last executing test programs: 17m8.136729926s ago: executing program 32 (id=25): epoll_create1(0x80000) mkdir(&(0x7f0000000000)='dir0\x00', 0x1f3) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='10', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x1, './bus\x00'}, 0x6e) iopl(0x3) timer_create(0x2, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000100)=""/98, 0x62, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000400)={0x8, 0x0, 0x81, 0x9, 0x5, 0x8, 0x3c, 0x3, 0x5, 0x5, 0x30, 0x1, 0x5, 0x6}, 0xe) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d1c0302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c3f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d330800603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f24fc810149d79691c7ad75d", 0x1d8, 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r4) sendmsg$NFC_CMD_DISABLE_SE(r4, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRESHEX=r5, @ANYBLOB="01002b0600000000000000ffffff00220000", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB="9d3e53154f3e4b", @ANYRESOCT=r5, @ANYRES8=0x0, @ANYRESDEC=r4, @ANYRES32=0x0, @ANYRES16, @ANYRESDEC=r6, @ANYRES8, @ANYRESHEX=r3, @ANYRES32=r4, @ANYRESHEX=r0, @ANYRES8=0x0, @ANYRESHEX, @ANYBLOB="8b6cf3057676872420135c7a3c9cbdc8c8f59f9b09895e39e5b2b84f57457b5bc6f70b8fe53472130d531397ba0223a5d0923535e4f2527286de7689b6dc330cb2c2747628641bc1ecf696c467f3a3522f02498941cbdf1ba5cff62a3a2c87f3"], 0x1c}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004818) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000040)={0xa0000004}) 15m52.087616644s ago: executing program 33 (id=140): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x22020400) r6 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = dup(r5) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"a2e3ad09ed1a09f91b37090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f383b6c090890e0879b0a0ac6e70a9b3361959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000040)=@x86={0x5, 0x3, 0x6, 0x0, 0x8, 0x7, 0x6, 0x0, 0x4, 0x9, 0x48, 0x9, 0x0, 0x7, 0x1, 0xa, 0x1, 0x40, 0x10, '\x00', 0x4d, 0x1f}) epoll_pwait(r2, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="440000001000010404000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="38410000440b00002400128009000100626f6e640000000014000280050001000100000008000200", @ANYBLOB="f7"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0xe000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x64) 14m24.248644183s ago: executing program 34 (id=260): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, 0x0, 0x8814) mount(0x0, 0x0, 0x0, 0x8, 0x0) 11m31.39117622s ago: executing program 5 (id=488): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @local, 0x3}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, @in={0x2, 0x4e20, @private=0xa010102}, 0x501, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x300}) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000b13ff03f8204549af300", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00068008000600ffffffff"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000005040)=0x1, 0x4) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40087446, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{0x53f1, 0x2, 0xb, 0x7}, {0x6, 0x4c, 0x37, 0x40000}]}) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf19, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xffffffff}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 11m29.562363765s ago: executing program 5 (id=490): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d0}], 0x1, 0x20048805) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$vim2m(0x0, 0xffff, 0x2) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000050}, 0x24000890) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x3, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x10004, 0x3, 0x80a0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f08c40f009b27000000f2e10a8e690f3271008000c90f30b80e0000000f23d80f215035800000a0c9b9490300000f60b932c00a00b9730200000f32328fe8587db660602fb92dbf0002e6e6006880000000000000000f30", 0x64}], 0x4dd17ed7c0be0334, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000100)=0x3f8a, 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000083c0)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734b5ecaf5e82983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1b8abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff19427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c94c114d3c4c35eed4d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5d18f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f9", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x108) 11m28.841267105s ago: executing program 5 (id=493): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r3], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x804) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @private}]}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa0b00000000000000280000000040069078", @ANYRES32=0x1, @ANYRES32=0x0, @ANYBLOB="5002100090780000"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10, 0x1000}}}}}}, 0x0) sendmsg$netlink(r6, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)={0x30, 0x2e, 0x503, 0x0, 0x0, "", [@typed={0x0, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}], 0x1}, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x6, 0x0, 0x700, 0x0, 0x18, {[@eol]}}}}}}, 0x3a) 11m26.581628499s ago: executing program 2 (id=494): socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000001c0)="ee64", 0x2}], 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900), 0x4) 11m25.95961146s ago: executing program 5 (id=496): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x186c1) syz_emit_ethernet(0x82, &(0x7f0000000640)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @dev, {[@rr={0x7, 0x3}, @generic={0x7, 0x2}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@loopback, 0x200}, {@local}, {}, {@dev}, {@private, 0xfffffffe}]}]}}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r2, @ANYBLOB="0006000000000000240012800b00010067656e65766500001400028006000500"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x4000000) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x53f, 0x3a, '![@.\x88!.,+Z](\xb7\x7f\xbc,U\xbe\x17VI\x8a]\xb9\xf6\x9da\xf1)\xa4\x16\bx0\xd0E\x8c\xd9\x81\xbd\x8cDZ&\xe9\xa5.\xd0\xa4Lj\x99V\x017\xc8{m\xf8\xf3o\x00\xdd\xff\xf5\x89\x9b\x8a\xc5\xdc\x00\n\xec\xcd+\xf2\xf5l\xa7\xf6\xb8\x1e\xccV\xc0\x85\xce\x9e\x9f|m[ \x91h::8bM\'\xb3c\xd4\xf6\xe6\x06C#J\x06\x91\x81\x827\x83\xce\xb1\x8b\xac\x10\xe0\xe9&\xd5\xc8\x88\xcf\xb7)j%3bk\xb7\xcd\f\xe9$\xf6\x99\xa2\x97\xd3\xd3~\xea\x8e\xacGw%<\"`P\xbb\xefd\x96\x11\xad\xb9[\xbdp\x0e\xb298:\v\x80\x1et\x10\xdcE\xa1\x0f\xb6\xf1\x1d\x1dj\x1d\x869\xfc\xef\xfdG?\x14v\xb9\x84\xbfHL\x18\b\xd6\xdf\x8e\x8f\x16}8m\xea\xac\xb5#\x8e\xfb\xf8{w\x0e\xd2|F', 0x3a, '4\xdb\xb7o\xb7F\x86\xcdDTf\xcf]\x13\x9d\xf7z\xe2\'>\x8e\x0e\xcd8\x88\xedks\xa0Y\x17\x89\b\x9a`\xde\x96\x02`}A\xdf\x94\xf9\x9b@d1\xef\xc7\xc3\x1eu*\x9d\xcf\xd6\x8f\xb4\xba\b\xb4K\x87\x9d\x14\xa0\xfc\x13\xe6\x83\x9fE\x12', 0x3a, '\xe9\x1fq\x89Y\x1e\x923aK'}, 0x12a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r6, 0x89e6, &(0x7f0000000000)={0xf, 0x8}) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x0) openat$sndseq(0xffffff9c, &(0x7f00000001c0), 0x1000) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000a00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000700)={0x2ac, r7, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0xbc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="54529aacbba6d7bde7947c905c85b79442331cad220b4111"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36b79241d8985407"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="8e7a53991c410ea8bd1b5a107b82f35c138e4ede6f5a7381"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9d}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b6d2e84ffe3da33d91e009ddf2306b1c39850ee2f71e997df7e6b9e5d46788ed"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9c39fe83459fb4a3160f05537808bc0e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d6c701dd7152e03be102404f7a4004f1"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="70ba4b8234bdd341a1782061effdb731"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6f1d00"}]}, @NL80211_ATTR_REKEY_DATA={0xac, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f1bf540980097b41"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="dfbc32fcc09b726adb3880c56e5b3ae7d15201962afc287d94b822c8ca4fb9d5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "24ad00"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b207057fecbef31f"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2f36f74748a2de69fec3fa093c789962"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="04900d15fd929dd242822bca539f3abd587f8ec0dfeeedfd6bd6a8374a96f9a9"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="70767e7cd7f46b24a63fb1a484e5c8f0"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b689f9f3ae2f2075"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5df1c25aad7fc4c2"}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "21837c9be6d0a0af"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="b2616b8e96394d32f118d93fbfabaf05804343515b14bbbc"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97eae2298af606a5"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "cf91e4f9a10f64ea"}]}, @NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5c0af290ad15166f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80000001}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a274bdc0a7189dd20dc040fcebae0a3d6007d2dc594ac46b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a881831d1fe756e4c03851e5377efd29"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffffcf}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "50960c70c218a89b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "85f6310bec50c2be"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfff}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e6e6782c95cec300"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b2fa3d389b966774"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="67e20085939d5c13401669e80fb0e5b0"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="487bba0803e0a8158c8a6292833e2a17"}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x40000}, 0x4801) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000003c0)={0x20, 0x0, 0x0}) 11m25.492502815s ago: executing program 2 (id=497): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x101280, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x3, 0x5) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) dup2(r1, r2) mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) io_setup(0x8, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x100010, r1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) 11m25.377181457s ago: executing program 5 (id=498): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x30000}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x255fdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x2, 0xb}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e1}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031c3fd3fc141100004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 11m24.029052382s ago: executing program 35 (id=487): mkdir(0x0, 0x58) io_setup(0xbe, &(0x7f0000000400)=0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0xb66f) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c9", 0x1}], 0x1}, 0x4004045) sendto$inet(r1, 0x0, 0x0, 0x4000000, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7ffff006) io_submit(r0, 0x0, 0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000180)={0x1, 0x2, 0xc, 0x8000, 0x5, 0x30484731, 0xc5e, 0x8, 0xfff, 0x10001, 0x8683, 0x2, 0x2}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) 11m22.619473086s ago: executing program 2 (id=500): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 11m22.103159363s ago: executing program 2 (id=501): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d0}], 0x1, 0x20048805) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$vim2m(0x0, 0xffff, 0x2) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000050}, 0x24000890) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x3, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x10004, 0x3, 0x80a0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f08c40f009b27000000f2e10a8e690f3271008000c90f30b80e0000000f23d80f215035800000a0c9b9490300000f60b932c00a00b9730200000f32328fe8587db660602fb92dbf0002e6e6006880000000000000000f30", 0x64}], 0x4dd17ed7c0be0334, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000100)=0x3f8a, 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x108) 11m20.711124578s ago: executing program 5 (id=502): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x80, 0x4, 0xd8f9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000) unshare(0x68040200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) fsetxattr(r1, &(0x7f0000000a40)=@known='security.selinux\x00', 0x0, 0x0, 0x0) fgetxattr(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x24, &(0x7f0000000040)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000280), &(0x7f00000002c0)=[{0x2, 0x0, 0xc, 0xa}, {0x0, 0x4, 0x9, 0x4}, {0x0, 0x4, 0xe}, {0x3, 0x2, 0x7, 0x6}, {0x5, 0x1, 0x0, 0x6}], 0x10, 0x80}, 0x94) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = add_key$user(&(0x7f0000000040), 0x0, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd", 0x93, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={0x0, r3}, &(0x7f0000000440)=""/183, 0xb7, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000100)={r6}, 0x8) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000180), &(0x7f0000000400)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) syz_open_dev$vim2m(&(0x7f0000000500), 0x8, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x3, 0xff) r7 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_ifreq(r7, 0x8927, &(0x7f0000000000)={'tunl0\x00', @ifru_names='nr0\x00'}) 11m20.042439318s ago: executing program 2 (id=503): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) chdir(0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ec0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsetxattr$system_posix_acl(r3, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x2c, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xb0}}, 0x0) 11m18.064274587s ago: executing program 2 (id=504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r3], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x804) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @private}]}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa0b00000000000000280000000040069078", @ANYRES32=0x1, @ANYRES32=0x0, @ANYBLOB="5002100090780000"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10, 0x1000}}}}}}, 0x0) sendmsg$netlink(r6, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)={0x30, 0x2e, 0x503, 0x0, 0x0, "", [@typed={0x0, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}], 0x1}, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x6, 0x0, 0x700, 0x0, 0x18, {[@eol]}}}}}}, 0x3a) 11m11.371563845s ago: executing program 36 (id=495): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x800006, @loopback, 0x4}, 0x1c) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth0_to_batadv\x00', {0x1}, 0x2a}) socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 11m5.375361795s ago: executing program 37 (id=502): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x80, 0x4, 0xd8f9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000) unshare(0x68040200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) fsetxattr(r1, &(0x7f0000000a40)=@known='security.selinux\x00', 0x0, 0x0, 0x0) fgetxattr(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x24, &(0x7f0000000040)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000280), &(0x7f00000002c0)=[{0x2, 0x0, 0xc, 0xa}, {0x0, 0x4, 0x9, 0x4}, {0x0, 0x4, 0xe}, {0x3, 0x2, 0x7, 0x6}, {0x5, 0x1, 0x0, 0x6}], 0x10, 0x80}, 0x94) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = add_key$user(&(0x7f0000000040), 0x0, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd", 0x93, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={0x0, r3}, &(0x7f0000000440)=""/183, 0xb7, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000100)={r6}, 0x8) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000180), &(0x7f0000000400)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) syz_open_dev$vim2m(&(0x7f0000000500), 0x8, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x3, 0xff) r7 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_ifreq(r7, 0x8927, &(0x7f0000000000)={'tunl0\x00', @ifru_names='nr0\x00'}) 11m2.863999014s ago: executing program 38 (id=504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r3], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x804) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @private}]}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa0b00000000000000280000000040069078", @ANYRES32=0x1, @ANYRES32=0x0, @ANYBLOB="5002100090780000"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10, 0x1000}}}}}}, 0x0) sendmsg$netlink(r6, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)={0x30, 0x2e, 0x503, 0x0, 0x0, "", [@typed={0x0, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}], 0x1}, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x6, 0x0, 0x700, 0x0, 0x18, {[@eol]}}}}}}, 0x3a) 8m14.914048175s ago: executing program 9 (id=648): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$full(0xffffff9c, 0x0, 0x214000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b802000018007000100637400001400028008000160ee00000000000040000000000900010073797a30"], 0xe4}}, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000001c0)=@req3={0xbdf7, 0x3, 0xa19, 0x0, 0x5ba, 0x0, 0x7580}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r4, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) socket(0x1e, 0x4, 0x0) syz_io_uring_setup(0x110, 0x0, 0x0, &(0x7f0000000280), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) creat(&(0x7f0000000200)='./file1\x00', 0x12a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast2, 0x0, "01ceaac82ab7d944e84b6fb4c020d47e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x3, 0x4}, 0x3c) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x891f, &(0x7f0000000240)={'sit0\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r5, 0x8949, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x0, 0xc3) 8m14.043340518s ago: executing program 7 (id=651): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000200)) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000340)={0x2, 0x1, @local}, 0x10) syz_clone3(&(0x7f0000000380)={0x22340200, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x58) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)) syz_usb_connect(0x2, 0x38, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) socket(0x40000000015, 0x5, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r6, 0x10c, 0x6, &(0x7f0000000480)=0x9, 0x4) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000300), 0x2, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000580)={0x600, 0x2, &(0x7f0000000240)=[r4, r7], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r8], &(0x7f00000003c0), 0x0, 0x2}) 8m10.718118732s ago: executing program 9 (id=654): socket$kcm(0x10, 0x5, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108943, 0x148) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080)) read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) listns(&(0x7f0000000680)={0x20, 0x0, 0xfffffffffffffc45, 0x4000000, 0x0, 0x1}, 0x0, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={r4, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={r4, 0x9}, 0x8) fcntl$setlease(r0, 0x400, 0x2) syz_ublk_setup_io_uring(0x90b, &(0x7f0000000240)={0x0, 0x9aba, 0x1234, 0x1, 0xfc, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f00000003c0)) ioctl$FE_READ_STATUS(r0, 0x80046f45, &(0x7f0000000000)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r5, 0x4b4a, 0xffffffffffffffff) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r7, 0x1, 0xfffffffc, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0xc001}, 0x0) ioctl$FE_DISEQC_RESET_OVERLOAD(r0, 0x6f3e, 0x0) 8m10.358975419s ago: executing program 7 (id=657): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d00000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000007608000000c0000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) rename(&(0x7f0000000580)='./file0\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') mount$nfs(&(0x7f0000000340)=')./.,\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80000, &(0x7f0000000400)={[{}, {'erspan0\x00'}, {}, {}, {'GPL\x00'}, {'\\@'}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x63, 