last executing test programs: 27m28.988964622s ago: executing program 32 (id=131): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b400000000000000006400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv6_getroute={0x30, 0x1a, 0x400, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x7, 0xfe, 0x1, 0xfd, 0xb, 0x800}, [@RTA_IIF={0x8}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_FLAGS={0x6, 0x6, 0x10}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4814}, 0xa0) 27m26.799305365s ago: executing program 33 (id=156): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x45, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/dynamic_events\x00', 0x40000, 0x0) read(r0, &(0x7f0000000200)=""/256, 0x100) 25m14.933068463s ago: executing program 5 (id=367): r0 = socket(0x10, 0x803, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x40090) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24040084) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r6, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 25m12.819497394s ago: executing program 5 (id=370): r0 = socket$netlink(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000600034000010000080007"], 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x40040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) 25m10.809267812s ago: executing program 5 (id=373): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x11, 0x0, 0x0) 25m8.922048938s ago: executing program 5 (id=377): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 25m8.597728236s ago: executing program 5 (id=380): socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = getpid() ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x1, 0x5002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4204, r4, 0x2, 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x49) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 25m5.870867682s ago: executing program 5 (id=384): write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) r2 = openat(0xffffffffffffff9c, &(0x7f0000001040)='./file1\x00', 0x250942, 0x50) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000900, 0x0, 0x0) 24m50.429516515s ago: executing program 34 (id=384): write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) r2 = openat(0xffffffffffffff9c, &(0x7f0000001040)='./file1\x00', 0x250942, 0x50) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000900, 0x0, 0x0) 21m4.623849013s ago: executing program 1 (id=890): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000004100)={0x2020}, 0x2020) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x40}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) socket(0x400000000010, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000003000000050007"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc, 0x4}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfd47}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) 20m54.106465227s ago: executing program 1 (id=901): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r0) write(0xffffffffffffffff, &(0x7f0000000400)='0x5678', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='0\n', 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000a40)=0xe4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='3\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000001600)='usbip-vudc.0', 0xc) 20m48.277760718s ago: executing program 1 (id=903): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = inotify_init() r3 = socket(0xa, 0x3, 0x3a) r4 = io_uring_setup(0x7a17, &(0x7f00000003c0)={0x0, 0xf8fd, 0x80, 0x0, 0xc1, 0x0, r1}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000440)={0x48, r2, 0x1, {0x1, 0xdc64}, 0xff}, 0x1) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r6, 0x40047459, 0xfffffffffffffffd) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) close_range(r2, 0xffffffffffffffff, 0x0) 20m45.197024793s ago: executing program 1 (id=907): mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x4001, 0x0) pipe(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/kcm\x00') ppoll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x4a0}, {0xffffffffffffffff, 0x480}, {0xffffffffffffffff, 0x505}], 0x3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getpid() r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000011) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, r2, 0x0, &(0x7f00007d4000/0x4000)=nil, 0x4000, 0x4000000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) 20m43.882385004s ago: executing program 1 (id=912): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x40, 0x101000) io_setup(0x9, &(0x7f0000000180)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000000c0)={0xc0c, 0x2, 0x6, 0x7fff, 0xf, "0100216a00ce6bab0ad4e2500300"}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000001c0)={0x0, 0x80000, 0x0, 0x2, 0x18, "00000000000700000000fffe00"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000240)=0x1) 20m41.96876519s ago: executing program 1 (id=914): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) fsopen(0x0, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x2) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000028fffe00009506907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c020008907810050000000000000040005600002d226905531de156c8ecefbaecbc06add46e8a3d97a47e75e224d3858e1494d970d9e00fd3e79c9939f75883aee0a185a4e2"], 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) 20m26.806354407s ago: executing program 35 (id=914): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) fsopen(0x0, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x2) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000028fffe00009506907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c020008907810050000000000000040005600002d226905531de156c8ecefbaecbc06add46e8a3d97a47e75e224d3858e1494d970d9e00fd3e79c9939f75883aee0a185a4e2"], 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) 17m41.093042673s ago: executing program 6 (id=1143): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) time(0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r7, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r6, 0x0, r5, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x1b) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) connect$inet6(r3, 0x0, 0x0) 17m37.032826862s ago: executing program 6 (id=1148): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone(0x10800100, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) 17m35.547045297s ago: executing program 6 (id=1149): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) sendmmsg(r1, &(0x7f0000007640)=[{{0x0, 0x0, &(0x7f0000000980)}}], 0x1, 0x20000000) 17m21.317199821s ago: executing program 6 (id=1166): openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r0 = socket$rxrpc(0x21, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='vfat\x00', 0x208000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0) alarm(0x8) listen(r0, 0x0) 17m16.591845596s ago: executing program 6 (id=1170): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) syz_clone(0x10800100, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0x40104d05, &(0x7f0000000900)="0000010000000000000001") ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000000c0)={0xc, 0x1, 0x100}) 17m12.509986624s ago: executing program 6 (id=1172): socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000180)=0x800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000080)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x39, 0x9}}, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8, &(0x7f0000006680)) r6 = timerfd_create(0x1, 0x800) timerfd_gettime(r6, &(0x7f0000000180)) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0xc0844123, &(0x7f00000001c0)) close_range(r2, 0xffffffffffffffff, 0x0) 16m57.37280992s ago: executing program 36 (id=1172): socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000180)=0x800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000080)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x39, 0x9}}, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8, &(0x7f0000006680)) r6 = timerfd_create(0x1, 0x800) timerfd_gettime(r6, &(0x7f0000000180)) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0xc0844123, &(0x7f00000001c0)) close_range(r2, 0xffffffffffffffff, 0x0) 15m25.441273252s ago: executing program 7 (id=1377): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x2}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x0, 0xfa00, {0xffffffffffffffff, 0xc068}}, 0x10) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) sendmmsg(r1, &(0x7f0000007640)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000440)='#', 0x1}], 0x1}}], 0x1, 0x20000000) 15m22.729175828s ago: executing program 7 (id=1380): r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x102) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x18, 0x2, 0xec, 0x300, 0x0}) 15m22.071061194s ago: executing program 7 (id=1382): r0 = semget$private(0x0, 0x1, 0x400) semop(r0, &(0x7f00000001c0)=[{0x1, 0x7, 0x1000}], 0x1) semtimedop(0x0, &(0x7f0000000340)=[{0x0, 0x1, 0x1000}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) get_robust_list(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000380)=""/71, 0x47}], 0x1, 0x15c, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={@empty, @multicast1, 0x8, 0x7}}) sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) socket$rds(0x15, 0x5, 0x0) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10002) r5 = syz_socket_connect_nvme_tcp() recvmsg$inet_nvme(r5, &(0x7f0000000280)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/73, 0x49}, {0x0}], 0x2, &(0x7f0000000180)=""/224, 0xe0}, 0x0) 15m21.110999757s ago: executing program 7 (id=1387): mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x4001, 0x0) pipe(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/kcm\x00') ppoll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x480}, {0xffffffffffffffff, 0x505}], 0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getpid() r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000011) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, r2, 0x0, &(0x7f00007d4000/0x4000)=nil, 0x4000, 0x4000000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) 15m17.7152551s ago: executing program 7 (id=1390): setns(0xc9, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x80002, 0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300776c616e30000000000000000000000012e0531f7ad3f42c20e32eb771db8200a8a19e6053163f3d4262"], 0x38}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000041401000000000002000000080001000000000008000300"], 0x20}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000580)=@urb_type_iso={0x0, {0xc, 0x1}, 0x80, 0x80, &(0x7f0000000480)="a13eca", 0x3, 0x800, 0x9, 0xe, 0xffff0000, 0x7fff, &(0x7f0000000540)="8543708a62ac599adcfb826ce2e1c99e5a34dfb04f91e6f2e7d1", [{0x0, 0x51a6, 0xb6}, {0x6, 0xdbd, 0x2}, {0x7ff, 0xfffffffd, 0x250bc75a}, {0x2, 0x9, 0x80000000}, {0x7ccf, 0x5, 0x8}, {0x1ff, 0x3, 0xffffffa8}, {0x0, 0x1, 0x5}, {0x1, 0x8, 0x3}, {0x2, 0x8, 0x4}, {0xffff, 0x8, 0x59b}, {0xdcae, 0x3, 0x6}, {0x941, 0x30, 0xfffffffd}, {0x400, 0x5, 0x2}, {0x4, 0xffffffff, 0x2}]}) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa1798b1747472e26, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x1f0, 0x288, 0x158, 0x0, 0x98, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0xff, 0x0, 'pim6reg0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x158}}, {{@ip={@rand_addr=0x64010100, @local, 0x0, 0x0, 'pim6reg1\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x3, 0x40}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0xfe, 0x7}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x33, 0x3}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'ip6tnl0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x4, 0x5}, {0x0, 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) close(r0) 15m15.267928599s ago: executing program 7 (id=1393): r0 = socket$inet_icmp(0x2, 0x2, 0x1) close(r0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000016c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@local}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x8}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r4, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe372, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xffff0f66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x2, 0xe7f, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7b7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc063, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x80100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002, 0x200000, 0x0, 0x0, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xded, 0x0, 0x0, 0xfffffffd, 0x4], 0x1, 0x400}) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="814c8d"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)=[0x5], 0x0, 0x0, 0x1}}, 0x40) syz_open_dev$tty1(0xc, 0x4, 0x1) dup(0xffffffffffffffff) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) 14m56.757980066s ago: executing program 37 (id=1393): r0 = socket$inet_icmp(0x2, 0x2, 0x1) close(r0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000016c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@local}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x8}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d31ce0108dc556e597655ba11bacc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141fa4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb67c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff4da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3041969534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb75e83eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038433b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033b65ccd4e990cb2ba86ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02de325f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aebe4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f62cfb5800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r4, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe372, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xffff0f66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x2, 0xe7f, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7b7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc063, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x80100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002, 0x200000, 0x0, 0x0, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xded, 0x0, 0x0, 0xfffffffd, 0x4], 0x1, 0x400}) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="814c8d"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)=[0x5], 0x0, 0x0, 0x1}}, 0x40) syz_open_dev$tty1(0xc, 0x4, 0x1) dup(0xffffffffffffffff) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) 11m32.411350238s ago: executing program 8 (id=1775): socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x10}}], 0x30}, 0x80) r6 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r6, 0x0, &(0x7f0000000080)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0x1, 0xb06, 0x0, 0x0, 0x1000, 0xffffffff, r5, 0x0, 0x180}}}, &(0x7f0000000180)=0x0) syz_ublk_setup_queues(r8, r9, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x8000, 0x1000002, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xda0c, 0x0, 0x9, 0x403aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x801f70, 0x200, 0x40040001, 0x1c9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 11m29.320275843s ago: executing program 8 (id=1779): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x2}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x0, 0xfa00, {0xffffffffffffffff, 0xc068}}, 0x10) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) sendmmsg(r1, &(0x7f0000007640)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000440)='#', 0x1}], 0x1}}], 0x1, 0x20000000) 11m26.244107509s ago: executing program 8 (id=1782): io_setup(0x1, 0x0) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x9}]) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, 0x0, 0x880) openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) 11m25.444087399s ago: executing program 8 (id=1784): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0) 11m24.521096911s ago: executing program 8 (id=1787): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone(0x10800100, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) 11m17.797149166s ago: executing program 8 (id=1793): syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback=0x7f000015}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x4}]}, 0x44}}, 0x8800) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c650000"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x10001, "28545781a45da9098d5e47146de09627"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) 11m2.380407135s ago: executing program 38 (id=1793): syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback=0x7f000015}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x4}]}, 0x44}}, 0x8800) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c650000"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x10001, "28545781a45da9098d5e47146de09627"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) 8m24.16485921s ago: executing program 3 (id=2053): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0xc0, 0x0, 0x10000}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x9, 0xfffffffffffffffd, 0x77, 0x0, 0x3, 0xc002004c4, 0x4000001004, 0x6, 0x8, 0x4000000000000000, 0x1, 0x366817b8, 0x2800000000000000, 0x5, 0x2000d30], 0xffffffff, 0x3013d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m23.668815532s ago: executing program 3 (id=2055): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) 8m20.866485131s ago: executing program 3 (id=2057): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x2}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x0, 0xfa00, {0xffffffffffffffff, 0xc068}}, 0x10) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) sendmmsg(r1, &(0x7f0000007640), 0x0, 0x20000000) 8m20.001152022s ago: executing program 3 (id=2061): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x8, 0x5, 0x5) syz_ublk_setup_io_uring(0x1b1e, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000480)=""/179, 0xb3}], 0x1, 0x4f, 0x0) 8m18.154293678s ago: executing program 3 (id=2063): semget$private(0x0, 0x1, 0x400) semtimedop(0x0, &(0x7f0000000340)=[{0x0, 0x1, 0x1000}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) get_robust_list(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000380)=""/71, 0x47}], 0x1, 0x15c, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x20000) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={@empty, @multicast1, 0x8, 0x7}}) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) socket$rds(0x15, 0x5, 0x0) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10002) r4 = syz_socket_connect_nvme_tcp() recvmsg$inet_nvme(r4, &(0x7f0000000280)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/73, 0x49}, {0x0}], 0x2, &(0x7f0000000180)=""/224, 0xe0}, 0x0) 8m16.889172199s ago: executing program 3 (id=2067): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x200040c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 7m59.577052724s ago: executing program 39 (id=2067): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x200040c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 23.439994244s ago: executing program 9 (id=2731): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8402, 0x0) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, 0x0) 22.080587498s ago: executing program 0 (id=2736): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) openat$ptp0(0xffffff9c, 0x0, 0x2000, 0x0) 18.249106661s ago: executing program 0 (id=2738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0xc040) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c000280050001000000000018"], 0x50}}, 0x200040d1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000000012080001"], 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0xc0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 15.911882009s ago: executing program 0 (id=2740): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x501, 0x0, 0x25dfdbfb, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x44}}, 0x40848c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x20004000) 15.817136391s ago: executing program 4 (id=2741): mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, 0xffffffffffffffff, 0xffffffffffffc000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x44}}, 0x40848c0) 15.601933747s ago: executing program 0 (id=2743): socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) syz_open_procfs(0x0, &(0x7f0000000880)='mountinfo\x00') r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffff3c, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x4) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0) 15.573620857s ago: executing program 4 (id=2744): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [{{0x254, 0x1, {{0x2, 0x200}, 0x80, 0x9, 0x4, 0x1, 0x16, 'syz1\x00', "9f95cf5a03ab4df3f0f3d0941074d2f18faf184d23b6cf52e8c676c218b39b33", "5a19d528faa003da54c821603e499a3e11b3efe2be7aafa9680b20a26883ac0a", [{0x864b, 0x6, {0x2, 0x3ff}}, {0x3, 0x3, {0x2, 0x3}}, {0x2, 0x28, {0x3, 0x286d4ad5}}, {0x7, 0xfff8, {0x1, 0x1}}, {0x9d40, 0x2, {0x1, 0x8}}, {0xca, 0xc4f2, {0x3, 0xe02f}}, {0xfffa, 0x17, {0x3, 0x80}}, {0x9, 0x8001, {0x1, 0x3}}, {0x2, 0x9, {0x1, 0xfffffffd}}, {0x200, 0x3, {0x0, 0x4}}, {0x7, 0x80, {0x3, 0x8}}, {0xb1, 0x0, {0x1, 0x5}}, {0x1, 0x2dc, {0x3, 0x3}}, {0xffff, 0x8, {0x3, 0x9}}, {0x9, 0x96}, {0x2, 0x2, {0x1, 0x9}}, {0x6, 0x7, {0x2, 0x3}}, {0x5, 0x5, {0x1, 0x67}}, {0xffd6, 0x1d97, {0x3}}, {0x8, 0xdb4d, {0x2, 0xffffffff}}, {0x3, 0x7fff, {0x0, 0x2}}, {0x401, 0xc, {0x3, 0x10001}}, {0x21, 0x9, {0x2, 0x2}}, {0x3, 0x6, {0x3, 0x5}}, {0x2, 0x200, {0x3, 0x5}}, {0x7, 0x1, {0x2, 0xa6}}, {0x3, 0x101, {0x3, 0x7}}, {0x2, 0x1, {0x3, 0xffffffff}}, {0x6, 0x81, {0x0, 0x6}}, {0xd, 0xc3e, {0x2, 0x1}}, {0x0, 0x84d, {0x1, 0x1}}, {0x5, 0x65, {0x0, 0xfffffffb}}, {0x7, 0x4, {0x2, 0x1}}, {0x1, 0x40, {0x0, 0x1}}, {0xfed9, 0x6, {0x3, 0x1}}, {0x40, 0x6, {0x1, 0xff800000}}, {0x370d, 0x800, {0x1, 0x4}}, {0x101, 0x8, {0x3, 0x14fd}}, {0x5, 0x3, {0x2}}, {0x401, 0x5, {0x3, 0x2}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sync_file_range(0xffffffffffffffff, 0xc, 0x2000000006, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$BLKCRYPTOGENERATEKEY(r4, 0xc030128a, &(0x7f0000000400)={&(0x7f00000003c0)=""/59, 0x3b}) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) memfd_create(&(0x7f0000000000)='@,-&,$\x00', 0x20000007) ioctl$EVIOCGUNIQ(r6, 0x80404508, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) 15.352126633s ago: executing program 0 (id=2745): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", "00004702", "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r3) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r3, 0xc0805841, &(0x7f0000000240)={0xee, 0x81, 0x3, 0x7, 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7ffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r8, 0x403c6f2b, &(0x7f0000000340)={0x4, {"1b1b0f8ff5d2ab6993de03e5086dc4ac", "7e538a29ac7c640a211778a835dcf2d1", "aca3cb50f4abd3fce0d088f9d45d1ef3"}, 0x51a}) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300)) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4}) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) sendto$packet(r1, &(0x7f00000002c0)="05031620d3fc141100004788031c09102c28", 0x12, 0x4, 0x0, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x6, 0x9, 0x9, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f00000001c0)={0x1, 0x5453, 0xe, 0xffff, 0x0, 0x3, "e77a52b50e78f1e2cf9c2a2315bef545", 0x1, 0xa, 0x2, 0xb, 0x52, 0x6, 0x6b}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x15, 0x0, 0x3, 0x3000006, 'U\x00', "1575a859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "000400000000000000000040", "fa0700f22b42a3023be516d1"]}) 15.351611433s ago: executing program 9 (id=2746): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) openat$ptp0(0xffffff9c, 0x0, 0x2000, 0x0) 11.542461846s ago: executing program 9 (id=2748): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) memfd_create(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$KVM_GET_XSAVE2(r3, 0x9000aecf, &(0x7f0000eaa000/0x1000)=nil) 11.057119698s ago: executing program 4 (id=2750): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x8, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 9.571853714s ago: executing program 9 (id=2751): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x501, 0x0, 0x25dfdbfb, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x44}}, 0x40848c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x20004000) 9.445505648s ago: executing program 2 (id=2752): mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, 0xffffffffffffffff, 0xffffffffffffc000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r1}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x44}}, 0x40848c0) 7.541283804s ago: executing program 0 (id=2753): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x40000000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6000, 0x0, 0x0, r8, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x28, 0x2, 0x1030, 0x4, 0x0, 0xfffffffc}}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x105842, 0xa9) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) 7.211700623s ago: executing program 2 (id=2754): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 7.104434425s ago: executing program 9 (id=2755): fsopen(0x0, 0x0) socket(0x2, 0x3, 0xff) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x10000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000100)=0x4, 0x4) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000000c0)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000108)=0x4, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f000000010c)=0x4, 0x4) bind$xdp(r5, &(0x7f0000000200)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1100000004000000040000000400000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000071d21cf5ef0b9b580a8e566942262ca09c30f0df08a8e0b4727f6d8efa87"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r6, &(0x7f0000000440)='\x00\x00\x00\x00', &(0x7f0000000480)=@udp=r5}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000600)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 7.091810906s ago: executing program 4 (id=2756): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x800142, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) unlink(0x0) close(0x3) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) mount$bpf(0x0, &(0x7f0000000440)='./file0/file2\x00', 0x0, 0x21040, 0x0) 6.961039209s ago: executing program 2 (id=2757): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000480)={0x68000005}) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, &(0x7f0000000180), &(0x7f00000001c0)={[0x8]}, 0x8) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e200000000", 0x1d) r4 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000019080)=0x1) socket$inet(0x2, 0xa, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x101}, &(0x7f0000000140)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5.639661441s ago: executing program 9 (id=2758): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0xf0f003, 0x2}) 3.999405422s ago: executing program 4 (id=2759): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000006000000000000000703000095290a0000000000"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x183003) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f00000011c0)=""/230) ptrace(0x10, r1) ptrace$peekuser(0x3, r1, 0x380) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r3) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r7 = fsopen(&(0x7f0000000040)='afs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000001c0)='source', 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000180)=0x6f) r9 = dup2(r8, r8) read$FUSE(r9, &(0x7f0000002780)={0x2020}, 0x2020) socket$kcm(0x10, 0x2, 0x0) 3.801474666s ago: executing program 2 (id=2760): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100, 0x0, 0x4000000}, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xdc, 0x0, 0x0, 0x1000, 0x81, 0x0, 0x0, 0x20}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r4, &(0x7f0000000200)={0x0, 0x1460, 0x10700, 0x0, 0x35a, 0x0, r0}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x4000, 0x3, 0x7e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20007682, 0x20000, 0xe, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbea7, 0x8, 0x2, 0x9c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6886, 0x5200, 0x2, 0x821b}}], 0x4, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x6) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) cachestat(r6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f00000002c0)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a05f0a"], 0xfe33) r10 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) r11 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x8916, &(0x7f0000000000)={r11}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={r11}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="61128c00000000006113300000000000bf300000000000002500070007ffffffbd0201000000000095002000000000006916320000000000bf6700000000000007070000b964b01a4607feff00200000540700000ee60090bf050000000000000c5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f055af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6901fcecc8158f0200000000c8fb735fd552bdc268694aeb0763f65e439ec1120843e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3abd5dedd3f7d2cf5834f2af97787f696649a46e17e090000000000000045eac1720e83b7838e3eede14308d582685e1becd6f35154bcb400000000000000000000008129277dc467148670ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbfea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f14c3f2ed6c64ec90000022d600000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca51c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233ba3d4ce26ed703dcb9fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c17d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be6910023a26faea764fae160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7beecaaa61e7a726571df5cf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da046c7aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ce27e134548032a307871cea4c89d4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b8748d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b25055e786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc136464025013665b1cf26a863a5cb3e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a56c4f3f265a09628878040000000000000017b68afd95d4abd79286692439ee7acca2adc3d83d72b1b778e30c2bf2efbbcd054cf51f5705eb0faa8a0d9f18135cb1d8d567c3436fa697b72c5035d98b9e4f7f3379c0b3339debc78352b2e65299223d7ef2bd540e78167a3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586331eb5995d2288a167b7c6b20b32116b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22db669560d296287c13c92070000ee7553eb2df17a39542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c887081c8d320642389f5f0c42dba0ff75a257310f2d92cb1d1e16468949f5675262ee6609cf26ae4a8f5eac0ebf318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0f72c4a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1a706ec201eedfa5fbdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee8072d1f88cb781e4cdb04af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98c5a471f3521956f8da6a4ccf2071095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5a071ba22251e2de8bac16e79da9c2444d52facb7ab49420900000000000000f888a94365b99b72796fde1b922fc9ae09b526efca65faf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837be14d6a483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c79c846e403910bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be0000fdde69c350e59f11f1d26a4d04d8c8b2c4a4d23ee931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f647e1f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680faa8cf38dbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705113a5ce1c99193886d6008d3565b00000000000000000000000000000000001c260fc175785ca04e31790f542c0f17b6599e93134792eae9878638b299e1d2b38d367be0d5c99d179c6bde265caebbae48bae74338f9d4f12f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) r12 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') preadv(r12, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r13) sendmsg$ETHTOOL_MSG_DEBUG_SET(r13, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 1.841428144s ago: executing program 2 (id=2761): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 44.955469ms ago: executing program 4 (id=2762): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", "00004702", "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r3) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r3, 0xc0805841, &(0x7f0000000240)={0xee, 0x81, 0x3, 0x7, 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7ffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r8, 0x403c6f2b, &(0x7f0000000340)={0x4, {"1b1b0f8ff5d2ab6993de03e5086dc4ac", "7e538a29ac7c640a211778a835dcf2d1", "aca3cb50f4abd3fce0d088f9d45d1ef3"}, 0x51a}) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300)) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4}) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031620d3fc141100004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$CEC_TRANSMIT(r0, 0xc0386105, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f00000001c0)={0x1, 0x5453, 0xe, 0xffff, 0x0, 0x3, "e77a52b50e78f1e2cf9c2a2315bef545", 0x1, 0xa, 0x2, 0xb, 0x52, 0x6, 0x6b}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x15, 0x0, 0x3, 0x3000006, 'U\x00', "1575a859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "000400000000000000000040", "fa0700f22b42a3023be516d1"]}) 0s ago: executing program 2 (id=2763): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af151000000000000000500000000000100", 0x1c}], 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xc, 0x143182) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, r7, 0x25, 0x2, @val=@perf_event={0x429}}, 0x18) close_range(r5, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[], 0x20000}, 0x1, 0x0, 0x0, 0x8000000}, 0x20000080) kernel console output (not intermixed with test programs): IPVS: using max 26 ests per chain, 62400 per kthread [ 1014.010738][T12725] netlink: 'syz.8.1532': attribute type 1 has an invalid length. [ 1014.215802][T12725] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1014.256709][T12723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1534'. [ 1014.315739][T12718] bond1: (slave geneve2): making interface the new active one [ 1014.464593][T12718] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1015.264465][T12736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1537'. [ 1015.781423][T11912] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1016.029912][T11912] usb 9-1: config 0 has an invalid interface number: 50 but max is 0 [ 1016.099595][T11912] usb 9-1: config 0 has no interface number 0 [ 1016.133843][T11912] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1016.219334][T11912] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1016.271134][T11912] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.397460][T11912] usb 9-1: Product: syz [ 1016.439212][T11912] usb 9-1: Manufacturer: syz [ 1016.474433][T11912] usb 9-1: SerialNumber: syz [ 1016.534722][T11912] usb 9-1: config 0 descriptor?? [ 1016.578875][T11912] yurex 9-1:0.50: Could not find endpoints [ 1016.817684][ T177] usb 9-1: USB disconnect, device number 7 [ 1018.938683][T12789] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1020.929294][T12795] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1549'. [ 1021.634339][T12804] autofs4:pid:12804:autofs_fill_super: called with bogus options [ 1021.862830][T12814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1553'. [ 1022.818807][T10529] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1023.393582][T12839] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1560'. [ 1023.418299][T12838] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1023.510702][T10529] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1023.528875][T10529] usb 3-1: config 0 has no interface number 0 [ 1023.554217][T10529] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1023.596730][T10529] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1023.618226][T10529] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.641459][T10529] usb 3-1: Product: syz [ 1023.662142][T10529] usb 3-1: Manufacturer: syz [ 1023.675617][T10529] usb 3-1: SerialNumber: syz [ 1023.696247][T10529] usb 3-1: config 0 descriptor?? [ 1023.718121][T10529] yurex 3-1:0.50: Could not find endpoints [ 1023.950389][T10529] usb 3-1: USB disconnect, device number 25 [ 1024.075077][T12852] autofs4:pid:12852:autofs_fill_super: called with bogus options [ 1026.928795][T12869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1566'. [ 1026.938574][T12869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1566'. [ 1026.948170][T12869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1566'. [ 1026.957520][T12869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1566'. [ 1026.966612][T12869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1566'. [ 1028.047705][T12883] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1570'. [ 1028.241354][T12887] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1028.373073][T12889] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1572'. [ 1028.986869][T12901] binder_alloc: 12900: binder_alloc_buf, no vma [ 