0 < count 1 [ 124.745147][ T5741] Bluetooth: hci1: hcon ffff888046b6c000 sent 0 < count 1025 [ 124.745514][ T6539] bridge0: port 3(macvlan1) entered disabled state [ 127.293483][ T42] audit: type=1800 audit(1787035618.819:607): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.212" name="addr_traddr" dev="configfs" ino=12691 res=0 errno=0 [ 127.307265][ T6571] nvmet: Invalid value ':syz2:M:00000000000000000006:-:'*/:./config/nvmet/ports/1/addr_adrfam:O' for trsvcid [ 127.317447][ T42] audit: type=1800 audit(1787035618.839:608): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.212" name="addr_trsvcid" dev="configfs" ino=12692 res=0 errno=0 [ 127.332048][ T42] audit: type=1800 audit(1787035618.839:609): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.212" name="addr_adrfam" dev="configfs" ino=12693 res=0 errno=0 [ 127.362045][ T6571] nvme nvme0: failed to connect socket: -111 [ 127.730881][ T6577] syzkaller1: entered promiscuous mode [ 127.732744][ T6577] syzkaller1: entered allmulticast mode [ 127.948223][ T6579] syzkaller1: entered promiscuous mode [ 127.951286][ T6579] syzkaller1: entered allmulticast mode [ 128.686756][ T5741] Bluetooth: hci2: hcon ffff8880508a8000 sent 0 < count 1 [ 128.689053][ T5741] Bluetooth: hci2: hcon ffff8880508ac000 sent 0 < count 1025 [ 129.188334][ T6606] 9p: Bad value for 'rq' [ 129.204612][ T6608] lo: Caught tx_queue_len zero misconfig [ 129.228408][ T6595] Console: switching to colour dummy device 80x25 [ 129.333163][ T6591] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 129.356680][ T6591] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 129.359337][ T6591] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 129.361543][ T6591] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 129.364147][ T6591] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 129.372485][ T6591] pci 0000:00:01.0: Adding to iommu group 1 [ 129.377568][ T6591] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 129.379780][ T6591] pci 0000:00:01.0: vgaarb: bridge control possible [ 129.381868][ T6591] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 129.390971][ T6591] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 129.393874][ T6591] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 129.397465][ T6591] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 129.406428][ T6591] [drm] Found bochs VGA, ID 0xb0c5. [ 129.408055][ T6591] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 129.416551][ T6591] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 129.512657][ T6591] Console: switching to colour frame buffer device 160x50 [ 129.542970][ T6591] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 129.636943][ T42] audit: type=1800 audit(1787035621.169:610): pid=6612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.223" name="addr_trtype" dev="configfs" ino=12814 res=0 errno=0 [ 129.650865][ T42] audit: type=1800 audit(1787035621.179:611): pid=6612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.223" name="addr_traddr" dev="configfs" ino=12815 res=0 errno=0 [ 129.660262][ T6612] nvmet: Invalid value ':syz2:M:00000000000000000006:-:'*/:./config/nvmet/ports/1/addr_adrfam:O' for trsvcid [ 129.663505][ T42] audit: type=1800 audit(1787035621.189:612): pid=6612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.223" name="addr_trsvcid" dev="configfs" ino=12816 