0x66, 0x30, 0x61, 0x61, 0x63], 0x2d, [0x64, 0xd, 0x63, 0x64], 0x2d, [0x37, 0x1, 0x32, 0x38], 0x2d, [0x39, 0x63, 0x64, 0x35], 0x2d, [0x38, 0x0, 0x37, 0x30, 0x31, 0x33, 0x31, 0x30]}}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@obj_role={'obj_role', 0x3d, ')'}}, {@smackfshat={'smackfshat', 0x3d, 'erspan0\x00'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r4}}]}) 8m9.744367829s ago: executing program 9 (id=658): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$full(0xffffff9c, 0x0, 0x214000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b80200001800700010063740000140002"], 0xe4}}, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000001c0)=@req3={0xbdf7, 0x3, 0xa19, 0x0, 0x5ba, 0x0, 0x7580}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r4, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) socket(0x1e, 0x4, 0x0) syz_io_uring_setup(0x110, 0x0, &(0x7f0000000040), &(0x7f0000000280), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) creat(&(0x7f0000000200)='./file1\x00', 0x12a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast2, 0x0, "01ceaac82ab7d944e84b6fb4c020d47e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x3, 0x4}, 0x3c) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x891f, &(0x7f0000000240)={'sit0\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r5, 0x8949, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x0, 0xc3) 8m7.077241616s ago: executing program 7 (id=660): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000036f65d082bfd700403dcdf25040000000800040002000000040005007e523ded8561896a2a4e6e926de7dc9ea29006002f"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000491) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRESOCT], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r0, 0x0, 0x62, 0x97, &(0x7f0000000580)="4a87a584f2bba85aca3426642bb5147abfcc8bda535899af4117db14575e095ac992f06a088d19e0d4cda2a4f5e79e9e07277b5356485f7ea47297cc97576493bf0f60839fb1cd7062c3d94441b86c5b8bfcb8bac79d278382a7947d269cc794f873", &(0x7f0000000600)=""/151, 0xeb, 0x0, 0x0, 0x41, &(0x7f00000006c0), &(0x7f00000007c0)="35fd869d764109ddf0171cd8ddb7ebb412e88efdf87d96280843e8c08c35369917dbbec7aaaf2f2b0556860eece267d731a66015d7d6e64d2066f4847af08e78f7", 0x4, 0x0, 0x1}, 0x4c) ioctl$CDROM_LOCKDOOR(0xffffffffffffffff, 0x5329, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) timer_create(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000280)='./file0\x00'}, 0x14) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={0xffffffffffffffff, r1, 0x4, r0}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd25, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x10000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x100) fsopen(&(0x7f0000000240)='ext4\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x9, 0x6, 0x7) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) 8m6.956301415s ago: executing program 9 (id=661): socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000001c0)="ee64", 0x2}], 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r2, 0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 8m6.573492229s ago: executing program 3 (id=662): socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000001c0)="ee64", 0x2}], 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 8m5.209225445s ago: executing program 9 (id=664): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000140)=@raw=[@exit], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@private2, 0x29}) shmctl$IPC_RMID(r4, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') preadv(r6, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0xffffffffffffffb6) bind$can_j1939(r0, 0x0, 0x0) 8m3.946041794s ago: executing program 7 (id=665): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) setreuid(r2, 0x0) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) clock_getres(0x7, &(0x7f0000000040)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) 8m3.944020632s ago: executing program 3 (id=666): socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000001c0)="ee64", 0x2}], 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 8m2.258544831s ago: executing program 3 (id=667): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') socket$inet6_sctp(0xa, 0x801, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) getpriority(0x0, r0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x8182) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000100)={0xe000000, 0x52424752, 0xf00, 0x870, 0x2, @stepwise={{0x1fb, 0xfffffff7}, {0x100, 0x5}, {0x2, 0x10001}}}) 8m1.744783213s ago: executing program 7 (id=668): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x44, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x44}}, 0x2) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7m59.766178779s ago: executing program 3 (id=669): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0xb3) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'vlan0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0xe, 0x0, 0x0, 0x400000]}}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000fa", @ANYRES16=r7, @ANYBLOB="050029bd70000000000022000000"], 0x14}}, 0x4000000) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) syz_clone3(&(0x7f0000000680)={0x80000000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x0], 0x1}, 0x58) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000ffffffff0000000002000000183700000200000000000000000000008500789692dcc8cbb4c833b575bd1c2300005200000085200000010000009500"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 7m54.988042814s ago: executing program 9 (id=670): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0xfffffffe}, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ptrace(0x10, r3) ioprio_set$pid(0x1, r0, 0x2007) eventfd(0x6) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x1d6f4194, 0x8, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x11, 0x0, 0x1, [@generic]}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 7m54.905430256s ago: executing program 7 (id=671): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) socket$inet_smc(0x2b, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) r3 = inotify_init() r4 = socket(0xa, 0x3, 0x3a) r5 = io_uring_setup(0x7a17, &(0x7f00000003c0)={0x0, 0xf8fd, 0x80, 0x0, 0xc1, 0x0, r2}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000440)={0x48, r3, 0x1, {0x1, 0xdc64}, 0xff}, 0x1) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r8, 0x40047459, 0x0) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) close_range(r3, 0xffffffffffffffff, 0x0) 7m54.521566473s ago: executing program 3 (id=672): syz_open_dev$video(0x0, 0x7f, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = syz_open_procfs(0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x200003}, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) pread64(r1, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) pwritev2(r1, &(0x7f0000000200)=[{0x0}, {&(0x7f00000000c0)="3a4002c716d6a76c8c4954a5376cbb6f97620bfe3824433daae61da82f787afff91cf673ef7ebed356e623497f0489", 0x2f}, {0x0}], 0x3, 0x3, 0xffff8000, 0x14) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x0, 0x4, 0x1, 0x25, 0x0, 0x400, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff7, 0x400001, 0x6, 0x5, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x4, 0x4, 0x20001e5b, 0x3, 0xe66, 0x3, 0x6, 0x4006, 0x0, 0x3]}) setresgid(0x0, 0x0, 0xee01) r5 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = getpid() kcmp$KCMP_EPOLL_TFD(r6, r5, 0x7, 0xffffffffffffffff, 0x0) 7m45.548654571s ago: executing program 3 (id=675): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}}, 0x40) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000ac0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 7m39.394003081s ago: executing program 39 (id=671): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) socket$inet_smc(0x2b, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) r3 = inotify_init() r4 = socket(0xa, 0x3, 0x3a) r5 = io_uring_setup(0x7a17, &(0x7f00000003c0)={0x0, 0xf8fd, 0x80, 0x0, 0xc1, 0x0, r2}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000440)={0x48, r3, 0x1, {0x1, 0xdc64}, 0xff}, 0x1) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r8, 0x40047459, 0x0) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) close_range(r3, 0xffffffffffffffff, 0x0) 7m39.1792039s ago: executing program 40 (id=670): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0xfffffffe}, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ptrace(0x10, r3) ioprio_set$pid(0x1, r0, 0x2007) eventfd(0x6) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x1d6f4194, 0x8, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x11, 0x0, 0x1, [@generic]}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 7m26.824131989s ago: executing program 41 (id=675): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}}, 0x40) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000ac0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 2m39.844284058s ago: executing program 8 (id=1274): socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000001c0)="ee64", 0x2}], 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) 2m39.637681703s ago: executing program 8 (id=1276): socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000001c0)="ee64", 0x2}], 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 2m39.430273525s ago: executing program 8 (id=1277): socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000001c0)="ee64", 0x2}], 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 2m39.182492823s ago: executing program 8 (id=1279): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/227, 0xb5}], 0x1, 0x1bf, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) fcntl$getflags(r2, 0x401) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socket$xdp(0x2c, 0x3, 0x0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffd, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) 2m37.540003236s ago: executing program 8 (id=1286): socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000001c0)="ee64", 0x2}], 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 2m37.202996593s ago: executing program 8 (id=1287): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000850) r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x20, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x0, 0x700, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2063569a"}, 0x700}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1c, 0xa9, @random="c3dc9cb3c5d9d648046b446f6b47cf56cd53ea75c6a6ad00"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x40080) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000300)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, &(0x7f00000000c0)={0x2, 0x0, 0x40, 0x0, 0x8}) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r7, &(0x7f00000000c0)=0x58, 0xa) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000340)={'vlan0\x00', @ifru_ivalue=0x5}}) 2m21.764067777s ago: executing program 42 (id=1287): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000850) r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x20, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x0, 0x700, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2063569a"}, 0x700}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x1c, 0xa9, @random="c3dc9cb3c5d9d648046b446f6b47cf56cd53ea75c6a6ad00"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x40080) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000300)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, &(0x7f00000000c0)={0x2, 0x0, 0x40, 0x0, 0x8}) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r7, &(0x7f00000000c0)=0x58, 0xa) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000340)={'vlan0\x00', @ifru_ivalue=0x5}}) 7.28466748s ago: executing program 6 (id=1765): socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000001c0)="ee64", 0x2}], 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 6.169401554s ago: executing program 6 (id=1769): socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000001c0)="ee64", 0x2}], 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 5.723383428s ago: executing program 4 (id=1771): syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0x5, 0xc, 0x7, 0x32}, &(0x7f0000000340)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, 0x0, 0x0) shutdown(r1, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @random="58ec07e4203a"}, 0x10) 5.703609382s ago: executing program 6 (id=1772): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0), 0x4) r4 = inotify_init1(0x0) r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x44000160) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r6 = dup(r4) inotify_rm_watch(r6, r5) r7 = accept4$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r8, &(0x7f0000000200), 0xfffffd9d) 5.095764294s ago: executing program 0 (id=1774): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) r2 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0x3100, 0x1, 0x1d5}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x1, 0x1, 0x61, 0x0, 0x0) r6 = open$dir(&(0x7f0000000080)='./cgroup\x00', 0x40000, 0x81) getdents64(r6, &(0x7f0000000280)=""/226, 0xe2) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendfile(r7, r7, 0x0, 0x1002000ff) dup(r0) 4.939017774s ago: executing program 1 (id=1775): socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000001c0)="ee64", 0x2}], 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 4.829819524s ago: executing program 1 (id=1776): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x8914, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x38}) io_setup(0x401, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000800)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}]}, &(0x7f0000000040)=0x10) shutdown(r4, 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000080)={r5, 0x8001}, &(0x7f00000000c0)=0x8) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) 4.754084642s ago: executing program 4 (id=1777): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) openat(0xffffffffffffff9c, 0x0, 0x10000, 0xcf) openat$dir(0xffffffffffffff9c, 0x0, 0x80800, 0x12d) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket(0x1d, 0x2, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) syz_emit_ethernet(0xfdef, &(0x7f00000000c0)={@local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1}}}}, 0x0) mlockall(0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 4.149395448s ago: executing program 0 (id=1778): socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000001c0)="ee64", 0x2}], 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 3.99976597s ago: executing program 6 (id=1779): r0 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) setresgid(0xee00, 0xee01, 0x0) setregid(0xffffffffffffffff, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f0000000080)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) syz_open_dev$usbfs(0x0, 0x75, 0x109301) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'veth1\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) msgctl$IPC_RMID(0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x66032, 0xffffffffffffffff, 0x40000000) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={0x0, 0x44}}, 0x48040) 3.494072488s ago: executing program 1 (id=1780): socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000001c0)="ee64", 0x2}], 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 3.478416277s ago: executing program 4 (id=1781): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffff", 0xb) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x2, 0x37, 0xfde1, 0x67, 0x0, 0xb, 0x6, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x4, 0x8d, 0x1, 0x1}]}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x6071, 0x0, 0xe7}}}}}}, 0x0) 3.243225252s ago: executing program 1 (id=1782): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) openat(0xffffffffffffff9c, 0x0, 0x10000, 0xcf) openat$dir(0xffffffffffffff9c, 0x0, 0x80800, 0x12d) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket(0x1d, 0x2, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) syz_emit_ethernet(0xfdef, &(0x7f00000000c0)={@local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1}}}}, 0x0) mlockall(0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 3.165812391s ago: executing program 0 (id=1783): syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0x5, 0xc, 0x7, 0x32}, &(0x7f0000000340)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, 0x0, 0x0) shutdown(r1, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @random="58ec07e4203a"}, 0x10) 2.29931991s ago: executing program 4 (id=1784): socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000001c0)="ee64", 0x2}], 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 2.15547624s ago: executing program 0 (id=1785): syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0x5, 0xc, 0x7, 0x32}, &(0x7f0000000340)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, 0x0, 0x0) shutdown(r1, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @random="58ec07e4203a"}, 0x10) 1.756482442s ago: executing program 1 (id=1786): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) syz_open_dev$vim2m(0x0, 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, &(0x7f0000000180)=0x10, 0x80800) sendmsg$tipc(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="94", 0x1}], 0x1, &(0x7f0000000640)="33e0f6d418a90ddbd1f2a591c6b4744914d85ff0b3747f0300861ba150b6042ea253f19a6a928664bebb7a3fb8ad7793bcd3b8f4c9779bc6ba551283a6490b918a2c71ecfc95220cb268ca3cb7e51d87b1e075f442a7a7af67b76c6917cd1e3d354ac5d296ec0d67c7dea62d47665a02177f6bb63deb6e2c53e27bd276e08894613c4fba1c60e236651326ac8fc72010b15353b00d2686aa6af85129a2c2bb819b27bbc99a19d43469cc69c0911b522d50dcd16c5fe709", 0xb7, 0x40805}, 0x20008004) recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e24, 0x24ba, @private1, 0xfff}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e7040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 1.539368739s ago: executing program 1 (id=1787): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) openat(0xffffffffffffff9c, 0x0, 0x10000, 0xcf) openat$dir(0xffffffffffffff9c, 0x0, 0x80800, 0x12d) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket(0x1d, 0x2, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) syz_emit_ethernet(0xfdef, &(0x7f00000000c0)={@local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1}}}}, 0x0) mlockall(0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 1.362208094s ago: executing program 4 (id=1788): syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0x5, 0xc, 0x7, 0x32}, &(0x7f0000000340)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, 0x0, 0x0) shutdown(r1, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @random="58ec07e4203a"}, 0x10) 1.248501449s ago: executing program 6 (id=1789): syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x10, &(0x7f00000004c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x80, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r5, &(0x7f0000001180)={0x2020}, 0x2020) write$binfmt_misc(r5, &(0x7f0000000500)="330641858957525c0977cb97904b525989d14e2992e8e0331cd4bd965e317ee7ed7aceb6863d0057e4151b75ec92dd039a5b7c112ccc481736cb7ee3d4d20491cad58f448915df3a96aaffa3ea78d3323bb78da79cd5df4ffafafeb8d41e35a8fdb9a8c1677c74635c8f7d80b0970f8829255a22898af8ce8fbc68db9904cae1ef2551a8374ff6c86d996f7567265f43caf6d66d5db2d8d805ffcf19d95be54c205a4232ba2f8abf55fd80bd6f6590922e1a6a782770c2667ee2f9fc0d1d8cbdc3128e0beef0a34c527e55370e85038d6bf4831269f7ee3701ce63b2fe70c2730d19d0cfb7e507d274e4817a3b92748c9755d2658882d3aa0c", 0xf9) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x200cc000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@empty, @in6=@local}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000480)=0xe4) r6 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x5c}}, 0x0) set_mempolicy(0x3, 0x0, 0x5) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0x6) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0), 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000f80)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x86, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000280)="8a", 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0x8075, @dev={0xfe, 0x80, '\x00', 0x6}, 0x2}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000ac0)='^', 0x1}], 0x1}}], 0x2, 