1029.119563][T11912] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1029.190846][T12905] fuse: Bad value for 'fd' [ 1029.331761][T11912] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 1029.421102][T12909] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1577'. [ 1029.435205][T12909] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1577'. [ 1029.444647][T12909] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1577'. [ 1029.465706][T11912] usb 5-1: config 0 has no interface number 0 [ 1029.516060][T11912] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1029.587611][T11912] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1029.693902][T11912] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1029.741115][T11912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.760723][T12914] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1029.804744][T11912] usb 5-1: Product: syz [ 1029.827098][T11912] usb 5-1: Manufacturer: syz [ 1029.862112][T11912] usb 5-1: SerialNumber: syz [ 1029.913533][T11912] usb 5-1: config 0 descriptor?? [ 1029.955131][T11912] yurex 5-1:0.50: Could not submitting URB [ 1029.996679][T11912] yurex: probe of 5-1:0.50 failed with error -5 [ 1030.581136][T11912] usb 5-1: USB disconnect, device number 27 [ 1031.224449][T12931] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1032.152160][T12945] __nla_validate_parse: 2 callbacks suppressed [ 1032.152204][T12945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1585'. [ 1033.357531][T12956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1586'. [ 1033.374524][T12956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1586'. [ 1033.384122][T12956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1586'. [ 1033.393490][T12956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1586'. [ 1033.403238][T12956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1586'. [ 1033.737448][T12960] netlink: 'syz.2.1587': attribute type 1 has an invalid length. [ 1033.797859][T12960] netlink: 'syz.2.1587': attribute type 2 has an invalid length. [ 1034.057235][T12964] syzkaller0: entered promiscuous mode [ 1034.086243][T12964] syzkaller0: entered allmulticast mode [ 1034.595224][T12970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1590'. [ 1034.634200][T12973] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1035.348421][T12984] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1035.399254][ T5762] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1035.615103][ T5762] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 1035.774138][T12988] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1594'. [ 1035.825891][ T5762] usb 5-1: config 0 has no interface number 0 [ 1035.858776][ T5762] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1036.249592][ T5762] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1036.326612][ T5762] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1036.366807][ T5762] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.409320][ T5762] usb 5-1: Product: syz [ 1036.437825][ T5762] usb 5-1: Manufacturer: syz [ 1036.486546][ T5762] usb 5-1: SerialNumber: syz [ 1036.533230][ T5762] usb 5-1: config 0 descriptor?? [ 1036.577537][ T5762] yurex 5-1:0.50: Could not submitting URB [ 1036.611815][ T5762] yurex: probe of 5-1:0.50 failed with error -5 [ 1036.831809][ T5782] usb 5-1: USB disconnect, device number 28 [ 1037.869102][ T5849] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1040.399310][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.467645][T13014] syzkaller0: entered promiscuous mode [ 1040.474389][ T5849] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1040.514801][T13014] syzkaller0: entered allmulticast mode [ 1040.527884][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.582580][ T5849] usb 5-1: config 0 descriptor?? [ 1040.681568][ T5849] usb 5-1: can't set config #0, error -71 [ 1040.890159][ T5849] usb 5-1: USB disconnect, device number 29 [ 1041.190882][T13022] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1601'. [ 1041.307303][T13027] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1041.849965][T13035] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1042.738992][ T5762] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1042.846922][T13050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1607'. [ 1043.094918][ T5762] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 1043.223525][ T5762] usb 5-1: config 0 has no interface number 0 [ 1043.241383][ T5762] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1043.287061][ T5762] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1043.383407][ T5762] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1043.436819][ T5762] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.471034][ T5762] usb 5-1: Product: syz [ 1043.503134][ T5762] usb 5-1: Manufacturer: syz [ 1043.524738][ T5762] usb 5-1: SerialNumber: syz [ 1043.575509][ T5762] usb 5-1: config 0 descriptor?? [ 1043.623768][ T5762] yurex 5-1:0.50: Could not submitting URB [ 1043.668728][ T5762] yurex: probe of 5-1:0.50 failed with error -5 [ 1043.851681][ T5762] usb 5-1: USB disconnect, device number 30 [ 1047.207602][T13063] syzkaller0: entered promiscuous mode [ 1047.246474][T13063] syzkaller0: entered allmulticast mode [ 1047.732095][T13073] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1612'. [ 1047.928747][T13079] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1049.290659][T13095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1618'. [ 1049.767392][ T5782] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1051.985054][ T177] IPVS: starting estimator thread 0... [ 1052.051570][ T5782] usb 9-1: config 0 has an invalid interface number: 50 but max is 0 [ 1052.098751][ T5782] usb 9-1: config 0 has no interface number 0 [ 1052.109190][T13108] IPVS: using max 26 ests per chain, 62400 per kthread [ 1052.160539][ T5782] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1052.254313][ T5782] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1052.291943][ T5782] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.338425][ T5782] usb 9-1: Product: syz [ 1052.444367][ T5782] usb 9-1: Manufacturer: syz [ 1052.474837][ T5782] usb 9-1: SerialNumber: syz [ 1052.533103][ T5782] usb 9-1: config 0 descriptor?? [ 1052.612427][ T5782] usb 9-1: can't set config #0, error -71 [ 1052.721700][ T5782] usb 9-1: USB disconnect, device number 8 [ 1053.224386][T13124] syzkaller0: entered promiscuous mode [ 1053.252549][T13124] syzkaller0: entered allmulticast mode [ 1055.217487][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1626'. [ 1055.582464][T13144] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1055.620846][ T5849] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1059.578590][ T5849] usb 5-1: device descriptor read/64, error -71 [ 1059.618237][T13166] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1633'. [ 1059.628122][T13166] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1633'. [ 1059.637877][T13166] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1633'. [ 1059.647300][T13166] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1633'. [ 1059.799767][T13172] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1634'. [ 1059.884573][T13171] syzkaller0: entered promiscuous mode [ 1059.938978][ T5849] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1060.170294][T13171] syzkaller0: entered allmulticast mode [ 1060.205362][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.215013][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.393016][ T5849] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 1060.456563][ T5849] usb 5-1: config 0 has no interface number 0 [ 1060.493960][ T5849] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1060.588758][ T5849] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1060.651501][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.694365][ T5849] usb 5-1: Product: syz [ 1060.720533][ T5849] usb 5-1: Manufacturer: syz [ 1060.763014][ T5849] usb 5-1: SerialNumber: syz [ 1060.785485][ T5849] usb 5-1: config 0 descriptor?? [ 1060.835916][ T5849] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 1061.081968][T10529] usb 5-1: USB disconnect, device number 32 [ 1061.126878][T10529] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 1061.859669][T13200] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1063.024841][T13214] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1644'. [ 1065.602760][T13222] syzkaller0: entered promiscuous mode [ 1065.608387][T13222] syzkaller0: entered allmulticast mode [ 1066.271302][T13238] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1650'. [ 1066.309142][T10529] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1066.533195][T10529] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1066.779481][T10529] usb 3-1: config 0 has no interface number 0 [ 1066.825465][T10529] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1066.940277][T10529] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1066.983057][T10529] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.037339][T10529] usb 3-1: Product: syz [ 1067.054809][T10529] usb 3-1: Manufacturer: syz [ 1067.077245][T10529] usb 3-1: SerialNumber: syz [ 1067.111912][T10529] usb 3-1: config 0 descriptor?? [ 1067.193003][T10529] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 1067.975278][T13253] Bluetooth: MGMT ver 1.22 [ 1068.014748][ T5762] usb 3-1: USB disconnect, device number 26 [ 1068.054881][ T5762] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 1068.299804][T13256] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1070.998249][T13275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1658'. [ 1071.062640][T13275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1658'. [ 1074.543199][T13301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1665'. [ 1074.609663][ T5762] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1074.790716][T13303] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1075.113737][ T5762] usb 9-1: config 0 has an invalid interface number: 50 but max is 0 [ 1075.353013][ T5762] usb 9-1: config 0 has no interface number 0 [ 1075.606136][ T5762] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1075.819669][ T5762] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1075.876868][ T5762] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.938998][ T5762] usb 9-1: Product: syz [ 1075.963768][ T5762] usb 9-1: Manufacturer: syz [ 1075.968454][ T5762] usb 9-1: SerialNumber: syz [ 1076.028101][ T5762] usb 9-1: config 0 descriptor?? [ 1076.087071][ T5762] yurex 9-1:0.50: USB YUREX device now attached to Yurex #0 [ 1076.335293][ T5762] usb 9-1: USB disconnect, device number 9 [ 1077.719253][T13317] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1668'. [ 1077.941535][T13319] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1668'. [ 1077.959531][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 1078.008587][ T5762] yurex 9-1:0.50: USB YUREX #0 now disconnected [ 1083.886201][T13359] syz.4.1675: attempt to access beyond end of device [ 1083.886201][T13359] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1085.618994][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 1085.619034][ T28] audit: type=1326 audit(1786079732.922:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13357 comm="syz.2.1676" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87feb9e0d9 code=0x0 [ 1086.206544][T13359] FAT-fs (nbd4): unable to read boot sector [ 1086.339057][ T5849] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1087.899087][T13370] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1678'. [ 1088.014531][T13369] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1678'. [ 1088.335088][T13376] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1088.390796][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1679'. [ 1092.608622][ T28] audit: type=1326 audit(1786079739.932:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.2.1688" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87feb9e0d9 code=0x0 [ 1093.338825][T13429] syz.4.1689: attempt to access beyond end of device [ 1093.338825][T13429] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1095.661228][T13429] FAT-fs (nbd4): unable to read boot sector [ 1098.099459][T13439] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 1098.169056][T13459] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1691'. [ 1098.252566][T13455] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1691'. [ 1098.267848][T13454] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1101.371369][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1695'. [ 1104.072732][ T28] audit: type=1326 audit(1786079751.402:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13485 comm="syz.4.1698" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8ac99e0d9 code=0x0 [ 1105.242919][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1703'. [ 1105.252906][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1703'. [ 1105.263137][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1703'. [ 1105.272419][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1703'. [ 1105.356038][T13508] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1109.110571][T13517] syz.9.1706: attempt to access beyond end of device [ 1109.110571][T13517] nbd9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1112.592738][T13517] FAT-fs (nbd9): unable to read boot sector [ 1113.243799][T13525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1708'. [ 1113.847536][ T28] audit: type=1326 audit(1786079761.162:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13535 comm="syz.4.1712" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8ac99e0d9 code=0x0 [ 1114.457815][T13542] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1714'. [ 1114.467843][T13542] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1714'. [ 1114.478325][T13542] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1714'. [ 1114.487857][T13542] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1714'. [ 1115.559155][ T5762] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1117.999450][ T5762] usb 5-1: device descriptor read/64, error -71 [ 1118.091384][T13570] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1720'. [ 1118.666196][T13585] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1723'. [ 1118.677021][T13585] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1723'. [ 1118.686490][T13585] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1723'. [ 1118.695825][T13585] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1723'. [ 1118.986064][ T28] audit: type=1326 audit(1786079766.312:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13588 comm="syz.2.1724" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87feb9e0d9 code=0x0 [ 1120.362513][T13604] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1726'. [ 1121.650488][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.656872][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1124.099113][ T177] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1126.180146][T13625] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1731'. [ 1126.319945][ T177] usb 9-1: device descriptor read/64, error -71 [ 1126.539748][T13636] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1734'. [ 1126.549752][T13636] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1734'. [ 1126.559909][T13636] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1734'. [ 1126.569291][T13636] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1734'. [ 1126.643063][ T28] audit: type=1326 audit(1786079773.972:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13638 comm="syz.2.1735" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87feb9e0d9 code=0x0 [ 1126.679169][ T177] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1128.734060][T13661] syz.2.1738: attempt to access beyond end of device [ 1128.734060][T13661] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1131.380289][T13661] FAT-fs (nbd2): unable to read boot sector [ 1131.410790][T13666] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1740'. [ 1134.422036][T13683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1744'. [ 1134.433261][T13683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1744'. [ 1134.443263][T13683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1744'. [ 1134.452530][T13683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1744'. [ 1134.830122][ T28] audit: type=1326 audit(1786079782.052:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13690 comm="syz.2.1746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87feb9e0d9 code=0x0 [ 1135.048451][T11912] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1135.489080][T11912] usb 9-1: device descriptor read/64, error -71 [ 1136.109312][T11912] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1136.289027][T11912] usb 9-1: device descriptor read/64, error -71 [ 1136.419950][T11912] usb usb9-port1: attempt power cycle [ 1136.859057][T11912] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1138.979078][T11912] usb 9-1: device descriptor read/8, error -71 [ 1139.377372][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1756'. [ 1139.502202][T13726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1755'. [ 1139.782882][ T28] audit: type=1326 audit(1786079787.112:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13735 comm="syz.4.1758" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8ac99e0d9 code=0x0 [ 1141.659038][ T5849] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1143.998995][ T5849] usb 3-1: device descriptor read/64, error -71 [ 1144.030815][T13767] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1144.299017][ T5849] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1146.259182][ T5849] usb 3-1: device descriptor read/64, error -71 [ 1147.059271][ T5849] usb usb3-port1: attempt power cycle [ 1147.209163][ T28] audit: type=1326 audit(1786079794.532:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13780 comm="syz.2.1769" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87feb9e0d9 code=0x0 [ 1147.845979][T13792] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1771'. [ 1151.807043][T13821] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1152.069000][ T5849] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1154.126715][ T5849] usb 10-1: device descriptor read/64, error -71 [ 1155.314545][ T28] audit: type=1326 audit(1786079802.632:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13849 comm="syz.2.1781" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f87feb9e0d9 code=0x0 [ 1156.727898][T13877] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1785'. [ 1161.709077][T13886] syz.4.1788: attempt to access beyond end of