last executing test programs: 2h17m13.794217031s ago: executing program 32 (id=307): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1h50m28.754964097s ago: executing program 33 (id=874): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x2, 0x33fd}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x38da00, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x1, r2, 0x80000001, 0xfa80, 0x2000, 0x1fd, 0x1}) 1h31m15.044058971s ago: executing program 34 (id=1307): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r4], 0x1000f) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) 1h30m36.072400741s ago: executing program 2 (id=1319): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002980)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xf000, 0x7}, {}, {0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008020}, 0x0) 1h30m22.872502837s ago: executing program 2 (id=1320): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0xe4}, 0x5}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1h30m17.425477196s ago: executing program 2 (id=1321): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xff81, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000006800e97800000000040000000a0000000000000008020500facd", @ANYRES32, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20040090}, 0x80c4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0xfe60) 1h30m13.952693867s ago: executing program 2 (id=1322): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x38c7, 0x400, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$rds(0x15, 0x5, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)=""/204, 0xcc}, {0x0}], 0x2, 0xd43, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000100)=0x1) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x110000008}) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000ff623140fd0704005026010203010902120001000000000904000000ff"], 0x0) 1h30m0.86298085s ago: executing program 2 (id=1323): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a11803", 0x1e}], 0x1, 0x0, 0x0, 0x7400}, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f00000002c0)="851d8a90d516f218f839a7c48edfe734b2490c90a2fbf5be3383f1c9f5be8e55148723ac0258ef4f8af1f5e0b0a86885f018523d60072c7d9c1568700b3abe208fbd5dad2daf18b5150a530d816bf4cc6e43da4f2793611b38009e8c0970268cf5836926fd1223f4f8bec6a4a68b2aaff7af151a661793a04cd9b936da8f53eae2235678", 0x84}], 0x1}}], 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a320000000009000100"], 0x84}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1h29m55.882673496s ago: executing program 2 (id=1324): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 1h29m8.467474671s ago: executing program 35 (id=1324): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 1h6m40.071811029s ago: executing program 4 (id=1657): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$inet(0xa, 0x801, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000d80)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @remote, {[@cipso={0x86, 0x6}]}}}}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x1e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0xc, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x1dedaac2}}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0x0, 0xb}, {0xa, 0x7}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x9}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c861}, 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000900)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x449822b6a5d359e8, {0x2, 0x0, @empty}, 'veth1_to_team\x00'}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x60}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r11 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r10) sendmsg$NFC_CMD_LLC_GET_PARAMS(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000f00000008000100", @ANYRES32], 0x1c}}, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0xc00}}}]}, 0x38}}, 0x0) r14 = socket$inet_sctp(0x2, 0x1, 0x84) r15 = openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) fcntl$setstatus(r15, 0x4, 0x2c00) close_range(r14, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a00)=@newtfilter={0x6c0, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r13, {0xc, 0x4}, {}, {0x3, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x690, 0x2, [@TCA_BASIC_EMATCHES={0x170, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x9, 0x8, 0x6}, {0x3, 0x3, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd217}}, @TCA_EMATCH_TREE_LIST={0x12c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xdfb2, 0x7, 0x1}, {{0x1, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x2, 0x2}, {0x3ff, 0x9, 0x1, "7724c61ea2e403ba68"}}}, @TCF_EM_CONTAINER={0xc4, 0x3, 0x0, 0x0, {{0xc, 0x0, 0x8}, "41a63c8d72b29067fb6cfa92596425a8bcc8102325f82f59538692c1827411bf44f973e9e8b05a5e18652c0d3c91a2b47cd12054043d3e3fd6f0eccee11cb7bc962ec206d0b32926a08467a3b6239dbb4d7c7416191913b482912014400f1f649be5ffbd456d80b55b128f7e4371953879011dc57a156f79a20bc4670b6bcdaae21a59c005833167cce264f4126cadfba8086fd73a17d24a4a8c55a30f29aea339efd9cf7991c1e72ee50a8bc0d76aaf9534b72754d07f"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xb, 0x1, 0x100}, {0x3, 0xfffffffd, 0x101, 0x1, 0x9, 0x0, 0x1}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x3, 0x1}, {0x80, 0xfffffffb, 0x2, 0x9}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x2, 0x2, 0x19c}, {0xd45, 0x8, 0x0, "30119029e4c97705"}}}]}]}, @TCA_BASIC_EMATCHES={0x51c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x144, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x400, 0x2, 0x2}, {0x8, 0x0, 0x1}}}, @TCF_EM_META={0x10, 0x1, 0x0, 0x0, {{0x81}, [@TCA_EM_META_LVALUE={0x4}]}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x7ff}, {0x9, 0x7, 0x1, "0645a6fc0acd33"}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0xffff}, {{0x3}, {0x2, 0x1}}}}, @TCF_EM_IPT={0x38, 0x3, 0x0, 0x0, {{0x3750, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPT={0x28, 0x3, 0x0, 0x0, {{0x7, 0x9, 0x1ff}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}]}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x5, 0x2, 0x4}, {0x1000, 0x0, 0x2}}}, @TCF_EM_CONTAINER={0x18, 0x2, 0x0, 0x0, {{0x8, 0x0, 0x9}, "0ce2845ff87ed13560d1"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3b2d, 0x7, 0x6}, {{0x4, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x58, 0x1, 0x0, 0x0, {{0x7ff, 0x4, 0x3ff}, [@TCA_EM_META_LVALUE={0x20, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="45fb26ef871dc4", @TCF_META_TYPE_VAR="63044807e3de1ced145e"]}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR='\'', @TCF_META_TYPE_VAR='P', @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x5]}]}}]}, @TCA_EMATCH_TREE_LIST={0x18c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x38, 0x3, 0x0, 0x0, {{0x9, 0x4, 0xfff}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8c8, 0x7, 0x2}, {0x800, 0x44, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x8}, {0x8, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x9}, {0x7, 0xf7}}}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x2, 0x8, 0x5}, {0x1, 0x3}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8001, 0x8, 0xd00}, {0x4, 0x1, 0x6}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xc69f, 0x3, 0x8}, {0x9, 0xc, 0x3, 0x9}}}, @TCF_EM_META={0x5c, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x40}, [@TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="53682cc0", @TCF_META_TYPE_VAR='~', @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_VAR="018bb2fd", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="ca6470b4a5cfc2"]}, @TCA_EM_META_RVALUE={0x7, 0x3, [@TCF_META_TYPE_VAR="e7154f"]}, @TCA_EM_META_LVALUE={0x20, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="df3dc7848c9c88fa41", @TCF_META_TYPE_VAR="caa875c675c87e"]}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xff, 0x1, 0x7}, {0x10001, 0x8d3, 0x6, 0x0, 0xf, 0x1, 0x1}}}, @TCF_EM_CONTAINER={0x88, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0xff}, "02484305b6d6b5ffeebe6d378ae9e4df331561448bceaa6d2891e5186c35b53c6af6d3a853ddc026f41bcba7b5673953472f97cb44adafb147aecf28853a13f84ff55dc633987286d6514d1a3a3e593dc3c94f29097a1eedf861d1cc130df7e2a8adabcc2a57c6d9aaa373892dac73baafbc36126d48a89775"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x9}, {0x3, 0xf, 0x5, 0x6, 0x3, 0x3, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x20c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x100, 0x1, 0xe}, {0x7, 0x8, 0x7, 0x4, 0x3, 0x1, 0x2}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5}, {0x1, 0x1, 0x5}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x9}, {0x5, 0x0, 0x300, 0x0, 0x9, 0x2, 0x2}}}, @TCF_EM_IPT={0x1b0, 0x2, 0x0, 0x0, {{0xaa7, 0x9, 0xacf}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x97, 0x5, "8f4eb1ac58220904fae44f6ce9e59ea74b46ad76fcc8ea2332e63b2371fece2b847fdf1a565bf6bf09ee4d4786ce5746614c3288681b48a9c0e742ee050e2666f113b49d19e10f94f825331808e15fd79721b0a506f0b57a6f5785bd0ca4c9b768207d2f59b583d16749dbe25e7350bd06add266f8fa89f80ff087e3bf061eef215aeef7fbdff39fb98baa6c493e86c7ae57e7"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x59, 0x5, "79066054cc10cc8e054fce944710e0fc9199760fc3c39b3c78ad23ceb9789a80eff961e250afd903ca178038c8669b3fce43118fe6e729687cd648434320085e1128b26992e32348b1666f27231d9810124f775ac5"}, @TCA_EM_IPT_MATCH_DATA={0x99, 0x5, "79feea10fbf8ef11e32a0a1fddb1e408084ed0f0ab8438434196607c81a74317f23345caaf193719d21cffc31703287c70aa04739b07484a727740eb226e04b6eb96faf252f9af0c3af7d5fcf148f51d7a96ff25187b6f0e89884c93fa6bc2b3383d1b65a1bb9c30a5f1b784139b773761f7637ef4a1da5cbbf1b2aa7108a2db9d43a8aef2d8de478007050dbb44281e76654f26ac"}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7d86, 0x1, 0x6}, {0x4, 0x7b, 0x1, 0x1, 0x9, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x80}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe2b}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x7, 0x8, 0x5}, {0x0, 0x4}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xc868, 0x1, 0x101}, {0x80000001, 0x20e9, 0x1, 0x1, 0x2, 0x1}}}]}]}]}}]}, 0x6c0}}, 0x20040054) 1h6m27.874900301s ago: executing program 4 (id=1658): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x2c, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xd, 0x6c}, {0x1, 0x81, 0x1}}}]}}]}]}]}}]}, 0x70}}, 0x20040054) (fail_nth: 5) 1h6m22.253268454s ago: executing program 4 (id=1660): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) accept4(r1, 0x0, 0x0, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000700000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000840) (fail_nth: 3) 1h6m17.323355367s ago: executing program 4 (id=1661): r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000180)=""/32, 0x20, 0x0, 0x0, 0x3, 0x0, 0xa0}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000000)={0x1, 0x1, 0x10e, 0x1e, 0x3, 0x9}) 1h6m3.392827046s ago: executing program 4 (id=1662): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0x40049366, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1}}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) fcntl$notify(r4, 0x402, 0x8) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000000)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1h5m55.639343846s ago: executing program 4 (id=1664): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) getsockopt$nfc_llcp(r1, 0x6a, 0x5, 0x0, 0x20000071) r2 = socket(0x28, 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x80000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000) 1h5m9.389456784s ago: executing program 36 (id=1664): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) getsockopt$nfc_llcp(r1, 0x6a, 0x5, 0x0, 0x20000071) r2 = socket(0x28, 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x80000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000) 54m57.271190896s ago: executing program 6 (id=1789): syz_clone3(&(0x7f0000000500)={0x140001000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mmap$usbfs(&(0x7f0000bdd000/0x4000)=nil, 0x4000, 0x4, 0x2010, 0xffffffffffffffff, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x280f28}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffe60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x800002}}}}) dup3(r0, r1, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="d05da8960000cb5d5cf5000001000000000000000c00000900"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) getpriority(0x2, r3) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000100)) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0xc80, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {}, {}, 0x0, 0x10, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6}) 54m48.703902747s ago: executing program 6 (id=1790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r1, &(0x7f0000002500)=[{{&(0x7f0000002340)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f00000024c0)=[@ip_tos_int={{0x10}}], 0x8}}], 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000002000)={0x30, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40005}, 0x841) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) 54m38.863318612s ago: executing program 6 (id=1792): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='fd', 0x0, r1) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)="282cbb9ea2c02361fa22e338250707afe8670a6e7c6b01928b57c433f8d25c632ba5fb24213568eaf3f50d9de5b015beeeb8823ca7f33b2d77", 0x39}], 0x1}}], 0x2, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6085, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 54m30.982530635s ago: executing program 6 (id=1795): userfaultfd(0x801) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x4b110c9, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x112dd10, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') read$FUSE(r1, &(0x7f000000c3c0)={0x2020}, 0x2020) openat$cgroup_ro(r0, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000940)={0x2020}, 0x2020) 54m23.701504861s ago: executing program 6 (id=1797): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100)="b85bef8dca17085614e412a7b138e6fc43abdd63d5c51d6924dfe0e778a080d5185ecde5604c418381150b888f6aa229e99fc5bf474f8c7d838f9ed7da85b060611286020afcfd2442ced1b361ea67f958cb237e328c821493375301a02fccdbaf02365c27c9ab3f6553122c5003f37d", 0x70, 0x20000000, 0x0, 0x0) 54m20.973330635s ago: executing program 6 (id=1798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100fffeffffffffffff0100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a0000000060a010400000000000000000100000008000b400000000078000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000400001800c0001006269747769736500300002800800034000000002080001400000001408000240000000120c000780080001001f00000708000640000000010900010073797a30"], 0x114}}, 0x0) 54m13.153560686s ago: executing program 37 (id=1798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) 49m52.804211225s ago: executing program 7 (id=1799): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) write$dsp(0xffffffffffffffff, &(0x7f0000000580)="c935c811c346b87a201dcac2ea", 0xd) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000b8000000b8000000f3ffffff0900000001000004afcb00000c00000000000000020000000900000003000093040000000b00000004000000070000000c00000008000000000000000e00000001040000fb0006040e000000000000090000000002000000000000010000000020006004040000000000000904000000030000000000000c05000000070000000000000e03000000000000000f000000000000100c0000000a00000000000001000000007a00300400616100"/212], &(0x7f00000003c0)=""/145, 0xd4, 0x91, 0x1, 0x3, 0x10000, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000c738000000040000090000000a000400", @ANYRES32, @ANYBLOB="0000000000000500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) r1 = socket$key(0xf, 0x3, 0x2) io_setup(0x801, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f0000001c40)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0xa000}]) socket$rds(0x15, 0x5, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x5, &(0x7f0000000140)=[{0xfff7, 0x8, 0x42, 0xfffff57d}, {0x3, 0x10, 0x7, 0x5b61}, {0x7, 0x7, 0x7, 0xc}, {0xae3b, 0x7, 0x9, 0x10001}, {0x53d, 0x7c, 0x81, 0x1}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x401c2103, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x300}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000200)={0x0, 0x22}) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0xd43, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000100)=0x1) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x159300) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x10580, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r10, 0xc0189374, &(0x7f0000000540)={{0x1, 0x1, 0x18, r8, {0x10001}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) close(0x3) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000040)={0x110000008}) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000ff623140fd0704005026010203010902120001000000000904000000ff"], 0x0) 49m33.442078988s ago: executing program 7 (id=1826): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = io_uring_setup(0x1693, &(0x7f0000000080)={0x0, 0x0, 0x40, 0x3, 0x1dc}) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x20) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000bc0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a630ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfbbee5a100668daf66ef25121ca65db1d172a489e35e43f2ced9183d48b5850b9e1de2c492604f7b27f030d82cf14d7bcbe35579bfbfbcccc3dceb90fc0075c0c67c8b887bd9356b0fc5e5479c0133683c922e936e6d9431f80a38a5f819c00801d677445ad545dd", 0xc5}], 0x1}}], 0x1, 0x0) 49m30.579493074s ago: executing program 7 (id=1827): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) getpid() (async) r0 = syz_open_procfs(0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', 0x0, r0, 0x0, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) close(r1) r2 = socket$inet6(0xa, 0x0, 0x6) (async) mq_unlink(0x0) connect$inet6(r2, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffe}], 0x0, 0x0, 0x0}) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0x19}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r7, 0x3ba0, &(0x7f0000000240)={0x48}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x6, r0, 0x0, 0x0, 0x0, 0x21be, 0xffff}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x709, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x4}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x6478c882}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48081}, 0x0) (async) r9 = add_key$keyring(&(0x7f0000000040), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, r9) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async) add_key$user(&(0x7f00000000c0), &(0x7f0000000440), &(0x7f00000005c0)="c259d36f2eed8f051680c492ad75d97a7684dbdfd822dba4395ccd487dce3efc69c73f5bdaf01784c2b8b665d703ee8e5f62", 0x32, 0xfffffffffffffffd) 49m26.029125647s ago: executing program 7 (id=1828): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x18024, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x120) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, 0x0) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r3 = socket$kcm(0x2, 0x3, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x18024, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000580)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x1d, r4}, 0x10, &(0x7f0000000680)={&(0x7f0000000600)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "db26ca7229393e9c"}}, 0x48}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) 49m17.649444773s ago: executing program 7 (id=1830): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000fffffffc00001c0012800900e7ff68706970000000000c0002800800140080ffff001f5e6f36a0f989500696ee11d353b4467a978343"], 0x3c}, 0x1, 0xba01}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000000c0)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r6, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r7 = socket(0x2c, 0x3, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYRES32=r10, @ANYBLOB], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xbc, r8, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ccdc2e70059b3dec713cbca8d7a460fc42a4510b753f9c1b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "caf4993b78ae945c84e85fb672a7e9f0c99c36c4e1774684"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "30d4ddf3c4363d759e7d6ce420dfa1f865a7d587e2d04940"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b07d12f30d110c03d023efd8b134ecb8a421bcf0ef37b1f2"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000091}, 0x4000) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r6, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xc17a, 0x6d}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x28000001) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r12 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r12, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {}, {0x1, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0xfc}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 48m31.686538983s ago: executing program 38 (id=1830): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000fffffffc00001c0012800900e7ff68706970000000000c0002800800140080ffff001f5e6f36a0f989500696ee11d353b4467a978343"], 0x3c}, 0x1, 0xba01}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000000c0)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r6, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r7 = socket(0x2c, 0x3, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYRES32=r10, @ANYBLOB], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xbc, r8, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ccdc2e70059b3dec713cbca8d7a460fc42a4510b753f9c1b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "caf4993b78ae945c84e85fb672a7e9f0c99c36c4e1774684"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "30d4ddf3c4363d759e7d6ce420dfa1f865a7d587e2d04940"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b07d12f30d110c03d023efd8b134ecb8a421bcf0ef37b1f2"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000091}, 0x4000) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r6, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xc17a, 0x6d}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x28000001) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r12 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r12, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {}, {0x1, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0xfc}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 39m2.892077195s ago: executing program 8 (id=1923): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x2c, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0xfbff, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xd, 0x6c}, {0x1, 0x81, 0x1}}}]}}]}]}]}}]}, 0x70}}, 0x20040054) 38m50.175452147s ago: executing program 8 (id=1925): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x8, &(0x7f0000000a40)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='selinuxfs\x00', 0x0, &(0x7f00000003c0)='usr\x87\xa8\xa9\x0f\x00\x00\x00\x01quota\xdch\x9ax\xdd\xb0yi\xd0\xd3,Q\xbdk\xa8\x1d\xac\xdcXC\x9bdr~\xb09\xe9\xd1mB\nD\x91\xde\xeeK\xc8\x97\xa55g|\xe8\'\xced\xe5\xd3~\x02;\\v(\x8d\x9c\xc8\x9d\x9a,\x1f\ti\x02lR\xa1I}\\\xb8K\x9d\xc6%\xcc\xa0%\x19\x87\xe3\x8c\xcam\xd58\x1e/\xca\xd2y.Lp`\xe3\xeb\xa1(ga\t\xa2\xd3\xecH\x81<.#\x13C\xe9\xdbb\xfcpr1\x90N\xa7\x90+\xc8\xd40\xd2\x97\x94\xc9&n\xd5q\xff\xe4\x00l\xd2F\xd46M\xc7\x10$\xde\xc2\xa5\x96h\r\x948\xc7\xf0b[\x82}o\xff\\+F\xbf+\x884\xe9jX\xa5\xfdW\x1c\x88\xb7') chdir(&(0x7f0000000200)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0xc, 0xfeff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfeff}) write$P9_RREADDIR(r2, &(0x7f0000000380)={0xb}, 0xb) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000000)='./file1/file0\x00', 0x0, 0x8}, 0x18) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, r4, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}}, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904"], 0x0) 38m34.163566625s ago: executing program 8 (id=1927): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1/file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000540)={[&(0x7f0000000140)='\f\xba;\\gy)T\xc4p \xf6s\x9bo\x8c\a\x13=\xfej\xe1\xc9\xd0\xc3']}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB="08000d000000000008003f000802"], 0x4c}}, 0x0) getpeername(r2, &(0x7f0000000040)=@ax25={{0x3, @null}, [@rose, @bcast, @remote, @rose, @bcast, @default, @netrom]}, &(0x7f00000000c0)=0x80) 38m25.398722835s ago: executing program 8 (id=1929): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff020}, {0x16}]}) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000001880)='./file0/../file0\x00', &(0x7f00000018c0)='./file0/file0\x00', 0x0, 0x9800, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2187017, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r2, 0xb, 0x2}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x26, 0x20, 0x0, 0x0, {0x1, 0x7c}}, 0x14}}, 0x40010) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000140)={@val={0x800e}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x14, 0x0, @opaque="6f841fcaf955c253e28c7ab3"}}}}}}, 0x3a) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000040)=0x4, 0x4) 38m2.182702438s ago: executing program 8 (id=1931): setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x1fffffc}) (async) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1000403, 0x2000000000032, 0xffffffffffffffff, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000d000000085000000d000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 37m59.411868087s ago: executing program 8 (id=1932): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) (fail_nth: 2) 37m55.411833644s ago: executing program 39 (id=1932): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) (fail_nth: 2) 36m5.042398814s ago: executing program 5 (id=1944): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000002c00)=[{{&(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f00000016c0)=[{&(0x7f00000000c0)="9ef69f9b8670f42fe36f9af9c90ba8f081b60ffadaa831d0c80cee48c2b7946ad749357109fea863fe2fab9a3e9ab3595d28759f24daa483f6cf2d420421569f9e835ee08dcbbbb9e7f54dfafa0b136f75d92febd4fac68d239af36f46f3fef15118659232757ebed0616da6634d34df8eeb565b39bbc97583fce094efed84aa2e69e806a778a9", 0x87}, {&(0x7f0000000240)="39b0b57d739dd3c20dea4f63a61caaae503f49a933f0de012dcbb31cf87699ff6d96806c717c2d63de7bb9a6f7f5b2ef3af0d96e66fefda47a8a00db478a707c350b02fa60e96b60144396c74b2954db2ab7817099ccbf0910e8b38d2a6ee93f59b8b99ece576bd226b5beace58968a3b024a12ca3657fe0bb7ba69944f2", 0x7e}, {&(0x7f00000002c0)="4f6949d4b670729118f167ba25e8f88c74340abacc59ee420d2da787936c2ea82285acac32df8ee7c6a2ef27ff086b85a63b5984b719392701585355b2197392783ac658483d1603e92e9259669ee111375675a094b017f0a7b3891748e3108d6c5ee2b5bb26c57224858bf6dca615362dabd938411df63214a1d36e3c1bb51a02016eade205ebfdc1aba0e74c521df429991fa731f050b7b6edfa98c68c043542ff57ce7a1ec598c67f47424b301da7f2140863a61f1840f1e6c1c382cd1c93b29d4bdbbb57f47326e274096f3fd275c025a2694b27f75ca65cd1030ee688b186360c84cc229ae8249e538a27e38d8c3ca81cde8860d4fd4ff95a782c46c47324b3ce298e7644e2b340724f788588c2ce74dc8b03ab815a0e87ae719fd6769dd997facde012636b6aeff0a53ca075238a417d966aa6a3a5f2b48ee2b34df317b5db9e17cd40407dabf6b4523688225a4c7e444ef73fdcb1895922c23dd638dada42ff65224abf12cb50e459e054d2585024f24c8d055b377b232deff40b51b074c75f33956a939656ee4557650c48f81e24580e4b6663cb8b8d675acf429f17ee35ad8f1d0b203c8cb0b487bc617f737c35fe4820938357ca3bfe0512ad9dc30b3f48e7f191757379acaf36477faeb1839f21f60a253ffb1a9f8ccff4ee79822b3e99403d0e34e2ab0902eeaebc36c8fa2f6afd62cd4f659b4197c9242650240da819980cec3f4fb7f5f04f2b1b80b54c9219cd2632f1cfe38f88fcbff5bb94c5c8d5c6f763bfc4f0d5d3d8c67a002e1f4a31c78cea224b1ef71a5e8e7bf92edd2810d5013ccc59649e99184a56fd17b8e17e0396aefbbb23453aa6abebd672c39553fbbe6ad0f4a2f01447aa3563ac0ee5fdcbbe108dcd3f73d777c60efcf5defcd0242b1bec22d96a4b2cf75f91f8ebcd4c164ccf9194eeaa44f871d89fc032e47da04b61694df91de6cef9b053d76e64d6413f35fcc7ef15c8fc6bcceeecd25eebba6fe505a8dc5632daab28e3cb6fe5778a04e8c48a154d1bec51fd99b1b3f14c04fbf52200a7bb87d92212e2a31c4be6cb308dc6ebd0a5a2c97ab2f278c751fee41b286515e4e283e3f941ce4338160cc0b7242c303678b9731d48ae3252976ed5241ba518b25898f83c926a7bba673221edefbf6621c2d8e1be4e2b87642bcefdea26d247ea718141421c0736d7f9079935d5391b52be17c55e0fca21cb870b0d7adb90affc9594b32c34ada4e79f2156a640c4de7c5161b31e20d33c4409b2dddd217bf7bd2f1813173b3187375c923bcbcfc1dfd7684cfe7aeb7747d38ae519578c4c3d8aa2fc7b809332eb3f773274df2812f2a61cdf23a4318a2d1a6dc9f88cfe47c818d46fa8513d253e10c4aa79bfca1d80cb0a4526e6fdd95893ce180df4987e1a785ba580f999f5b8d50b00986a5fc1ae8d0f16561bc22ad1d8c9da03d650c9539c842d5e2afa266eaec69a1e789f803051e2e896919704d98281fdfd512c98a5dde6ae00f3cbfa31d2748d79fa6317c0b73e288de6b61596ba53a76f3022d16b6f24b0879ef51626b7ce2931ca398b6e88823ba568934