0x40000c0) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000340)=0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e22, @loopback}], 0x10) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000140)=0x5, 0x4) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x34, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) mprotect(&(0x7f000082b000/0x2000)=nil, 0x2000, 0x1000000) 0s ago: executing program 4 (id=1793): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008f}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@deltclass={0x44, 0x29, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0x6}, {0x1, 0x4}, {0xc, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xe, 0x8}}, @TCA_RATE={0x6, 0x5, {0xff, 0x2}}, @TCA_RATE={0x6, 0x5, {0xff}}, @tclass_kind_options=@c_mq={0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) openat$fuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d3, &(0x7f0000000100)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') r3 = creat(&(0x7f0000000100)='./file0\x00', 0x59) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, 0x0, &(0x7f0000000500)) sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): skipping remainder of the config [ 822.658958][ T9298] usb 13-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 822.664706][ T9298] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.667247][ T9298] usb 13-1: Product: syz [ 822.668633][ T9298] usb 13-1: Manufacturer: syz [ 822.670788][ T9298] usb 13-1: SerialNumber: syz [ 822.704500][T12351] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 822.706486][T12351] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 822.736988][T12351] vhci_hcd vhci_hcd.0: Device attached [ 822.740454][ T5828] usb usb54-port1: attempt power cycle [ 822.898708][ T9298] usb 13-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 823.152263][ T8908] usb 46-1: SetAddress Request (2) to port 0 [ 823.152537][ T8908] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 823.182868][T12345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.184006][T12345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.301259][ T5828] usb usb54-port1: unable to enumerate USB device [ 823.449566][ T5828] usb 13-1: USB disconnect, device number 6 [ 823.587027][T12354] Process accounting resumed [ 823.979361][ T9298] ath9k_htc 13-1:1.0: ath9k_htc: Target is unresponsive [ 823.986772][ T9298] ath9k_htc: Failed to initialize the device [ 823.992136][ T5828] usb 13-1: ath9k_htc: USB layer deinitialized [ 824.031302][T12353] vhci_hcd: connection reset by peer [ 824.033926][ T8726] vhci_hcd vhci_hcd.4: stop threads [ 824.037574][ T8726] vhci_hcd vhci_hcd.4: release socket [ 824.045962][ T8726] vhci_hcd vhci_hcd.4: disconnect device [ 824.301485][ T5828] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 824.344741][T12368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.951'. [ 824.449456][ T5828] usb 13-1: Using ep0 maxpacket: 32 [ 824.457716][ T5828] usb 13-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08 [ 824.472134][ T5828] usb 13-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 824.488908][ T5828] usb 13-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 824.527220][ T5828] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.539433][ T5828] usb 13-1: Product: syz [ 824.540739][ T5828] usb 13-1: Manufacturer: syz [ 824.545373][ T5828] usb 13-1: SerialNumber: syz [ 824.594575][ T5828] ldusb 13-1:1.0: LD USB Device #0 now attached to major 180 minor 0 [ 824.760062][ T9298] usb 13-1: USB disconnect, device number 7 [ 824.874216][ T9298] ldusb 13-1:1.0: LD USB Device #0 now disconnected [ 826.240013][T12385] syzkaller0: entered promiscuous mode [ 826.247829][T12385] syzkaller0: entered allmulticast mode [ 827.747569][T12408] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 828.230124][ T8908] usb 46-1: device descriptor read/8, error -110 [ 828.247609][T12406] netlink: 12 bytes leftover after parsing attributes in process `syz.6.957'. [ 828.252620][T12406] vlan0: entered promiscuous mode [ 828.325806][T12408] i2c i2c-0: Failed to register i2c client pi3usb30532 at 0x59 (-16) [ 828.777631][ T8908] usb usb46-port1: attempt power cycle [ 829.498712][ T8908] usb usb46-port1: unable to enumerate USB device [ 830.444716][T12428] syzkaller0: entered promiscuous mode [ 830.447323][T12428] syzkaller0: entered allmulticast mode [ 830.548612][T12437] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 830.553143][T12437] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 830.560569][T12437] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 830.567806][T12437] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 830.728858][T12442] kvm: pic: non byte write [ 830.738790][T12442] kvm: pic: non byte write [ 830.750027][T12448] NILFS (loop6): device size too small [ 830.766435][T12442] kvm: pic: non byte write [ 833.297141][T12488] pim6reg: entered allmulticast mode [ 833.661278][T12466] pim6reg: left allmulticast mode [ 833.933130][T12500] 9pnet_virtio: no channels available for device syz [ 834.711663][ T42] audit: type=1326 audit(1786557570.167:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.8.978" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 834.819312][ T42] audit: type=1326 audit(1786557570.187:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.8.978" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 834.877158][ T42] audit: type=1326 audit(1786557570.257:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.8.978" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 835.191439][ T42] audit: type=1326 audit(1786557570.257:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.8.978" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 835.191469][ T42] audit: type=1326 audit(1786557570.277:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.8.978" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 835.191496][ T42] audit: type=1326 audit(1786557570.277:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.8.978" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 835.191518][ T42] audit: type=1326 audit(1786557570.277:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.8.978" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 835.191542][ T42] audit: type=1326 audit(1786557570.277:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.8.978" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 835.191566][ T42] audit: type=1326 audit(1786557570.297:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.8.978" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 835.191589][ T42] audit: type=1326 audit(1786557570.307:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12505 comm="syz.8.978" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 836.678530][T12547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.981'. [ 836.797708][T12547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.981'. [ 837.055879][T12547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.981'. [ 837.132068][T12555] syzkaller0: entered promiscuous mode [ 837.146632][T12555] syzkaller0: entered allmulticast mode [ 837.814002][T12574] pim6reg: entered allmulticast mode [ 837.897525][T12572] pim6reg: left allmulticast mode [ 841.353895][T12617] syzkaller0: entered promiscuous mode [ 841.362003][T12617] syzkaller0: entered allmulticast mode [ 842.393466][T12628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 843.473288][T12628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 843.519348][T12633] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 843.544605][T12628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 843.695641][T12641] netlink: 12 bytes leftover after parsing attributes in process `syz.6.999'. [ 843.852802][T12641] netlink: 12 bytes leftover after parsing attributes in process `syz.6.999'. [ 843.908876][T12641] netlink: 12 bytes leftover after parsing attributes in process `syz.6.999'. [ 843.952783][T12653] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1001'. [ 844.115307][T12654] siw: device registration error -23 [ 845.153516][T12653] smbdirect: ib_dev[syz2] removed [ 845.423689][T12663] syzkaller0: entered promiscuous mode [ 845.434646][T12663] syzkaller0: entered allmulticast mode [ 849.460967][T12705] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 849.875493][T12710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.946164][T12710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 850.241065][T12710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 851.100117][ T72] block nbd0: Possible stuck request ffff88802733e000: control (read@0,1024B). Runtime 60 seconds [ 851.103707][ T72] block nbd0: Possible stuck request ffff88802733e1c0: control (read@1024,1024B). Runtime 60 seconds [ 851.107358][ T72] block nbd0: Possible stuck request ffff88802733e380: control (read@2048,1024B). Runtime 60 seconds [ 851.111124][ T72] block nbd0: Possible stuck request ffff88802733e540: control (read@3072,1024B). Runtime 60 seconds [ 851.751687][T12745] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1018'. [ 852.954865][T12745] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1018'. [ 853.123997][T12745] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1018'. [ 853.204809][T12763] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1022'. [ 853.209006][T12758] pim6reg: entered allmulticast mode [ 853.237780][T12763] team0 (unregistering): Port device team_slave_0 removed [ 853.244043][T12763] team0 (unregistering): Port device team_slave_1 removed [ 854.756482][T12800] syzkaller0: entered promiscuous mode [ 854.756500][T12800] syzkaller0: entered allmulticast mode [ 855.032905][T12761] geneve2: entered promiscuous mode [ 855.099382][ T5777] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 60322 - 0 [ 855.104420][ T5777] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 60322 - 0 [ 855.120212][ T5777] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 60322 - 0 [ 855.137314][ T5777] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 60322 - 0 [ 855.930847][T12808] syz.1.1028: vmalloc error: size 1768304430, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 855.947489][T12808] CPU: 0 UID: 0 PID: 12808 Comm: syz.1.1028 Not tainted syzkaller #0 PREEMPT(full) [ 855.947509][T12808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 855.947546][T12808] Call Trace: [ 855.947553][T12808] [ 855.947559][T12808] dump_stack_lvl+0x100/0x190 [ 855.947578][T12808] warn_alloc.cold+0x94/0xa8 [ 855.947592][T12808] ? __pfx_warn_alloc+0x10/0x10 [ 855.947605][T12808] ? __lock_acquire+0x49f/0x1a40 [ 855.947628][T12808] __vmalloc_node_range_noprof+0x136c/0x1630 [ 855.947651][T12808] ? lock_acquire+0x1b9/0x370 [ 855.947664][T12808] ? ip_set_sockfn_get+0x18e/0xd20 [ 855.947683][T12808] ? __lock_acquire+0x49f/0x1a40 [ 855.947697][T12808] ? trace_contention_end+0x126/0x160 [ 855.947709][T12808] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 855.947727][T12808] ? nf_sockopt_find.isra.0+0x2a/0x290 [ 855.947744][T12808] ? rcu_is_watching+0x12/0xc0 [ 855.947762][T12808] ? ip_set_sockfn_get+0x18e/0xd20 [ 855.947780][T12808] __vmalloc_node_noprof+0xad/0xf0 [ 855.947799][T12808] ? ip_set_sockfn_get+0x18e/0xd20 [ 855.947820][T12808] ip_set_sockfn_get+0x18e/0xd20 [ 855.947841][T12808] ? __pfx_ip_set_sockfn_get+0x10/0x10 [ 855.947859][T12808] ? nf_sockopt_find.isra.0+0x222/0x290 [ 855.947875][T12808] nf_getsockopt+0x7c/0xe0 [ 855.947890][T12808] ip_getsockopt+0x192/0x1e0 [ 855.947907][T12808] ? __pfx_ip_getsockopt+0x10/0x10 [ 855.947922][T12808] ? find_held_lock+0x2b/0x80 [ 855.947940][T12808] raw_getsockopt+0x4d/0x1f0 [ 855.947957][T12808] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 855.947969][T12808] do_sock_getsockopt+0x50a/0x6e0 [ 855.947980][T12808] ? __lock_acquire+0x49f/0x1a40 [ 855.947991][T12808] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 855.948003][T12808] ? percpu_counter_add_batch+0xb9/0x230 [ 855.948022][T12808] ? find_held_lock+0x2b/0x80 [ 855.948040][T12808] ? __fget_files+0x21f/0x3d0 [ 855.948054][T12808] __sys_getsockopt+0x133/0x1d0 [ 855.948073][T12808] ? __ia32_sys_getsockopt+0xbc/0x160 [ 855.948088][T12808] __ia32_sys_getsockopt+0xbc/0x160 [ 855.948102][T12808] ? __do_fast_syscall_32+0x98/0x970 [ 855.948119][T12808] ? lockdep_hardirqs_on+0x78/0x100 [ 855.948134][T12808] __do_fast_syscall_32+0xe7/0x970 [ 855.948151][T12808] do_fast_syscall_32+0x32/0x70 [ 855.948168][T12808] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 855.948183][T12808] RIP: 0023:0xf6ffefec [ 855.948200][T12808] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 855.948204][T12808] RSP: 002b:00000000f53cc50c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 855.948217][T12808] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 855.948223][T12808] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000080000240 [ 855.948230][T12808] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 855.948236][T12808] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 855.948242][T12808] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 855.948257][T12808] [ 855.948293][T12808] Mem-Info: [ 856.273191][T12808] active_anon:15787 inactive_anon:2253 isolated_anon:0 [ 856.273191][T12808] active_file:3197 inactive_file:22630 isolated_file:0 [ 856.273191][T12808] unevictable:1036 dirty:413 writeback:0 [ 856.273191][T12808] slab_reclaimable:6607 slab_unreclaimable:64188 [ 856.273191][T12808] mapped:31057 shmem:11658 pagetables:1791 [ 856.273191][T12808] sec_pagetables:318 bounce:0 [ 856.273191][T12808] kernel_misc_reclaimable:0 [ 856.273191][T12808] free:42576 free_pcp:12722 free_cma:0 [ 856.287407][T12808] Node 0 active_anon:420kB inactive_anon:444kB active_file:372kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2896kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7936kB pagetables:1372kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 856.297949][T12808] Node 1 active_anon:62728kB inactive_anon:8568kB active_file:12416kB inactive_file:90520kB unevictable:4144kB isolated(anon):0kB isolated(file):0kB mapped:121332kB dirty:1648kB writeback:0kB shmem:46632kB shmem_thp:6144kB shmem_pmdmapped:2048kB anon_thp:0kB kernel_stack:7336kB pagetables:5792kB sec_pagetables:148kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 856.311063][T12808] Node 0 DMA free:2360kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 856.320412][T12808] lowmem_reserve[]: 0 280 280 280 280 [ 856.322218][T12808] Node 0 DMA32 free:44624kB boost:28740kB min:41516kB low:44708kB high:47900kB reserved_highatomic:0KB free_highatomic:0KB active_anon:420kB inactive_anon:444kB active_file:372kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:1032196kB managed:287068kB mlocked:0kB bounce:0kB free_pcp:11540kB local_pcp:9000kB free_cma:0kB [ 856.332720][T12808] lowmem_reserve[]: 0 0 0 0 0 [ 856.334684][T12808] Node 1 DMA32 free:123320kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:62728kB inactive_anon:8568kB active_file:12416kB inactive_file:90520kB unevictable:4144kB writepending:1648kB zspages:2624kB present:1048432kB managed:948212kB mlocked:144kB bounce:0kB free_pcp:39268kB local_pcp:18736kB free_cma:0kB [ 856.354124][T12808] lowmem_reserve[]: 0 0 0 0 0 [ 856.375609][T12808] Node 0 DMA: 44*4kB (U) 13*8kB (U) 6*16kB (U) 8*32kB (U) 3*64kB (U) 0*128kB 0*256kB 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 2360kB [ 857.598669][T12808] Node 0 DMA32: 1342*4kB (UME) 619*8kB (UME) 334*16kB (UE) 285*32kB (UE) 118*64kB (UME) 42*128kB (UME) 13*256kB (UM) 7*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 44624kB [ 857.604416][T12808] Node 1 DMA32: 724*4kB (UME) 1995*8kB (UME) 1818*16kB (UME) 285*32kB (UME) 240*64kB (UME) 255*128kB (UME) 114*256kB (UME) 7*512kB (UM) 0*1024kB 7*2048kB (UM) 0*4096kB = 152168kB [ 857.622542][T12808] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 857.625856][T12808] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 857.629144][T12808] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 857.633204][T12808] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 857.636235][T12808] 39460 total pagecache pages [ 857.637801][T12808] 978 pages in swap cache [ 857.664181][T12808] Free swap = 115372kB [ 857.684687][T12808] Total swap = 124996kB [ 857.686656][T12808] 524155 pages RAM [ 857.688294][T12808] 0 pages HighMem/MovableOnly [ 857.690830][T12808] 211495 pages reserved [ 857.692696][T12808] 0 pages cma reserved [ 858.408436][T12840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1033'. [ 858.591710][T12840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1033'. [ 859.009721][T12840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1033'. [ 859.625330][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 859.625344][ T42] audit: type=1326 audit(1786557595.087:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12861 comm="syz.1.1038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 859.668194][ T42] audit: type=1326 audit(1786557595.087:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12861 comm="syz.1.1038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 859.703790][ T42] audit: type=1326 audit(1786557595.107:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12861 comm="syz.1.1038" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 859.711017][ T42] audit: type=1326 audit(1786557595.107:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12861 comm="syz.1.1038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 859.718118][ T42] audit: type=1326 audit(1786557595.107:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12861 comm="syz.1.1038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 859.739024][ T42] audit: type=1326 audit(1786557595.127:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12861 comm="syz.1.1038" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 859.780640][ T42] audit: type=1326 audit(1786557595.127:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12861 comm="syz.1.1038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 859.808181][ T42] audit: type=1326 audit(1786557595.247:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12861 comm="syz.1.1038" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 859.837208][ T42] audit: type=1326 audit(1786557595.297:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12861 comm="syz.1.1038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 859.857218][ T42] audit: type=1326 audit(1786557595.297:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12861 comm="syz.1.1038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 860.566208][T12882] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1041'. [ 861.008444][T12882] team0 (unregistering): Port device team_slave_0 removed [ 861.539103][T12882] team0 (unregistering): Port device team_slave_1 removed [ 861.851774][T12882] team0 (unregistering): Port device bond0 removed [ 861.925007][ T1475] syz1: Port: 1 Link DOWN [ 863.334621][ T7227] Bluetooth: hci1: Frame reassembly failed (-90) [ 864.165614][T12923] syzkaller0: entered promiscuous mode [ 864.167588][T12923] syzkaller0: entered allmulticast mode [ 864.749527][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 864.749545][ T42] audit: type=1326 audit(1786557600.207:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12933 comm="syz.8.1053" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 864.775704][ T42] audit: type=1326 audit(1786557600.227:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12933 comm="syz.8.1053" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 864.782781][ T42] audit: type=1326 audit(1786557600.227:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12933 comm="syz.8.1053" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 864.790463][ T42] audit: type=1326 audit(1786557600.227:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12933 comm="syz.8.1053" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 864.797197][ T42] audit: type=1326 audit(1786557600.227:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12933 comm="syz.8.1053" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 864.804929][ T42] audit: type=1326 audit(1786557600.227:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12933 comm="syz.8.1053" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 864.826961][ T42] audit: type=1326 audit(1786557600.237:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12933 comm="syz.8.1053" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 864.839196][T12942] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1055'. [ 864.839351][ T42] audit: type=1326 audit(1786557600.237:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12933 