device [ 1161.709077][T13886] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1162.929557][T13886] FAT-fs (nbd4): unable to read boot sector [ 1163.419542][T13902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1791'. [ 1163.431748][T13902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1791'. [ 1163.441443][T13902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1791'. [ 1163.450896][T13902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1791'. [ 1163.502192][T13907] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1166.318235][ T28] audit: type=1326 audit(1786079813.642:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13911 comm="syz.4.1794" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8ac99e0d9 code=0x0 [ 1170.571328][T13929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1798'. [ 1172.269055][T13935] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1799'. [ 1173.403142][T13939] syz.2.1800: attempt to access beyond end of device [ 1173.403142][T13939] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1174.979267][T13939] FAT-fs (nbd2): unable to read boot sector [ 1175.487402][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1802'. [ 1175.497374][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1802'. [ 1175.507476][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1802'. [ 1175.516894][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1802'. [ 1175.619099][ T5762] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1175.769070][T13955] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1175.859132][ T5762] usb 10-1: no configurations [ 1175.879102][ T5762] usb 10-1: can't read configurations, error -22 [ 1176.681476][ T5762] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1184.077532][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1184.084024][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.317014][T13990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1810'. [ 1184.474563][T13993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1811'. [ 1184.811353][T13994] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1812'. [ 1186.309053][ T5762] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1186.440177][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1186.462241][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1186.480759][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1186.488807][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1186.501151][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1186.509740][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1186.525589][ T5762] usb 5-1: no configurations [ 1186.548967][ T5762] usb 5-1: can't read configurations, error -22 [ 1186.739184][ T5762] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1186.747681][T14008] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1186.762403][ T6088] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.960663][ T5762] usb 5-1: no configurations [ 1186.965412][ T5762] usb 5-1: can't read configurations, error -22 [ 1188.613437][ T5780] Bluetooth: hci3: command tx timeout [ 1189.547925][ T5762] usb usb5-port1: attempt power cycle [ 1189.694955][ T6088] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.281916][ T6088] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.679203][ T5780] Bluetooth: hci3: command tx timeout [ 1192.761383][ T5780] Bluetooth: hci3: command tx timeout [ 1192.865788][ T6088] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.871897][ T5780] Bluetooth: hci3: command tx timeout [ 1195.613075][T14005] chnl_net:caif_netlink_parms(): no params data found [ 1195.777606][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1821'. [ 1195.789252][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1821'. [ 1195.798559][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1821'. [ 1195.808051][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1821'. [ 1196.406905][T14045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1823'. [ 1197.107304][T14005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.167127][T14005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.207102][T14005] bridge_slave_0: entered allmulticast mode [ 1197.250486][T14005] bridge_slave_0: entered promiscuous mode [ 1197.307789][T14005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.345645][T14005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.401596][T14005] bridge_slave_1: entered allmulticast mode [ 1197.459069][T14005] bridge_slave_1: entered promiscuous mode [ 1197.569729][ T5782] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1197.766602][T14005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1197.784300][ T5782] usb 10-1: no configurations [ 1197.796729][ T5782] usb 10-1: can't read configurations, error -22 [ 1197.940984][T14005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1198.020022][ T5782] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1198.112406][T14005] team0: Port device team_slave_0 added [ 1198.144668][T14005] team0: Port device team_slave_1 added [ 1198.212714][ T5782] usb 10-1: no configurations [ 1198.217461][ T5782] usb 10-1: can't read configurations, error -22 [ 1198.249152][ T5782] usb usb10-port1: attempt power cycle [ 1198.390425][T14005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1198.397438][T14005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1198.562891][T14005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1199.051174][ T5782] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1199.103483][ T5782] usb 10-1: no configurations [ 1199.122502][ T5782] usb 10-1: can't read configurations, error -22 [ 1199.163442][T14005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1199.187078][T14005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1199.272557][T14005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1199.328927][ T5782] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1199.352349][ T6088] hsr_slave_0: left promiscuous mode [ 1199.372448][ T6088] hsr_slave_1: left promiscuous mode [ 1200.148961][ T5782] usb 10-1: no configurations [ 1200.153746][ T5782] usb 10-1: can't read configurations, error -22 [ 1201.727195][ T6088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1201.739177][ T5782] usb usb10-port1: unable to enumerate USB device [ 1201.780515][ T6088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1202.690629][ T6088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1202.698244][ T6088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1204.360450][ T6088] bridge_slave_1: left allmulticast mode [ 1204.366164][ T6088] bridge_slave_1: left promiscuous mode [ 1205.731592][T14088] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1829'. [ 1205.795112][ T6088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.891958][ T6088] bridge_slave_0: left allmulticast mode [ 1205.942143][ T6088] bridge_slave_0: left promiscuous mode [ 1205.947911][ T6088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.001090][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1832'. [ 1206.344131][ T6088] veth1_macvtap: left promiscuous mode [ 1206.396030][ T6088] veth0_macvtap: left promiscuous mode [ 1206.434612][ T6088] veth1_vlan: left promiscuous mode [ 1206.481017][ T6088] veth0_vlan: left promiscuous mode [ 1207.111566][ T6088] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1207.361503][ T6088] bond1 (unregistering): Released all slaves [ 1208.275968][ T6088] team0 (unregistering): Port device team_slave_1 removed [ 1208.356106][ T6088] team0 (unregistering): Port device team_slave_0 removed [ 1208.433134][ T6088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1208.516814][ T6088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1209.158165][ T6088] bond0 (unregistering): Released all slaves [ 1209.405527][T14093] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1209.700237][T14005] hsr_slave_0: entered promiscuous mode [ 1209.773508][T14005] hsr_slave_1: entered promiscuous mode [ 1209.849080][T14005] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1209.906674][T14005] Cannot create hsr debugfs directory [ 1210.679103][ T177] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1210.831864][ T6088] IPVS: stop unused estimator thread 0... [ 1211.028322][ T177] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.061452][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1837'. [ 1211.072440][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1837'. [ 1211.082781][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1837'. [ 1211.092087][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1837'. [ 1211.140576][ T177] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1211.230966][ T177] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1211.306885][ T177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.362543][ T177] usb 5-1: Product: syz [ 1211.366786][ T177] usb 5-1: Manufacturer: syz [ 1211.425839][ T177] usb 5-1: SerialNumber: syz [ 1211.435229][ T28] audit: type=1326 audit(1786079858.752:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14136 comm="syz.9.1838" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc4e1b9e0d9 code=0x0 [ 1211.487735][ T177] usb 5-1: config 0 descriptor?? [ 1212.514826][T14152] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1841'. [ 1213.286084][T14162] syzkaller0: entered promiscuous mode [ 1213.308589][T14162] syzkaller0: entered allmulticast mode [ 1215.161744][T14179] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1843'. [ 1215.337268][ T5762] usb 5-1: USB disconnect, device number 38 [ 1216.166331][T14191] autofs4:pid:14191:autofs_fill_super: called with bogus options [ 1216.176210][T14005] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1216.227192][T14005] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1216.265512][T14005] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1216.323474][T14005] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1216.726050][T14005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1216.846435][T14005] 8021q: adding VLAN 0 to HW filter on device team0 [ 1216.977799][T14207] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1850'. [ 1217.002916][ T6061] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.010139][ T6061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1217.090086][ T6061] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.097352][ T6061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1217.497970][T14005] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1218.909096][ T5762] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1219.104518][T14005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1219.208662][ T5762] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.276135][ T5762] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1219.353219][ T5762] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1219.386072][T14005] veth0_vlan: entered promiscuous mode [ 1219.432354][ T5762] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.494223][T14005] veth1_vlan: entered promiscuous mode [ 1219.509080][ T5762] usb 10-1: Product: syz [ 1219.550940][ T5762] usb 10-1: Manufacturer: syz [ 1219.589261][ T5762] usb 10-1: SerialNumber: syz [ 1219.655156][ T5762] usb 10-1: config 0 descriptor?? [ 1219.793260][T14005] veth0_macvtap: entered promiscuous mode [ 1219.878208][T14005] veth1_macvtap: entered promiscuous mode [ 1221.292518][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1221.493175][T14250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1852'. [ 1221.549775][ T177] usb 10-1: USB disconnect, device number 10 [ 1221.558676][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.605217][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1221.652809][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.682556][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1223.926472][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1223.984058][T14005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1224.253907][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1224.341739][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.840053][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1224.912029][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1224.966815][T14005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1225.068154][T14005] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.118120][T14005] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.177803][T14005] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.280766][T14005] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.488477][T14284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1858'. [ 1225.866098][ T6074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1225.919952][ T6074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1226.052163][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1226.089771][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1226.719170][T11912] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1227.875597][T14308] syz.3.1805: attempt to access beyond end of device [ 1227.875597][T14308] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1228.822772][T14306] autofs4:pid:14306:autofs_fill_super: called with bogus options [ 1228.873005][T14308] FAT-fs (nbd3): unable to read boot sector [ 1228.978760][T11912] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.031899][T11912] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1229.117029][T11912] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1229.169030][T11912] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.177173][T11912] usb 10-1: Product: syz [ 1229.400295][T11912] usb 10-1: Manufacturer: syz [ 1229.405063][T11912] usb 10-1: SerialNumber: syz [ 1230.771506][T14317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1863'. [ 1230.848800][T11912] usb 10-1: config 0 descriptor?? [ 1230.900205][T11912] usb 10-1: can't set config #0, error -71 [ 1231.090336][T11912] usb 10-1: USB disconnect, device number 11 [ 1232.389028][T14331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1865'. [ 1232.730520][T14332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1865'. [ 1233.499267][T14340] syz.3.1868: attempt to access beyond end of device [ 1233.499267][T14340] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1233.660288][T14340] FAT-fs (nbd3): unable to read boot sector [ 1233.829907][T14346] autofs4:pid:14346:autofs_fill_super: called with bogus options [ 1235.488487][T14354] syz.3.1874: attempt to access beyond end of device [ 1235.488487][T14354] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1236.459214][T14354] FAT-fs (nbd3): unable to read boot sector [ 1236.672657][ T5824] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1236.907681][ T5824] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1236.920488][ T5824] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.954473][ T5824] usb 10-1: Product: syz [ 1236.958791][ T5824] usb 10-1: Manufacturer: syz [ 1236.988066][ T5824] usb 10-1: SerialNumber: syz [ 1236.995266][ T5824] usb 10-1: config 0 descriptor?? [ 1240.378997][T14383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1879'. [ 1240.680616][T14385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1879'. [ 1241.083703][T14375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1241.268443][T14375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1241.282638][T14375] bond0 (unregistering): Released all slaves [ 1241.797884][ T177] usb 10-1: USB disconnect, device number 12 [ 1242.392846][T14406] syz.3.1883: attempt to access beyond end of device [ 1242.392846][T14406] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1242.463700][T14406] FAT-fs (nbd3): unable to read boot sector [ 1244.533801][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.547406][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.638943][ T5762] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1244.864000][ T5762] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1244.899316][ T5762] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.095642][ T5762] usb 10-1: Product: syz [ 1245.382238][ T5762] usb 10-1: Manufacturer: syz [ 1245.406892][ T5762] usb 10-1: SerialNumber: syz [ 1245.441878][ T5762] usb 10-1: config 0 descriptor?? [ 1247.599028][T14448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1892'. [ 1248.051783][ T5762] usb 10-1: USB disconnect, device number 13 [ 1248.220407][T14452] autofs4:pid:14452:autofs_fill_super: called with bogus options [ 1252.170174][T14467] syz.3.1895: attempt to access beyond end of device [ 1252.170174][T14467] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1252.399526][T14467] FAT-fs (nbd3): unable to read boot sector [ 1254.585448][T14497] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1898'. [ 1256.489888][ T5849] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1256.784722][ T5849] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1256.888750][ T5849] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.897084][ T5849] usb 10-1: Product: syz [ 1256.966607][ T5849] usb 10-1: Manufacturer: syz [ 1256.985625][ T5849] usb 10-1: SerialNumber: syz [ 1257.082078][ T5849] usb 10-1: config 0 descriptor?? [ 1258.780439][ T5824] usb 10-1: USB disconnect, device number 14 [ 1261.081992][T14559] syz.9.1912: attempt to access beyond end of device [ 1261.081992][T14559] nbd9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1261.095125][T14559] FAT-fs (nbd9): unable to read boot sector [ 1263.591673][T14587] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1920'. [ 1264.909488][T14612] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1917'. [ 1271.198995][ T28] audit: type=1326 audit(1786079918.482:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14656 comm="syz.2.1938" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87feb9e0d9 code=0x0 [ 1272.997702][ T28] audit: type=1326 audit(1786079920.322:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14660 comm="syz.3.1939" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2af339e0d9 code=0x0 [ 1276.542165][T14679] fuse: Bad value for 'user_id' [ 1277.020998][T14704] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1948'. [ 1277.358942][ T28] audit: type=1326 audit(1786079924.682:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14709 comm="syz.4.1950" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8ac99e0d9 code=0x0 [ 1284.011959][T14754] CIFS: Attempting to mount //127.0.0.1/share [ 1284.180169][T14757] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 1284.400693][T14755] macvtap1: entered promiscuous mode [ 1284.493861][T14755] vlan0: entered promiscuous mode [ 1286.392310][ T28] audit: type=1800 