015def19213857525f111430e43e1dfc416b4e554323f6bab743e849254a8e8c8726dbc6519ba6604b5b45029282d1f4ff28775d13ec8006d99efd78ea78f116a0faf473194779729257d7081975577033029528d7cc753486f82c549a8665606f5819272f1deb01cb5e3ba648a5907dd9913173888081acc863bef4c35b64d33043be0e9d694acedf6ea17373d8677f6c526dfe564dc862c6dc4bd531659985a289c52ab4bfad3acbacc74dd0f066e999835af0b1938d318b9686481982b18e6f8cd9a8109047d485c8683bd94bf746274befa0c02e615b6adf3f8d200fe8d7cad231f79896e1d63bf7b3e174a9fc85931e1a01ed7fcf60da11111ed2b39906ede77b5b34559304f70500c6535e636d6792beab14937b1a55b6acab62c8c901217ae23ba784ee5835dccd77dcfe6136482da9fde53087acc25788c31e87659a6b31e5572bb659b48580b7019d1c496474109b6e16769b1b37be49536e0a61f99ceb73460075858024505177876dc14fbed95a3e91931a38e9906456e82ab2c4422a2c5f516aa831189b654036371e8d46a60cd1bb4a6568bc45f3715b128fdbec94f0cf93cf129c3b710c138d3a98b849a9fcfc78b730dc652d7ac988240919cb305ffa79818809b308dd80dd2d55157f6bc781340d421fd1367ccaaa39198cdf542d708019a65302f089879cc99f34551b923b8e3e82fccf1ce9194330cc99a32fbbba4f528c649a9263e7017255fff1da512d32be4d960a05339a3f6cdeb1059fb29e80276d057834118cba9f786c1e58c3c9cb5dc65a53a9cf5646385fba91ed6820e0e75d9e63c492813d0dd8d7f5d8247873cf5f109d0da4616816405ac26329bca66dc8fa2c4bff3d917c06b354db40b67a07303cd41c9986b205ea58669aafbbca47f355842e9306d9ba1fa1ecb977304bd17181d016145fb9275dbf884b19162934ccf7b0935e1ce6a282c2de81cdc88c18f3998457c596a9f2ab081062d12c1a53b90c3aa0d3b36f18a1e2ab0ca3e88b0b2e406d620d90dc420095592d6a64ea8edc118e82b9e09311a875df4d5273be587c7d2f5ed5baed264f41be2a4656fb2b795ea9866aca09ba1a561cfe106d4ddc8407fb20ea7d69c300b57ccb7261bd8a92c36e72410cd626b305fcf54072bcf182d7d4b7c1419c9367334e50405c50bd340252178b33f042cde2d8abef45a0b05827bf74e36544d604b6bf712368ce06c44615add3f7cfcb83b7ed711e3e5021882eb0c8f751f65a8d383e3716f84b585f6609a1947675234c2286108884ec41e4c5bd0cf1b18e4f548ae3d21092f69585f7028717a16bf29bd1d023b93f8cb44ff4b609f6cc1758ac1fbe51c7ce4e11a927e9e5df4d046b3259d17a9162cf248ca29caef7bbee11ece40cd75bf553233c46ebc2a243d7fadf573b560f25af5fe7986771f404f322ed951ac00cf642c0e4a7ee3b7252f585ee98ebbb16bf0e3c07ee8c244fe2ee12c3e5967cf899fed5d63700d8a1c79aced88011444cb66f0f9a6409db3cfb35ffb3825a2a65c09c635495d86e3f5e0b3bd7cc5ed09bde9ae3a9f31f4b20de64ccec611284663e982d24e2ca135be4e7aad60681009e66271bacde4b593803649e8c8957a00fae65bd270052d255b1f16eb69b80f1f0d24601b2b31fd8f7eaaec4edde0fee31797c49e0488a4f9e3ebf67174a53184a846245b62304b6f87fc7bc5d6e34f9e05f9d55be7c40a53788482e0bf0faff1841c57e4e7d44836c9152eec3a8e481365baac28a10c13fa5d1760db3d9ad7417a7d6d4b51c5d00226b6b35ba5792547c286a6c47a82bc59edab785f5cc16e898990f466a790fa3c21c45908dfefbbce73112c738328f5fe7bf0b80057ee24a6573951d2633a91e798e09ab5431ad8ba937454b2118f6c3cbd00cee7592dfbc9e142908d073f4ae292c845a7d95e6a527870a143253897a053a888f22f96f22f1b40b1c251013b480c5b7e85052d203625be0b9ef1b409c561e3a1794798e9822cc9ff8850bb82413f24568a204fbd15e518f8a0404da9b0ce82d6cb7b679ff23e239c4719fbd7db4e314c42dc6bb7671189b368bdbc0d8bec84b4b643adf5338308125746f4548072de2c5564a3801e7539a24d4581ed8f9e1b49f0149b97d06229d9f88372dc2e13410ca9897abbe170e4d6cdbc7a374a18e6e07078a8b5b8408ecaa610da22281a62353a5a42deeb6e6aaa86e445edef0d68787ea6f798d2fa655af69d4d1871bc5c0e87402464e4fc8a6d16402064b525188d8f28f97bcb158972cd3889afac8cf02ea839062dca2e0e50db0cebf66f11ea262e369410d6435c301f2be77d96cf35d5c74b97657cce089d15335f8c57c2b94806871971eb9d15b7b2df8f67d879c0deda9fea3e468bf3ff48e6d69f7822f2e2d2500e597bfe935398d23500b7971b509ddda4ad02dcc0f5eb73bb319629c8deacaaed759dca8344804d72508ec1356c7d4cbeaeef1adfda835d731aaf9f89ca960e74c38e43d655ce7e42106b3a8b6a26d1127faf6826c7dd81286cc01909b2814ebbff6428953f38fd07e9be4794abb654c846bbb215e9b26b1a2d9aac9c43f54909336208c54e925a2d7cb7043b54b20dee0afd8da68efb03b04875881d384c211865de6169d5bedb10228b6cd87333084d403e51bc4eec4ff4e29c58054f8b6aa78fb65b2274f86c072718346bf3061ef16383e76fcfb44821e5f88687352db56f3dbdb520da014fc54725385c6f8c2160d4055ff2c7c9424bcc25d848a737079bb320881c81078730b931406899bb31bb61d2eba0d779d06ad55460200d8034d0d3c8438e8347ecaf043ef1a84ee3d9ca249a5cd52135345637b17163afb4153540dbb919682a3edfb559d3f614eae5cc89a8a63b77951c28f3dfed1156e68e7105bdd3046de1d95804baf1664b8fed062211eddbfdfcf50b92d543fc4bef6449fcc9c3c46d30a6bf9ba078d8f2a898ca28a99cab13941347bc1ad24e2c684da5bf6c27669f126edfdf5cb795c7c1c6ddfad6c237369138125b3b714d49ecdbbe0681cc1c635ec7721cfdff8e3fa9cd4893fd2006a9593d59f63580acea9afdb7c45ee941666d026092a255950f76511a54394722361a21b47a6c3dc6eb98859c2bea8ed2bf0053f1f8581507f0e03d3565e22ed9f78df27ea0ca1c6697cf504291a42e1cbf03604e00a48935e75817994ca2d1e0a3b6a67907c7f73aaed5fd4bb6c2b0138801c59c2fb1714f3e4f9e547bcccfb8624e01de57d84bb5c965f83e47883cfad34aca1ce08afa3eae338a3c74e17dc8efe19c0bee2e82cf13f67d62a4ed94325b4b6e4599540bb07997ad133916a99d47caa3c16e3b29426e011c5c586c7ff17a92d624b3f7a53d75fe7bcd542793ef44203ada9ff9656a16157dc642226b0270349922d1a2d01d039db52279b897b6cece79f40cc99a438389b301ab9bc36f980386ba11fa70d55ef78907b55105773d691d4bd61bc08de1308fb7f9b5a31ce1122b443fe744b0faf4e6c5da7da7ddbf0ff4358e505d64925a88cdebc104a3d163941a96d436106cb5c1b3c67914fdd008244647862cbe629dc8555602c2abe1f27cee9e3f2366c6d035d15116b478dcca4c91c107f9198745ea527404e850bfea7eba0f9840e571fb20591033281473a4b4a07040aa08bee2045e05b7700110dc91a14ae0d6d0b2ecc1a1fd00c3b66790a2a6f60ab7ba658fcdeeeef22f11c886a9581a42313e2d54cda605ffa7f78796bbca04a108fc23036f808a282c00d01e793f95905fb1fa031c9fd730fd69fe653f2cf8149e1b0c68e6b1ec3c7c04e6758d149485a28deb1c53dcaa4747d603ab4b43d5e4499d3dac9d4974dcb8a489ac49fca78eb1874fa80e898ebbedd9ae1925877fb1348e9dd5b2ec47a7990a3b868111338ddf9c0d60a31bcb0cc7aefc0ebd8b4f178120aa6a6d8611afba7a6bd369b7e99c1c3b35b4b71c8f9e24f9c603a7f65adb060fff4b6c61bce0e9737830bb44e9d60ee9fac57b5035a3dddfdeb2681e852cffd8b5c13db1fe3f4fe817d4f3b445f9769261d67c5000d69713b8b7569868411a85a6b0387864ae144bb72d2dd1576859f60904e448babeab915fc964013066f8fba32593152f42f97b4152b29b54ffdfb630ad40e36208f11ce26d29686d186072a87766c08d6b6259b46dabd88003c518b3ba7b1fc7", 0x1000}, {&(0x7f00000012c0)="ce8a36fc4fbec8108e0878ac482938c169dad0fe3a7a21be9bb879f27107ccfcc5c486e9f50df8c79dcc6e50abf9be5d0d473cf72a4fcf382b52f72ca4de5d68d8b57b8edbcdd16325c1614eb78e7c5fb282c9ce85bfece018347222d71727f8e4881e40d2aa29fd6cc46bb0d232ba060cf247e6de9f8c0004e51147df63bda8826d654995473ba144829267113a46ae4373ccfff3bb3d6b8e7674032a123d20f03c1a3a3b71b8d82f292cd352c382790634a5f4d88ca8e055dc81898e1826f11603beef", 0xc4}, {&(0x7f00000013c0)="e13bf456584da20e6b7cde837499714b69f6c37fa44857566c20f5f223dbff079e99340b469ad20901f9730e734844e9135f6a1964c15021caea5614a1e238be2aa880a86a12f7a6a34a78e2503e81fcf5655cae7eabef20c05724a4d49f427744c20a39041a9d089c1a3f031c7955bff2cbb96c4580a963bdc34c73340cc96bdb", 0x81}, {&(0x7f0000000180)="e36921", 0x3}, {&(0x7f0000001480)="66ca10137d5abc7f799d0b96fe65800bfdc69eb2cf5c2a8db57de6ff8fbbb0a42d85c6ce833178a57b4dfa6cbf0c69203179c798122d29d6b7d158ef786df92f047f99d774e44802e79e5d73d8e842bd00fe1b1774dbe8d6fbfd86b2e58da8f35af304d657adee8de746bc7177bc497cad2bffcfde9ba72bc23d3e6a788b9f21d148a8c5e73a7ba6b7448cfc2a82ec1de4fc08a19849002a33757de397406e4013aa371d5191687515850c1d32e6c1b84f0c77b562c98fc397e27d12d59bd9f718286c0a3c2ec82e8cc96328be89066caf7913b6377d9f1bf971ddc0a4", 0xdd}, {&(0x7f0000001580)="0abff9d47ff9a7f202ed9b0d0bbaeb0a44a7", 0x12}, {&(0x7f00000015c0)="c7676a327af9b0e303172a6e25f338d1e11e961b32cb7943e5b1ce14621acedc8ee9c5f825e535cfc0ce5adbfc0118d38df7e307a7eeeecb8c81752b167bd3c64bcf4413ccf9f32b1d1ab05c29a317674b587ccee375374de146aeab925a67a8d70a09643656ecf0389ac586cf84db0355f31c481dd49ddade7231129ac6ae005519b2f99719ee2c7dc93bc394099f5cdea08c3c0a1ca127210e0c871bdeef00897ffe381e55c642d9c65fe9e4efc3de04d7779f37a09020b831aa5b4ee6a9d52ac092a2e8d7cf9fabecf55e43e4035e431f6b4521719638c6b2", 0xda}], 0x9, &(0x7f0000001780)=[@ip_tos_int={{0x14}}], 0x18}}, {{&(0x7f00000017c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000001800)="a073", 0x2}, {&(0x7f0000001840)="ba3516108c57042d9bf8db1e92dcfe48886e160cb35e19b8efb51ded26d184963b49d2aded6e3f10072cf7fb8a9f3f8644c21fe63029b165a19bcbd2f3457476d0d5568f18f2ffb09c4390184f021d0bc18bf668a7c0784790d092b91788b0594da256e8e1672391356c8243eb6a80b24c971a91bfad78bba6d7c1655783a770cd55517043988b258253372ee2a8992e1c64598a829fb7d86849e079fb", 0x9d}, {&(0x7f0000001900)="04d9fb959dfbb58a2c1ccc85b5575e95f9950f2050128c20f353d3498c679c96922eaf8497c75e04fb649fc6dad27426ea861dc8ab8b9d5f253e56c4b7a7d95e5a4f8ce9279a205d13c39f066ee1a9838be921d8e784255ecde9f807c3210111e141892446e9e0f8c5abce02cba7d9178152768451a0023c4bed8a4493a8610a65ba54d8c5026b906e527eadb1beb402a810e5aca40597ab1b445abf291768a2af024b2553e0a2c51cd8186bededb651377541b8a123b2f8851c3d370a52f0b818cc46e272eb68ea7b6b98fa244902aa0930a56e13508c17c9064ea1d9079c4b2b907dcc5fd310928a8266aa2a50a98da59d15", 0xf3}, {&(0x7f0000001a00)="958c3e55e02f11e94f881ce7f1db00aeb632ab2f95afbe0e61f9e62ff71545fa2458a194672501833bd4cd467656cffba4e6879b2bdd53f09ef3828266494a1d96e2e0ffb992e222f049c4c46490fabe25640d25937076b13ff24d87cc5524eb2e2afc6fa13f93abebc625b20a30e56e9f044dce737706fc3f56d7231a4f8330ced0bca3afa6796bde79a7a20aa72eaceee8e521174bd6359139d9056641ce23464f93cc959e19f6df2698e1d697895a0c9868a762c57caefc7ea8e62c500a4304b54a1e798cce878a70874d86cd10a6514df1603ad014089a78272fd9f9408ca4589f9958bfcca9df3df3dcdd93dd52609443c001d840198de10d4a76adf61138b12e555459f09ec77a62fc2c2e12cad032d0ce6e2f322ef411141350989c79f547033ee9ac386f67ae9c3d17d87c698b59c524d752908235876be7d7360448b74bbe49018261fb616b48d4f2aae2d6431835172d9b3b7c510cae1e4fe630b1968daeee9f8e0676a444cc481c6a50da765b46c9f55797f141e55b35d35b42718e93572117ffdea292d18586a8b116e235ca345b6a8979ed91c8ffc56bb632cc0c13263ce5cff3af93ec8866ee8edbef815a1233d3047fc27a6b0fbab9be1bafb8da8260ae25e67dbfdec0310a733aea3bc96019204533a79f0cc3fed2d76d12e29c3a7ba4cd78751300337b089ffcac1c12aa1e46097d80ac884ed988819974fe7bd89e802bf0a9bb3de45970ca8e99d6548a47c04147a6f0feefa3b5ce51c4c2554e0e06798122e70dde5af5c284046371b29b380ef63a1971de42ac2b280981555f14c5b1592dcd6017e8b4370914da41cd24f42cd30a8807095ef3bdc97763816e15473f848a046ef49ff94f94e6e442bd439d5d9d676f8b74c35d6265743317f0adeef7dad2c50e2bd28ca357e757162f82ff6bf07c961554ecd0f2cfadc415c9edee4cac6936558d6355657458301a39b9ad5b8032a2e07355bb13790a197ecab47366b06b899f1d1aeb9f2cbbb306a8f5d8b42226d49701da818ea309bbf86d0fbf99b0122147aecda501845bfac8bd52c77b030aaeec0599bcd6c243fbb0df40bc5f005da64569247012dca60d66223a63fcd9ec27642310aa7a0d924e207204d38fc9d117784c7571c574a212b4b688de1a821c9a0e3db753364f285d030a0b5b04b7d6780c4ebbd5897d899dc41561ed06cae70edbab8e96aa4841c60997227ee4cb9a85ea03358c06879aa9334fdd457a6e799c1882443895c88a2ee781a6f0d5cc05150cc88c9cdaccf1cef83cc7ff7e790f5a30f6030990eb0e32165f3005616651e8dee94696b2c912c6f92df78929c9fe76e473dc4a86160be6de08d848b3d125776e288fc00cedef655f47bf0b0a58f151e5d5f1752e10bb4e0a28c0f5b657b5f8591eaa8c9770d9d3ef53d799398741da210d1983d8cd906f2105a221ba2a96f63752f42798c5449d0ee4b2443c227ac8b6ff23e28cc194808fc7d1604a7a99cae8962d84e465485caf399249073769deda761e4dded8573e4c2f5b56578f951cce8a45574fe26c3b08215015d885635ec7e6d73d6ffe7b057663958cddaf8625f3341c5824431e9551505864c58bbb99748eb904ddca4aeff7425656c79c56877a727807bc9a2bfbe083b9b4e610e576f44e75b7c5e34d462d0c027959ab466f7119ab3b12a5c54f003a535cd86cee59f13cdd04602a2c94340e75360eb4cd6c6b846d2bdf6cfa4ea322a536e51a41b0eb3286f225812007550d35b7e6dd1e007cb86194cd1568d17d8d282be533eecb4c45ef9d5c4534ee9cdd412446a2bd976884627ef731feaaa9dbb2fea2edcd77698c0e07a0a2dfc267c25719f4a8ab1ae6d1eac20f47759b28849f8683704e31ccc317bc28ee2040c9bff92cfa1959b08ca81c1fd13ad31ffc9ff7d65a613e822267471c1993de1d1a48deb015362ca8c8eb56e919150be228b1c69266c9d7eb4804df9665b6923f085524e72d97a234e5ea007e7980dcffa5802070d8e33764c432c6ae57e5f72e05ebdebe6cbd89f2c5af24fe354e81125c8ffa084441ba221b00af5584536bcfe622b8372873f1d95c27c8e38cfad360e41254efa58750e6eeb0bc03f36a9ae2cf4a127b02eb304d7977ce61be174f19431d0db430f5374ff680c1f27fdb487e30ae928992371bccb493dca2666f0b2d1c93676bed4419a20b44cfe8950317ddb2822366d0c7643ca0f94c1af590073f0927ce6172e6f990efd74618d3ca9680c3e87956de3868a850774faf2c01c11094a15932b33bf47abda52bf5ed61aaf4259ec1b101f05775d4168edfe25d30ec01cd8c1bd28ffee3a8eccee3abad969aaafa12110cff94bf817688c4fcae1242799b9f2b1f97757daa0337df57d0be292f00d777006d0005ef0a891691c320ff505601b744d01b50d89cec93fcb054f776f21cd7b8cb66ad573759d399a3e9bc1f3e867dc2e30c6568152ba6add7eacba23a681b8bfb0fca5866b8789d1e657b6589fff98ce762249cee2e93450c5d7d264597665f7765a968a1bbd397452b49b8830b6af581900c0891973ccc9203403c91ca751fbbb18426786faf558f51ba0058b8098111774f6e27eb729b15985d4c3edeb43e90e67648516c132e3b9b140deb145f89cc04b5ed3f14abf561f05deed6c59fd571d35cff20242326eb0b54cfd79c639ece68c002e31e2f81c12098af58e781c37ea9e4b493afde2a2149be1f498195815a3161829932b0b21defdc0172c7994478470125c72208192af0bbc926d731d93ef0236c3726a3a970e03a482e0616ed7079e43c2f8606a908937ca83c8482a18fb6afb136cebf8a2ce2f1124326b4146518f1506894a5268ad6904cc3aa41ffc360d3fc1f150f5d954d6a6744486bb716da27d4c0ed63e2c61fb90c204edca8199980a917f73f270314116b71bb33dde65aed34d17524369ff2e75290806ffc6fa1a035e37b6319f072210513d4bbf4b15ff1c73c88aa89eb2edb7b59f30faa76e0dcf60a43ecef77baccc39f75a697a499b848cae17b1a008e0cf15541b3e4ee14dea0cf09b9263dc9bed6f33d6c2b020a08b94efe13c0890029c07dba5967bd0f99bcfaac82a8c1a10ca7999f60ceea0381d8d2495fb2732e837e5aa57bd538f305a750bc0f69c41f155a8ad7d82230b4c43afb160901da5ce207d54ad9a6ec5421d00b1232b33fa33d77ba4e9182354f382539faca6d9c6e5b8cb26e464b8ae2c2f48747eb75e5b40591233baaaf00c84fde8635a7d27d959dc168fb8c3bd367b2c4c153e91436be95ab28f706a70fc6f0b803eb91e210bf3450f2ee7e17e94cc2035f7723fb216b9521bbac0c6a0b3afa07ed5b19817f6cd7aa040c61a357d6fcdff5d0ceb7e768542112c052870f1f497eb2ddda321ac0724fce0a6a2727b1a14adf06ad0d1e41cb9ebbca606e96733b560f7e5f4978f8c9168ffdbf7ea2527830a5c19a2858e74c689f32f9ea4d3358ea290edbbe44d6aef8bbf9292cd29ff0c1ed7e3ec0a2d11c5a43fa7aeda894f225cc74e2fb7518efedf7ed75a68af1b6a8582a98ca21720c3aef560e5850d108b580e93d53fdfdc287f850cfecb396d2d258eaace85d796fce544bb3bf928c088a178f611666a07e2b685414e99f2335860529de17b3b8ddccc87fe9fdb4b7a4e14bc7fcf2a7b366d230ab98965ebf782786c275bdc502d27877a603e32fda9d2b97049daed1b1b758ccfcabcfcadf37191cfcb9afcfead31bf36fc4777d7eabbccc59b294d6a0757570ee696c2090c96176f204dd462c2ce30b02e7518215e572c0043d4d0005935c1f2bc7d00f36a91ed2729850bb99fddceb4bf270de941ab5b94f4b85573462a65baedc6fcb2a2a622d15fe537810994e6d6290cec58be7bba268993f4fafc2729bf6df69018734c12f869a20c533efe22b641978b193aa05a66cea22cb4a3389f549becb67ea8e03620292fef409a55c27581ebaef346fa41cb79c1f16e0f7ca73d021ebb29833594627f925357cfa08024076