comm="syz.8.1053" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 864.844818][ T42] audit: type=1326 audit(1786557600.237:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12933 comm="syz.8.1053" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 864.856927][ T42] audit: type=1326 audit(1786557600.237:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12933 comm="syz.8.1053" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f06fec code=0x7ffc0000 [ 864.893456][T12942] team0 (unregistering): Port device team_slave_0 removed [ 864.907712][T12942] team0 (unregistering): Port device team_slave_1 removed [ 865.339533][ T5743] Bluetooth: hci1: command 0x1003 tx timeout [ 865.353426][T10404] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 866.382579][T12953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1056'. [ 867.067154][T12970] syzkaller0: entered promiscuous mode [ 867.103152][T12970] syzkaller0: entered allmulticast mode [ 868.331384][T12981] siw: device registration error -23 [ 869.037162][T12993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1064'. [ 869.096880][T12996] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1066'. [ 869.667670][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.301367][T12993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1064'. [ 870.626029][ T8908] kernel write not supported for file /dummy_udc (pid: 8908 comm: kworker/2:8) [ 870.642022][T13007] gadgetfs: bound to dummy_udc driver [ 870.788791][T12993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1064'. [ 870.831942][ T8908] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 870.931319][ T1475] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 870.948049][ C2] gadgetfs: connected [ 870.951337][ T1475] gadgetfs: disconnected [ 871.002405][ T8908] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 871.018838][ T8908] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 871.037050][ T8908] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 871.061591][ T8908] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 871.080145][ T8908] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 871.092555][ T8908] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 871.110700][ T8908] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 871.123649][ T8908] usb 9-1: string descriptor 0 read error: -22 [ 871.128802][ T8908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.132561][ C2] gadgetfs: connected [ 871.140237][ T1475] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 871.154375][ T1475] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 871.159993][ T1475] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.218760][ C2] gadgetfs: configuration #1 [ 871.230213][T13002] gadgetfs: suspended from state 3 [ 871.239763][ T1475] usb 6-1: can't set config #1, error -71 [ 871.252682][T13002] gadgetfs: disconnected [ 871.262232][ T1475] usb 6-1: USB disconnect, device number 8 [ 872.431137][ T9298] usb 9-1: USB disconnect, device number 6 [ 872.654340][T13047] binder: 13046:13047 ioctl c00c6211 0 returned -14 [ 873.447609][T13052] siw: device registration error -23 [ 874.187645][T13064] pim6reg: left allmulticast mode [ 874.735578][T13070] siw: device registration error -23 [ 876.819093][T13082] bond1: entered promiscuous mode [ 877.335122][T13098] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 53777 - 0 [ 877.666149][T13098] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 53777 - 0 [ 877.755109][T13098] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 53777 - 0 [ 877.830726][T13098] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 53777 - 0 [ 877.959460][ T8726] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 53777 - 0 [ 877.971073][ T8726] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 53777 - 0 [ 877.991574][ T8726] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 53777 - 0 [ 878.012790][ T8726] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 53777 - 0 [ 878.968782][T13116] orangefs_mount: mount request failed with -4 [ 879.250684][T13133] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1092'. [ 879.318239][T13141] syz_tun: entered allmulticast mode [ 879.342221][T13133] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1092'. [ 879.458602][T13133] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1092'. [ 879.499788][ T5880] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 879.543091][T13132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1093'. [ 879.694943][ T5880] usb 13-1: unable to get BOS descriptor or descriptor too short [ 879.700831][ T5880] usb 13-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 879.705541][ T5880] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 879.709151][ T5880] usb 13-1: can't read configurations, error -71 [ 879.774703][T10404] Bluetooth: hci3: unexpected event for opcode 0x201c [ 880.112930][T13136] syz_tun: left allmulticast mode [ 880.282711][T13151] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 881.061791][T13160] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.271784][ T72] block nbd0: Possible stuck request ffff88802733e000: control (read@0,1024B). Runtime 90 seconds [ 881.275229][ T72] block nbd0: Possible stuck request ffff88802733e1c0: control (read@1024,1024B). Runtime 90 seconds [ 881.279319][ T72] block nbd0: Possible stuck request ffff88802733e380: control (read@2048,1024B). Runtime 90 seconds [ 881.283648][ T72] block nbd0: Possible stuck request ffff88802733e540: control (read@3072,1024B). Runtime 90 seconds [ 881.627584][T13160] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.923069][T13160] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.304976][T13160] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.530863][T13191] dvmrp8: entered allmulticast mode [ 883.139645][ T5777] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.149751][ T5777] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.160064][ T5777] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.170777][ T5777] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.395684][T13212] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1106'. [ 883.574917][T13218] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1107'. [ 883.620101][T13212] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1106'. [ 883.624866][T13218] syzkaller1: entered promiscuous mode [ 883.631376][T13218] syzkaller1: entered allmulticast mode [ 883.864303][T13223] syzkaller0: entered promiscuous mode [ 883.867570][T13223] syzkaller0: entered allmulticast mode [ 884.861838][T13251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1113'. [ 885.023089][T13251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1113'. [ 885.357026][T13251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1113'. [ 885.645352][T13258] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.040841][T13258] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.142259][T13258] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.250504][T13258] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.291880][T13271] syzkaller0: entered promiscuous mode [ 886.295011][T13271] syzkaller0: entered allmulticast mode [ 886.639427][ T5777] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.646407][ T5777] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.654792][ T5777] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.700930][ T5777] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.782264][T13294] pim6reg: left allmulticast mode [ 888.940247][T13312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1127'. [ 889.017142][T13314] syzkaller0: entered promiscuous mode [ 889.021908][T13314] syzkaller0: entered allmulticast mode [ 889.255443][T13324] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1129'. [ 889.338337][T13324] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1129'. [ 889.518330][T13324] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1129'. [ 889.695462][T13329] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 53777 - 0 [ 889.769620][T13329] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 53777 - 0 [ 889.917052][T13342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1132'. [ 889.927745][T13342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 889.935586][T13342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 889.951697][T13342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 889.982296][T13342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 890.133488][T13329] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 53777 - 0 [ 890.212174][T13329] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 53777 - 0 [ 891.857637][ T8726] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 53777 - 0 [ 891.891980][ T8726] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 53777 - 0 [ 892.010012][ T5777] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 53777 - 0 [ 892.014565][ T5777] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 53777 - 0 [ 892.296670][T13379] syzkaller0: entered promiscuous mode [ 892.298583][T13379] syzkaller0: entered allmulticast mode [ 892.377020][T13381] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 892.384102][T13381] fuse: Bad value for 'fd' [ 892.387193][T13381] bridge_slave_0: default FDB implementation only supports local addresses [ 895.727108][T13430] syzkaller0: entered promiscuous mode [ 895.734961][T13430] syzkaller0: entered allmulticast mode [ 897.828470][T13488] syzkaller0: entered promiscuous mode [ 897.831032][ T5805] IPVS: starting estimator thread 0... [ 897.835815][T13488] syzkaller0: entered allmulticast mode [ 897.940021][T13489] IPVS: using max 44 ests per chain, 105600 per kthread [ 898.519972][T13495] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 898.537431][T13495] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 898.559486][T13495] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 898.593772][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 898.593789][ T42] audit: type=1800 audit(1786557634.057:603): pid=13497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1158" name="attr_allow_any_host" dev="configfs" ino=44980 res=0 errno=0 [ 898.612011][T13495] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 898.619731][T13497] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 898.627097][ T42] audit: type=1800 audit(1786557634.077:604): pid=13497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1158" name="addr_trtype" dev="configfs" ino=44981 res=0 errno=0 [ 898.664338][ T42] audit: type=1800 audit(1786557634.127:605): pid=13497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1158" name="addr_adrfam" dev="configfs" ino=44984 res=0 errno=0 [ 898.675586][T13497] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 898.694603][ T42] audit: type=1800 audit(1786557634.157:606): pid=13497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1158" name="addr_traddr" dev="configfs" ino=44985 res=0 errno=0 [ 898.715921][T13497] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 898.735262][ T42] audit: type=1800 audit(1786557634.197:607): pid=13497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1158" name="addr_trsvcid" dev="configfs" ino=44987 res=0 errno=0 [ 898.745989][T13497] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 898.815792][T13497] nvme nvme0: rdma connection establishment failed (-104) [ 901.627272][T13561] 9pnet_virtio: no channels available for device 127.0.0.1 [ 901.646752][T13561] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 902.216336][T13565] syzkaller0: entered promiscuous mode [ 902.239454][T13565] syzkaller0: entered allmulticast mode [ 902.605239][T13578] syzkaller0: entered promiscuous mode [ 902.616497][T13578] syzkaller0: entered allmulticast mode [ 904.171666][T13592] dvmrp8: entered allmulticast mode [ 906.442801][T13651] syzkaller0: entered promiscuous mode [ 906.445334][T13651] syzkaller0: entered allmulticast mode [ 906.802255][T13671] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1193'. [ 910.092478][T13711] syzkaller0: entered promiscuous mode [ 910.108283][T13711] syzkaller0: entered allmulticast mode [ 910.443205][T13718] pim6reg: entered allmulticast mode [ 910.755450][T13713] pim6reg: left allmulticast mode [ 911.464207][T13737] nbd1: detected capacity change from 0 to 63 [ 911.899559][T10887] block nbd0: Possible stuck request ffff88802733e000: control (read@0,1024B). Runtime 120 seconds [ 911.903005][T10887] block nbd0: Possible stuck request ffff88802733e1c0: control (read@1024,1024B). Runtime 120 seconds [ 911.906446][T10887] block nbd0: Possible stuck request ffff88802733e380: control (read@2048,1024B). Runtime 120 seconds [ 911.909922][T10887] block nbd0: Possible stuck request ffff88802733e540: control (read@3072,1024B). Runtime 120 seconds [ 912.867968][T13790] siw: device registration error -23 [ 912.876570][ T42] audit: type=1800 audit(1786557648.337:608): pid=13790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1215" name="attr_allow_any_host" dev="configfs" ino=46619 res=0 errno=0 [ 912.904935][ T42] audit: type=1800 audit(1786557648.367:609): pid=13790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1215" name="addr_trtype" dev="configfs" ino=46620 res=0 errno=0 [ 912.911543][T13790] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 912.923187][T13790] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 912.924487][ T42] audit: type=1800 audit(1786557648.387:610): pid=13790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1215" name="addr_adrfam" dev="configfs" ino=46626 res=0 errno=0 [ 912.938762][T13790] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 912.938817][ T42] audit: type=1800 audit(1786557648.407:611): pid=13790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1215" name="addr_traddr" dev="configfs" ino=46633 res=0 errno=0 [ 912.951145][T13790] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 912.959829][ T42] audit: type=1800 audit(1786557648.417:612): pid=13790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1215" name="addr_trsvcid" dev="configfs" ino=46641 res=0 errno=0 [ 913.024301][T13790] nvme nvme0: rdma connection establishment failed (-104) [ 913.059449][T13803] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1214'. [ 913.101673][T13804] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1214'. [ 913.462986][T13812] jffs2: notice: (13812) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 913.713286][ T65] block nbd1: Receive control failed (result -104) [ 913.953558][T13816] nbd2: detected capacity change from 0 to 63 [ 914.133222][T13831] syzkaller0: entered promiscuous mode [ 914.136684][T13831] syzkaller0: entered allmulticast mode [ 917.141093][ T65] block nbd2: Receive control failed (result -104) [ 917.329169][T13894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1233'. [ 917.423677][T13902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1233'. [ 917.463706][T13893] syzkaller0: entered promiscuous mode [ 917.473676][T13893] syzkaller0: entered allmulticast mode [ 918.397134][T13914] pim6reg: entered allmulticast mode [ 919.512266][T13914] geneve2: entered promiscuous mode [ 919.517837][ T8726] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 52690 - 0 [ 919.535640][ T8726] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 52690 - 0 [ 919.544730][ T8726] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 52690 - 0 [ 919.557756][ T8726] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 52690 - 0 [ 920.556477][T13958] syzkaller0: entered promiscuous mode [ 920.560485][T13958] syzkaller0: entered allmulticast mode [ 921.193403][T13975] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 921.301344][T13975] md: could not open device unknown-block(1,0). [ 921.360177][T13975] md: could not open device unknown-block(1,1). [ 921.450602][T13989] md: could not open device unknown-block(1,3). [ 921.540578][T13975] md/raid:md0: not clean -- starting background reconstruction [ 921.545926][T13975] md/raid:md0: device ram3 operational as raid disk 3 [ 921.554139][T13975] md/raid:md0: device ram2 operational as raid disk 2 [ 921.558568][T13975] md/raid:md0: device ram0 operational as raid disk 0 [ 921.682246][T13992] pim6reg: entered allmulticast mode [ 922.031172][T13975] md/raid:md0: cannot start dirty degraded array. [ 922.034317][T14000] hid-generic 0003:0627:0001.0001: pid 14000 passed too short report [ 922.330916][T13975] md/raid:md0: failed to run raid set. [ 922.336423][T13975] md: pers->run() failed ... [ 922.807901][T13992] geneve2: entered promiscuous mode [ 922.819628][ T5777] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 49987 - 0 [ 922.841370][ T5777] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 49987 - 0 [ 922.859485][ T5777] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 49987 - 0 [ 922.862210][ T5777] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 49987 - 0 [ 923.768280][T14033] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 923.934952][T14042] siw: device registration error -23 [ 923.941533][ T42] audit: type=1800 audit(1786557659.407:613): pid=14042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1261" name="attr_allow_any_host" dev="configfs" ino=48216 res=0 errno=0 [ 923.957839][ T42] audit: type=1800 audit(1786557659.417:614): pid=14042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1261" name="addr_trtype" dev="configfs" ino=48217 res=0 errno=0 [ 923.967190][T14042] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 923.971761][ T42] audit: type=1800 audit(1786557659.437:615): pid=14044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1269" name="memory_backed" dev="configfs" ino=47925 res=0 errno=0 [ 923.977239][T14042] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 924.003592][T14044] netlink: 'syz.8.1269': attribute type 1 has an invalid length. [ 924.006451][ T42] audit: type=1800 audit(1786557659.437:616): pid=14042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1261" name="addr_adrfam" dev="configfs" ino=48218 res=0 errno=0 [ 924.014181][ T42] audit: type=1800 audit(1786557659.447:617): pid=14044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1269" name="zoned" dev="configfs" ino=47926 res=0 errno=0 [ 924.016866][T14044] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1269'. [ 924.026228][T14042] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 924.027760][ T42] audit: type=1800 audit(1786557659.487:618): pid=14042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1261" name="addr_traddr" dev="configfs" ino=48221 res=0 errno=0 [ 924.034933][T14042] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 924.041731][ T42] audit: type=1800 audit(1786557659.487:619): pid=14042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1261" name="addr_trsvcid" dev="configfs" ino=48222 res=0 errno=0 [ 924.073565][T14044] netlink: 'syz.8.1269': attribute type 2 has an invalid length. [ 924.085003][T14044] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1269'. [ 924.179590][T14042] nvme nvme0: rdma connection establishment failed (-104) [ 924.237287][T14044] null_blk: my_zoned_dev: using native zone append [ 924.250590][ T42] audit: type=1800 audit(1786557659.687:620): pid=14044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1269" name="power" dev="configfs" ino=48257 res=0 errno=0 [ 924.318442][T14063] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1265'. [ 924.408554][T14063] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1265'. [ 924.790590][T14044] null_blk: disk my_zoned_dev created [ 925.234634][T14084] overlayfs: missing 'lowerdir' [ 925.477766][T14084] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.717707][T14084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 925.740646][T14084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 925.818461][T14097] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1280'. [ 925.885214][T14098] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1280'. [ 925.898046][T14084] sit2: left promiscuous mode [ 925.906500][T14084] geneve2: left promiscuous mode [ 925.919740][ T5777] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.939356][ T5777] netdevsim netdevsim8 eth3: unset [1, 1] type 2 family 0 port 49987 - 0 [ 925.954162][ T5777] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.957839][ T5777] netdevsim netdevsim8 eth2: unset [1, 1] type 2 family 0 port 49987 - 0 [ 925.964817][ T5777] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.983588][ T5777] netdevsim netdevsim8 eth1: unset [1, 1] type 2 family 0 port 49987 - 0 [ 925.990225][ T5777] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.995506][ T5777] netdevsim netdevsim8 eth0: unset [1, 1] type 2 family 0 port 49987 - 0 [ 926.586061][T14108] bond1 (unregistering): Released all slaves [ 927.773237][ T42] audit: type=1326 audit(1786557663.237:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14146 comm="syz.4.1283" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 927.810632][ T42] audit: type=1326 audit(1786557663.237:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14146 comm="syz.4.1283" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 930.882542][T14190] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1293'. [ 930.886869][T14190] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1293'. [ 931.103059][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.731303][T14199] syz_tun: entered allmulticast mode [ 932.485613][T14196] syz_tun: left allmulticast mode [ 932.564559][T14206] netlink: 'syz.6.1297': attribute type 4 has an invalid length. [ 933.470638][T14223] comedi comedi0: pcmda12: I/O base address not correctly aligned [ 933.990111][T14223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 933.998195][T14223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 934.040044][T14223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 934.044217][T14223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 934.050959][T14223] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 934.054331][T14223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 934.065542][T14223] veth1_vlan: left promiscuous mode [ 934.068110][T14223] veth0_vlan: left promiscuous mode [ 934.072238][T14223] veth0_vlan: entered promiscuous mode [ 934.076097][T14223] veth1_vlan: entered promiscuous mode [ 934.085546][T14223] veth1_macvtap: left promiscuous mode [ 934.110509][T14223] veth0_macvtap: left promiscuous mode [ 934.155992][T14223] veth0_macvtap: entered promiscuous mode [ 934.160868][T14223] veth1_macvtap: entered promiscuous mode [ 934.205773][T14223] 8021q: adding VLAN 0 to HW filter on device eth0 [ 934.221557][T14223] 8021q: adding VLAN 0 to HW filter on device eth1 [ 934.225927][T14223] 8021q: adding VLAN 0 to HW filter on device eth2 [ 934.235280][T14223] 8021q: adding VLAN 0 to HW filter on device eth3 [ 934.259842][ T9005] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 934.275416][ T6615] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.277808][ T6615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 934.287027][ T6615] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.290471][ T6615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 934.420006][ T5777] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 934.449447][ T8726] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 934.472742][ T8726] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 934.628869][T14227] syzkaller0: entered promiscuous mode [ 934.635994][T14227] syzkaller0: entered allmulticast mode [ 935.361911][T14238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1304'. [ 935.365532][T14238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1304'. [ 936.175073][T14244] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.179197][T14244] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 52690 - 0 [ 936.292310][T14244] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.296571][T14241] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 936.309976][T14244] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 52690 - 0 [ 936.654028][T14244] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.669006][T14244] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 52690 - 0 [ 936.741741][T14244] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.755960][T14244] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 52690 - 0 [ 936.959412][ T9005] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 52690 - 0 [ 936.965365][ T9005] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 936.975740][ T9005] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 52690 - 0 [ 936.985117][ T9005] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 936.996834][ T9005] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 52690 - 0 [ 937.007850][ T9005] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 937.020782][ T9005] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 52690 - 0 [ 937.031227][ T9005] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 937.311587][T14256] syz_tun: entered allmulticast mode [ 937.700369][T14272] comedi comedi0: pcmda12: I/O base address not correctly aligned [ 937.841976][T14272] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 938.187473][T14250] syz_tun: left allmulticast mode [ 941.552119][ T5139] udevd[5139]: worker [11539] /devices/virtual/block/nbd0 is taking a long time [ 941.988123][T10887] block nbd0: Possible stuck request ffff88802733e000: control (read@0,1024B). Runtime 150 seconds [ 941.993151][T10887] block nbd0: Possible stuck request ffff88802733e1c0: control (read@1024,1024B). Runtime 150 seconds [ 941.997922][ T72] block nbd1: Possible stuck request ffff88802737e000: control (read@0,4096B). Runtime 30 seconds [ 942.002659][T10887] block nbd0: Possible stuck request ffff88802733e380: control (read@2048,1024B). Runtime 150 seconds [ 942.007539][T10887] block nbd0: Possible stuck request ffff88802733e540: control (read@3072,1024B). Runtime 150 seconds [ 944.328319][ T5743] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 944.344185][ T5743] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 944.351689][ T5743] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 944.357368][ T5743] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 944.360039][ T5743] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 944.550961][T10976] block nbd2: Possible stuck request ffff8880273de000: control (read@0,4096B). Runtime 30 seconds [ 945.060940][T14286] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.063347][T14286] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.065693][T14286] bridge_slave_0: entered allmulticast mode [ 945.068472][T14286] bridge_slave_0: entered promiscuous mode [ 945.072410][T14286] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.074750][T14286] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.081341][T14286] bridge_slave_1: entered allmulticast mode [ 945.086003][T14286] bridge_slave_1: entered promiscuous mode [ 945.186744][T14286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.201775][T14286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.228469][T14286] team0: Port device team_slave_0 added [ 945.233678][T14286] team0: Port device team_slave_1 added [ 945.257887][T14286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.260971][T14286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.272471][T14286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 945.279088][T14286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 945.282144][T14286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.293892][T14286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.342614][T14286] hsr_slave_0: entered promiscuous mode [ 945.345933][T14286] hsr_slave_1: entered promiscuous mode [ 945.348999][T14286] debugfs: 'hsr0' already exists in 'hsr' [ 945.352019][T14286] Cannot create hsr debugfs directory [ 945.959712][T14286] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 945.963801][T14286] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 945.966718][T14286] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 945.970863][T14286] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 945.973732][T14286] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 945.977738][T14286] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 945.984691][T14286] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 945.988770][T14286] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 946.044955][T14286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.066447][T14286] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.072559][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.074903][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.091076][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.093431][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.337714][T14286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.377900][T14286] veth0_vlan: entered promiscuous mode [ 946.384743][T14286] veth1_vlan: entered promiscuous mode [ 946.403972][T14286] veth0_macvtap: entered promiscuous mode [ 946.408264][T14286] veth1_macvtap: entered promiscuous mode [ 946.417944][T14286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 946.426110][T14286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 946.471938][T10404] Bluetooth: hci1: command tx timeout [ 946.473832][ T9005] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.473860][ T9005] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.473878][ T9005] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.473895][ T9005] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.578986][ T6613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.582207][ T6613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.599979][ T6613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.602836][ T6613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.608547][ T8906] Process accounting resumed [ 948.539346][T10404] Bluetooth: hci1: command tx timeout [ 949.273180][T14438] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 949.275818][T14438] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 949.290826][T14438] vhci_hcd vhci_hcd.0: Device attached [ 949.336358][T14438] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 949.570043][ T9] usb 40-1: SetAddress Request (6) to port 0 [ 949.585260][ T9] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 949.942507][T14439] vhci_hcd: connection reset by peer [ 949.951311][ T9005] vhci_hcd vhci_hcd.1: stop threads [ 949.953048][ T9005] vhci_hcd vhci_hcd.1: release socket [ 949.967723][ T9005] vhci_hcd vhci_hcd.1: disconnect device [ 950.536407][ T8908] libceph: connect (1)[c::]:6789 error -101 [ 950.539600][ T8908] libceph: mon0 (1)[c::]:6789 connect error [ 950.547800][T14456] ceph: No mds server is up or the cluster is laggy [ 950.619392][T10404] Bluetooth: hci1: command tx timeout [ 951.291615][T14456] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1329'. [ 952.040372][T14483] 9p: Bad value for 'rfdno' [ 952.704281][T10404] Bluetooth: hci1: command tx timeout [ 953.341058][ T6580] wlan0: Trigger new scan to find an IBSS to join [ 953.460409][ T8908] usb 11-1: new low-speed USB device number 5 using dummy_hcd [ 953.610070][ T8908] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 953.618193][ T8908] usb 11-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 953.628025][ T8908] usb 11-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 953.639621][ T8908] usb 11-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 953.646745][ T8908] usb 11-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 953.657379][ T8908] usb 11-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 953.667854][ T8908] usb 11-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 953.687544][ T8908] usb 11-1: string descriptor 0 read error: -22 [ 953.695134][ T8908] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.931112][T14512] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1341'. [ 954.758285][ T9] usb 40-1: device descriptor read/8, error -110 [ 955.171803][ T9] usb usb40-port1: attempt power cycle [ 955.263048][T14535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1344'. [ 955.751586][ T9] usb usb40-port1: unable to enumerate USB device [ 955.761019][ T9] usb 11-1: USB disconnect, device number 5 [ 956.921261][T14579] ntfs3(nullb0): Primary boot signature is not NTFS. [ 956.925183][T14579] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 957.560436][ T37] wlan0: Trigger new scan to find an IBSS to join [ 958.450883][T14586] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.511630][T14592] netlink: 'syz.4.1352': attribute type 1 has an invalid length. [ 958.533383][T14592] netlink: 756 bytes leftover after parsing attributes in process `syz.4.1352'. [ 959.026103][ T6615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.186480][T14586] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.276047][T14586] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.434482][T14586] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.614779][ T9] libceph: connect (1)[c::]:6789 error -101 [ 959.622119][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 959.643603][T14604] ceph: No mds server is up or the cluster is laggy [ 959.989844][ T5805] usb 11-1: new full-speed USB device number 6 using dummy_hcd [ 960.039524][ T9005] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.043264][ T9005] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.052573][ T9005] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.061793][ T9005] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.140392][ T5805] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 960.144372][ T5805] usb 11-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 960.148094][ T5805] usb 11-1: config 0 interface 0 has no altsetting 0 [ 960.154290][ T5805] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 960.157060][ T5805] usb 11-1: Product: syz [ 960.159610][ T5805] usb 11-1: Manufacturer: syz [ 960.163380][ T5805] usb 11-1: SerialNumber: syz [ 960.174141][ T5805] usb 11-1: config 0 descriptor?? [ 960.190228][ T5805] usb 11-1: selecting invalid altsetting 0 [ 960.673006][T14631] netlink: 'syz.4.1362': attribute type 1 has an invalid length. [ 960.687347][T14632] ucsi_ccg 0-0008: i2c_transfer failed -95 [ 960.711381][T14632] ucsi_ccg 0-0008: ucsi_ccg_init failed - -95 [ 960.721272][T14632] ucsi_ccg 0-0008: probe with driver ucsi_ccg failed with error -95 [ 960.826070][ C2] usb 11-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 960.828994][ T8908] usb 11-1: USB disconnect, device number 6 [ 960.830978][ C2] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 960.843635][T14632] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 960.846740][T14635] ucsi_ccg 1-0008: ucsi_ccg_init failed - -110 [ 960.850461][T14635] ucsi_ccg 1-0008: probe with driver ucsi_ccg failed with error -110 [ 960.879502][T14631] 8021q: adding VLAN 0 to HW filter on device bond2 [ 960.895958][T14635] i2c i2c-1: new_device: Instantiated device ccgx-ucsi at 0x08 [ 961.267385][T14604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1357'. [ 961.866970][T14657] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1364'. [ 964.599373][T10033] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 964.686942][T14665] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 53777 - 0 [ 964.693504][T14665] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 964.751549][T10033] usb 11-1: Using ep0 maxpacket: 16 [ 964.757347][T10033] usb 11-1: unable to get BOS descriptor or descriptor too short [ 964.764230][T10033] usb 11-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 964.767960][T10033] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 964.778369][T10033] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 964.797784][T10033] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.804699][T10033] usb 11-1: Product: syz [ 964.806995][T10033] usb 11-1: Manufacturer: syz [ 964.809113][T10033] usb 11-1: SerialNumber: syz [ 964.835156][T14665] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 53777 - 0 [ 964.842096][T14665] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 964.975287][T14665] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 53777 - 0 [ 964.989312][T14665] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 965.108195][T14665] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 53777 - 0 [ 965.122759][T14665] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 965.231729][T14664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.241590][ T9298] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 965.253713][T14664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.359178][ T8726] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.365140][ T8726] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 53777 - 0 [ 965.444670][ T9298] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 965.457496][ T9298] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 965.472621][ T9298] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 965.481570][ T9298] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.511370][T14682] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 965.519503][ T8726] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.522663][ T8726] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 53777 - 0 [ 965.531401][ T8726] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.540487][ T8726] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 53777 - 0 [ 965.554555][ T9298] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 965.561074][ T8726] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.575587][ T8726] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 53777 - 0 [ 965.873035][ T9298] usb 9-1: USB disconnect, device number 7 [ 965.974431][T10033] usb 11-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 965.986427][T10033] usb 11-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 966.026788][T10033] snd-usb-audio 11-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 966.032553][T10033] usb 11-1: USB disconnect, device number 7 [ 966.046048][T14641] udevd[14641]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 966.735536][T14694] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 966.773546][T14694] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 966.976816][T14694] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 967.004641][T14694] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 967.104616][T14694] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 967.134852][T14694] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 967.204595][T14694] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 967.226686][T14694] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 967.557085][T14708] xt_CT: You must specify a L4 protocol and not use inversions on it [ 967.745938][T14714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 967.771864][T14714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 969.459127][T14709] XFS (nullb0): Invalid superblock magic number [ 970.157064][T14748] bond3 (unregistering): Released all slaves [ 970.400342][T14752] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.469725][T14752] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.999463][T14752] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.123493][T14752] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.193810][ T42] kauditd_printk_skb: 174 callbacks suppressed [ 971.193823][ T42] audit: type=1800 audit(1786557706.657:797): pid=14760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1386" name="memory_backed" dev="configfs" ino=51880 res=0 errno=0 [ 971.218875][T14760] netlink: 'syz.4.1386': attribute type 1 has an invalid length. [ 971.227822][T14760] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1386'. [ 971.233728][ T42] audit: type=1800 audit(1786557706.677:798): pid=14760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1386" name="zoned" dev="configfs" ino=51881 res=0 errno=0 [ 971.245365][T14760] netlink: 'syz.4.1386': attribute type 2 has an invalid length. [ 971.256527][T14760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1386'. [ 971.305717][ T42] audit: type=1800 audit(1786557706.767:799): pid=14760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1386" name="power" dev="configfs" ino=51890 res=0 errno=0 [ 971.539839][T14762] binder: 14761:14762 ioctl c00c6211 0 returned -14 [ 971.549394][ T9005] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.889975][ T9005] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.515700][ T72] block nbd0: Possible stuck request ffff88802733e000: control (read@0,1024B). Runtime 180 seconds [ 972.520090][ T52] block nbd1: Possible stuck request ffff88802737e000: control (read@0,4096B). Runtime 60 seconds [ 972.524370][ T72] block nbd0: Possible stuck request ffff88802733e1c0: control (read@1024,1024B). Runtime 180 seconds [ 972.530297][ T72] block nbd0: Possible stuck request ffff88802733e380: control (read@2048,1024B). Runtime 180 seconds [ 972.546346][ T72] block nbd0: Possible stuck request ffff88802733e540: control (read@3072,1024B). Runtime 180 seconds [ 972.643489][T14764] gadgetfs: bound to dummy_udc driver [ 972.769958][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.785796][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.909560][ T9298] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 972.918110][ C0] gadgetfs: connected [ 972.923779][ T9298] gadgetfs: disconnected [ 973.099503][ C0] gadgetfs: connected [ 973.101025][ T9298] usb 6-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 973.137259][T14762] gadgetfs: suspended from state 3 [ 973.139442][T14762] gadgetfs: disconnected [ 973.517076][ T9298] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 973.673489][T14772] binder: 14767:14772 ioctl 4c0a 0 returned -22 [ 973.969106][ T9298] usb 6-1: can't read configurations, error -71 [ 974.371307][T14780] ceph: No mds server is up or the cluster is laggy [ 974.374386][ T9] libceph: connect (1)[c::]:6789 error -101 [ 974.376482][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 974.589647][ T8908] usb 11-1: new full-speed USB device number 8 using dummy_hcd [ 974.599402][ T9298] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 974.644667][ T5100] block nbd2: Possible stuck request ffff8880273de000: control (read@0,4096B). Runtime 60 seconds [ 974.770103][ T9298] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 974.774962][ T9298] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 974.777667][ T9298] usb 6-1: config 1 has no interface number 0 [ 974.780146][ T8908] usb 11-1: New USB device found, idVendor=eb1a, idProduct=2801, bcdDevice=c2.f3 [ 974.782861][ T9298] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 974.791530][ T9298] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 974.798306][ T9298] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.807697][ T9298] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.812360][ T9298] usb 6-1: Product: syz [ 974.814885][ T9298] usb 6-1: Manufacturer: syz [ 974.818580][ T9298] usb 6-1: SerialNumber: syz [ 974.829141][T14787] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 974.873313][T14780] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1390'. [ 975.258899][ T8908] usb 11-1: config 7 has an invalid interface number: 82 but max is 0 [ 975.263998][ T8908] usb 11-1: config 7 has no interface number 0 [ 975.266152][ T8908] usb 11-1: config 7 interface 82 altsetting 3 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 975.270515][ T8908] usb 11-1: config 7 interface 82 has no altsetting 0 [ 975.275575][ T8908] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.283681][ T8908] usb 11-1: Product: syz [ 975.285256][ T8908] usb 11-1: Manufacturer: syz [ 975.287127][ T8908] usb 11-1: SerialNumber: syz [ 975.302641][T14777] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 975.540933][ T8908] usb 11-1: USB disconnect, device number 8 [ 975.679879][T14802] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 975.682024][T14802] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 975.696679][T14802] vhci_hcd vhci_hcd.0: Device attached [ 975.854870][ T9298] usb 6-1: Error in usbnet_get_endpoints (-71) [ 975.867390][ T9298] usb 6-1: USB disconnect, device number 10 [ 975.989895][ T9] usb 46-1: SetAddress Request (6) to port 0 [ 975.995138][ T9] usb 46-1: new SuperSpeed USB device number 6 using vhci_hcd [ 976.453333][T14803] vhci_hcd: connection reset by peer [ 976.459665][ T12] vhci_hcd vhci_hcd.4: stop threads [ 976.462275][ T12] vhci_hcd vhci_hcd.4: release socket [ 976.471490][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 977.514858][T14815] binder: 14814:14815 ioctl c00c6211 0 returned -14 [ 978.608676][T14817] gadgetfs: bound to dummy_udc driver [ 979.012261][T14835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1412'. [ 980.158257][T14852] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1407'. [ 980.179503][T14856] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1409'. [ 980.291429][T14861] siw: device registration error -23 [ 980.327584][T14860] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 980.329679][T14860] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 980.375052][T14860] vhci_hcd vhci_hcd.0: Device attached [ 980.641367][ T1475] usb 40-1: SetAddress Request (10) to port 0 [ 980.649495][ T1475] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 981.099424][ T9] usb 46-1: device descriptor read/8, error -110 [ 981.147251][T14862] vhci_hcd: connection reset by peer [ 981.152737][ T9005] vhci_hcd vhci_hcd.1: stop threads [ 981.162903][ T9005] vhci_hcd vhci_hcd.1: release socket [ 981.175826][ T9005] vhci_hcd vhci_hcd.1: disconnect device [ 981.325588][ T42] audit: type=1800 audit(1786557716.787:800): pid=14867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1411" name="memory_backed" dev="configfs" ino=53007 res=0 errno=0 [ 981.347404][T14867] netlink: 'syz.6.1411': attribute type 1 has an invalid length. [ 981.349648][ T42] audit: type=1800 audit(1786557716.787:801): pid=14867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1411" name="zoned" dev="configfs" ino=53008 res=0 errno=0 [ 981.355389][T14867] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1411'. [ 981.367156][T14867] netlink: 'syz.6.1411': attribute type 2 has an invalid length. [ 981.373981][T14867] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1411'. [ 981.424675][ T42] audit: type=1800 audit(1786557716.887:802): pid=14867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1411" name="power" dev="configfs" ino=53014 res=0 errno=0 [ 981.489933][ T9] usb usb46-port1: attempt power cycle [ 981.559327][ T5807] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 981.726813][ T5807] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 981.742304][ T5807] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 981.748001][T14871] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 981.759288][ T5807] usb 9-1: config 1 has no interface number 0 [ 981.767636][ T5807] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 981.775142][ T5807] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 981.782529][ T5807] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 981.791681][ T5807] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.799314][ T5807] usb 9-1: Product: syz [ 981.800699][ T5807] usb 9-1: Manufacturer: syz [ 981.802448][ T5807] usb 9-1: SerialNumber: syz [ 981.807797][T14868] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 981.833792][T14873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1414'. [ 982.444573][ T9] usb usb46-port1: unable to enumerate USB device [ 983.895915][T14898] program syz.1.1419 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 985.370850][T14907] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 985.477456][T14907] i2c i2c-0: Failed to register i2c client pi3usb30532 at 0x59 (-16) [ 985.709320][ T5807] usb 9-1: Error in usbnet_get_endpoints (-71) [ 985.717323][T14912] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1421'. [ 985.734534][ T5807] usb 9-1: USB disconnect, device number 8 [ 985.741851][ T1475] usb 40-1: device descriptor read/8, error -110 [ 985.846139][T14919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1423'. [ 985.861688][T14919] vlan0: entered promiscuous mode [ 986.129960][ T1475] usb usb40-port1: attempt power cycle [ 986.572964][T14926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1424'. [ 986.740412][ T1475] usb usb40-port1: unable to enumerate USB device [ 986.922353][T14928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1425'. [ 987.181459][T14930] UDC core: g1: couldn't find an available UDC or it's busy [ 987.235154][T14943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1429'. [ 987.831238][T14959] program syz.0.1432 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 990.423092][T14974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.435629][T14974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.549567][T14968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1435'. [ 990.552781][T14968] vlan0: entered promiscuous mode [ 990.945455][T14981] gadgetfs: bound to dummy_udc driver [ 991.218230][ T9] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 991.251169][ C0] gadgetfs: connected [ 991.263516][ T9] gadgetfs: disconnected [ 991.441042][ C0] gadgetfs: connected [ 991.449707][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 991.458124][ T9] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 991.461587][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.476204][ C0] gadgetfs: configuration #1 [ 991.686046][T14981] gadgetfs: suspended from state 3 [ 991.688316][ T9] usb 6-1: can't set config #1, error -71 [ 991.691072][T14981] gadgetfs: disconnected [ 991.696267][ T9] usb 6-1: USB disconnect, device number 12 [ 991.831145][T14992] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1439'. [ 992.110222][T15000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1449'. [ 992.542487][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.478890][T14996] syz.6.1440: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 993.919166][T15017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1443'. [ 994.806184][ T42] audit: type=1326 audit(1786557730.267:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15019 comm="syz.4.1444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 995.319788][ T42] audit: type=1326 audit(1786557730.287:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15019 comm="syz.4.1444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 995.995661][ T42] audit: type=1326 audit(1786557730.287:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15019 comm="syz.4.1444" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 996.002512][ T42] audit: type=1326 audit(1786557730.287:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15019 comm="syz.4.1444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 996.016825][ T42] audit: type=1326 audit(1786557731.147:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15019 comm="syz.4.1444" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 996.054617][ T42] audit: type=1326 audit(1786557731.477:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15019 comm="syz.4.1444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 996.158626][ T42] audit: type=1326 audit(1786557731.617:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15019 comm="syz.4.1444" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 996.194497][ T42] audit: type=1326 audit(1786557731.617:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15019 comm="syz.4.1444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 996.202056][ T42] audit: type=1326 audit(1786557731.617:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15019 comm="syz.4.1444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 996.208825][ T42] audit: type=1326 audit(1786557731.657:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15019 comm="syz.4.1444" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 996.449332][ T9] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 996.557124][T15044] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 996.620750][ T9] usb 11-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 996.636397][ T9] usb 11-1: config 1 has an invalid interface number: 7 but max is 0 [ 996.639127][ T9] usb 11-1: config 1 has no interface number 0 [ 996.644295][ T9] usb 11-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 996.658312][ T9] usb 11-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 996.664899][ T9] usb 11-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 996.677022][T15044] i2c i2c-0: Failed to register i2c client pi3usb30532 at 0x59 (-16) [ 996.677144][ T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.690687][ T9] usb 11-1: Product: syz [ 996.696956][ T9] usb 11-1: Manufacturer: syz [ 996.700393][ T9] usb 11-1: SerialNumber: syz [ 996.711952][T15039] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 997.047525][T15060] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1455'. [ 999.533652][T15080] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1459'. [ 999.568932][ T9] usb 11-1: Error in usbnet_get_endpoints (-71) [ 999.577591][ T9] usb 11-1: USB disconnect, device number 9 [ 999.869459][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 999.869574][ T42] audit: type=1326 audit(1786557735.327:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15086 comm="syz.1.1462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 999.891343][ T42] audit: type=1326 audit(1786557735.327:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15086 comm="syz.1.1462" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 999.898160][ T42] audit: type=1326 audit(1786557735.337:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15086 comm="syz.1.1462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 999.908061][ T42] audit: type=1326 audit(1786557735.337:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15086 comm="syz.1.1462" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 999.915082][ T42] audit: type=1326 audit(1786557735.337:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15086 comm="syz.1.1462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 999.926237][ T42] audit: type=1326 audit(1786557735.337:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15086 comm="syz.1.1462" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 999.939721][ T42] audit: type=1326 audit(1786557735.337:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15086 comm="syz.1.1462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 999.954506][ T42] audit: type=1326 audit(1786557735.337:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15086 comm="syz.1.1462" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 999.980332][ T42] audit: type=1326 audit(1786557735.337:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15086 comm="syz.1.1462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1000.022634][ T42] audit: type=1326 audit(1786557735.337:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15086 comm="syz.1.1462" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1000.203774][T15096] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1000.366349][T15096] i2c i2c-0: Failed to register i2c client pi3usb30532 at 0x59 (-16) [ 1001.569331][ T8906] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 1001.720328][ T8906] usb 11-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1001.732185][ T8906] usb 11-1: config 1 has an invalid interface number: 7 but max is 0 [ 1001.743815][ T8906] usb 11-1: config 1 has no interface number 0 [ 1001.754944][ T8906] usb 11-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1001.772288][ T8906] usb 11-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1001.786907][ T8906] usb 11-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.803676][ T8906] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.811792][ T8906] usb 11-1: Product: syz [ 1001.816879][ T8906] usb 11-1: Manufacturer: syz [ 1001.823477][ T8906] usb 11-1: SerialNumber: syz [ 1001.833447][T15120] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1002.457077][T15150] sit2: entered promiscuous mode [ 1002.793470][T10887] block nbd1: Possible stuck request ffff88802737e000: control (read@0,4096B). Runtime 90 seconds [ 1002.797006][ T72] block nbd0: Possible stuck request ffff88802733e000: control (read@0,1024B). Runtime 210 seconds [ 1002.801651][ T72] block nbd0: Possible stuck request ffff88802733e1c0: control (read@1024,1024B). Runtime 210 seconds [ 1002.805179][ T72] block nbd0: Possible stuck request ffff88802733e380: control (read@2048,1024B). Runtime 210 seconds [ 1002.808802][ T72] block nbd0: Possible stuck request ffff88802733e540: control (read@3072,1024B). Runtime 210 seconds [ 1002.853211][T15156] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1002.987039][T15156] i2c i2c-0: Failed to register i2c client pi3usb30532 at 0x59 (-16) [ 1004.248868][ T8906] usb 11-1: Error in usbnet_get_endpoints (-71) [ 1004.281316][ T8906] usb 11-1: USB disconnect, device number 10 [ 1004.531308][ T8906] libceph: connect (1)[c::]:6789 error -101 [ 1004.535039][ T8906] libceph: mon0 (1)[c::]:6789 connect error [ 1004.542471][T15187] ceph: No mds server is up or the cluster is laggy [ 1004.681008][T15203] fuse: fd is not a fuse device [ 1004.710320][T10976] block nbd2: Possible stuck request ffff8880273de000: control (read@0,4096B). Runtime 90 seconds [ 1005.284586][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 1005.284601][ T42] audit: type=1326 audit(1786557740.547:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15201 comm="syz.0.1480" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1005.604400][ T42] audit: type=1326 audit(1786557740.957:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15201 comm="syz.0.1480" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 1005.775775][T15216] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1491'. [ 1005.786044][T15216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1005.794924][T15216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1005.816696][T15216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1005.824708][T15216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.789946][T15237] Console: switching to colour dummy device 80x25 [ 1007.215108][T15238] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1007.282804][T15238] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1007.296157][T15238] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1007.306925][T15238] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1007.321796][T15238] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1007.333712][T15238] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 11775 usecs [ 1007.369698][ T5880] usb 11-1: new low-speed USB device number 11 using dummy_hcd [ 1007.405167][T15238] pci 0000:00:01.0: Adding to iommu group 1 [ 1007.421008][T15235] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.428090][T15235] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.434599][T15238] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1007.436800][T15238] pci 0000:00:01.0: vgaarb: bridge control possible [ 1007.438871][T15238] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1007.470091][T15238] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1007.475128][T15238] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1007.490200][T15238] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1007.510879][T15238] [drm] Found bochs VGA, ID 0xb0c5. [ 1007.513896][T15238] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1007.551292][ T5880] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1007.563829][ T5880] usb 11-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.568484][T15238] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1007.572786][ T5880] usb 11-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1007.579957][ T5880] usb 11-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.586075][ T5880] usb 11-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1007.598548][ T5880] usb 11-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.604200][ T5880] usb 11-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1007.616393][ T5880] usb 11-1: string descriptor 0 read error: -22 [ 1007.618586][ T5880] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.732833][T15238] Console: switching to colour frame buffer device 160x50 [ 1007.792334][T15238] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1008.302353][ T9] usb 11-1: USB disconnect, device number 11 [ 1010.145765][T15271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1497'. [ 1010.156791][T15271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1010.163807][T15271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1013.259534][ T42] audit: type=1800 audit(1786557748.707:866): pid=15308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1502" name="nullb0" dev="tmpfs" ino=1134 res=0 errno=0 [ 1013.302754][ T7493] IPVS: starting estimator thread 0... [ 1013.411255][T15306] IPVS: using max 41 ests per chain, 98400 per kthread [ 1013.591025][T15324] syzkaller0: entered promiscuous mode [ 1013.598498][T15324] syzkaller0: entered allmulticast mode [ 1014.530470][T15314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1513'. [ 1018.675408][T15373] comedi comedi3: comedi_config --init_data is deprecated [ 1018.693567][T15373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.696438][T15373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1018.716509][T15373] xt_hashlimit: max too large, truncated to 