audit(1786079933.712:115): pid=14745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1957" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1286.472055][T14755] team0: Device macvtap1 failed to register rx_handler [ 1286.552585][T14754] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1287.487771][T14755] vlan0: left promiscuous mode [ 1287.984349][T14809] syz.2.1964: attempt to access beyond end of device [ 1287.984349][T14809] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1288.112826][T14809] FAT-fs (nbd2): unable to read boot sector [ 1290.899978][T14841] syz.9.1972: attempt to access beyond end of device [ 1290.899978][T14841] nbd9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1290.913551][T14841] FAT-fs (nbd9): unable to read boot sector [ 1291.214305][T14846] syzkaller0: entered promiscuous mode [ 1291.244262][T14846] syzkaller0: entered allmulticast mode [ 1294.041004][T14860] syz.9.1976: attempt to access beyond end of device [ 1294.041004][T14860] nbd9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1296.101553][T14860] FAT-fs (nbd9): unable to read boot sector [ 1296.983924][T14882] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1981'. [ 1298.913141][T14902] syz.2.1987: attempt to access beyond end of device [ 1298.913141][T14902] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1298.926300][T14902] FAT-fs (nbd2): unable to read boot sector [ 1299.414933][T14913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1990'. [ 1299.439319][T14911] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1989'. [ 1299.991577][T14919] random: crng reseeded on system resumption [ 1303.249930][T14938] autofs4:pid:14938:autofs_fill_super: called with bogus options [ 1305.966396][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.979023][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.346512][T14956] syzkaller0: entered promiscuous mode [ 1306.384569][T14956] syzkaller0: entered allmulticast mode [ 1311.193701][T14987] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1313.176156][T14983] Bluetooth: hci3: command 0x0406 tx timeout [ 1318.924701][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2016'. [ 1318.937536][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2016'. [ 1318.946926][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2016'. [ 1318.956415][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2016'. [ 1320.096172][T15008] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1323.347457][T15048] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2020'. [ 1324.370571][T15066] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2024'. [ 1325.724988][T15084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2027'. [ 1325.737563][T15084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2027'. [ 1325.747059][T15084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2027'. [ 1325.757092][T15084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2027'. [ 1330.341254][T15120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2031'. [ 1331.598361][T15138] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1331.692608][T15138] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1331.783559][T15138] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x8012 instead [ 1331.849776][T15138] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xb7c2 instead [ 1331.911272][T15138] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1331.978044][T15138] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1332.035826][T15138] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1332.103169][T15138] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1332.282074][T15145] syz.4.2040: attempt to access beyond end of device [ 1332.282074][T15145] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1332.295074][T15145] FAT-fs (nbd4): unable to read boot sector [ 1332.303691][T15138] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1332.406423][T15138] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1332.487006][T15138] jffs2: Further such events for this erase block will not be printed [ 1332.547883][T15138] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1333.820385][T15138] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1333.893884][T15138] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x8012 instead [ 1333.989011][T15138] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xb7c2 instead [ 1334.053459][T15138] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1334.138605][T15138] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1334.218895][T15138] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1334.230756][T15161] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2045'. [ 1334.291032][T15138] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1334.379730][T15138] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1334.469055][T15138] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1334.536641][T15138] jffs2: Further such events for this erase block will not be printed [ 1334.596590][T15138] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1334.932560][T15138] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 1335.216056][T15177] syz.9.2050: attempt to access beyond end of device [ 1335.216056][T15177] nbd9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1335.231270][T15177] FAT-fs (nbd9): unable to read boot sector [ 1340.569236][T15208] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2056'. [ 1340.761213][T15213] trusted_key: syz.2.2058 sent an empty control message without MSG_MORE. [ 1341.415680][T15220] syz.2.2060: attempt to access beyond end of device [ 1341.415680][T15220] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1341.428811][T15220] FAT-fs (nbd2): unable to read boot sector [ 1347.009090][T15257] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2067'. [ 1354.926688][T15298] syzkaller0: entered promiscuous mode [ 1354.954236][T15298] syzkaller0: entered allmulticast mode [ 1357.376636][T15315] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1362.475523][T15355] syzkaller0: entered promiscuous mode [ 1362.517027][T15355] syzkaller0: entered allmulticast mode [ 1363.534081][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1363.549279][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1363.558134][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1363.568656][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1363.579191][ T5780] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1363.586781][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1364.901628][T15377] zero sized request [ 1365.639425][ T5780] Bluetooth: hci4: command tx timeout [ 1367.407337][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.413790][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.725038][ T5780] Bluetooth: hci4: command tx timeout [ 1369.807603][ T5780] Bluetooth: hci4: command tx timeout [ 1370.305634][T15369] chnl_net:caif_netlink_parms(): no params data found [ 1370.765898][T15397] syzkaller0: entered promiscuous mode [ 1370.786403][T15397] syzkaller0: entered allmulticast mode [ 1371.178536][T15369] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.214930][T15369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.259894][T15369] bridge_slave_0: entered allmulticast mode [ 1371.305545][T15369] bridge_slave_0: entered promiscuous mode [ 1371.661887][T15369] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.724109][T15369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.782201][T15369] bridge_slave_1: entered allmulticast mode [ 1371.854048][T15369] bridge_slave_1: entered promiscuous mode [ 1371.879375][ T5780] Bluetooth: hci4: command tx timeout [ 1373.134131][T15423] zero sized request [ 1373.362257][T15369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1373.441489][T15369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1376.066244][ T6081] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.374911][ T6081] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.533839][T15369] team0: Port device team_slave_0 added [ 1376.570215][T15440] syzkaller0: entered promiscuous mode [ 1376.604015][T15440] syzkaller0: entered allmulticast mode [ 1376.769520][ T6081] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.844416][T15451] syz.2.2107: attempt to access beyond end of device [ 1376.844416][T15451] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1376.858805][T15451] FAT-fs (nbd2): unable to read boot sector [ 1376.872063][T15369] team0: Port device team_slave_1 added [ 1377.202007][ T6081] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.502946][T15369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1377.549875][T15369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1377.691384][T15369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1377.760774][T15369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1377.797130][T15369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1380.218000][T15369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1380.280236][T15459] netlink: 'syz.9.2109': attribute type 1 has an invalid length. [ 1383.275818][T15459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1383.428578][T15465] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 1384.371998][T15369] hsr_slave_0: entered promiscuous mode [ 1384.440086][T15369] hsr_slave_1: entered promiscuous mode [ 1384.456634][T15369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1384.496842][T15495] syz.2.2117: attempt to access beyond end of device [ 1384.496842][T15495] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1384.511083][T15495] FAT-fs (nbd2): unable to read boot sector [ 1384.539033][T15369] Cannot create hsr debugfs directory [ 1385.364980][T15496] syzkaller0: entered promiscuous mode [ 1385.408575][T15496] syzkaller0: entered allmulticast mode [ 1390.565455][T15541] syz.9.2126: attempt to access beyond end of device [ 1390.565455][T15541] nbd9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1390.585943][T15541] FAT-fs (nbd9): unable to read boot sector [ 1391.601242][T15555] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5775] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[15555] [ 1396.514612][T15601] syz.2.2137: attempt to access beyond end of device [ 1396.514612][T15601] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1396.527608][T15601] FAT-fs (nbd2): unable to read boot sector [ 1397.368320][T15627] binder: 15626:15627 ioctl 4018620d 0 returned -22 [ 1397.685095][T15622] syzkaller0: entered promiscuous mode [ 1397.721562][T15622] syzkaller0: entered allmulticast mode [ 1397.758122][T15620] syzkaller0: entered promiscuous mode [ 1397.783853][T15620] syzkaller0: entered allmulticast mode [ 1397.953394][T10529] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1398.009399][T10529] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1398.989847][ T6081] hsr_slave_0: left promiscuous mode [ 1399.089190][ T6081] hsr_slave_1: left promiscuous mode [ 1399.196292][ T6081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1399.228951][ T6081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1399.252682][T15657] syz.2.2148: attempt to access beyond end of device [ 1399.252682][T15657] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1399.265781][T15657] FAT-fs (nbd2): unable to read boot sector [ 1399.279749][ T6081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1399.287258][ T6081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1399.337810][ T6081] bridge_slave_1: left allmulticast mode [ 1399.361212][ T6081] bridge_slave_1: left promiscuous mode [ 1399.383492][ T6081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.417490][ T6081] bridge_slave_0: left allmulticast mode [ 1399.449802][ T6081] bridge_slave_0: left promiscuous mode [ 1399.482743][ T6081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.557680][ T6081] veth1_macvtap: left promiscuous mode [ 1399.859009][ T6081] veth0_macvtap: left promiscuous mode [ 1400.000642][ T6081] veth1_vlan: left promiscuous mode [ 1400.033805][ T6081] veth0_vlan: left promiscuous mode [ 1400.496202][T15666] binder: 15665:15666 ioctl 4018620d 0 returned -22 [ 1401.853419][T15670] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 1403.235475][T15677] syz.2.2156: attempt to access beyond end of device [ 1403.235475][T15677] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1403.248905][T15677] FAT-fs (nbd2): unable to read boot sector [ 1406.046909][ T6081] team0 (unregistering): Port device team_slave_1 removed [ 1406.175181][ T6081] team0 (unregistering): Port device team_slave_0 removed [ 1406.242308][ T6081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1406.315933][ T6081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1406.882947][ T6081] bond0 (unregistering): Released all slaves [ 1407.473307][T15369] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1407.592677][T15369] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1407.657634][T15369] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1407.732566][T15369] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1408.885731][T15707] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 1409.476705][T15369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1409.625824][T15369] 8021q: adding VLAN 0 to HW filter on device team0 [ 1409.716469][T15712] syz.2.2164: attempt to access beyond end of device [ 1409.716469][T15712] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1409.730010][T15712] FAT-fs (nbd2): unable to read boot sector [ 1409.750294][ T6639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.757480][ T6639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1409.883734][ T6637] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.890976][ T6637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1411.080610][T15722] syzkaller0: entered promiscuous mode [ 1411.086159][T15722] syzkaller0: entered allmulticast mode [ 1411.297912][T15727] binder: 15726:15727 ioctl c0306201 0 returned -14 [ 1411.504392][T15369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1412.698485][T15731] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 1412.918403][T15369] veth0_vlan: entered promiscuous mode [ 1412.994769][T15369] veth1_vlan: entered promiscuous mode [ 1413.197567][T15369] veth0_macvtap: entered promiscuous mode [ 1413.278407][T15369] veth1_macvtap: entered promiscuous mode [ 1413.382433][T15369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1413.431033][T15369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.228885][T15369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1415.770480][T15369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.815853][T15369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1415.868913][T15369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1415.920417][T15369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1416.038278][T15369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1416.081578][T15369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.112472][T15369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1416.128950][ T5762] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1416.157622][T15369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1416.197360][T15369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1416.260868][T15369] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.305287][T15369] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.319759][ T5762] usb 10-1: Using ep0 maxpacket: 8 [ 1416.342028][T15369] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.353137][ T5762] usb 10-1: config 2 has an invalid interface number: 111 but max is 0 [ 1416.569058][ T5762] usb 10-1: config 2 has no interface number 0 [ 1416.575562][T15369] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.599281][ T5762] usb 10-1: config 2 interface 111 altsetting 58 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1417.057687][ T5762] usb 10-1: config 2 interface 111 has no altsetting 0 [ 1417.148509][ T5762] usb 10-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 1417.371052][ T5762] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.431831][ T5762] usb 10-1: can't set config #2, error -71 [ 1417.469200][ T6079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1417.486740][T15752] binder: 15751:15752 ioctl c0306201 0 returned -14 [ 1417.518708][ T5762] usb 10-1: USB disconnect, device number 15 [ 1417.533749][ T6079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1417.714398][ T6070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1417.758690][ T6070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1417.845752][T15757] syzkaller0: entered promiscuous mode [ 1417.886152][T15757] syzkaller0: entered allmulticast mode [ 1419.630562][T15767] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 1419.972600][T15775] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 1426.558422][T14983] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1426.572976][T14983] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1426.582340][T14983] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1426.591522][T14983] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1426.599223][T14983] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1426.606494][T14983] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1427.313627][ T6074] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1427.423330][ T6074] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.650082][T15818] autofs4:pid:15818:autofs_fill_super: called with bogus options [ 1427.812618][ T6074] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1427.959210][ T6074] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.037928][T15821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2180'. [ 1428.679070][T14983] Bluetooth: hci1: command tx timeout [ 1428.906831][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1429.655181][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1430.797549][T14983] Bluetooth: hci1: command tx timeout [ 1431.252193][ T6074] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1431.382766][ T6074] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.645264][ T6074] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1431.764897][ T6074] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.867772][T15838] syzkaller0: entered promiscuous mode [ 1431.913927][T15838] syzkaller0: entered allmulticast mode [ 1432.267562][T15849] syzkaller0: entered promiscuous mode [ 1432.316266][T15849] syzkaller0: entered allmulticast mode [ 1432.838920][T14983] Bluetooth: hci1: command tx timeout [ 1434.954722][T14983] Bluetooth: hci1: command tx timeout [ 1437.993481][T15803] chnl_net:caif_netlink_parms(): no params data found [ 1438.196028][ T6074] tipc: Disabling bearer [ 