res=0 errno=0 [ 129.673380][ T42] audit: type=1800 audit(1787035621.189:613): pid=6612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.223" name="addr_adrfam" dev="configfs" ino=12817 res=0 errno=0 [ 129.693901][ T6612] nvme nvme0: failed to connect socket: -111 [ 130.266745][ T5845] ------------[ cut here ]------------ [ 130.269695][ T5845] pci 0000:00:01.0: [drm] vblank wait timed out on crtc 0 [ 130.271947][ T5845] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x322/0x590, CPU#3: kworker/3:5/5845 [ 130.275862][ T5845] Modules linked in: [ 130.278098][ T5845] CPU: 3 UID: 0 PID: 5845 Comm: kworker/3:5 Not tainted syzkaller #0 PREEMPT(full) [ 130.281020][ T5845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.284246][ T5845] Workqueue: events drm_fb_helper_damage_work [ 130.286279][ T5845] RIP: 0010:drm_crtc_wait_one_vblank+0x328/0x590 [ 130.288344][ T5845] Code: 48 8b 6b 50 48 85 ed 0f 84 dc 01 00 00 e8 30 55 41 fc 48 89 df e8 88 03 91 00 48 89 c6 48 8d 3d 2e 5d 65 0b 44 89 e9 48 89 ea <67> 48 0f b9 3a 44 89 ee 4c 89 e7 41 be 92 ff ff ff e8 52 f7 ff ff [ 130.294375][ T5845] RSP: 0000:ffffc9000610fa60 EFLAGS: 00010293 [ 130.296361][ T5845] RAX: ffffffff8c438820 RBX: ffff88802ac720d0 RCX: 0000000000000000 [ 130.298817][ T5845] RDX: ffff888013daab40 RSI: ffffffff8c438820 RDI: ffffffff912dd9b0 [ 130.301272][ T5845] RBP: ffff888013daab40 R08: 0000000000000005 R09: 0000000000000000 [ 130.303763][ T5845] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880539ac000 [ 130.306293][ T5845] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000000008da [ 130.308804][ T5845] FS: 0000000000000000(0000) GS:ffff888096ee3000(0000) knlGS:0000000000000000 [ 130.311562][ T5845] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.313712][ T5845] CR2: 0000000033be6ff8 CR3: 000000000e994000 CR4: 0000000000352ef0 [ 130.316247][ T5845] Call Trace: [ 130.317314][ T5845] [ 130.318260][ T5845] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 130.320174][ T5845] ? __pfx_autoremove_wake_function+0x10/0x10 [ 130.322123][ T5845] ? lockdep_hardirqs_on+0x78/0x100 [ 130.323823][ T5845] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 130.325742][ T5845] ? drm_vblank_get+0x14f/0x2d0 [ 130.327295][ T5845] drm_client_modeset_wait_for_vblank+0xef/0x120 [ 130.329283][ T5845] drm_fb_helper_damage_work+0x2e2/0xab0 [ 130.331049][ T5845] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 130.332988][ T5845] ? rcu_is_watching+0x12/0xc0 [ 130.334511][ T5845] process_one_work+0xa23/0x1940 [ 130.336158][ T5845] ? __pfx_process_one_work+0x10/0x10 [ 130.337788][ T5845] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 130.339731][ T5845] worker_thread+0x5ef/0xe50 [ 130.341195][ T5845] ? __pfx_worker_thread+0x10/0x10 [ 130.342809][ T5845] ? kthread+0x13a/0x450 [ 130.344145][ T5845] ? __pfx_worker_thread+0x10/0x10 [ 130.345937][ T5845] kthread+0x370/0x450 [ 130.347247][ T5845] ? __pfx_kthread+0x10/0x10 [ 130.348759][ T5845] ret_from_fork+0x72b/0xd50 [ 130.350229][ T5845] ? __pfx_ret_from_fork+0x10/0x10 [ 130.351852][ T5845] ? __switch_to+0x800/0x10f0 [ 130.353303][ T5845] ? __pfx_kthread+0x10/0x10 [ 130.354761][ T5845] ret_from_fork_asm+0x1a/0x30 [ 130.356372][ T5845] [ 130.357376][ T5845] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 130.359671][ T5845] CPU: 3 UID: 0 PID: 5845 Comm: kworker/3:5 Not tainted syzkaller #0 PREEMPT(full) [ 130.362554][ T5845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.365725][ T5845] Workqueue: events drm_fb_helper_damage_work [ 130.367640][ T5845] Call Trace: [ 130.368696][ T5845] [ 130.369635][ T5845] dump_stack_lvl+0x100/0x190 [ 130.371207][ T5845] vpanic+0x552/0x970 [ 130.372478][ T5845] ? __pfx_vpanic+0x10/0x10 [ 130.373926][ T5845] panic+0xd1/0xe0 [ 130.375118][ T5845] ? __pfx_panic+0x10/0x10 [ 130.376528][ T5845] ? check_panic_on_warn+0x1f/0x90 [ 130.378170][ T5845] check_panic_on_warn.cold+0x19/0x34 [ 130.379852][ T5845] ? drm_crtc_wait_one_vblank+0x322/0x590 [ 130.381640][ T5845] __warn.cold+0x191/0x318 [ 130.383047][ T5845] __report_bug+0x30f/0x440 [ 130.384488][ T5845] ? drm_crtc_wait_one_vblank+0x322/0x590 [ 130.386817][ T5845] ? __pfx___report_bug+0x10/0x10 [ 130.388839][ T5845] ? lockdep_hardirqs_on+0x78/0x100 [ 130.391009][ T5845] report_bug_entry+0xe1/0x290 [ 130.393033][ T5845] ? drm_crtc_wait_one_vblank+0x328/0x590 [ 130.395422][ T5845] handle_bug+0x1cd/0x2a0 [ 130.397227][ T5845] exc_invalid_op+0x17/0x50 [ 130.399120][ T5845] asm_exc_invalid_op+0x1a/0x20 [ 130.401121][ T5845] RIP: 0010:drm_crtc_wait_one_vblank+0x328/0x590 [ 130.403753][ T5845] Code: 48 8b 6b 50 48 85 ed 0f 84 dc 01 00 00 e8 30 55 41 fc 48 89 df e8 88 03 91 00 48 89 c6 48 8d 3d 2e 5d 65 0b 44 89 e9 48 89 ea <67> 48 0f b9 3a 44 89 ee 4c 89 e7 41 be 92 ff ff ff e8 52 f7 ff ff [ 130.411565][ T5845] RSP: 0000:ffffc9000610fa60 EFLAGS: 00010293 [ 130.414113][ T5845] RAX: ffffffff8c438820 RBX: ffff88802ac720d0 RCX: 0000000000000000 [ 130.417378][ T5845] RDX: ffff888013daab40 RSI: ffffffff8c438820 RDI: ffffffff912dd9b0 [ 130.420558][ T5845] RBP: ffff888013daab40 R08: 0000000000000005 R09: 0000000000000000 [ 130.423825][ T5845] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880539ac000 [ 130.427121][ T5845] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000000008da [ 130.430398][ T5845] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 130.432974][ T5845] ? __pfx_autoremove_wake_function+0x10/0x10 [ 130.435509][ T5845] ? lockdep_hardirqs_on+0x78/0x100 [ 130.437619][ T5845] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 130.439903][ T5845] ? drm_vblank_get+0x14f/0x2d0 [ 130.441850][ T5845] drm_client_modeset_wait_for_vblank+0xef/0x120 [ 130.444339][ T5845] drm_fb_helper_damage_work+0x2e2/0xab0 [ 130.446651][ T5845] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 130.449179][ T5845] ? rcu_is_watching+0x12/0xc0 [ 130.451165][ T5845] process_one_work+0xa23/0x1940 [ 130.453247][ T5845] ? __pfx_process_one_work+0x10/0x10 [ 130.455237][ T5845] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 130.457780][ T5845] worker_thread+0x5ef/0xe50 [ 130.459719][ T5845] ? __pfx_worker_thread+0x10/0x10 [ 130.461828][ T5845] ? kthread+0x13a/0x450 [ 130.463598][ T5845] ? __pfx_worker_thread+0x10/0x10 [ 130.465226][ T5845] kthread+0x370/0x450 [ 130.466621][ T5845] ? __pfx_kthread+0x10/0x10 [ 130.468102][ T5845] ret_from_fork+0x72b/0xd50 [ 130.469572][ T5845] ? __pfx_ret_from_fork+0x10/0x10 [ 130.471488][ T5845] ? __switch_to+0x800/0x10f0 [ 130.473445][ T5845] ? __pfx_kthread+0x10/0x10 [ 130.475110][ T5845] ret_from_fork_asm+0x1a/0x30 [ 130.476630][ T5845] [ 130.478170][ T5845] Kernel Offset: disabled [ 130.479537][ T5845] Rebooting in 86400 seconds..