1048576 [ 1020.537765][T15403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1525'. [ 1020.882263][ T42] audit: type=1326 audit(1786557756.347:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15404 comm="syz.6.1527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 1020.898487][ T42] audit: type=1326 audit(1786557756.357:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15404 comm="syz.6.1527" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 1020.915167][T15401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1518'. [ 1020.925867][ T42] audit: type=1326 audit(1786557756.357:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15404 comm="syz.6.1527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 1020.945775][ T42] audit: type=1326 audit(1786557756.357:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15404 comm="syz.6.1527" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 1020.971712][ T42] audit: type=1326 audit(1786557756.357:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15404 comm="syz.6.1527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 1021.001217][ T42] audit: type=1326 audit(1786557756.357:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15404 comm="syz.6.1527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 1021.021899][ T42] audit: type=1326 audit(1786557756.357:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15404 comm="syz.6.1527" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 1021.056505][ T42] audit: type=1326 audit(1786557756.367:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15404 comm="syz.6.1527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 1021.090993][ T42] audit: type=1326 audit(1786557756.367:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15404 comm="syz.6.1527" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 1021.104918][T15421] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1529'. [ 1021.115887][ T42] audit: type=1326 audit(1786557756.367:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15404 comm="syz.6.1527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x7ffc0000 [ 1021.163014][T15421] team0 (unregistering): Port device team_slave_0 removed [ 1021.239812][T15421] team0 (unregistering): Port device team_slave_1 removed [ 1021.411642][T15424] netlink: 'syz.0.1529': attribute type 1 has an invalid length. [ 1021.485047][T15424] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1529'. [ 1023.617900][T15471] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1536'. [ 1023.679860][T15476] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1537'. [ 1023.750642][T15478] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1023.752735][T15478] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1023.788596][T15478] vhci_hcd vhci_hcd.0: Device attached [ 1024.049328][ T8907] usb 38-1: SetAddress Request (2) to port 0 [ 1024.051362][ T8907] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1024.356091][T15479] vhci_hcd: connection reset by peer [ 1024.361443][ T8726] vhci_hcd vhci_hcd.0: stop threads [ 1024.366283][ T8726] vhci_hcd vhci_hcd.0: release socket [ 1024.372686][ T8726] vhci_hcd vhci_hcd.0: disconnect device [ 1024.607993][T15500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.727018][T15500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.917506][T15500] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1025.503594][T15512] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1025.561813][T15512] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1025.568270][T15512] overlayfs: failed to look up (tracing) for ino (-66) [ 1028.159536][T15527] fuse: fd is not a fuse device [ 1028.166771][T15527] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1548'. [ 1028.603173][T15546] netlink: 'syz.4.1551': attribute type 11 has an invalid length. [ 1028.704716][T15546] bond3: option ad_actor_sys_prio: invalid value (0) [ 1028.714132][T15546] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1028.731035][T15546] bond3 (unregistering): Released all slaves [ 1028.860703][T15553] netlink: 'syz.1.1552': attribute type 11 has an invalid length. [ 1028.975770][T15553] bond1: option ad_actor_sys_prio: invalid value (0) [ 1028.981315][T15553] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1028.986512][T15553] bond1 (unregistering): Released all slaves [ 1029.015172][T15555] can: request_module (can-proto-3) failed. [ 1029.099760][ T8907] usb 38-1: device descriptor read/8, error -110 [ 1029.327827][T15568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1555'. [ 1029.448751][T15573] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1556'. [ 1030.117535][ T8907] usb usb38-port1: attempt power cycle [ 1030.487012][T15587] netlink: 'syz.4.1561': attribute type 11 has an invalid length. [ 1030.553832][T15587] bond3: option ad_actor_sys_prio: invalid value (0) [ 1030.558762][T15587] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1030.577036][T15587] bond3 (unregistering): Released all slaves [ 1030.628637][T15535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1545'. [ 1030.679794][ T8907] usb usb38-port1: unable to enumerate USB device [ 1030.807488][T15593] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 1030.912685][T15595] netlink: 'syz.4.1563': attribute type 11 has an invalid length. [ 1030.990047][T15595] bond3: option ad_actor_sys_prio: invalid value (0) [ 1031.004314][T15595] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1031.048639][T15595] bond3 (unregistering): Released all slaves [ 1031.098454][T15597] can: request_module (can-proto-3) failed. [ 1032.421069][T15610] bond1: option ad_actor_sys_prio: invalid value (0) [ 1032.423365][T15610] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1032.427304][T15610] bond1 (unregistering): Released all slaves [ 1032.691533][T15620] netlink: 'syz.0.1568': attribute type 11 has an invalid length. [ 1032.859791][T14763] block nbd0: Possible stuck request ffff88802733e000: control (read@0,1024B). Runtime 240 seconds [ 1032.863235][T14763] block nbd0: Possible stuck request ffff88802733e1c0: control (read@1024,1024B). Runtime 240 seconds [ 1032.866836][T14763] block nbd0: Possible stuck request ffff88802733e380: control (read@2048,1024B). Runtime 240 seconds [ 1032.870258][T10887] block nbd1: Possible stuck request ffff88802737e000: control (read@0,4096B). Runtime 120 seconds [ 1032.880293][T14763] block nbd0: Possible stuck request ffff88802733e540: control (read@3072,1024B). Runtime 240 seconds [ 1033.585874][T15632] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 1033.587972][T15632] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1033.607054][T15632] vhci_hcd vhci_hcd.0: Device attached [ 1033.650183][T15632] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 1033.765718][T15641] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1573'. [ 1033.889534][ T5880] usb 38-1: SetAddress Request (6) to port 0 [ 1033.892969][ T5880] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1033.923807][T15633] vhci_hcd: connection closed [ 1033.924135][ T8726] vhci_hcd vhci_hcd.0: stop threads [ 1033.933164][ T8726] vhci_hcd vhci_hcd.0: release socket [ 1033.940101][ T8726] vhci_hcd vhci_hcd.0: disconnect device [ 1033.970963][T15644] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1574'. [ 1034.688460][T15649] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 1034.698594][T15650] batadv_slave_1: entered promiscuous mode [ 1034.780640][ T5100] block nbd2: Possible stuck request ffff8880273de000: control (read@0,4096B). Runtime 120 seconds [ 1034.968174][T15655] netlink: 'syz.4.1578': attribute type 11 has an invalid length. [ 1036.118546][T15673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1583'. [ 1036.364202][T15653] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1577'. [ 1036.371150][T15681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1584'. [ 1037.131625][T15697] netlink: 'syz.6.1588': attribute type 11 has an invalid length. [ 1038.735924][T15722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1592'. [ 1038.819166][T15728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1594'. [ 1038.940692][ T5880] usb 38-1: device descriptor read/8, error -110 [ 1039.145463][T15737] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1596'. [ 1039.344039][ T5880] usb usb38-port1: attempt power cycle [ 1039.910855][ T5880] usb usb38-port1: unable to enumerate USB device [ 1040.304973][T15736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1597'. [ 1040.311198][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1603'. [ 1041.575418][T15779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.581888][T15779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.338040][T15800] x_tables: duplicate underflow at hook 3 [ 1042.362667][T15800] ./bus: Can't lookup blockdev [ 1043.477194][T15820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1615'. [ 1043.566048][T15824] netlink: 'syz.6.1618': attribute type 11 has an invalid length. [ 1043.597238][T15824] bond1: option ad_actor_sys_prio: invalid value (0) [ 1043.601024][T15824] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1043.606099][T15824] bond1 (unregistering): Released all slaves [ 1043.675116][T15826] can: request_module (can-proto-3) failed. [ 1043.852212][T15831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1619'. [ 1044.779878][T15850] lo: entered allmulticast mode [ 1044.799022][T15850] lo: left allmulticast mode [ 1044.828450][T15850] bond0: entered promiscuous mode [ 1044.833954][T15850] bond_slave_0: entered promiscuous mode [ 1044.839533][T15850] bond_slave_1: entered promiscuous mode [ 1044.873395][T15850] batadv0: entered promiscuous mode [ 1044.882362][T15850] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1044.893910][T15850] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1044.935855][T15850] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1044.990445][T15850] bond0: left promiscuous mode [ 1044.992299][T15850] bond_slave_0: left promiscuous mode [ 1044.994288][T15850] bond_slave_1: left promiscuous mode [ 1045.013012][T15850] batadv0: left promiscuous mode [ 1047.801993][T15875] netlink: 'syz.4.1629': attribute type 11 has an invalid length. [ 1047.994178][T15875] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.996432][T15875] bridge0: port 2(bridge_slave_1) entered listening state [ 1047.998817][T15875] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.001202][T15875] bridge0: port 1(bridge_slave_0) entered listening state [ 1048.068903][T15875] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1048.300997][T15892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1636'. [ 1048.378770][T15894] wlan0 speed is unknown, defaulting to 1000 [ 1048.397805][T15894] wlan0 speed is unknown, defaulting to 1000 [ 1048.427447][T15894] wlan0 speed is unknown, defaulting to 1000 [ 1048.517666][T15894] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1048.582728][T15894] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1048.630948][T15894] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1048.713320][T15894] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1048.932176][T15894] wlan0 speed is unknown, defaulting to 1000 [ 1048.975180][T15894] wlan0 speed is unknown, defaulting to 1000 [ 1048.996273][T15894] wlan0 speed is unknown, defaulting to 1000 [ 1048.999174][T15894] wlan0 speed is unknown, defaulting to 1000 [ 1049.001987][T15894] wlan0 speed is unknown, defaulting to 1000 [ 1049.291151][T15907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1641'. [ 1049.588279][T15921] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1049.590377][T15921] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1049.635805][T15921] vhci_hcd vhci_hcd.0: Device attached [ 1049.899552][ T8910] usb 46-1: SetAddress Request (10) to port 0 [ 1049.901658][ T8910] usb 46-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1050.172233][T15927] vhci_hcd: connection closed [ 1050.173081][ T5777] vhci_hcd vhci_hcd.4: stop threads [ 1050.176409][ T5777] vhci_hcd vhci_hcd.4: release socket [ 1050.180388][ T5777] vhci_hcd vhci_hcd.4: disconnect device [ 1050.282331][T15936] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1050.284453][T15936] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1050.341301][T15936] vhci_hcd vhci_hcd.0: Device attached [ 1050.418634][ T8910] usb 46-1: enqueue for inactive port 0 [ 1050.619663][T10033] usb 50-1: SetAddress Request (2) to port 0 [ 1050.639158][T10033] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1050.841388][ T8910] usb usb46-port1: attempt power cycle [ 1051.108893][T15937] vhci_hcd: connection reset by peer [ 1051.111064][ T5777] vhci_hcd vhci_hcd.6: stop threads [ 1051.112952][ T5777] vhci_hcd vhci_hcd.6: release socket [ 1051.114784][ T5777] vhci_hcd vhci_hcd.6: disconnect device [ 1051.282253][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1648'. [ 1051.400217][ T8910] usb usb46-port1: unable to enumerate USB device [ 1051.718325][T15961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1654'. [ 1051.999479][T15975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1666'. [ 1053.243842][T15991] netlink: 'syz.4.1662': attribute type 11 has an invalid length. [ 1053.383636][T15993] bond3: option ad_actor_sys_prio: invalid value (0) [ 1053.383711][T15993] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1053.388564][T15993] bond3 (unregistering): Released all slaves [ 1053.522675][T15991] can: request_module (can-proto-3) failed. [ 1053.676402][T15998] netlink: 'syz.0.1663': attribute type 11 has an invalid length. [ 1053.730957][T15998] bond1: option ad_actor_sys_prio: invalid value (0) [ 1053.735895][T15998] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1053.742516][T15998] bond1 (unregistering): Released all slaves [ 1053.856558][T16002] can: request_module (can-proto-3) failed. [ 1053.984361][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.739543][T10033] usb 50-1: device descriptor read/8, error -110 [ 1055.989394][T16034] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1055.991475][T16034] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1055.999753][T16034] vhci_hcd vhci_hcd.0: Device attached [ 1056.151751][T10033] usb usb50-port1: attempt power cycle [ 1056.216053][T16044] netlink: 10 bytes leftover after parsing attributes in process `syz.6.1675'. [ 1056.269707][ T8907] usb 46-1: SetAddress Request (14) to port 0 [ 1056.348102][ T8907] usb 46-1: new SuperSpeed USB device number 14 using vhci_hcd [ 1056.461688][T16041] rdma_rxe: rxe_newlink: failed to add wg2 [ 1056.471887][T16036] vhci_hcd: connection reset by peer [ 1056.473820][ T5777] vhci_hcd vhci_hcd.4: stop threads [ 1056.475097][T16040] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1056.485026][ T5777] vhci_hcd vhci_hcd.4: release socket [ 1056.501923][ T5777] vhci_hcd vhci_hcd.4: disconnect device [ 1056.508299][T16040] netlink: 'syz.6.1675': attribute type 2 has an invalid length. [ 1056.518062][T16040] netlink: 'syz.6.1675': attribute type 2 has an invalid length. [ 1056.749358][T10033] usb usb50-port1: unable to enumerate USB device [ 1057.028382][T16056] random: crng reseeded on system resumption [ 1057.257025][T16063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1679'. [ 1057.320894][T16067] netlink: 'syz.6.1681': attribute type 11 has an invalid length. [ 1057.389504][T16067] bond1: option ad_actor_sys_prio: invalid value (0) [ 1057.391692][T16067] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1057.395395][T16067] bond1 (unregistering): Released all slaves [ 1057.556689][T16075] can: request_module (can-proto-3) failed. [ 1057.648684][T16078] wlan0 speed is unknown, defaulting to 1000 [ 1058.407557][T16087] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1058.420927][T16087] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1060.861832][T16127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1691'. [ 1061.420921][ T8907] usb 46-1: device descriptor read/8, error -110 [ 1061.703112][T16136] netlink: 'syz.6.1694': attribute type 11 has an invalid length. [ 1061.814134][ T8907] usb usb46-port1: attempt power cycle [ 1062.288035][T16139] bond1: option ad_actor_sys_prio: invalid value (0) [ 1062.305519][T16141] can: request_module (can-proto-3) failed. [ 1062.314539][T16139] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1062.335765][T16139] bond1 (unregistering): Released all slaves [ 1062.380812][ T8907] usb usb46-port1: unable to enumerate USB device [ 1062.572864][T16154] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1696'. [ 1062.608107][T16154] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1696'. [ 1062.941851][T14763] block nbd1: Possible stuck request ffff88802737e000: control (read@0,4096B). Runtime 150 seconds [ 1062.945364][ T72] block nbd0: Possible stuck request ffff88802733e000: control (read@0,1024B). Runtime 270 seconds [ 1062.948949][ T72] block nbd0: Possible stuck request ffff88802733e1c0: control (read@1024,1024B). Runtime 270 seconds [ 1062.952985][ T72] block nbd0: Possible stuck request ffff88802733e380: control (read@2048,1024B). Runtime 270 seconds [ 1062.956402][ T72] block nbd0: Possible stuck request ffff88802733e540: control (read@3072,1024B). Runtime 270 seconds [ 1063.748649][T16164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1700'. [ 1064.965610][T10976] block nbd2: Possible stuck request ffff8880273de000: control (read@0,4096B). Runtime 150 seconds [ 1065.158147][T16187] netlink: 'syz.0.1705': attribute type 11 has an invalid length. [ 1065.181640][T16187] bond1: option ad_actor_sys_prio: invalid value (0) [ 1065.183973][T16187] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1065.187509][T16187] bond1 (unregistering): Released all slaves [ 1065.260048][T16190] can: request_module (can-proto-3) failed. [ 1065.476101][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 1065.476113][ T42] audit: type=1800 audit(1786557800.937:901): pid=16195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1706" name="idProduct" dev="configfs" ino=60185 res=0 errno=0 [ 1065.495725][ T42] audit: type=1800 audit(1786557800.957:902): pid=16195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1706" name="process_ump" dev="configfs" ino=60189 res=0 errno=0 [ 1065.510406][ T42] audit: type=1800 audit(1786557800.977:903): pid=16195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1706" name="ep_name" dev="configfs" ino=60190 res=0 errno=0 [ 1065.525387][ T42] audit: type=1800 audit(1786557800.987:904): pid=16195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1706" name="direction" dev="configfs" ino=60191 res=0 errno=0 [ 1065.540369][ T42] audit: type=1800 audit(1786557800.997:905): pid=16195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1706" name="name" dev="configfs" ino=60192 res=0 errno=0 [ 1065.962088][T16203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1707'. [ 1066.006854][T16205] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1710'. [ 1066.038378][T16206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1709'. [ 1066.129956][T16208] xt_time: unknown flags 0xf4 [ 1066.280583][T16214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1712'. [ 1066.368747][T16217] overlayfs: failed to clone upperpath [ 1066.604030][T16211] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.636777][T16211] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 60322 - 0 [ 1066.731238][ T8907] usb 11-1: new full-speed USB device number 12 using dummy_hcd [ 1066.890265][ T8907] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1066.901907][ T8907] usb 11-1: config 0 has no interfaces? [ 1066.908794][ T8907] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1066.917019][ T8907] usb 11-1: Product: syz [ 1066.922617][ T8907] usb 11-1: Manufacturer: syz [ 1066.928297][ T8907] usb 11-1: SerialNumber: syz [ 1066.952496][ T8907] usb 11-1: config 0 descriptor?? [ 1067.227125][T16214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1712'. [ 1067.237647][T16214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1712'. [ 1067.245564][T16223] erspan0: entered promiscuous mode [ 1067.270064][T16223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1715'. [ 1067.329482][T16211] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.332687][T16211] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 60322 - 0 [ 1067.400935][T16211] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.405126][T16211] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 60322 - 0 [ 1067.460850][T16211] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.464071][T16211] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 