1438.228384][T15884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2197'. [ 1438.252584][ T6074] tipc: Left network mode [ 1438.288647][T15884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2197'. [ 1438.298043][T15884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2197'. [ 1438.307351][T15884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2197'. [ 1439.448321][T15887] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 1442.978594][T15803] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.027793][T15803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.063750][T15803] bridge_slave_0: entered allmulticast mode [ 1443.113687][T15803] bridge_slave_0: entered promiscuous mode [ 1445.571125][T15803] bridge0: port 2(bridge_slave_1) entered blocking state [ 1445.578421][T15803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.847716][T15803] bridge_slave_1: entered allmulticast mode [ 1445.932834][T15803] bridge_slave_1: entered promiscuous mode [ 1446.418448][T15803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1446.521886][T15803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1449.211562][T15803] team0: Port device team_slave_0 added [ 1449.337353][T15803] team0: Port device team_slave_1 added [ 1457.481432][T15803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1457.512986][T15803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1457.553014][T15803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1457.680527][T15803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1457.687537][T15803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1460.011971][T15803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1460.049785][T15968] syzkaller0: entered promiscuous mode [ 1460.058553][T15968] syzkaller0: entered allmulticast mode [ 1462.799867][T15803] hsr_slave_0: entered promiscuous mode [ 1462.852755][T15803] hsr_slave_1: entered promiscuous mode [ 1462.900875][T15803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1462.908590][T15803] Cannot create hsr debugfs directory [ 1463.557386][ T6074] hsr_slave_0: left promiscuous mode [ 1464.763642][ T6074] hsr_slave_1: left promiscuous mode [ 1464.826741][ T6074] batman_adv: batadv0: Removing interface: veth0_to_bond [ 1464.879461][ T6074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1464.886959][ T6074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1464.955279][ T6074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1465.021413][ T6074] bridge_slave_1: left allmulticast mode [ 1465.027121][ T6074] bridge_slave_1: left promiscuous mode [ 1465.070400][ T6074] bridge0: port 2(bridge_slave_1) entered disabled state [ 1465.149623][ T6074] bridge_slave_0: left allmulticast mode [ 1465.155362][ T6074] bridge_slave_0: left promiscuous mode [ 1465.194088][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.374093][ T6074] veth1_macvtap: left promiscuous mode [ 1465.408530][ T6074] veth0_macvtap: left promiscuous mode [ 1465.449095][ T6074] veth1_vlan: left promiscuous mode [ 1465.454459][ T6074] veth0_vlan: left promiscuous mode [ 1473.223319][ T6074] team0 (unregistering): Port device team_slave_1 removed [ 1473.288690][ T6074] team0 (unregistering): Port device team_slave_0 removed [ 1476.504737][ T6074] IPVS: stop unused estimator thread 0... [ 1479.447762][T15803] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1479.521480][T15803] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1479.583813][T15803] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1479.643533][T15803] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1479.704447][T16096] syzkaller0: entered promiscuous mode [ 1479.739810][T16096] syzkaller0: entered allmulticast mode [ 1482.255704][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1482.267988][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1482.277089][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1482.288192][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1482.298012][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1482.305705][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1483.291599][T16122] chnl_net:caif_netlink_parms(): no params data found [ 1483.596490][T16122] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.618908][T16122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.639061][T16122] bridge_slave_0: entered allmulticast mode [ 1483.664424][T16122] bridge_slave_0: entered promiscuous mode [ 1483.695490][T16122] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.720133][T16122] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.740935][T16122] bridge_slave_1: entered allmulticast mode [ 1483.773525][T16122] bridge_slave_1: entered promiscuous mode [ 1483.895468][T16122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1483.935511][T16122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1484.053538][T16122] team0: Port device team_slave_0 added [ 1484.094568][T16122] team0: Port device team_slave_1 added [ 1484.611969][T16122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1484.649617][T16122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1484.726140][T16122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1484.908330][T16122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1484.929713][T16154] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1484.944164][ T177] IPVS: starting estimator thread 0... [ 1484.957148][T16122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1485.066579][T16122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1485.078936][T16156] IPVS: using max 26 ests per chain, 62400 per kthread [ 1486.604793][ T5780] Bluetooth: hci3: command tx timeout [ 1487.243589][ T5780] Bluetooth: hci4: command 0x0406 tx timeout [ 1487.954137][T16122] hsr_slave_0: entered promiscuous mode [ 1488.037327][T16122] hsr_slave_1: entered promiscuous mode [ 1488.075148][T16122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1488.122815][T16122] Cannot create hsr debugfs directory [ 1488.678905][T14983] Bluetooth: hci3: command tx timeout [ 1489.596215][T16190] syz.0.2243: attempt to access beyond end of device [ 1489.596215][T16190] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1490.518109][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.769729][T14983] Bluetooth: hci3: command tx timeout [ 1490.775460][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.886891][T16190] FAT-fs (nbd0): unable to read boot sector [ 1492.843842][T14983] Bluetooth: hci3: command tx timeout [ 1494.444842][T16210] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1504.621214][T16257] syz.9.2253: attempt to access beyond end of device [ 1504.621214][T16257] nbd9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1506.098840][T16257] FAT-fs (nbd9): unable to read boot sector [ 1512.346230][T16289] syzkaller0: entered promiscuous mode [ 1512.378840][T16289] syzkaller0: entered allmulticast mode [ 1512.727881][T16122] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1512.826896][T16122] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1513.121846][ T6070] hsr_slave_0: left promiscuous mode [ 1515.608921][ T6070] hsr_slave_1: left promiscuous mode [ 1515.821836][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1515.909889][ T6070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1516.016398][ T6070] bridge_slave_1: left allmulticast mode [ 1516.044224][ T6070] bridge_slave_1: left promiscuous mode [ 1516.073445][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.189089][ T6070] bridge_slave_0: left allmulticast mode [ 1516.230114][ T6070] bridge_slave_0: left promiscuous mode [ 1516.258089][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.027148][ T6070] team0 (unregistering): Port device team_slave_1 removed [ 1522.223038][ T6070] team0 (unregistering): Port device team_slave_0 removed [ 1522.390701][ T6070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1522.695262][ T6070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1525.862292][ T6070] bond0 (unregistering): Released all slaves [ 1528.947320][T16122] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1529.124299][T16385] syzkaller0: entered promiscuous mode [ 1529.137968][T16385] syzkaller0: entered allmulticast mode [ 1529.155749][T16122] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1529.179342][T16387] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1529.883501][T16122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1530.106119][T16122] 8021q: adding VLAN 0 to HW filter on device team0 [ 1530.620054][ T6079] bridge0: port 1(bridge_slave_0) entered blocking state [ 1530.627269][ T6079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1530.701514][T16409] syz.0.2285: attempt to access beyond end of device [ 1530.701514][T16409] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1533.137551][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.144967][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1533.159303][T16409] FAT-fs (nbd0): unable to read boot sector [ 1533.775047][T16415] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2287'. [ 1533.862252][T16428] IPVS: dh: FWM 3 0x00000003 - no destination available [ 1534.320260][T16433] syzkaller0: entered promiscuous mode [ 1534.320330][T16433] syzkaller0: entered allmulticast mode [ 1534.743335][T16446] binder: BINDER_SET_CONTEXT_MGR already set [ 1534.780179][T16446] binder: 16444:16446 ioctl 4018620d 200000004a80 returned -16 [ 1534.972888][T16122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1536.448242][T16454] syz.4.2295: attempt to access beyond end of device [ 1536.448242][T16454] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1537.637092][T16454] FAT-fs (nbd4): unable to read boot sector [ 1537.656476][T16460] binder_alloc: 16458: binder_alloc_buf, no vma [ 1537.707510][T16122] veth0_vlan: entered promiscuous mode [ 1537.929270][T16122] veth1_vlan: entered promiscuous mode [ 1538.112941][T16122] veth0_macvtap: entered promiscuous mode [ 1538.168191][T16122] veth1_macvtap: entered promiscuous mode [ 1538.411221][T16122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1538.478872][T16122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1538.634636][T16122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1538.703503][T16122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1538.752768][T16122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1538.808825][T16122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1538.886629][T16122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1538.978266][T16122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1539.178872][T16122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1540.502316][T16495] syz.9.2305: attempt to access beyond end of device [ 1540.502316][T16495] nbd9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1540.757246][T16122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1541.613053][T16122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.633307][T16495] FAT-fs (nbd9): unable to read boot sector [ 1541.684052][T16122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1541.762072][T16122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.837337][T16122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1542.012855][T16502] syzkaller0: entered promiscuous mode [ 1542.018546][T16502] syzkaller0: entered allmulticast mode [ 1542.319241][T16508] binder_alloc: 16507: binder_alloc_buf, no vma [ 1543.879857][T16524] syz.0.2315: attempt to access beyond end of device [ 1543.879857][T16524] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1545.541942][T16524] FAT-fs (nbd0): unable to read boot sector [ 1545.569709][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1545.601495][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1545.620879][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1545.665856][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1545.677560][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1545.689111][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1546.275854][T16542] syzkaller0: entered promiscuous mode [ 1546.322927][T16542] syzkaller0: entered allmulticast mode [ 1547.082587][T16552] syzkaller0: entered promiscuous mode [ 1547.115074][T16552] syzkaller0: entered allmulticast mode [ 1547.175678][T16563] autofs4:pid:16563:autofs_fill_super: called with bogus options [ 1547.803176][ T5780] Bluetooth: hci1: command tx timeout [ 1548.803912][T16586] syz.9.2326: attempt to access beyond end of device [ 1548.803912][T16586] nbd9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1549.942589][ T5780] Bluetooth: hci1: command tx timeout [ 1550.479277][T16586] FAT-fs (nbd9): unable to read boot sector [ 1550.512196][T16529] chnl_net:caif_netlink_parms(): no params data found [ 1550.713009][T16592] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1551.726531][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.733123][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.970385][ T5780] Bluetooth: hci1: command tx timeout [ 1553.306318][T16604] autofs4:pid:16604:autofs_fill_super: called with bogus options [ 1553.783576][T16529] bridge0: port 1(bridge_slave_0) entered blocking state [ 1553.898943][T16529] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.906298][T16529] bridge_slave_0: entered allmulticast mode [ 1554.000175][T16529] bridge_slave_0: entered promiscuous mode [ 1554.039454][ T5780] Bluetooth: hci1: command tx timeout [ 1554.108814][T16529] bridge0: port 2(bridge_slave_1) entered blocking state [ 1554.154802][T16529] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.220269][T16529] bridge_slave_1: entered allmulticast mode [ 1554.274866][T16529] bridge_slave_1: entered promiscuous mode [ 1554.410970][T16615] syzkaller0: entered promiscuous mode [ 1554.416499][T16615] syzkaller0: entered allmulticast mode [ 1554.808131][T16638] syz.4.2337: attempt to access beyond end of device [ 1554.808131][T16638] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1556.714640][T16638] FAT-fs (nbd4): unable to read boot sector [ 1561.257028][T16529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1561.332661][T16529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1562.404617][T16529] team0: Port device team_slave_0 added [ 1562.700679][T16687] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1567.186451][T16529] team0: Port device team_slave_1 added [ 1568.550911][T16701] syz.0.2345: attempt to access beyond end of device [ 1568.550911][T16701] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1569.798540][T16701] FAT-fs (nbd0): unable to read boot sector [ 1569.809927][T16529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1569.817008][T16529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1570.023807][T16529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1570.142723][ T5874] hsr_slave_0: left promiscuous mode [ 1570.176385][ T5874] hsr_slave_1: left promiscuous mode [ 1570.206690][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1570.262432][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1570.313270][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1570.378894][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1570.427743][ T5874] bridge_slave_1: left allmulticast mode [ 1570.494155][ T5874] bridge_slave_1: left promiscuous mode [ 1570.543620][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 1570.849590][ T5874] bridge_slave_0: left allmulticast mode [ 1570.883171][ T5874] bridge_slave_0: left promiscuous mode [ 1571.211746][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.377516][ T5874] veth1_macvtap: left promiscuous mode [ 1571.407398][ T5874] veth0_macvtap: left promiscuous mode [ 1571.431846][ T5874] veth1_vlan: left promiscuous mode [ 1571.450810][ T5874] veth0_vlan: left promiscuous mode [ 1576.535780][ T5874] team0 (unregistering): Port device team_slave_1 removed [ 1576.595941][ T5874] team0 (unregistering): Port device team_slave_0 removed [ 1576.665569][ T5874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1576.743791][ T5874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1577.214491][ T5874] bond0 (unregistering): Released all slaves [ 1577.341158][T16529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1577.357165][T16529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1577.452317][T16529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1577.497111][T16717] syzkaller0: entered promiscuous mode [ 1577.516487][T16717] syzkaller0: entered allmulticast mode [ 1577.792728][T16529] hsr_slave_0: entered promiscuous mode [ 1577.843605][T16529] hsr_slave_1: entered promiscuous mode [ 1577.898318][T16529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1577.918280][T16529] Cannot create hsr debugfs directory [ 1577.944719][T16775] syzkaller0: entered promiscuous mode [ 1577.992061][T16775] syzkaller0: entered allmulticast mode [ 1579.687834][T16782] syz.9.2357: attempt to access beyond end of device [ 1579.687834][T16782] nbd9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1580.568726][T16782] FAT-fs (nbd9): unable to read boot sector [ 1581.040202][T16792] binder: BINDER_SET_CONTEXT_MGR already set [ 1581.046246][T16792] binder: 16791:16792 ioctl 4018620d 200000004a80 returned -16 [ 1583.869134][T16818] syzkaller0: entered promiscuous mode [ 1583.908978][T16818] syzkaller0: entered allmulticast mode [ 1588.021809][T16833] syz.4.2365: attempt to access beyond end of device [ 1588.021809][T16833] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1589.317792][T16833] FAT-fs (nbd4): unable to read boot sector [ 1589.438613][T16529] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1589.533223][T16529] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1589.603597][T16529] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1589.679432][T16529] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1591.999244][T16846] binder: BINDER_SET_CONTEXT_MGR already set [ 1592.058151][T16846] binder: 16844:16846 ioctl 4018620d 200000004a80 returned -16 [ 1592.616289][T16529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1592.657586][T16856] autofs4:pid:16856:autofs_fill_super: called with bogus options [ 1592.748120][T16529] 8021q: adding VLAN 0 to HW filter on device team0 [ 1592.812318][ T6081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1592.819567][ T6081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1593.327794][ T6061] bridge0: port 2(bridge_slave_1) entered blocking state [ 1593.335037][ T6061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1597.024910][T16529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1599.126191][T16529] veth0_vlan: entered promiscuous mode [ 1599.609799][T16529] veth1_vlan: entered promiscuous mode [ 1599.692855][T16896] autofs4:pid:16896:autofs_fill_super: called with bogus options [ 