449e635d309d0e2ab87495c0b316a126d551d688b0f37d7b3c95e52b2120c12dcee697e5b121512f122c208f84e7bef28dc6f2cf2472837a8262d742da9377abab981abebd4ec4cf37446dab3c177fab97df30436c10b66de9526b4c9e6c779678321148cc4c07d4159d7b7d1fd28919d19e451845eae3ff5eb895274f082b96d30b0a3d967aecf417bc934401e94cee4947da730f85870632edac557566ad35ec8e14a9dc3f08471814ea606858d88ab87f67d6c7c15075b7801a4e7e3dfc6475dd3cde44408ecf13188f4a7fdfeae2bbcb2ac450c64095420a18b3d2bcee330cffc0d4b7113dc0d6d5a30261555085f159e0f65c235a773ff0333b3bc5eebdc97fa5be00cd28236f3e2569f1f678e70135540cb65b36d94b2b80cfaf0925fa76a7598c089930d1783a586c2371efaee165b9693d9bce398c8b9befe3d09a7e8519ce7ce6b4d49ae122e002aa2fa7614acfcda1c3e72ddb82f0223973bb017d604f83128e330da8159db93d7d49050df437aa39cf8ec1c4991870f4f4c6d56d49ac3b70b04a8791d1106fedf44bb4fb60b342235a93349bc4018faf3771adc46cc8f2974069381cddd36221c563cf1a567d58751fce44e68e4440ce6b6b3f2a0dcd65da96cbff9e76bd14776daa04cd74ab865bb0b7d8de8bac166b36cad25bc14fe5df7d9f11c6ec776cbe0e81995eff372a2202cd0f9039e76ef170c4e51e4b7c419b98c4bc9ac7efb3a5d731a457bf50b467ed866848e8a32e0794550ff19995e059b3224659a4965e0ac5f8c8f06260355cee0b2c2fc682dfb4937c90aa9d16d45e85f438ee506d836662b4f186301d4d27c20daef9d05d1de905eba6ecffae2cfe3fd211e54f17b0d55015e1d6cf36d733050caf493dfac8da5d3f77d3f48b1d5c5a20bdd4f0baa7f4dbb3b863333b7b60e334c50af4a9524a806cf660937b7100721e626be031acccc6b71c45a39c0b5ea7f6d7216f4820008e3cfa484c68c624c127a35a840ac160a0f58411c852e5abc479cb5d570be463809840d8d87ee91dd59cacef9b1ef1185582b91ba29cc3f56504a644b399cce124bcb786ed13e106620a1428a42347d74a484e9d9eb252085ce93a731be23d32e2d4961935fc2ef9a77c567b6177edade77e38cbbcc3593020f4b78963bc4931c6b42cd4f02235ec6e2bcc03046a844009e30181037d0c3181e06c78df83a8be2b5071bb05d6db4ef5eb311d38f5c60edf7ed2a72153bae25975ab5d10d0e75fdf750f587d29c3e0cd36de27839667ec4c4ded5838adf55af8285a4a608ca98bc576313d7d02b76214b7cea62dd5abfc7928cd402f601c35e89ffae55b036b2087c7357d9427ae9a92b59fecbe28859d4a934aef80f7a195b283eb3d72f4feb6267663cebd04c396f54c0b9d6dc6f9d9af3493a08b1ba243b0093870f02bcd2889034725e49434035e9d21831716bb9245f3d60e03458800d5a7f0a36ce5f2b3428a725c6a038de9d45c88b0303059aadce7a10bc4bb57dfb07f5be12877e32378b9d9fa1ba2a3d6d032baa400d07a57b360122b0c1a4537b97ebc05ea735cf405ef024dfe4419a5f53d7a3467922880f0cfa8300cba3dc9d45d3419c066fc5a64ef6f6b3d02ad6d04a0ce50f36fdaac58a76672b9b386b1ebfa66a4aa634afa68dcf78b6e0d0b7b4f3016aab8e3f30c3fb6fc625acb2a7a70c2b19e034abeb1e81f14ccef5c5f5b08f9854afc0cd8bb35699e04b46c5ab4a742fedde78703", 0x1000}], 0x4, &(0x7f0000002a40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp={0x44, 0x2c, 0xd2, 0x0, 0x1, [0x80000001, 0x81, 0xf7d8fab, 0x11, 0x3, 0x1, 0x7ff, 0x5, 0x0, 0xfffffffe]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x70}}, {{&(0x7f0000002ac0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000002b80)=[{&(0x7f0000002b00)="8aadd92d7c5d6ff600199039a631d57c96de9708db77766e3dcdb29e146be6ff3fed21a841cea66129324ba63d538ca000504d768e30b09616a4c40b5487e9dd2d3bb3e5462ad89691ad14e4d99cba2c2e9633cd61bc29320c3da1a060847c5694ee9ff4ddb8fd6b0f2fa454de6a5dfb087a3e8c5bbca8f52d61", 0x7a}], 0x1, &(0x7f0000002bc0)=[@ip_ttl={{0x14}}], 0x18}}], 0x3, 0x48050) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') fchdir(r1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000002cc0)={0x7, 0x5, 0x80000001}) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000002d00), 0x1, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000002d40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@ipv4={0x800, @icmp={{0x1f, 0x4, 0x0, 0x2b, 0x90, 0x65, 0x0, 0x2, 0x1, 0x0, @multicast1, @loopback, {[@timestamp_addr={0x44, 0x44, 0xd2, 0x1, 0xd, [{@private=0xa010102, 0x8}, {@remote, 0x3}, {@rand_addr=0x64010102, 0x200}, {@multicast1, 0xfffffffe}, {@remote, 0x40}, {@local, 0x4}, {@loopback, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @ssrr={0x89, 0xb, 0xcb, [@dev={0xac, 0x14, 0x14, 0xc}, @empty]}, @rr={0x7, 0x3, 0x66}, @timestamp_prespec={0x44, 0x14, 0x21, 0x3, 0x3, [{@multicast2, 0x6}, {@loopback}]}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x9, 0x9, 0x9, 0x0, 0x5}}}}}, 0x0) 35m57.637470231s ago: executing program 5 (id=1945): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x4, "ff00af88009aa57e708196941400efff00"}) r1 = syz_open_pts(r0, 0x141601) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="700000000001010400000000000000004a00000008000c4000000004200017000000007f000000c300000004000000f1ffffffd3000000ffffb10c6c4adb5711eb2b2af33f9cb801effffffb08000740000000002c00068014000500fc01000400000000000000000000000014000400fe88"], 0x70}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001a8020000a80050008000200000001000700fc000000000000bf00fd3a0000000000140035007866726d30"], 0x58}}, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = getpid() fcntl$setown(r7, 0x8, r9) sendmsg$inet(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)='<', 0x1}], 0x1}, 0x24044015) accept4(r3, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000040)=0x80, 0x0) r10 = accept4(r2, 0x0, 0x0, 0x80000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) write$cgroup_pid(r11, &(0x7f0000000340), 0xfdef) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x4, 0x418, 0xffffffff, 0x0, 0x100, 0x2b0, 0xffffffff, 0xffffffff, 0x380, 0x380, 0x380, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ip={@multicast2, @rand_addr=0x64010100, 0xffffff00, 0xff, 'ipvlan0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x6, 0x0, 0x969b4a3c59b7ff3b}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0xfff], 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x81, 0xc, [0x10, 0x33, 0x3c, 0x2a, 0x2a, 0x3f, 0x2a, 0x1d, 0x3, 0x40, 0x0, 0x19, 0xf, 0x35, 0x2f, 0x40], 0x0, 0x3c7e, 0x3}}}, {{@ip={@multicast2, @empty, 0xff000000, 0xffffff00, 'nr0\x00', 'vcan0\x00', {0x80}, {}, 0x6c, 0x2, 0x4c}, 0x0, 0x150, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@mcast2, [0xffffffff, 0x0, 0xffffffff, 0xff000000], @ipv6=@private2={0xfc, 0x2, '\x00', 0x5}, [0xff, 0x0, 0xff, 0xff], @ipv4=@private=0xa010100, [0x0, 0x0, 0xff, 0xffffff00], @ipv4=@private=0xa010102, [0x0, 0xff000000, 0xffffff, 0xff000000], 0x4, 0x80000001, 0x11, 0x4e23, 0x4e21, 0x4e21, 0x4e20, 0x40, 0x10}, 0x0, 0x10}}, @common=@ttl={{0x28}, {0x3, 0xfc}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x10, 0x2, [0xe, 0x32, 0x27, 0x3f, 0x4, 0x3d, 0x7, 0x2e, 0x38, 0x1e, 0x1d, 0x3f, 0x1d, 0x31, 0x2c, 0x25], 0x0, 0xb4, 0x1}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, 0xfff7, 0x6, [0x32, 0x14, 0x2c, 0x23, 0x9, 0x1c, 0xe, 0x39, 0x13, 0x38, 0x36, 0x6, 0x1c, 0x34, 0x1b, 0x2], 0x2, 0x5, 0x5000000000000000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) recvmmsg$unix(r10, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 35m35.251721017s ago: executing program 5 (id=1946): sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x4) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000004c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4c, 0xfffffffffffffffc, &(0x7f0000000600)="fd026d6e8c7d4b8232398be4d8ab1fb3f7357c1094506013470098448866805968ba3387f5782010171d4f65cc2298be76206550a19ad6d473b591672b6e4b4c6745eb951dd39051188f50e6"}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x7}]}}}]}, 0x3c}}, 0x0) 35m18.642633109s ago: executing program 5 (id=1947): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0x11, 0x0, &(0x7f0000001e80)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000030a00000000000000000000000000000900010073797a30000000000900030073797a30000000006c000000060a000000000000000000000000000008000b4000000000440004802c0001800a0001006c696d69740000001c0002800c00014000005300000000000c0002400000000000000000140001800b0001006c6f6f6b75700000040002800900010073797a300000000014000000110001"], 0xe0}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r5, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xc8, 0x0, 0x0}, &(0x7f0000001380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) r8 = socket(0x848000000015, 0x805, 0x0) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206070002030109022a00010000000009040000db09"], 0x0) close(0x3) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x10}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYRES16=r5, @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 34m58.161749644s ago: executing program 5 (id=1948): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x6d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x16}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x2}, &(0x7f0000000240)=0x8) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580), 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xb, 0xa, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001680), 0x8000, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, &(0x7f0000000700), &(0x7f0000000000)=""/59}, 0x20) syz_io_uring_setup(0x1c48, &(0x7f0000000340)={0x0, 0x74e6, 0x80, 0x3, 0x316}, &(0x7f00000003c0), &(0x7f0000000500)) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000740)={0x2, {{0x2, 0x4, @rand_addr=0x64010101}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r5, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x31, 0x0, &(0x7f0000000700)="49723b3ab53a13274c56e00d5be19f87e669877bbc7b7c0cb48fd1bbea1e688e7c84ccfb034a845b4493c90e1785234592", 0x0}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) renameat2(r6, &(0x7f00000003c0)='./file0\x00', r6, &(0x7f0000000400)='./file1\x00', 0x0) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f00000004c0)=0x917, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008086) sendto$inet(r0, 0x0, 0x0, 0x28008801, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r7, @ANYRES8, @ANYRESOCT=r7, @ANYRESDEC=0x0, @ANYRES64=r7, @ANYRES32=r7, @ANYRESHEX=r7], 0x7c}}, 0x40000) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120150020000000825030109021b000101000000090400000007010000090501020000000000"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {0x2}, {}]}, @fwd]}, {0x0, [0x0]}}, 0x0, 0x4b, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) 34m39.814090981s ago: executing program 5 (id=1949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r2, 0x251}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000020004c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c0009800800014000008000040012"], 0x94}}, 0x0) 33m52.264668711s ago: executing program 40 (id=1949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r2, 0x251}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000020004c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c0009800800014000008000040012"], 0x94}}, 0x0) 23m44.489905s ago: executing program 1 (id=2015): r0 = socket(0x10, 0x803, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) syz_open_dev$dri(0x0, 0x20, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), 0x8) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 32) syz_clone(0x100180, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x8) (rerun: 32) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r4, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x5, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0xfffb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x2, 0x4, 0x6, 0x1000}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800) 23m34.979566475s ago: executing program 1 (id=2016): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0xe2}], 0x50, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{0x74, 0x0, 0x0, 0x1}, {0x6}]}) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) ioctl$FITHAW(r1, 0xc0045878) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e) madvise(&(0x7f00003e0000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f00003e1000/0x3000)=nil, 0x3000) munmap(&(0x7f00003e1000/0x2000)=nil, 0x2000) 23m15.547141856s ago: executing program 1 (id=2019): r0 = syz_open_dev$audion(&(0x7f0000000040), 0x57fff, 0x581101) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 23m13.482197612s ago: executing program 1 (id=2020): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x4802, 0x80) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000100)={@id={0x2, 0x0, @a}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setns(r1, 0x20000000) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) chroot(&(0x7f0000000300)='./file0/file0\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x2, [@const={0x3, 0x0, 0x0, 0xa, 0x1}, @enum64={0x3, 0x3, 0x0, 0x13, 0x0, 0x5, [{0xc, 0x7, 0xa4b5}, {0x6, 0x0, 0x1}, {0x2, 0x0, 0x5}]}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x1}}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x5, 0x3}, {0x5, 0x4}, {0xc, 0x2}]}, @ptr={0x2, 0x0, 0x0, 0x2, 0x5}]}}, &(0x7f0000000a40)=""/4096, 0xaa, 0x1000, 0x1, 0x1, 0x0, @void, @value}, 0x28) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x38) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) io_setup(0x5, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000002400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x12c4431, &(0x7f0000000300)='usrq\x98ot\xcc') r5 = dup(r2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000500)=0x11) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') lsetxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180), &(0x7f0000000240)={'L-', 0x3}, 0x16, 0x1) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x40106614, &(0x7f0000000080)) 23m1.67089845s ago: executing program 1 (id=2022): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000080)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0xfc, 0x0, 0x5, 0xb3f, 0x8, 0x0, "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"}}, 0x214) splice(r1, &(0x7f00000002c0)=0x8, r1, &(0x7f0000000300)=0x4, 0x4, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x64}, @tail_call]}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0xd, 0x8, 0x6ac3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000480)=[0x1, r1], &(0x7f00000004c0)=[{0x0, 0x5, 0x7}, {0x2, 0x3, 0xf, 0xa}, {0x4, 0x4, 0x5, 0x8}, {0x1, 0x1, 0xb, 0x1}, {0x5, 0x1, 0xd, 0x8}, {0x1, 0x4, 0xe}], 0x10, 0x1, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0x3, &(0x7f0000000600)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd}, @alu={0x4, 0x0, 0x8, 0x2, 0x4, 0xfffffffffffffffc, 0x8}], &(0x7f0000000640)='syzkaller\x00', 0x1, 0x3, &(0x7f0000000680)=""/3, 0x0, 0x10, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x9, 0x5, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000740)=[0x1, 0xffffffffffffffff, 