60322 - 0 [ 1067.579891][ T5777] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 60322 - 0 [ 1067.588210][ T5777] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1067.591336][ T5777] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 60322 - 0 [ 1067.595676][ T5777] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1067.599435][ T5880] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1067.651166][ T5777] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 60322 - 0 [ 1067.655230][ T5777] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1067.660996][ T5777] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 60322 - 0 [ 1067.668728][ T5777] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1067.707602][ T5805] usb 11-1: USB disconnect, device number 12 [ 1067.751004][ T5880] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1067.756347][ T5880] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1067.767216][ T5880] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1067.772096][ T5880] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.778867][T16225] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1067.811185][ T5880] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1068.854212][T16242] __nla_validate_parse: 2 callbacks suppressed [ 1068.854225][T16242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1721'. [ 1068.871626][T16238] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1719'. [ 1068.946385][T16245] siw: device registration error -23 [ 1068.999154][T16249] netlink: 'syz.6.1723': attribute type 11 has an invalid length. [ 1069.192501][T16252] can: request_module (can-proto-3) failed. [ 1069.239936][T16251] bond1: option ad_actor_sys_prio: invalid value (0) [ 1069.251432][T16251] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1069.262945][T16251] bond1 (unregistering): Released all slaves [ 1069.367870][ T8906] usb 9-1: USB disconnect, device number 9 [ 1069.490243][ T42] audit: type=1326 audit(1786557804.957:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.1.1722" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1069.505876][ T42] audit: type=1326 audit(1786557804.957:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.1.1722" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1069.517210][ T42] audit: type=1326 audit(1786557804.957:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.1.1722" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1069.529374][ T42] audit: type=1326 audit(1786557804.957:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.1.1722" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1069.541254][ T42] audit: type=1326 audit(1786557804.957:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.1.1722" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7ffc0000 [ 1069.739938][T16258] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1069.749897][T16258] CIFS: Attempting to mount //127.0.0.1/test [ 1069.850555][T16258] CIFS: VFS: \\127.0.0.1 Error -104 sending data on socket to server [ 1069.871427][T16258] CIFS: VFS: cifs_mount failed w/return code = -103 [ 1069.974785][T16264] veth1_macvtap: left promiscuous mode [ 1070.075174][T16264] veth1_macvtap: entered promiscuous mode [ 1070.409055][T16287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1730'. [ 1070.563624][T16291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1731'. [ 1071.035059][T16314] netlink: 'syz.6.1737': attribute type 11 has an invalid length. [ 1071.611307][T16314] bond1: option ad_actor_sys_prio: invalid value (0) [ 1071.751035][T16314] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1071.812513][T16324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1739'. [ 1071.895060][T16314] bond1 (unregistering): Released all slaves [ 1071.979881][T16319] can: request_module (can-proto-3) failed. [ 1072.709907][T16345] netlink: 'syz.1.1744': attribute type 11 has an invalid length. [ 1072.803159][T16345] bond1: option ad_actor_sys_prio: invalid value (0) [ 1072.810841][T16345] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1072.820612][T16345] bond1 (unregistering): Released all slaves [ 1072.829587][ T5805] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1072.883664][T16347] can: request_module (can-proto-3) failed. [ 1073.012102][ T5805] usb 9-1: Using ep0 maxpacket: 16 [ 1073.104634][ T5805] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1073.111581][ T5805] usb 9-1: config 128 has an invalid descriptor of length 128, skipping remainder of the config [ 1073.116982][ T5805] usb 9-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 1073.124683][ T5805] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1073.129843][ T5805] usb 9-1: Product: syz [ 1073.131753][ T5805] usb 9-1: Manufacturer: syz [ 1073.133745][ T5805] usb 9-1: SerialNumber: syz [ 1073.346994][T16329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1073.360124][T16329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1073.384529][ T5805] usb 9-1: USB disconnect, device number 10 [ 1075.353365][T16380] netlink: 'syz.6.1751': attribute type 11 has an invalid length. [ 1075.446271][T16380] bond1: option ad_actor_sys_prio: invalid value (0) [ 1075.451043][T16380] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1075.462323][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 1075.462374][ T42] audit: type=1800 audit(1786557810.917:934): pid=16383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1753" name="nullb0" dev="tmpfs" ino=1134 res=0 errno=0 [ 1075.476692][T16380] bond1 (unregistering): Released all slaves [ 1075.545853][T16387] can: request_module (can-proto-3) failed. [ 1075.692160][T16395] netlink: 'syz.1.1755': attribute type 11 has an invalid length. [ 1076.635860][T16397] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1076.740485][T16398] bond1: option ad_actor_sys_prio: invalid value (0) [ 1076.742612][T16398] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1076.768826][T16399] can: request_module (can-proto-3) failed. [ 1076.771501][T16398] bond1 (unregistering): Released all slaves [ 1077.973072][T16434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.023697][T16434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.216286][T16439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.227922][T16439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.249014][T16441] netlink: 'syz.1.1764': attribute type 11 has an invalid length. [ 1078.299350][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1078.303894][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1078.317271][T16441] bond1: option ad_actor_sys_prio: invalid value (0) [ 1078.323422][T16441] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1078.330437][T16441] bond1 (unregistering): Released all slaves [ 1078.390165][T16443] can: request_module (can-proto-3) failed. [ 1078.822704][T16452] netlink: 'syz.4.1766': attribute type 11 has an invalid length. [ 1078.904265][T16452] bond3: option ad_actor_sys_prio: invalid value (0) [ 1078.909661][T16452] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1078.942694][T16452] bond3 (unregistering): Released all slaves [ 1079.027021][T16454] can: request_module (can-proto-3) failed. [ 1079.485039][T16459] netlink: 'syz.1.1767': attribute type 11 has an invalid length. [ 1079.616356][T16459] bond1: option ad_actor_sys_prio: invalid value (0) [ 1079.619062][T16459] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1079.628429][T16459] bond1 (unregistering): Released all slaves [ 1079.745470][T16460] can: request_module (can-proto-3) failed. [ 1081.206761][T16499] netlink: 'syz.4.1777': attribute type 11 has an invalid length. [ 1081.294235][T16499] bond3: option ad_actor_sys_prio: invalid value (0) [ 1081.304563][T16499] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1081.323697][T16499] bond3 (unregistering): Released all slaves [ 1081.382524][T16500] erspan0: left promiscuous mode [ 1081.511630][T16500] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1081.735368][T16499] can: request_module (can-proto-3) failed. [ 1082.752721][T16533] netlink: 'syz.1.1782': attribute type 11 has an invalid length. [ 1082.882089][T16533] bond1: option ad_actor_sys_prio: invalid value (0) [ 1082.890926][T16533] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1082.899801][T16533] bond1 (unregistering): Released all slaves [ 1083.064735][T16541] can: request_module (can-proto-3) failed. [ 1084.348759][T16564] netlink: 'syz.1.1787': attribute type 11 has an invalid length. [ 1084.398747][T16564] bond1: option ad_actor_sys_prio: invalid value (0) [ 1084.404987][T16564] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1084.418513][T16564] bond1 (unregistering): Released all slaves [ 1084.549091][T16566] can: request_module (can-proto-3) failed. [ 1084.751123][T16573] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1789'. [ 1085.979761][ T43] INFO: task syz.8.1287:14164 blocked in I/O wait for more than 143 seconds. [ 1085.982978][ T43] Not tainted syzkaller #0 [ 1085.984645][ T43] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1085.987345][ T43] task:syz.8.1287 state:D stack:25616 pid:14164 tgid:14163 ppid:8734 task_flags:0x400140 flags:0x08080002 [ 1085.999257][ T43] Call Trace: [ 1086.000367][ T43] [ 1086.001370][ T43] __schedule+0x125c/0x6730 [ 1086.003095][ T43] ? __pfx___schedule+0x10/0x10 [ 1086.004758][ T43] ? find_held_lock+0x2b/0x80 [ 1086.006370][ T43] ? schedule+0x225/0x2c0 [ 1086.007763][ T43] schedule+0xdd/0x2c0 [ 1086.009006][ T43] io_schedule+0x8a/0xf0 [ 1086.013737][ T43] folio_wait_bit_common+0x414/0xa70 [ 1086.017184][ T43] ? folio_wait_bit_common+0x2a0/0xa70 [ 1086.025705][ T43] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1086.036456][ T43] ? __pfx_wake_page_function+0x10/0x10 [ 1086.045509][ T43] ? __pfx___might_resched+0x10/0x10 [ 1086.057053][ T43] ? compaction_free+0x17d/0x470 [ 1086.068381][ T43] ? move_to_new_folio+0x1e1/0x4e0 [ 1086.078243][ T43] migrate_pages_batch+0x7a1/0x45c0 [ 1086.090419][ T43] ? __pfx_compaction_alloc+0x10/0x10 [ 1086.100837][ T43] ? __pfx_compaction_free+0x10/0x10 [ 1086.106574][ T43] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1086.119297][ T43] ? rcu_is_watching+0x12/0xc0 [ 1086.127038][ T43] ? __asan_memset+0x23/0x50 [ 1086.135339][ T43] migrate_pages_sync+0x4db/0x880 [ 1086.144219][ T43] ? __pfx_compaction_alloc+0x10/0x10 [ 1086.153672][ T43] ? __pfx_compaction_free+0x10/0x10 [ 1086.164082][ T43] ? __pfx_migrate_pages_sync+0x10/0x10 [ 1086.175538][ T43] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 1086.189023][ T43] ? find_held_lock+0x2b/0x80 [ 1086.202372][ T43] ? find_held_lock+0x2b/0x80 [ 1086.215967][ T43] migrate_pages+0x1a83/0x2850 [ 1086.226275][ T43] ? isolate_migratepages_block+0xd74/0x61d0 [ 1086.242877][ T43] ? __pfx_compaction_alloc+0x10/0x10 [ 1086.251355][ T43] ? __pfx_compaction_free+0x10/0x10 [ 1086.261110][ T43] ? __pfx_migrate_pages+0x10/0x10 [ 1086.269430][ T43] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 1086.284520][ T43] ? putback_movable_pages+0x7e0/0xbd0 [ 1086.291802][ T43] compact_zone+0x243c/0x4420 [ 1086.302568][ T43] ? __pfx_compact_zone+0x10/0x10 [ 1086.312375][ T43] ? __flush_work+0xa38/0xcb0 [ 1086.322591][ T43] ? __flush_work+0xa38/0xcb0 [ 1086.328326][ T43] compact_node+0x17f/0x2c0 [ 1086.336626][ T43] ? __pfx_compact_node+0x10/0x10 [ 1086.347427][ T43] ? __lru_add_drain_all+0x441/0x650 [ 1086.355909][ T43] sysctl_compaction_handler+0x141/0x210 [ 1086.367989][ T43] proc_sys_call_handler+0x47f/0x5a0 [ 1086.375848][ T43] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1086.387937][ T43] ? splice_from_pipe_next+0x1ec/0x5a0 [ 1086.398416][ T43] iter_file_splice_write+0x830/0x10b0 [ 1086.408295][ T43] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1086.418239][ T43] ? __pfx_copy_splice_read+0x10/0x10 [ 1086.428414][ T43] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1086.438119][ T43] direct_splice_actor+0x192/0x690 [ 1086.450114][ T43] splice_direct_to_actor+0x345/0xa30 [ 1086.459060][ T43] ? __pfx_direct_splice_actor+0x10/0x10 [ 1086.466770][ T43] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1086.477460][ T43] do_splice_direct+0x174/0x240 [ 1086.484545][ T43] ? __pfx_do_splice_direct+0x10/0x10 [ 1086.492368][ T43] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1086.503322][ T43] ? rw_verify_area+0xce/0x6d0 [ 1086.509249][ T43] do_sendfile+0xadc/0xe20 [ 1086.515245][ T43] ? __pfx_do_sendfile+0x10/0x10 [ 1086.523753][ T43] ? __might_fault+0xc5/0x140 [ 1086.533089][ T43] __ia32_compat_sys_sendfile+0x162/0x220 [ 1086.541456][ T43] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 1086.550287][ T43] __do_fast_syscall_32+0xe7/0x970 [ 1086.559637][ T43] ? lockdep_hardirqs_on+0x78/0x100 [ 1086.565496][ T43] do_fast_syscall_32+0x32/0x70 [ 1086.574232][ T43] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1086.583088][ T43] RIP: 0023:0xf7f06fec [ 1086.587730][ T43] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 1086.597300][ T43] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 000000000000000a [ 1086.604803][ T43] RDX: 00000000800000c0 RSI: 000000000000000a RDI: 0000000000000000 [ 1086.612785][ T43] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1086.621289][ T43] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1086.632175][ T43] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1086.638283][ T43] [ 1086.645154][ T43] [ 1086.645154][ T43] Showing all locks held in the system: [ 1086.668161][ T43] 1 lock held by khungtaskd/43: [ 1086.680744][ T43] #0: ffffffff8ebe8000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1086.692883][ T43] 2 locks held by getty/5530: [ 1086.698213][ T43] #0: ffff888028da00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1086.706845][ T43] #1: ffffc9000019b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1086.716918][ T43] 3 locks held by kworker/u33:61/7227: [ 1086.722443][ T43] 2 locks held by kworker/2:0H/10976: [ 1086.727943][ T43] 1 lock held by udevd/11539: [ 1086.733480][ T43] #0: ffff8880272b0350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1086.744708][ T43] 1 lock held by udevd/12080: [ 1086.748978][ T43] #0: ffff8880272b4350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1086.761325][ T43] 1 lock held by udevd/12084: [ 1086.766587][ T43] #0: ffff888027360350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1086.775989][ T43] 1 lock held by syz.8.1287/14164: [ 1086.782182][ T43] #0: ffff8880266a0450 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 1086.792288][ T43] 1 lock held by syz.0.1792/16592: [ 1086.798517][ T43] 1 lock held by syz.4.1793/16593: [ 1086.807851][ T43] 2 locks held by syz.6.1794/16600: [ 1086.814519][ T43] [ 1086.828683][ T43] ============================================= [ 1086.828683][ T43] [ 1086.845579][ T43] NMI backtrace for cpu 0 [ 1086.845593][ T43] CPU: 0 UID: 0 PID: 43 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1086.845606][ T43] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1086.845612][ T43] Call Trace: [ 1086.845616][ T43] [ 1086.845621][ T43] dump_stack_lvl+0x100/0x190 [ 1086.845637][ T43] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1086.845651][ T43] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1086.845665][ T43] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 1086.845680][ T43] sys_info+0x141/0x190 [ 1086.845691][ T43] watchdog+0xcb1/0x1030 [ 1086.845710][ T43] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1086.845724][ T43] ? __pfx_watchdog+0x10/0x10 [ 1086.845739][ T43] ? __kthread_parkme+0x18c/0x230 [ 1086.845753][ T43] ? kthread+0x13a/0x450 [ 1086.845770][ T43] ? __pfx_watchdog+0x10/0x10 [ 1086.845784][ T43] kthread+0x370/0x450 [ 1086.845798][ T43] ? __pfx_kthread+0x10/0x10 [ 1086.845812][ T43] ret_from_fork+0x72b/0xd50 [ 1086.845826][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 1086.845840][ T43] ? __switch_to+0x800/0x10f0 [ 1086.845850][ T43] ? __pfx_kthread+0x10/0x10 [ 1086.845864][ T43] ret_from_fork_asm+0x1a/0x30 [ 1086.845884][ T43] [ 1086.845888][ T43] Sending NMI from CPU 0 to CPUs 2: [ 1086.886916][ C2] NMI backtrace for cpu 2 [ 1086.886931][ C2] CPU: 2 UID: 0 PID: 7227 Comm: kworker/u33:61 Not tainted syzkaller #0 PREEMPT(full) [ 1086.886943][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1086.886950][ C2] Workqueue: events_unbound toggle_allocation_gate [ 1086.886970][ C2] RIP: 0010:__sanitizer_cov_trace_pc+0x3f/0x70 [ 1086.886987][ C2] Code: 59 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 e9 91 84 b1 09 8b 82 24 17 00 00 85 c0 74 f1 8b 82 f8 16 00 00 <83> f8 02 75 e6 48 8b 8a 00 17 00 00 8b 92 fc 16 00 00 48 8b 01 48 [ 1086.886997][ C2] RSP: 0018:ffffc9000d86f9d8 EFLAGS: 00000246 [ 1086.887004][ C2] RAX: 0000000000000000 RBX: ffffffff826ddc6f RCX: ffffffff81ad12bf [ 1086.887010][ C2] RDX: ffff888023d48000 RSI: ffffffff81ad0248 RDI: ffffffff826ddc6f [ 1086.887016][ C2] RBP: ffffc9000d86fa70 R08: 0000000000000001 R09: 00000000000000cc [ 1086.887022][ C2] R10: 00000000000000e9 R11: 0000000000000000 R12: 0000000000000001 [ 1086.887027][ C2] R13: 0000000000000005 R14: dffffc0000000000 R15: 00000000000000e9 [ 1086.887033][ C2] FS: 0000000000000000(0000) GS:ffff888096df3000(0000) knlGS:0000000000000000 [ 1086.887063][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1086.887072][ C2] CR2: 000000008000f000 CR3: 000000000e994000 CR4: 0000000000352ef0 [ 1086.887093][ C2] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1086.887101][ C2] DR3: 00000000000f010e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1086.887107][ C2] Call Trace: [ 1086.887111][ C2] [ 1086.887114][ C2] text_poke+0x18/0xc0 [ 1086.887132][ C2] smp_text_poke_batch_finish+0x6b5/0xc60 [ 1086.887148][ C2] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 1086.887161][ C2] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1086.887177][ C2] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1086.887190][ C2] arch_jump_label_transform_apply+0x1c/0x30 [ 1086.887200][ C2] jump_label_update+0x37a/0x550 [ 1086.887213][ C2] static_key_enable_cpuslocked+0x1bc/0x270 [ 1086.887226][ C2] static_key_enable+0x1a/0x20 [ 1086.887237][ C2] toggle_allocation_gate+0xfe/0x2d0 [ 1086.887250][ C2] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1086.887263][ C2] ? rcu_is_watching+0x12/0xc0 [ 1086.887276][ C2] process_one_work+0xa23/0x1940 [ 1086.887293][ C2] ? __pfx_process_one_work+0x10/0x10 [ 1086.887309][ C2] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1086.887322][ C2] worker_thread+0x5ef/0xe50 [ 1086.887338][ C2] ? kthread+0x13a/0x450 [ 1086.887350][ C2] ? __pfx_worker_thread+0x10/0x10 [ 1086.887363][ C2] kthread+0x370/0x450 [ 1086.887376][ C2] ? __pfx_kthread+0x10/0x10 [ 1086.887388][ C2] ret_from_fork+0x72b/0xd50 [ 1086.887400][ C2] ? __pfx_ret_from_fork+0x10/0x10 [ 1086.887412][ C2] ? __switch_to+0x800/0x10f0 [ 1086.887420][ C2] ? __pfx_kthread+0x10/0x10 [ 1086.887433][ C2] ret_from_fork_asm+0x1a/0x30 [ 1086.887450][ C2] [ 1087.049439][ T43] Kernel panic - not syncing: hung_task: blocked tasks [ 1087.051642][ T43] CPU: 0 UID: 0 PID: 43 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1087.054459][ T43] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1087.057586][ T43] Call Trace: [ 1087.058647][ T43] [ 1087.059589][ T43] dump_stack_lvl+0x100/0x190 [ 1087.061101][ T43] vpanic+0x552/0x970 [ 1087.062371][ T43] ? __pfx_vpanic+0x10/0x10 [ 1087.063841][ T43] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 1087.065793][ T43] panic+0xd1/0xe0 [ 1087.066993][ T43] ? __pfx_panic+0x10/0x10 [ 1087.068335][ T43] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 1087.070178][ T43] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 1087.072097][ T43] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 1087.074017][ T43] ? watchdog.cold+0x1ec/0x234 [ 1087.075524][ T43] ? watchdog+0xcc1/0x1030 [ 1087.076934][ T43] watchdog.cold+0x1fd/0x234 [ 1087.078397][ T43] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1087.080235][ T43] ? __pfx_watchdog+0x10/0x10 [ 1087.081726][ T43] ? __kthread_parkme+0x18c/0x230 [ 1087.083335][ T43] ? kthread+0x13a/0x450 [ 1087.084681][ T43] ? __pfx_watchdog+0x10/0x10 [ 1087.086112][ T43] kthread+0x370/0x450 [ 1087.087423][ T43] ? __pfx_kthread+0x10/0x10 [ 1087.088888][ T43] ret_from_fork+0x72b/0xd50 [ 1087.090355][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 1087.091985][ T43] ? __switch_to+0x800/0x10f0 [ 1087.093486][ T43] ? __pfx_kthread+0x10/0x10 [ 1087.094960][ T43] ret_from_fork_asm+0x1a/0x30 [ 1087.096477][ T43] [ 1087.098010][ T43] Kernel Offset: disabled [ 1087.099379][ T43] Rebooting in 86400 seconds..