1599.771147][T16529] veth0_macvtap: entered promiscuous mode [ 1599.821537][T16529] veth1_macvtap: entered promiscuous mode [ 1599.952108][T16529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1600.020934][T16529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1600.065118][T16529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1600.117667][T16529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1600.176525][T16529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1600.225605][T16529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1600.281387][T16529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1600.364811][T16529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1600.429125][T16529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1600.499064][T16529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1600.555805][T16529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1600.596111][T16529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1600.648131][T16529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1600.721833][T16529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1600.811330][T16529] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1600.883449][T16529] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1600.959013][T16529] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1600.967775][T16529] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1604.493984][T16942] autofs4:pid:16942:autofs_fill_super: called with bogus options [ 1604.996085][T16952] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[15369] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[16952] [ 1610.244142][T14983] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1610.247140][T14983] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1610.247951][T14983] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1610.250066][T14983] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1610.275510][T14983] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1610.279636][T14983] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1612.358813][T14983] Bluetooth: hci1: command tx timeout [ 1613.036362][ T6061] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.165931][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1613.173656][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1614.442520][T14983] Bluetooth: hci1: command tx timeout [ 1615.748123][ T6061] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1616.033324][ T6061] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1616.216415][T16993] autofs4:pid:16993:autofs_fill_super: called with bogus options [ 1616.288625][ T6061] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1616.518880][T14983] Bluetooth: hci1: command tx timeout [ 1618.598747][T14983] Bluetooth: hci1: command tx timeout [ 1618.894624][T16966] chnl_net:caif_netlink_parms(): no params data found [ 1619.232038][T16966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1619.253306][T16966] bridge0: port 1(bridge_slave_0) entered disabled state [ 1619.278095][T16966] bridge_slave_0: entered allmulticast mode [ 1619.313124][T16966] bridge_slave_0: entered promiscuous mode [ 1619.336300][T16966] bridge0: port 2(bridge_slave_1) entered blocking state [ 1619.357215][T16966] bridge0: port 2(bridge_slave_1) entered disabled state [ 1619.375505][T16966] bridge_slave_1: entered allmulticast mode [ 1619.396391][T16966] bridge_slave_1: entered promiscuous mode [ 1619.488491][T16966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1619.518149][T16966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1619.681583][T16966] team0: Port device team_slave_0 added [ 1619.702776][T16966] team0: Port device team_slave_1 added [ 1619.782354][T16966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1619.801753][T16966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1619.861404][T16966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1619.904763][T16966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1619.927669][T16966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1620.035773][T16966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1620.634781][T16966] hsr_slave_0: entered promiscuous mode [ 1622.231390][T16966] hsr_slave_1: entered promiscuous mode [ 1622.929322][T16966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1622.977794][T16966] Cannot create hsr debugfs directory [ 1623.653556][T17053] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12206] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[17053] [ 1624.658515][T17066] autofs4:pid:17066:autofs_fill_super: called with bogus options [ 1631.198765][T17100] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[15369] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[17100] [ 1633.808776][T17107] autofs4:pid:17107:autofs_fill_super: called with bogus options [ 1633.865932][ T6061] hsr_slave_0: left promiscuous mode [ 1633.978318][ T6061] hsr_slave_1: left promiscuous mode [ 1634.029538][ T6061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1634.073923][ T6061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1634.133595][ T6061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1634.180703][ T6061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1634.261175][ T6061] bridge_slave_1: left allmulticast mode [ 1634.296211][ T6061] bridge_slave_1: left promiscuous mode [ 1634.350671][ T6061] bridge0: port 2(bridge_slave_1) entered disabled state [ 1634.416625][ T6061] bridge_slave_0: left allmulticast mode [ 1634.442717][ T6061] bridge_slave_0: left promiscuous mode [ 1634.477373][ T6061] bridge0: port 1(bridge_slave_0) entered disabled state [ 1634.791391][ T6061] veth1_macvtap: left promiscuous mode [ 1634.818348][ T6061] veth0_macvtap: left promiscuous mode [ 1634.857684][ T6061] veth1_vlan: left promiscuous mode [ 1634.895232][ T6061] veth0_vlan: left promiscuous mode [ 1638.820303][ T6061] team0 (unregistering): Port device team_slave_1 removed [ 1638.895350][ T6061] team0 (unregistering): Port device team_slave_0 removed [ 1638.966127][ T6061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1639.036726][ T6061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1639.547336][ T6061] bond0 (unregistering): Released all slaves [ 1639.682647][T17108] netlink: 'syz.4.2421': attribute type 1 has an invalid length. [ 1639.723156][T17108] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1639.758759][T17129] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2425'. [ 1640.076651][T14983] Bluetooth: hci2: hardware error 0x00 [ 1642.574860][T16966] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1642.696480][T16966] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1642.793350][T16966] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1642.842161][T17157] autofs4:pid:17157:autofs_fill_super: called with bogus options [ 1642.900013][T16966] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1644.465252][T14983] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1645.012865][T17154] ftl_cs: FTL header not found. [ 1645.243415][T17154] block2mtd: mtd1: [/dev/loop0] erase_size = 64KiB [65536] [ 1645.359382][T16966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1645.544273][T16966] 8021q: adding VLAN 0 to HW filter on device team0 [ 1645.655633][ T6070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1645.662973][ T6070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1645.821079][ T6070] bridge0: port 2(bridge_slave_1) entered blocking state [ 1645.828388][ T6070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1646.731234][T17208] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2435'. [ 1646.819910][T17203] netlink: 'syz.0.2434': attribute type 1 has an invalid length. [ 1646.971901][T17203] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1649.044325][T16966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1651.508450][T16966] veth0_vlan: entered promiscuous mode [ 1651.557909][T16966] veth1_vlan: entered promiscuous mode [ 1651.675456][T17229] autofs4:pid:17229:autofs_fill_super: called with bogus options [ 1651.767014][T16966] veth0_macvtap: entered promiscuous mode [ 1651.833313][T16966] veth1_macvtap: entered promiscuous mode [ 1651.950673][T16966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1652.028186][T16966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.086425][T16966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1652.140447][T16966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.190246][T16966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1652.237866][T16966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.285574][T16966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1652.325502][T17245] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2443'. [ 1652.375732][T16966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1652.448975][T16966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.496888][T16966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1652.557224][T16966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.675175][T16966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1652.728033][T16966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1652.801276][T16966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1652.868150][T16966] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.970551][T16966] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.016550][T16966] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.079434][T16966] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1655.896647][ T6070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1655.974465][ T6070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1657.419914][ T6088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1657.428089][ T6088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1657.935491][T17278] autofs4:pid:17278:autofs_fill_super: called with bogus options [ 1664.538552][T17318] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12206] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[17318] [ 1669.703613][T17144] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1669.730581][T17144] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1669.739211][T17144] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1669.747999][T17144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1669.755839][T17144] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1669.779879][T17144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1670.023757][T17334] autofs4:pid:17334:autofs_fill_super: called with bogus options [ 1671.934950][T17144] Bluetooth: hci3: command tx timeout [ 1673.154228][T17328] chnl_net:caif_netlink_parms(): no params data found [ 1673.599245][T17361] binder: BINDER_SET_CONTEXT_MGR already set [ 1673.920630][T17361] binder: 17359:17361 ioctl 4018620d 200000004a80 returned -16 [ 1674.039257][T17144] Bluetooth: hci3: command tx timeout [ 1674.058127][T17328] bridge0: port 1(bridge_slave_0) entered blocking state [ 1674.107341][T17328] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.170486][T17328] bridge_slave_0: entered allmulticast mode [ 1674.326944][T17328] bridge_slave_0: entered promiscuous mode [ 1674.396032][T17328] bridge0: port 2(bridge_slave_1) entered blocking state [ 1674.453430][T17328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1674.512149][T17328] bridge_slave_1: entered allmulticast mode [ 1674.550481][T17328] bridge_slave_1: entered promiscuous mode [ 1674.590683][T17379] autofs4:pid:17379:autofs_fill_super: called with bogus options [ 1674.614494][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.629308][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.776274][T17328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1676.001147][T17328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1676.191959][T17144] Bluetooth: hci3: command tx timeout [ 1678.204724][T17144] Bluetooth: hci3: command tx timeout [ 1680.121634][T17328] team0: Port device team_slave_0 added [ 1680.129558][T17398] syzkaller0: entered promiscuous mode [ 1680.135765][T17398] syzkaller0: entered allmulticast mode [ 1680.425184][T17328] team0: Port device team_slave_1 added [ 1680.907870][T17328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1680.950553][T17328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1682.169946][T17328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1682.412764][T17328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1682.482404][T17328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1682.689782][T17328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1682.993425][T17328] hsr_slave_0: entered promiscuous mode [ 1684.639190][T17328] hsr_slave_1: entered promiscuous mode [ 1684.652807][T17426] syz.2.2484: attempt to access beyond end of device [ 1684.652807][T17426] nbd2: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1684.685423][T17328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1684.728569][T17328] Cannot create hsr debugfs directory [ 1685.621309][T17328] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1685.955308][T17328] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.286074][ T5782] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1686.310850][T17328] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.383165][ T5782] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1686.817849][T17328] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.446250][T17463] CacheFiles: No cache directory specified [ 1689.788234][T17328] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1689.901640][T17328] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1690.023220][T17328] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1690.303848][T17328] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1692.745394][T17481] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2495'. [ 1692.938061][T17328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1693.118131][T17328] 8021q: adding VLAN 0 to HW filter on device team0 [ 1693.193213][ T6061] bridge0: port 1(bridge_slave_0) entered blocking state [ 1693.200541][ T6061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1693.292851][ T6061] bridge0: port 2(bridge_slave_1) entered blocking state [ 1693.300094][ T6061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1694.505255][T17328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1698.059965][T17538] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2505'. [ 1698.550305][T17550] xt_connbytes: Forcing CT accounting to be enabled [ 1698.594959][T17550] set match dimension is over the limit! [ 1698.633163][T17328] veth0_vlan: entered promiscuous mode [ 1698.725526][T17328] veth1_vlan: entered promiscuous mode [ 1698.933578][T17328] veth0_macvtap: entered promiscuous mode [ 1699.002612][T17328] veth1_macvtap: entered promiscuous mode [ 1699.171784][T17328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1699.235658][T17328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.543063][T17328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1701.630051][T17328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.709681][T17328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1701.763368][T17328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.821364][T17328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1701.875287][T17328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1701.947752][T17328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1702.052901][T17328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1702.139268][T17328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1702.186150][T17328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1702.259412][T17328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1702.302717][T17328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1702.357761][T17328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1702.410320][T17328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1702.446193][T17328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1702.504080][T17328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1702.556087][T17576] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2517'. [ 1702.783524][T17328] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.849217][T17328] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.905577][T17328] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.954542][T17328] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1703.458356][T17607] syzkaller0: entered promiscuous mode [ 1703.493893][T17607] syzkaller0: entered allmulticast mode [ 1706.313161][ T6639] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1706.371589][ T6639] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1706.503161][ T6639] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1706.557846][ T6639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1707.176439][T17646] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2529'. [ 1707.695230][T17662] syzkaller0: entered promiscuous mode [ 1707.717437][T17662] syzkaller0: entered allmulticast mode [ 1710.743056][T17692] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1714.316394][T17715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2543'. [ 1714.638402][T17727] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2546'. [ 1715.165365][T17736] binder: 17735:17736 ioctl 4018620d 0 returned -22 [ 1715.413909][T17744] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1715.451581][T17745] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12206] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[17745] [ 1723.220940][T17764] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2557'. [ 1723.700156][T17772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2560'. [ 1723.744531][T17776] overlayfs: failed to resolve './bus': -2 [ 1724.040546][T17779] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[17328] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[17779] [ 1726.526883][ T5849] libceph: connect (1)[c::]:6789 error -101 [ 1726.548769][T17783] ceph: No mds server is up or the cluster is laggy [ 1726.601260][ T5849] libceph: mon0 (1)[c::]:6789 connect error [ 1726.931299][ T5849] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1727.180899][ T5849] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1729.379142][T17797] syzkaller0: entered promiscuous mode [ 1729.384840][T17797] syzkaller0: entered allmulticast mode [ 1729.428719][ T5849] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1729.487312][ T5849] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1731.769137][ T5849] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1731.778353][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.048395][ T5849] usb 5-1: can't set config #27, error -71 [ 1732.102602][ T5849] usb 5-1: USB disconnect, device number 39 [ 1732.196742][T17814] binder: 17812:17814 ioctl 4018620d 0 returned -22 [ 1732.318907][ T177] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1732.504299][T17818] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2570'. [ 1732.547858][T17820] overlayfs: failed to resolve './bus': -2 [ 1732.555535][ T177] usb 3-1: Using ep0 maxpacket: 8 [ 1732.576827][ T177] usb 3-1: config 2 has an invalid interface number: 111 but max is 0 [ 1732.827135][ T177] usb 3-1: config 2 has no interface number 0 [ 1733.184506][T17828] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12206] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[17828] [ 1733.208727][T14983] Bluetooth: hci1: command 0x0406 tx timeout [ 1733.230162][ T177] usb 3-1: config 2 interface 111 altsetting 58 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1733.389448][ T177] usb 3-1: config 2 interface 111 has no altsetting 0 [ 1733.604413][ T177] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 1733.664852][ T177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.805528][ T177] usb 3-1: can't set config #2, error -71 [ 1734.750372][ T177] usb 3-1: USB disconnect, device number 30 [ 1736.045965][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1736.158853][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1736.666499][T17850] binder: 17849:17850 ioctl 4018620d 0 returned -22 [ 1736.962101][T17857] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2581'. [ 1737.763339][T17871] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[17328] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[17871] [ 1740.578874][T17842] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1740.820622][T17842] usb 10-1: Using ep0 maxpacket: 8 [ 1740.861678][T17842] usb 10-1: config 2 has an invalid interface number: 111 but max is 0 [ 1740.915140][T17842] usb 10-1: config 2 has no interface number 0 [ 1740.956892][T17884] binder: 17883:17884 ioctl c0306201 0 returned -14 [ 1740.978716][T17842] usb 10-1: config 2 interface 111 altsetting 58 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1741.077908][T17842] usb 10-1: config 2 interface 111 has no altsetting 0 [ 1741.136136][T17842] usb 10-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 1741.204880][T17842] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1741.479023][T17842] usb 10-1: string descriptor 0 read error: -71 [ 1741.549054][T17893] netlink: 'syz.4.2591': attribute type 1 has an invalid length. [ 1741.600171][T17842] usb 10-1: USB disconnect, device number 16 [ 1741.640297][T17893] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2591'. [ 1742.226730][T17907] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12206] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[17907] [ 1742.878123][T17921] binder: 17919:17921 ioctl c0306201 0 returned -14 [ 1745.664096][ T5762] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1748.158754][T15612] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1748.257153][ T177] libceph: connect (1)[c::]:6789 error -101 [ 1748.286295][ T177] libceph: mon0 (1)[c::]:6789 connect error [ 1748.296197][T17939] ceph: No mds server is up or the cluster is laggy [ 1748.519234][T15612] usb 10-1: Using ep0 maxpacket: 32 [ 1748.790556][T17956] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[16966] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[17956] [ 1748.811817][ T177] libceph: connect (1)[c::]:6789 error -101 [ 1748.856710][ T177] libceph: mon0 (1)[c::]:6789 connect error [ 1748.913318][T15612] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1748.993730][T15612] usb 10-1: can't read configurations, error -71 [ 1751.199115][T17967] binder: 17966:17967 ioctl c0306201 0 returned -14 [ 1753.547790][T11912] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1753.889085][T11912] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1754.277254][T17842] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1754.619132][T17993] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[15369] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[17993] [ 1756.671699][T17997] syz.2.2620: attempt to access beyond end of device [ 1756.671699][T17997] nbd2: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1756.728952][T17842] usb 10-1: Using ep0 maxpacket: 8 [ 1756.857380][T17987] fido_id[17987]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1756.887157][T17842] usb 10-1: device descriptor read/all, error -71 [ 1757.397282][T18013] binder: BINDER_SET_CONTEXT_MGR already set [ 1757.432556][T18013] binder: 18012:18013 ioctl 4018620d 200000004a80 returned -16 [ 1759.936850][T18032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2629'. [ 1760.557211][T18038] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[17328] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[18038] [ 1763.242650][T18056] syz.9.2633: attempt to access beyond end of device [ 1763.242650][T18056] nbd9: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1767.749056][ T177] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1769.738768][ T177] usb 10-1: Using ep0 maxpacket: 32 [ 1769.770505][ C0] raw-gadget.0 gadget.9: ignoring, device is not running [ 1769.781250][T18076] cgroup: Unknown subsys name 'euid' [ 1769.792969][ T177] usb 10-1: device descriptor read/all, error -71 [ 1770.082050][T18076] socket: no more sockets [ 1770.679936][T18091] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12206] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[18091] [ 1771.535974][T18101] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2643'. [ 1771.641109][T18100] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1774.449437][ T5824] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1774.670278][ T5824] usb 5-1: Using ep0 maxpacket: 32 [ 1774.700939][ T5824] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 1774.887444][T18129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2651'. [ 1774.908852][ T5824] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1775.094403][T18132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2651'. [ 1775.128108][ T5824] usb 5-1: config 0 has no interface number 0 [ 1775.390888][T18136] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[12206] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[18136] [ 1775.464138][ T5824] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 1775.737302][ T5824] usb 5-1: config 0 interface 239 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1775.857391][ T5824] usb 5-1: config 0 interface 239 has no altsetting 0 [ 1775.912159][ T5824] usb 5-1: string descriptor 0 read error: -71 [ 1775.958786][ T5824] usb 5-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1776.020529][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1776.100253][ T5824] usb 5-1: config 0 descriptor?? [ 1776.137001][ T5824] usb 5-1: can't set config #0, error -71 [ 1776.149491][T18147] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1776.215782][ T5824] usb 5-1: USB disconnect, device number 40 [ 1776.930502][T18170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2661'. [ 1777.197183][T18174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2664'. [ 1777.260243][T18176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2664'. [ 1778.590726][T18222] device-mapper: ioctl: name not supplied when creating device [ 1778.755262][T10529] nvmet: connect request for invalid subsystem t! [ 1778.767109][T18214] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 1783.409169][T18269] netlink: 'syz.2.2684': attribute type 1 has an invalid length. [ 1783.817482][T18269] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1783.968091][T18273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2684'. [ 1784.723951][T18285] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[17328] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[18285] [ 1786.857546][T18288] usb 1-1: USB disconnect, device number 5 [ 1787.479195][T18309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1787.536275][T18309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1788.128960][T18316] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[17328] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[18316] [ 1788.942778][T18310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2694'. [ 1789.073475][T18327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2694'. [ 1794.441858][T17144] Bluetooth: hci3: command 0x0406 tx timeout [ 1797.486238][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.497315][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1801.857108][T18422] netlink: 'syz.4.2702': attribute type 11 has an invalid length. [ 1802.688986][ T5849] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1802.911507][ T5849] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1802.985670][ T5849] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1803.077674][ T5849] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1803.145091][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1803.208517][T18436] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1803.261420][ T5849] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1803.586420][T18436] vivid-004: disconnect [ 1804.097097][T18435] vivid-004: reconnect [ 1804.117618][ T5849] usb 3-1: USB disconnect, device number 32 [ 1808.739278][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 1808.772710][T18454] ceph: No mds server is up or the cluster is laggy [ 1808.781802][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 1809.274762][T18473] bond2: option xmit_hash_policy: invalid value (6) [ 1809.337433][T18473] bond2 (unregistering): Released all slaves [ 1811.854636][T18490] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 1811.885755][T18488] syzkaller0: entered promiscuous mode [ 1811.904942][T18488] syzkaller0: entered allmulticast mode [ 1811.911250][T18490] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 1811.985192][T18492] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2720'. [ 1812.005589][T18490] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x8012 instead [ 1812.033187][T18492] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2720'. [ 1812.067099][T18490] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0xb7c2 instead [ 1812.133240][T18490] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 1812.179997][T18490] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 1812.235582][T18490] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 1812.279755][T18490] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 1812.322713][T18490] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 1812.322798][T18490] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 1812.322830][T18490] jffs2: Further such events for this erase block will not be printed [ 1812.323129][T18490] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 1812.323144][T18490] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 1812.323158][T18490] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x8012 instead [ 1812.323173][T18490] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xb7c2 instead [ 1812.323186][T18490] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 1812.323199][T18490] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 1812.323211][T18490] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 1812.323227][T18490] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 1812.323252][T18490] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 1812.323276][T18490] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 1812.323289][T18490] jffs2: Further such events for this erase block will not be printed [ 1812.323596][T18490] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1812.323603][T18490] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 1814.661646][ T177] libceph: connect (1)[c::]:6789 error -101 [ 1814.832116][T18501] ceph: No mds server is up or the cluster is laggy [ 1814.853293][ T177] libceph: mon0 (1)[c::]:6789 connect error [ 1818.494374][T18534] syzkaller0: entered promiscuous mode [ 1818.538765][T18534] syzkaller0: entered allmulticast mode [ 1821.315311][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 1821.485669][T18540] ceph: No mds server is up or the cluster is laggy [ 1821.496271][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 1823.320342][T18552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2738'. [ 1826.616349][T18570] syzkaller0: entered promiscuous mode [ 1828.014720][T18570] syzkaller0: entered allmulticast mode [ 1828.195473][T17842] libceph: connect (1)[c::]:6789 error -101 [ 1828.229039][T17842] libceph: mon0 (1)[c::]:6789 connect error [ 1829.618054][T18572] ceph: No mds server is up or the cluster is laggy [ 1834.181608][T18605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2753'. [ 1843.319384][T18647] [ 1843.321771][T18647] ============================= [ 1843.326955][T18647] WARNING: suspicious RCU usage [ 1843.332131][T18647] syzkaller #0 Not tainted [ 1843.336692][T18647] ----------------------------- [ 1843.341654][T18647] net/mac80211/iface.c:378 suspicious rcu_dereference_protected() usage! [ 1843.350310][T18647] [ 1843.350310][T18647] other info that might help us debug this: [ 1843.350310][T18647] [ 1843.361985][T18647] [ 1843.361985][T18647] rcu_scheduler_active = 2, debug_locks = 1 [ 1843.370474][T18647] 1 lock held by syz.4.2762/18647: [ 1843.375728][T18647] #0: ffffffff8e3d70c8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140 [ 1843.385190][T18647] [ 1843.385190][T18647] stack backtrace: [ 1843.391192][T18647] CPU: 0 PID: 18647 Comm: syz.4.2762 Not tainted syzkaller #0 [ 1843.398664][T18647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1843.408739][T18647] Call Trace: [ 1843.412117][T18647] [ 1843.415108][T18647] dump_stack_lvl+0x18c/0x250 [ 1843.419888][T18647] ? load_image+0x420/0x420 [ 1843.424485][T18647] ? show_regs_print_info+0x20/0x20 [ 1843.429698][T18647] ? load_image+0x420/0x420 [ 1843.434225][T18647] ? print_tainted+0x14c/0x170 [ 1843.439050][T18647] lockdep_rcu_suspicious+0x1e1/0x300 [ 1843.444464][T18647] ieee80211_check_concurrent_iface+0x46b/0x950 [ 1843.450797][T18647] ieee80211_open+0xc1/0x200 [ 1843.455420][T18647] __dev_open+0x2cb/0x430 [ 1843.459822][T18647] ? dev_open+0x190/0x190 [ 1843.464175][T18647] __dev_change_flags+0x1e8/0x6a0 [ 1843.469227][T18647] ? dev_load+0x21/0x1f0 [ 1843.473520][T18647] ? __lock_acquire+0x7d80/0x7d80 [ 1843.478617][T18647] ? dev_get_flags+0x1c0/0x1c0 [ 1843.483433][T18647] ? full_name_hash+0x92/0xe0 [ 1843.488199][T18647] dev_change_flags+0x7c/0x1a0 [ 1843.493009][T18647] dev_ioctl+0x7b4/0x1140 [ 1843.497380][T18647] sock_do_ioctl+0x239/0x310 [ 1843.502084][T18647] ? sock_show_fdinfo+0xb0/0xb0 [ 1843.507018][T18647] sock_ioctl+0x5be/0x7e0 [ 1843.511415][T18647] ? sock_poll+0x3e0/0x3e0 [ 1843.515869][T18647] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1843.520893][T18647] ? security_file_ioctl+0x80/0xa0 [ 1843.526080][T18647] ? sock_poll+0x3e0/0x3e0 [ 1843.530545][T18647] __se_sys_ioctl+0xfd/0x170 [ 1843.535201][T18647] do_syscall_64+0x55/0xb0 [ 1843.539635][T18647] ? clear_bhb_loop+0x40/0x90 [ 1843.544465][T18647] ? clear_bhb_loop+0x40/0x90 [ 1843.549192][T18647] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1843.555156][T18647] RIP: 0033:0x7f6d1d19e0d9 [ 1843.559701][T18647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1843.579402][T18647] RSP: 002b:00007f6d1e0a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1843.587926][T18647] RAX: ffffffffffffffda RBX: 00007f6d1d425fa0 RCX: 00007f6d1d19e0d9 [ 1843.596022][T18647] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000006 [ 1843.604096][T18647] RBP: 00007f6d1d235024 R08: 0000000000000000 R09: 0000000000000000 [ 1843.612128][T18647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1843.620158][T18647] R13: 00007f6d1d426038 R14: 00007f6d1d425fa0 R15: 00007ffcbf76bc98 [ 1843.628203][T18647] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1845.124284][T18647] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode [ 1845.142031][T18647] mac80211_hwsim hwsim28 syzkaller0: entered allmulticast mode [ 1845.792974][ T6074] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1846.011949][ T6074] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1846.112413][ T6074] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1846.179910][ T6074] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1847.749824][ T6074] hsr_slave_0: left promiscuous mode [ 1847.779730][ T6074] hsr_slave_1: left promiscuous mode [ 1847.790831][ T6074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1847.798310][ T6074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1847.830169][ T6074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1847.837679][ T6074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1847.864684][ T6074] bridge_slave_1: left allmulticast mode [ 1847.887483][ T6074] bridge_slave_1: left promiscuous mode [ 1847.901916][ T6074] bridge0: port 2(bridge_slave_1) entered disabled state [ 1847.930092][ T6074] bridge_slave_0: left allmulticast mode [ 1847.935788][ T6074] bridge_slave_0: left promiscuous mode [ 1847.959516][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state [ 1848.029774][ T6074] veth1_macvtap: left promiscuous mode [ 1848.035361][ T6074] veth0_macvtap: left promiscuous mode [ 1848.061819][ T6074] veth1_vlan: left promiscuous mode [ 1848.067253][ T6074] veth0_vlan: left promiscuous mode [ 1848.800946][ T6074] bond1 (unregistering): Released all slaves [ 1849.620968][ T6074] team0 (unregistering): Port device team_slave_1 removed [ 1849.696929][ T6074] team0 (unregistering): Port device team_slave_0 removed [ 1849.767700][ T6074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1849.847581][ T6074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1850.425817][ T6074] bond0 (unregistering): Released all slaves [ 1851.064012][ T6074] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.192181][ T6074] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.290612][ T6074] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.395122][ T6074] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.725825][ T6074] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.841531][ T6074] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.922064][ T6074] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1852.031877][ T6074] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1852.386229][ T6074] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1852.513155][ T6074] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1852.613395][ T6074] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1852.744541][ T6074] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0