0x1, r1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000780)=[{0x0, 0x2, 0xc, 0x7}, {0x1, 0x5, 0x0, 0x1}, {0x3, 0x1, 0x8, 0x7}], 0x10, 0x214bf4a5, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000980)={@map=0x1, 0xd, 0x1, 0x3e, &(0x7f0000000880)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000008c0)=[0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000a00)=@raw=[@exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff}], &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x29, &(0x7f0000000a80)=""/41, 0x40f00, 0x12, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x239fa, 0xffffffffffffffff, 0x1, &(0x7f0000000b00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b40)=[{0x2, 0x2, 0x7, 0x9}], 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000009c0)={@fallback=r1, r3, 0x8, 0xb, r4, @void, @value=r7, @void, @void, r6}, 0x20) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000c40), 0x200202) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r8, 0x40505330, &(0x7f0000000c80)={{0x6, 0x4}, {0x4, 0x9}, 0x3, 0x1, 0x2c}) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, &(0x7f0000000d00)=0x2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000fc0)={{r7, 0xffffffffffffffff}, &(0x7f0000000f40), &(0x7f0000000f80)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001000)={r5, 0xffffffffffffffff}, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x12, 0x13, &(0x7f0000000d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x400}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e00)='syzkaller\x00', 0xffffffff, 0x4b, &(0x7f0000000e40)=""/75, 0x41100, 0x4a, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000f00)={0x4, 0x8, 0xe, 0x9}, 0x10, 0xffffffffffffffff, r7, 0x7, &(0x7f0000001040)=[r10, r11, r5, r5, r5, r5, r5, r5, r5], &(0x7f0000001080)=[{0x5, 0x4, 0x1, 0x6}, {0x4, 0x5, 0x6, 0x4}, {0x4, 0x3, 0x3, 0x3}, {0x4, 0x5, 0x1, 0xc}, {0x2, 0x4, 0xb, 0xb}, {0x4, 0x1, 0x6}, {0x0, 0x2, 0xe, 0x9}], 0x10, 0x10, @void, @value}, 0x94) fstat(r12, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000024c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004700)={0x11, 0x4, &(0x7f0000004500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc01, 0x0, 0x0, 0x0, 0x8}, [@generic={0x21, 0x6, 0x0, 0x3c, 0x5}]}, &(0x7f0000004540)='syzkaller\x00', 0x7fff, 0xea, &(0x7f0000004580)=""/234, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004680)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000046c0)=[r5, r5, r10, r5, r10, r10], 0x0, 0x10, 0x3, @void, @value}, 0x94) r16 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000004cc0), 0x46480, 0x0) read$FUSE(r11, &(0x7f0000006200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r18 = pidfd_getfd(0xffffffffffffffff, r11, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000008240)={0x0, 0x0}) getresgid(&(0x7f0000008280)=0x0, &(0x7f00000082c0), &(0x7f0000008300)) r21 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000008340), 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000008380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000084c0)=[{{&(0x7f00000011c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002400)=[{&(0x7f0000001240)="206e8fe3006d36f0ea49676657c07a3ac64582c98bed355a9b3a8988392a71d41649f1807ef7f4665f217a95a5a3624a76cecad5d5c6716112ba9de4176c406f7f676f63211240fb737fce3a49bab6638f0c16ed11030a33d184c09eef8e71ed434c63167fc7", 0x66}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="5f8edb236c4cf02090f5bd9f66649ff7f6b3387ee7ad34f86d8e63f28ffb4c35e60aa22b9fbf26bcadf12b1bef6708c199d31a35441155ddad191b94f10311084a5aabc59ffd6a2a1d5dce683c1a4f2f763fd894f3ca812ae58a4b602e0418df32ff4e6213", 0x65}, {&(0x7f0000002340)="2dc9952cded3a1b23a797cbefec2b4043f02e8a0538de97ca85a72722c06b9eccc9902e4e26982416f1ae9f83460e2895ac24a87381bcc26c3325c1c5f564fef7a370235237830af61e591bcef73ea06c24d8db5f96f46566f76911c80df43cfa441ce40f562b7a60baea85cdfc7bbf295f311aa4f2f44e92f7ec3898d3ca9e7db7af8185b75eed785112c9303a7de9693822e45cbaa26a39c920c2617927d36b875f97269", 0xa5}], 0x4, &(0x7f00000047c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r13, r14}}}, @rights={{0x30, 0x1, 0x1, [r1, r10, r0, r12, 0xffffffffffffffff, r15, r5, r1]}}], 0x50, 0x4001}}, {{&(0x7f0000004840)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004c40)=[{&(0x7f00000048c0)="24c74e4ed90822e2373dd2630239e4be3b551d7560c0f7054d2907f518a2921a29", 0x21}, {&(0x7f0000004900)="850d46760af89f9f3e190271f7388447f21ad7b2f4859013462f07b8f16efd736c48ce892e28fade03717a4adb943da12a03ee557ce26e77f87f1db014c73a6e5b094b118a3b48474f189b760e07bd8d3a363e13c158934224feccdc791ea40b07ff72f80de09f8c74b2d02c674396d90a55fdcc6946292b7f3997590849e464cd44fcc107497d09b6ddfa7f8a0a7d4835e6b117030d44edad30b44f5fd395f0a8c2c462124f5831cedf1d630a087119fd9388f24975c0d7358351f793085fb73593c91fa712102c54daa0ad3b6fb1f6fbaee5ef833db776bfe8355102044b9ca4f630c1", 0xe4}, {&(0x7f0000004a00)="d8d3df22bdb7b74a7c93a5b24885d4cfde8a19cc61f4f3cb16e7ca47c320c0a2bfdcd53b251cd498e39ec3704873c1cc1152f558570671846cc95e26181ce0530d803589d8e4c3687ec67306b897cc922570fe6a660874a880519bebb8ce96d8a5be2188b8d03baee250321c4dfdf0fb7a9b8c", 0x73}, {&(0x7f0000004a80)="f2064869a0f5dd983273248ab6338de8c170fc72886c021fd1afccf569b1b650edd9a8c44dc995e03579094bc5234136a73bb1958e9fc1ca7603a2dbacc11bb3cbe4858230c8d8aaf7cf2f00a504a62ad5aeb68fff1e6a8821050c3e464222f6fb717289e08027c00282cd67", 0x6c}, {&(0x7f0000004b00)="42f5f1c24a7359a483c7d1b9c6f1db5068391c5f8c468b300113ce87d4bf588eafef77eae8d6591d341cfb63834ce367e04400e4953f98b893cbedd2503edd307fdde8687e50ca4e25a4b89c98cd1e15e30025f699495d7e8026f6280afa108228aafd1f279c048a7ac9202f875e57ad9f32124286e8553ef5692f945f54bca5bc25ea084048a038e1d58bf048513bb1e3e52033ef97a926469c8f39949efe0e9ff139f8624052e9622946ba54926f25fce635dd4541119b2a1aafb23e6fb48c4a8e8f04abb3a346784fad718969", 0xce}, {&(0x7f0000004c00)="711697bae09f2afc", 0x8}], 0x6, &(0x7f0000004d00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r12, r3, r5, r16, r10, r4, r10]}}], 0x30, 0x40}}, {{0x0, 0x0, &(0x7f0000006180)=[{&(0x7f0000004d40)="e58152463e5d8f3e46007cb8880fb76145e01fadac396b6d8c4dca42a1afee70515efd771e31e22e53a22355a1357139de951dfc4770726035d00d76397a5a8495f621a57f38e1bb379cb610404c12877347a116575d8074eda1", 0x5a}, {&(0x7f0000004dc0)="1c0e65e9afa6e73931db12c548b9ad2cb5b099873cd2d3870bc1f9849568c6837758857bc8bef760df1de812ade22eedf50480235d025789586fc9b636c6f0dd6a54e96464fc504bf9a867bd4020b1a9d6bc00f30ee09f976c71dc50f46b9311214574b75366c9d62d9c1bf78e59dfd2dd8fc228b9c2c0b19ddcbda462c4aa625b6a3f35cb533e220417fdf9f4a3e470c5c497403599c9911c8d1fe7f379c72a40654f53d7ee4da60700", 0xaa}, {&(0x7f0000004e80)="ac3458db24313f6b04820e1608860d760121bc2e398c10fb6f1fcb16c28d73988c1185c3a6e9e1c4e7def846f2e4b0210af8f56f78662aa1e09156ecf33932ee96ff5289e293a1f5836730af39f489bf707668cffc02fe5e30787075919d6f502540f212fc5365ce45e580f2c4a6009798f78b5c348e81f0ba229dd63065b1202e35e5995a58ab72620755df5f43df3ab8dd3f6f1daf7d43849f5b14d238eae5be25", 0xa2}, {&(0x7f0000004f40)="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", 0x1000}, {&(0x7f0000005f40)="d4b89a1a", 0x4}, {&(0x7f0000005f80)="441baf034fa9c6def6474257427cca637c8f56a07bacdf3a9c3f665e730b1574bbb92cdcc651be74ebea512d029cc619df931a19468534bcdf298e927a0b7e591c21c77a839d45582e869c268d7289ece3e5b7af5e5af71f9de2a3b9aef24828302101f90d17fc8ae1924eb079827ae2891d921f38e4a5f0bd288bfb6daff6619400a078c6637137b8104375dc0581b644037c224864030b3b3f17d11cc62a619f7b40fec187082a69ff094a270b23ed0b3a11a5bdcc2738b3da2095", 0xbc}, {&(0x7f0000006040)="f4f59af1dec641da6a72ef5d7b6c3b56f962790edfc54b91c569c2a15c246a803c4098224f0c3d73170f3f3c01d41b0cf065b47471f8b6a8714a00eb7f119c991d2a783bfd5f4be1cb4f6a72cb3ba620ab9033b49687a952f0e2e3a6aec68ed47b4748519ea44492b02633d134ef25dbc3107aed26", 0x75}, {&(0x7f00000060c0)="4ef5891ff93bfde412c22259619ed850aff6baaac2817f9b66851c9c85921c02450e631a4b3512ab4c768b823ffedd3bf39d5664990de0ae974ba1d68d0aa074b0d2c9c3e720a5c5de86f6f79641f4ca31fd131c7e88db41cfa15093baf4db11afbbfdb0d73df2e40ad38eebfc27ef5ab5624a5bcde7c1ac5fba727c2ce5cc1721d5edb845d5091deba5d023df5969f66a8388ed6783df1c1a3d40d042a38c0217495c6a6e1f552d5f018f7a320599fee890f33bfbc474713003", 0xba}], 0x8, &(0x7f00000083c0)=[@rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r17, 0xffffffffffffffff, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r10, r11, r4, r18, r12, r1]}}, @cred={{0x1c, 0x1, 0x2, {r19, 0x0, r20}}}, @rights={{0x2c, 0x1, 0x1, [r5, r21, r3, r10, r8, r8, r22]}}, @rights={{0x18, 0x1, 0x1, [r4, r4]}}], 0xd8, 0x20040880}}], 0x3, 0x20000800) socket$nl_route(0x10, 0x3, 0x0) 22m57.975219618s ago: executing program 1 (id=2023): syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, 0x0, &(0x7f0000000040)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x440}, {r2, 0x10}, {r2, 0x200}, {r2, 0x8002}, {r2, 0x1516}, {r2}, {r2, 0x111}], 0x7, &(0x7f00000000c0), &(0x7f0000000140)={[0x9]}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7a, &(0x7f0000000000)={r3, 0x0, 0x3f00}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x401, @remote, 0x7fff}, @in6={0xa, 0x4e20, 0xd, @loopback, 0x567}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in6={0xa, 0x4e22, 0x3, @loopback, 0x401}], 0x74) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, 0x0, &(0x7f0000000040)) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r2, 0x0) (async) ppoll(&(0x7f0000000040)=[{r2, 0x440}, {r2, 0x10}, {r2, 0x200}, {r2, 0x8002}, {r2, 0x1516}, {r2}, {r2, 0x111}], 0x7, &(0x7f00000000c0), &(0x7f0000000140)={[0x9]}, 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7a, &(0x7f0000000000)={r3, 0x0, 0x3f00}, &(0x7f0000000080)=0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x401, @remote, 0x7fff}, @in6={0xa, 0x4e20, 0xd, @loopback, 0x567}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in6={0xa, 0x4e22, 0x3, @loopback, 0x401}], 0x74) (async) 22m51.564085594s ago: executing program 41 (id=2023): syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, 0x0, &(0x7f0000000040)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x440}, {r2, 0x10}, {r2, 0x200}, {r2, 0x8002}, {r2, 0x1516}, {r2}, {r2, 0x111}], 0x7, &(0x7f00000000c0), &(0x7f0000000140)={[0x9]}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7a, &(0x7f0000000000)={r3, 0x0, 0x3f00}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x401, @remote, 0x7fff}, @in6={0xa, 0x4e20, 0xd, @loopback, 0x567}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in6={0xa, 0x4e22, 0x3, @loopback, 0x401}], 0x74) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, 0x0, &(0x7f0000000040)) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r2, 0x0) (async) ppoll(&(0x7f0000000040)=[{r2, 0x440}, {r2, 0x10}, {r2, 0x200}, {r2, 0x8002}, {r2, 0x1516}, {r2}, {r2, 0x111}], 0x7, &(0x7f00000000c0), &(0x7f0000000140)={[0x9]}, 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7a, &(0x7f0000000000)={r3, 0x0, 0x3f00}, &(0x7f0000000080)=0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x401, @remote, 0x7fff}, @in6={0xa, 0x4e20, 0xd, @loopback, 0x567}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in6={0xa, 0x4e22, 0x3, @loopback, 0x401}], 0x74) (async) 22m50.328450283s ago: executing program 9 (id=2025): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/185, &(0x7f0000000140)=""/92, 0x3000}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f00000001c0), 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r5 = socket$nl_crypto(0x10, 0x3, 0x15) syz_emit_ethernet(0x80, &(0x7f00000005c0)={@multicast, @random="28feee412b8f", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ddff00", 0x2d, 0x2f, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x0, [0x7ff, 0x1]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x6]}}}}}}}, 0x0) sendmsg$nl_crypto(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)="7270aa3f0c63ef31716980d71af481e691d156e5c690c37493c965008b713ed133a85027d43b49d05b8ec0e538f674752205f76fb42632a5233a7d64e1cea692029b6a", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x11}}, {}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000040)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) 22m34.222686258s ago: executing program 9 (id=2026): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a23000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ea6000/0x3000)=nil) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000563000/0x3000)=nil, 0x3000, &(0x7f0000000000)='mqueue\x00') r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x149283, 0x0) ftruncate(r0, 0x6) syz_clone(0x0, &(0x7f0000000180)="521c9138beea8215a01956523d63e1b2e8025b7de1e5f3e9b4f39587413b91884d5816a2e482ebe14e28c783a0199225507ff6d1bb5c7bc2fde9aec42623de748c11f1b729f2bed62968184eff2f0bcbfa179123da2657d93b847d226b2d43d5cee2bde43d75364fbdf3eda9079525f19acfee2dc24a72aef237d898e9322f77e32636a65974ce07c16c25263587da7eb1d2d7308ea58318c6d33f48627b266a2048b11d20a5f264c9e887e73cb0f73a02c7134ee6f5037c48bb02930c012b09c0fa572227033d569c454358d860da5ca21ccfe1bed7a6e0ccde05d389e61708000000e077fd717e458cf53ab12ccd45722dd44b46af9e3b6ce63abd290627956d410a93aafa20416bf4dee797ab31e597d09bbcdc13860d78b3292c0f40c5a1f1ec77e20a966b559b9817f1550f5674c5714be57840beebc17a0b950373d8d8faf952154ca869b72129447461f59eacfcc60856b55000b7aba25116ec53c83884da4bb6fd12731162fa564438b34176df738f35cc3f67ee777028d7e314f613c9632cc9c9738f418397612d7c52f558839b9d", 0x193, 0x0, 0x0, 0x0) 22m23.694647585s ago: executing program 9 (id=2027): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000000)=@in6={0xa, 0x4e22, 0xfff, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="f2058c54bd219692af3fc14eb3c6ef422168dcb4b93a4da0228c689fbda78cfcf1e69f0b0384adaaf679dc715a2ee7d3d5c9e44612d80fbbabe47c9565decd08ca8e0fed2fb688c00a872ef784b87e60d7134134c265cb37cc73655cbeaa0042e531a292cde299b96cc17255a51b84fbd5510b0aa871fbeb931c86451cd29d9ed3aada22d814c180d4ed72935a6a2e72748ef2d1e4d868fd9ca8ef751603ad9bc434c7ceb5f523fe0f3ad85641746358d5c0", 0xb2}], 0x1, 0x0, 0x0, 0x24000885}, {&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)="3774de26f4c6ca0c8f5ac30ddd1492929567feb8d1f7bfd2f434cd94db7a33699c8b621081dfc29295a81487e66d056ccfe525578374dae0c02140ff2a77f49190481c5d066bb3a863", 0x49}, {&(0x7f0000000200)="616de3b6", 0x4}, {&(0x7f0000000240)="98ff7e368c0d3da6924d37e4e03c5b63e7be0e63b1eadc0d43b066ef50fb6662982c5d0e1e2c9e35614c6fc1f4d7a9c1e7c3283109614d69d0a8de7ee14077c8b368bb6144a1ae0648c1a4f572143bc1626fc6685c31ea27b04f649ef42bb1f799426d931f6e88929083bb3039a14ed4992c54e6a69073877b0f13d988538df603d3f97eed235c2e53cab0518862", 0x8e}], 0x3, &(0x7f0000000340)=[@init={0x18, 0x84, 0x0, {0xfff1, 0x86, 0xe, 0x4}}, @authinfo={0x18, 0x84, 0x6, {0x8}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x1ff}}, @authinfo={0x18, 0x84, 0x6, {0x8}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}], 0x78, 0x2}, {&(0x7f00000003c0)=@in6={0xa, 0x4e21, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x40000}], 0x3, 0x800) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e22, @loopback}}, [0x3, 0x7, 0x9, 0x5, 0x8, 0x7, 0xa, 0x9, 0x2, 0x5, 0x80000001, 0x4, 0x9, 0x3, 0xf]}, &(0x7f0000000600)=0x100) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000640)={r0, 0x3}, &(0x7f0000000680)=0x8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000700)=0x1, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000740)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0], 0x0, 0xe4, &(0x7f0000000800)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xe3, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000a40)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6c, r3}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000a80)={r0, 0x6}, &(0x7f0000000ac0)=0x8) pselect6(0x40, &(0x7f0000000b00)={0x4, 0x6, 0x1, 0x8, 0x32887260, 0x1, 0x9d, 0x8}, &(0x7f0000000b40)={0x9, 0x9, 0x7, 0x5, 0x7, 0xffffffffffffff01, 0x6, 0xffffffffffffff00}, &(0x7f0000000b80)={0x3, 0x9, 0x9, 0xffffffffffff46fa, 0x2, 0x200, 0x7, 0x40}, &(0x7f0000000bc0)={0x0, 0x3938700}, &(0x7f0000000c40)={&(0x7f0000000c00)={[0xf]}, 0x8}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000c80)={r4, 0xd2, "df80cc94c1ffda795ba86aee1544f394dd696b22614c558d80b34fa61b304a77c8020229996d1fc7673bd685f3e3d5d94b1f845d9f49113a5844131698556dbc8347b89053c7e96a31ad19e8ddc7579c54a986ae46457615f32c0f6521b00476233a8d629fefa6ae10943fea80cdcd2980ca39fcb4fc74e46a9eb8d39176a93f0b3e14a1beea4f605fe890fcc8c280effb7c5674859f037a33c0d937dd5f5f458c5ebc4e8ae81b0d2db08b92dc083332e484aa988e1877a9e93ad19e1d8b2cdbf42b68115060b3874929f953b1b8d8892f73"}, &(0x7f0000000d80)=0xda) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x4c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r7 = memfd_secret(0x80000) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000f00)={r5, 0x7, 0x400, 0x800, 0xf, 0x92, 0x2011, 0x7fff, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x8, 0xfffffffc, 0x5, 0x2, 0x9}}, &(0x7f0000000fc0)=0xb0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r2, &(0x7f0000001040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000001080)={@dev={0xfe, 0x80, '\x00', 0x3a}, 0x49, r3}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0x25, &(0x7f00000010c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x66a40689}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x7, 0x1, 0x0, 0xa, 0x2, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x447a, 0x0, 0x0, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000001200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x10, '\x00', r3, 0x0, r7, 0x8, &(0x7f0000001240)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001280)=[r7, r7, r9, r7, r7, r1, r7, r1, r7, r7], &(0x7f00000012c0)=[{0x2, 0x1, 0xf, 0x1}, {0x5, 0x5, 0xb, 0xc}, {0x5, 0x2, 0xe, 0xb}, {0x0, 0x2, 0x8, 0x8}], 0x10, 0x7f, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000014c0)={@map=r7, 0x13, 0x1, 0x400, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000001400)=[0x0, 0x0], &(0x7f0000001440)=[0x0], &(0x7f0000001480)=[0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001540)={0x6, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001500)={@cgroup=r7, r10, 0x10, 0x2020, r7, @void, @void, @value=r12, @void, r11}, 0x20) syz_usb_connect$cdc_ecm(0x4, 0x52, &(0x7f0000001580)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x9, 0x50, 0x5, [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "0d4cdd8b89"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x3, 0x6, 0x1}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xfa, 0x3e}}}}}]}}]}}, &(0x7f00000018c0)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x110, 0x3, 0x6, 0xc, 0x40}, 0x10, &(0x7f0000001640)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0xc, 0x3, 0x45, 0x8, 0x1}]}, 0x3, [{0xe0, &(0x7f0000001680)=@string={0xe0, 0x3, "8c3bf00cb69dd4c0e3e5654eb849780caca1acd5f95ac913e597d8f823d1838a6fc00aed3bf8b1cf33a01dbdb5bc7b0b742368d254ac1b482b29468fa8ecf9b5eecdb647d12d7ed8cdf4dc07483f2fb4cf7a2e853f088d4c553cb99d9057f01460c67732b2d5dca18fdec4b8310b30e4099ab93caa99b7fb600a3aaf8eb4fb5e5e53e3a3d1cb2489d04af7feeb17890456e10bf0123342203aa4d1210e5aee5be967d0bfb0c4919c38cbfa27be8ba3322a87b5e364508c80ae7a9cb333bcf9602f1eb5daea59d65e34312d210abc7431adc114953c7c1e8066c99eb23fa6"}}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x44a}}, {0xd6, &(0x7f00000017c0)=@string={0xd6, 0x3, "6ae0d538f45d5bfb220fe92f472f6fcf55bfe881151b45ba13817976f0eafe463dab0e4a16f238a1561b16966c1ae200562ed83445cdf559260067e98810915eebca58b448c29532cd9f174e6c7f209ba1ff11f87b5bc135bd7d7f68560170e2ea4b2efdf24dd449451dad7d3f23ab7cf39804a65e82ceb281425ef244a56d6bbde95c93de651df0cc04720f2142d4a4eb844173304c5aef6896a5599540c8b49a40c620a7e02dbf96e5cd2165fd98b76263ca5365d89d5fa2abf51cfefc49f189b9dfbda140fc2dd4ffc139c89aedd496ac1097"}}]}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000001900)={r4, 0xa0, "aeb74e93db3c9e5df3ed1410877942680e3066cafcdaed5cfa8a85c7fcf9b40e916a93479597d9a84f6d3c6e6255e8741d9fb1f2ee81a49d02c7c17247424bc3b0d875bd405cbd1f704a55d7e2610bdcc7752a06a764fafea8bd5595a2652bbce79707da0f3a52d44b52000790e141514d1e6b2e705f563cb9bb588b0543b50d2d1668d5ddfbb9406ac0f17575c1a93afeee3bc07e583aeb5274de6cf2fb2ae9"}, &(0x7f00000019c0)=0xa8) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000001a00)={r13, 0xfff, 0x200, 0x10, 0x1ff, 0xa, 0x40, 0xff, {r0, @in6={{0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00', 0x3}}, 0x8, 0x1, 0x6, 0x3ff, 0x10}}, &(0x7f0000001ac0)=0xb0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000001b00)={'vxcan0\x00'}) setsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x4, &(0x7f0000001b40), 0x4) read$FUSE(r7, &(0x7f0000001b80)={0x2020}, 0x2020) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003d80)={0xffffffffffffffff, 0x20, &(0x7f0000003d40)={&(0x7f0000003bc0)=""/74, 0x4a, 0x0, &(0x7f0000003c40)=""/226, 0xe2}}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000003dc0)=0x2, 0x4) 22m6.605274082s ago: executing program 9 (id=2028): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'bridge_slave_0\x00', 0x0}) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a01010000000000000000050000000900010073797a30000000000400060070000000030a01030000000000000000050000000900010073797a30000000001c000880040002400000000000000000f000014000000000000000000900030073797a3200000000280004800800024000000000080001"], 0xd0}}, 0x0) r1 = syz_io_uring_setup(0x235, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) madvise(&(0x7f0000ad2000/0x4000)=nil, 0x4000, 0x10) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) listen(r4, 0xb) landlock_restrict_self(r5, 0x0) listen(r4, 0x0) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000ccc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000b0e000/0x2000)=nil) mremap(&(0x7f000041b000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000c67000/0x4000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 21m49.665104393s ago: executing program 9 (id=2029): socket$unix(0x1, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) 21m42.012181708s ago: executing program 9 (id=2030): madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3011, 0x17) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x0, 0x8, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000000140)=""/104, &(0x7f00000002c0), &(0x7f0000000340), 0x6, r0}, 0x38) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f00000009c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000001b40)=""/186, 0xffffffffffffffac, 0xbb, 0x1, 0xb38d, 0x0, @void, @value}, 0xfffffffffffffde5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x22, 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="18100000", @ANYRES32=r0, @ANYBLOB="0000000000000000c0eeb12de013dc251ec75edf28c61c99c922497e0d8aa0ba8a7e68b9ca9a40abb5c47bdab1701b66019b9ddcf859f825c50c0c6569add53e0a67aade7fb806b370173c4998ac89024b08b8f428f8895cda87b8311dd1cc6e"], &(0x7f0000000040)='GPL\x00', 0x6, 0x87, &(0x7f0000000080)=""/135, 0x40f00, 0x40, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000380)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0xd, 0x1, 0x17b6a7c0}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000480)=[{0x2, 0x4, 0x0, 0x1}, {0x0, 0xf51f, 0x10, 0x8}, {0x1, 0x4, 0xc, 0x4}, {0x4, 0x4, 0x5, 0x4}, {0x2, 0x0, 0x0, 0xc}, {0x5, 0x1, 0xd, 0x7}, {0x2, 0x5}, {0x3, 0x3, 0x10, 0x2}], 0x10, 0x4, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002100)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)=r2}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xb, 0x8, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000065e80000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x15) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb0800450000280000000000069078ac1414000a01010500000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b7222cc3d4ba3f0e2bc845a276ff463c50f006b4e7e1c1d65d61b930709a98b10f447a65354257ef2cb4"], 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r10 = fanotify_init(0x200, 0x0) fanotify_mark(r10, 0x445, 0x4800003e, r9, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) close(r8) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 20m55.062439281s ago: executing program 42 (id=2030): madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3011, 0x17) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x0, 0x8, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000000140)=""/104, &(0x7f00000002c0), &(0x7f0000000340), 0x6, r0}, 0x38) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f00000009c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000001b40)=""/186, 0xffffffffffffffac, 0xbb, 0x1, 0xb38d, 0x0, @void, @value}, 0xfffffffffffffde5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x22, 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="18100000", @ANYRES32=r0, @ANYBLOB="0000000000000000c0eeb12de013dc251ec75edf28c61c99c922497e0d8aa0ba8a7e68b9ca9a40abb5c47bdab1701b66019b9ddcf859f825c50c0c6569add53e0a67aade7fb806b370173c4998ac89024b08b8f428f8895cda87b8311dd1cc6e"], &(0x7f0000000040)='GPL\x00', 0x6, 0x87, &(0x7f0000000080)=""/135, 0x40f00, 0x40, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000380)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0xd, 0x1, 0x17b6a7c0}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000480)=[{0x2, 0x4, 0x0, 0x1}, {0x0, 0xf51f, 0x10, 0x8}, {0x1, 0x4, 0xc, 0x4}, {0x4, 0x4, 0x5, 0x4}, {0x2, 0x0, 0x0, 0xc}, {0x5, 0x1, 0xd, 0x7}, {0x2, 0x5}, {0x3, 0x3, 0x10, 0x2}], 0x10, 0x4, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002100)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)=r2}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xb, 0x8, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000065e80000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x15) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb0800450000280000000000069078ac1414000a01010500000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b7222cc3d4ba3f0e2bc845a276ff463c50f006b4e7e1c1d65d61b930709a98b10f447a65354257ef2cb4"], 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r10 = fanotify_init(0x200, 0x0) fanotify_mark(r10, 0x445, 0x4800003e, r9, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) close(r8) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast1}}}}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 8m59.442684402s ago: executing program 0 (id=2093): accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x57, 0x0}}], 0x62, 0x0) 8m36.212031687s ago: executing program 0 (id=2099): socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x455}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = dup3(r1, r0, 0x80000) read$watch_queue(r5, &(0x7f0000000580)=""/199, 0xc7) 8m15.754422188s ago: executing program 0 (id=2102): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008000, &(0x7f0000000080)={0x2, 0x6e23, @broadcast}, 0x10) 8m9.876407217s ago: executing program 0 (id=2103): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000180)=0x68) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r4, &(0x7f0000000600)=""/4091, 0xffb, 0x1010000) 7m27.810231764s ago: executing program 0 (id=2105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000100)={@multicast2, @empty, @empty=0x50020000}, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r5) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}]}, 0x2c}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008850}, 0x48094) pipe2(0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 7m10.584273037s ago: executing program 0 (id=2107): dup(0xffffffffffffffff) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0xfffffffd}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xfffffffe, 0x2) 6m19.989557363s ago: executing program 43 (id=2107): dup(0xffffffffffffffff) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0xfffffffd}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xfffffffe, 0x2) 1m32.253303442s ago: executing program 3 (id=2132): syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001380)=""/140, 0x8c}], 0x1) ioctl$TCSETS(r3, 0x5402, &(0x7f00000014c0)={0xfffffffd, 0xffffffff, 0x0, 0x0, 0x7, "076a1400"}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) r4 = syz_open_pts(r3, 0x42) r5 = dup3(r4, r3, 0x0) write$UHID_INPUT(r5, &(0x7f00000001c0)={0xd, {"08c39ee52f329f1698b1c4865f8b0a0a5eee9f496a0809c3d21c25867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76013256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c602945509167be440382a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d04e729ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e715329917fb70728a4a0530999b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0x1000}}, 0xffffff5c) 1m6.803053812s ago: executing program 3 (id=2133): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x66) 46.992234115s ago: executing program 3 (id=2134): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 29.703185815s ago: executing program 3 (id=2135): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x0) 18.113557476s ago: executing program 3 (id=2136): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x1b, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x4009}, 0x0) 0s ago: executing program 3 (id=2137): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x66) kernel console output (not intermixed with test programs): vice strings: Mfr=1, Product=2, SerialNumber=3 [ 2572.672565][ T4286] usb 1-1: Product: syz [ 2572.676993][ T4286] usb 1-1: Manufacturer: syz [ 2572.679151][ T4286] usb 1-1: SerialNumber: syz [ 2572.819384][ T4286] usb 1-1: config 0 descriptor?? [ 2575.560943][ T4338] usb 1-1: USB disconnect, device number 36 [ 2581.802337][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.773'. [ 2585.230535][ T7336] netlink: 16 bytes leftover after parsing attributes in process `syz.0.775'. [ 2601.840356][ T6532] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 2602.138810][ T6532] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2602.141008][ T6532] usb 1-1: config 0 has no interface number 0 [ 2602.216681][ T6532] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2602.219603][ T6532] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2602.222021][ T6532] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2602.224004][ T6532] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2602.552601][ T6532] usb 1-1: config 0 descriptor?? [ 2602.590368][ T7360] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2602.858584][ T6532] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2603.658774][ T6532] usb 1-1: USB disconnect, device number 37 [ 2627.717442][ T7411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2627.771264][ T7411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2636.554826][ C0] hrtimer: interrupt took 755700 ns [ 2683.539428][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.812'. [ 2691.612527][ T7479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2691.734102][ T7479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2719.911865][ T7496] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 2729.716911][ T6905] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2731.618316][ T6905] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2732.047037][ T6905] usb 1-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 2732.049418][ T6905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2732.051299][ T6905] usb 1-1: Product: syz [ 2732.052823][ T6905] usb 1-1: Manufacturer: syz [ 2732.054365][ T6905] usb 1-1: SerialNumber: syz [ 2732.913533][ T6905] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input4 [ 2733.573544][ T7510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2733.617197][ T7510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2734.947863][ T3177] usb 1-1: USB disconnect, device number 38 [ 2756.454505][ T6905] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 2756.469206][ T6905] hid-generic 0000:0003:0000.000F: unknown main item tag 0x0 [ 2756.536434][ T6905] hid-generic 0000:0003:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 2762.387102][ T5127] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 2762.867496][ T5127] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 2762.869057][ T5127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2762.870520][ T5127] usb 1-1: Product: syz [ 2762.872108][ T5127] usb 1-1: Manufacturer: syz [ 2762.873183][ T5127] usb 1-1: SerialNumber: syz [ 2762.934285][ T5127] usb 1-1: config 0 descriptor?? [ 2763.643451][ T5127] usb 1-1: Waiting for MOTU Microbook II to boot up... [ 2763.648257][ T5127] usb 1-1: failed setting the sample rate for Motu MicroBook II: -22 [ 2763.650591][ T5127] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2765.023743][ T6905] usb 1-1: USB disconnect, device number 39 [ 2794.013901][ T7645] netlink: 2 bytes leftover after parsing attributes in process `syz.0.849'. [ 2804.167879][ T5127] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 2804.686957][ T5127] usb 1-1: Using ep0 maxpacket: 8 [ 2804.952266][ T5127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2804.958804][ T5127] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2804.960411][ T5127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2805.029829][ T5127] usb 1-1: config 0 descriptor?? [ 2806.599306][ T5127] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2807.410069][ T3795] usb 1-1: USB disconnect, device number 40 [ 2845.437363][ T7728] loop1: detected capacity change from 0 to 5 [ 2845.520444][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 2845.560878][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2845.564798][ C0] Buffer I/O error on dev loop1, logical block 0, async page read [ 2880.313828][ T7763] binfmt_misc: register: failed to install interpreter file ./file0 [ 2882.227955][ T7765] binder: 7764:7765 ioctl c0306201 0 returned -14 [ 2912.072606][ T7782] binfmt_misc: register: failed to install interpreter file ./file0 [ 2928.600656][ T7830] binfmt_misc: register: failed to install interpreter file ./file0 [ 2940.061678][ T7786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2940.309318][ T7786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2951.091536][ T7786] hsr_slave_0: entered promiscuous mode [ 2951.133594][ T7786] hsr_slave_1: entered promiscuous mode [ 2951.161670][ T7786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2951.163202][ T7786] Cannot create hsr debugfs directory [ 2955.163540][ T7786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2955.572373][ T7786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2955.699094][ T7786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2955.838929][ T7786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2964.998376][ T7786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2982.307551][ T8145] netlink: 'syz.2.902': attribute type 30 has an invalid length. [ 3007.218023][ T7786] veth0_vlan: entered promiscuous mode [ 3007.783281][ T7786] veth1_vlan: entered promiscuous mode [ 3010.229911][ T7786] veth0_macvtap: entered promiscuous mode [ 3010.941218][ T7786] veth1_macvtap: entered promiscuous mode [ 3012.612953][ T7786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3012.648523][ T7786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3012.651102][ T7786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3012.653455][ T7786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3020.999882][ T8189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3021.018978][ T8189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3040.452682][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.918'. [ 3047.737360][ T6532] hid-generic 0000:0003:0000.0010: unknown main item tag 0x0 [ 3047.739117][ T6532] hid-generic 0000:0003:0000.0010: unknown main item tag 0x0 [ 3047.776799][ T6532] hid-generic 0000:0003:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz1 [ 3047.976253][ T8224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3048.004170][ T8224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3055.400612][ T8242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3055.405815][ T8242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3060.763509][ T8180] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0 [ 3060.776675][ T8180] hid-generic 0000:0003:0000.0011: unknown main item tag 0x0 [ 3060.820670][ T8180] hid-generic 0000:0003:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz1 [ 3081.406805][ T35] audit: type=1326 audit(3080.260:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.3.940" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 3081.409169][ T35] audit: type=1326 audit(3080.270:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.3.940" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 3081.411199][ T35] audit: type=1326 audit(3080.280:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.3.940" exe="/syz-executor" sig=0 arch=c00000f3 syscall=63 compat=0 ip=0xdb5be code=0x7ffc0000 [ 3081.419295][ T35] audit: type=1326 audit(3080.280:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.3.940" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 3081.428486][ T35] audit: type=1326 audit(3080.310:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.3.940" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 3082.036437][ T8286] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 3095.338944][ T8299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3095.343374][ T8299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3117.183595][ T8328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3117.196691][ T8328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3120.811643][ T8335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3120.842836][ T8335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3128.302692][ T8341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.964'. [ 3137.716510][ T8354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3137.758541][ T8354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3140.279736][ T8358] xt_connbytes: Forcing CT accounting to be enabled [ 3175.695858][ T8398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3175.719205][ T8398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3176.173525][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 3192.763860][ T8422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3192.841999][ T8422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3231.300327][ T8454] dlm: plock device version mismatch: kernel (1.2.0), user (1.1651733807.594440045) [ 3264.969293][ T8506] trusted_key: syz.3.1020 sent an empty control message without MSG_MORE. [ 3269.700442][ T8512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3269.713292][ T8512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3275.339206][ T8518] geneve2: entered promiscuous mode [ 3284.787247][ T8556] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 3294.107549][ T8564] input: syz1 as /devices/virtual/input/input5 [ 3298.073699][ T8577] loop1: detected capacity change from 0 to 5 [ 3308.620947][ T8592] binder: 8591:8592 ioctl 400c620e 20000180 returned -22 [ 3326.660489][ T8622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3326.731558][ T8622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3340.262001][ T35] audit: type=1326 audit(3339.100:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8635 comm="syz.3.1061" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x0 [ 3347.304092][ T8642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3347.310158][ T8642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3368.867420][ T8673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3368.885997][ T8673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3383.192744][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1079'. [ 3402.941167][ T8735] RDS: rds_bind could not find a transport for fe88::4, load rds_tcp or rds_rdma? [ 3412.816643][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1094'. [ 3420.516965][ T8760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3420.701815][ T8760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3422.766467][ T8766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3422.780416][ T8766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3442.590659][ T8787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3442.613228][ T8787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3450.304182][ T8798] process 'syz.3.1113' launched './file1' with NULL argv: empty string added [ 3502.290862][ T8862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3502.369858][ T8862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3522.054453][ T8873] bond0: (slave bond_slave_0): Releasing backup interface [ 3523.679081][ T8873] bond0: (slave bond_slave_1): Releasing backup interface [ 3524.522751][ T8874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3524.599702][ T8874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3559.213055][ T8912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3559.227715][ T8912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3570.478664][ T8926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3570.483586][ T8926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3583.802903][ T8946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1165'. [ 3588.708712][ T8952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3588.713319][ T8952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3597.192607][ T8958] pimreg: entered allmulticast mode [ 3597.787619][ T8958] pimreg: left allmulticast mode [ 3613.203617][ T8973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3613.223373][ T8973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3625.348536][ T8992] netlink: 'syz.3.1177': attribute type 5 has an invalid length. [ 3631.443960][ T8999] loop1: detected capacity change from 0 to 5 [ 3643.746889][ T9012] loop1: detected capacity change from 0 to 5 [ 3663.281239][ T9034] mmap: syz.3.1191 (9034) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 3684.681432][ T8911] atkbd serio0: keyboard reset failed on [ 3728.285527][ T9106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3728.311325][ T9106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3736.512551][ T9116] tun0: tun_chr_ioctl cmd 1074025677 [ 3736.518173][ T9116] tun0: linktype set to 1 [ 3764.623911][ T9142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3764.638423][ T9142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3765.063133][ T9144] devtmpfs: Too few inodes for current use [ 3831.286320][ T9213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3831.292398][ T9213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3831.790950][ T9211] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1258'. [ 3848.258285][ T9228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3848.291406][ T9228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3855.917142][ T35] audit: type=1326 audit(3854.760:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.2.1268" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 3855.959888][ T35] audit: type=1326 audit(3854.790:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.2.1268" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 3856.240543][ T35] audit: type=1326 audit(3855.120:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.2.1268" exe="/syz-executor" sig=0 arch=c00000f3 syscall=167 compat=0 ip=0xdb5be code=0x7ffc0000 [ 3856.385553][ T35] audit: type=1326 audit(3855.250:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.2.1268" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 3856.387976][ T35] audit: type=1326 audit(3855.260:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.2.1268" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 3856.556599][ T35] audit: type=1326 audit(3855.410:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.2.1268" exe="/syz-executor" sig=0 arch=c00000f3 syscall=277 compat=0 ip=0xdb5be code=0x7ffc0000 [ 3856.579702][ T35] audit: type=1326 audit(3855.460:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.2.1268" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 3856.596833][ T35] audit: type=1326 audit(3855.460:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.2.1268" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 3856.664063][ T35] audit: type=1326 audit(3855.540:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.2.1268" exe="/syz-executor" sig=0 arch=c00000f3 syscall=167 compat=0 ip=0xdb5be code=0x7ffc0000 [ 3856.712753][ T35] audit: type=1326 audit(3855.550:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.2.1268" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 3859.811157][ T9242] syzkaller0: entered promiscuous mode [ 3859.812904][ T9242] syzkaller0: entered allmulticast mode [ 3881.667086][ T9271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3881.689926][ T9271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3883.905679][ T9279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3883.937574][ T9279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3893.250297][ T9285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1277'. [ 3913.518666][ T9297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3913.536533][ T9297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3933.415792][ T9318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3933.438026][ T9318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3969.932496][ T9337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3969.980939][ T9337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3987.027817][ T9352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3987.041094][ T9352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3988.578807][ T9357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3988.611977][ T9357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4039.429996][ T9391] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1310'. [ 4049.972491][ T9397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4050.028172][ T9397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4067.501524][ T9251] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4068.619135][ T9251] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4069.913147][ T9251] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4070.927227][ T9251] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4084.872873][ T9251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4085.094324][ T9251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4085.226254][ T9251] bond0 (unregistering): Released all slaves [ 4087.120076][ T9251] hsr_slave_0: left promiscuous mode [ 4087.220909][ T9251] hsr_slave_1: left promiscuous mode [ 4087.827006][ T9251] veth1_macvtap: left promiscuous mode [ 4087.835572][ T9251] veth0_macvtap: left promiscuous mode [ 4087.842968][ T9251] veth1_vlan: left promiscuous mode [ 4087.866826][ T9251] veth0_vlan: left promiscuous mode [ 4089.557137][ T9436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4089.563443][ T9436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4126.419364][ T9557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4126.448437][ T9557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4132.853235][ T9402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4132.999969][ T9402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4155.371702][ T9402] hsr_slave_0: entered promiscuous mode [ 4155.492506][ T9402] hsr_slave_1: entered promiscuous mode [ 4155.669915][ T9402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 4155.672470][ T9402] Cannot create hsr debugfs directory [ 4167.424330][ T9402] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 4167.637725][ T9402] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 4167.742852][ T9402] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 4167.929634][ T9402] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 4180.928999][ T9402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4218.103136][ T9251] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4219.271235][ T9251] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4220.742307][ T9251] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4222.007314][ T9251] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4235.700648][ T9251] bond0 (unregistering): Released all slaves [ 4237.075877][ T9251] hsr_slave_0: left promiscuous mode [ 4237.114243][ T9251] hsr_slave_1: left promiscuous mode [ 4237.326600][ T9251] veth1_macvtap: left promiscuous mode [ 4237.328748][ T9251] veth0_macvtap: left promiscuous mode [ 4237.331618][ T9251] veth1_vlan: left promiscuous mode [ 4237.333843][ T9251] veth0_vlan: left promiscuous mode [ 4271.209764][ T9824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4271.358765][ T9824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4278.773119][ T9402] veth0_vlan: entered promiscuous mode [ 4279.523742][ T9402] veth1_vlan: entered promiscuous mode [ 4280.964065][ T9402] veth0_macvtap: entered promiscuous mode [ 4282.964276][ T9402] veth1_macvtap: entered promiscuous mode [ 4284.012757][ T9402] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4284.014306][ T9402] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4284.037330][ T9402] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4284.038769][ T9402] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4291.510084][T10116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4291.563570][T10116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4291.719808][ T9824] hsr_slave_0: entered promiscuous mode [ 4291.759351][ T9824] hsr_slave_1: entered promiscuous mode [ 4291.787462][ T9824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 4291.788883][ T9824] Cannot create hsr debugfs directory [ 4297.158372][ T9824] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 4297.462513][ T9824] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 4297.679100][ T9824] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 4298.429804][ T9824] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 4303.705783][T10208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4303.762599][T10208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4312.060643][ T9824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4327.270090][ T9824] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 4327.271605][ T9824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 4338.948923][T10252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4338.953005][T10252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4395.921119][ T9824] veth0_vlan: entered promiscuous mode [ 4396.331154][ T9824] veth1_vlan: entered promiscuous mode [ 4399.190389][ T9824] veth0_macvtap: entered promiscuous mode [ 4399.555366][ T9824] veth1_macvtap: entered promiscuous mode [ 4403.461657][ T9824] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4403.463652][ T9824] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4403.486619][ T9824] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4403.488216][ T9824] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4412.983153][T10321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4412.990690][T10321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4459.999009][T10365] capability: warning: `syz.5.1345' uses 32-bit capabilities (legacy support in use) [ 4472.998894][T10373] TCP: TCP_TX_DELAY enabled [ 4479.558104][T10381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4479.633517][T10381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4495.271819][T10401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4495.299664][T10401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4506.406876][T10416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4506.411396][T10416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4521.172650][T10427] netlink: 'syz.4.1365': attribute type 10 has an invalid length. [ 4521.536090][T10426] bond0: (slave bond_slave_0): Releasing backup interface [ 4522.028120][T10426] bond0: (slave bond_slave_1): Releasing backup interface [ 4538.378775][T10438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4538.389450][T10438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4561.208456][T10452] netlink: 'syz.4.1375': attribute type 1 has an invalid length. [ 4562.751121][T10454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4562.759228][T10454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4592.410221][T10474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4592.436450][T10474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4603.718039][T10486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1386'. [ 4707.344142][T10580] IPv6: sit1: Disabled Multicast RS [ 4724.870653][T10595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4724.958254][T10595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4733.968498][T10605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4733.973749][T10605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4735.310539][T10609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4735.341090][T10609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4747.685665][T10619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4747.712466][T10619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4773.257917][T10636] input: syz0 as /devices/virtual/input/input10 [ 4778.733297][T10642] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1438'. [ 4778.736409][T10642] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1438'. [ 4778.737727][T10642] netlink: 'syz.5.1438': attribute type 5 has an invalid length. [ 4800.671517][T10660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4800.700668][T10660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4812.887606][ T35] kauditd_printk_skb: 7 callbacks suppressed [ 4812.887963][ T35] audit: type=1326 audit(4811.760:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10672 comm="syz.5.1449" exe="/syz-executor" sig=9 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x0 [ 4814.641915][T10676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4814.742993][T10676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4834.838166][T10688] xt_CT: No such helper "snmp_trap" [ 4839.904417][T10694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4839.925997][T10694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4863.013578][T10702] infiniband syz2: set down [ 4863.017282][T10702] infiniband syz2: added bond0 [ 4863.049210][T10702] syz2: rxe_create_cq: returned err = -12 [ 4863.056129][T10702] infiniband syz2: Couldn't create ib_mad CQ [ 4863.062567][T10702] infiniband syz2: Couldn't open port 1 [ 4863.653104][T10702] RDS/IB: syz2: added [ 4863.670745][T10702] smc: adding ib device syz2 with port count 1 [ 4863.673149][T10702] smc: ib device syz2 port 1 has pnetid [ 4888.496164][T10722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4888.513546][T10722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4893.115888][T10732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4893.158920][T10732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4905.214015][T10740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4905.239968][T10740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4915.717932][T10747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4915.763891][T10747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4927.032999][T10771] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1480'. [ 4933.089534][T10781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4933.124375][T10781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4954.331000][ T35] audit: type=1326 audit(4953.210:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.5.1488" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 4954.339069][ T35] audit: type=1326 audit(4953.220:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.5.1488" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 4954.616396][ T35] audit: type=1326 audit(4953.440:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.5.1488" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb5be code=0x7ffc0000 [ 4954.618817][ T35] audit: type=1326 audit(4953.440:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.5.1488" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 4954.683508][ T35] audit: type=1326 audit(4953.550:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.5.1488" exe="/syz-executor" sig=0 arch=c00000f3 syscall=280 compat=0 ip=0xdb5be code=0x7ffc0000 [ 4954.688061][ T35] audit: type=1326 audit(4953.560:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.5.1488" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 4954.691982][ T35] audit: type=1326 audit(4953.560:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.5.1488" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 4955.036313][ T35] audit: type=1326 audit(4953.800:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.5.1488" exe="/syz-executor" sig=0 arch=c00000f3 syscall=208 compat=0 ip=0xdb5be code=0x7ffc0000 [ 4955.044230][ T35] audit: type=1326 audit(4953.830:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.5.1488" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 4955.050439][ T35] audit: type=1326 audit(4953.860:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.5.1488" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x7ffc0000 [ 4957.566438][T10798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4957.663578][T10798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4978.705977][T10818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4978.723397][T10818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4992.535318][T10833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4992.539654][T10833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5025.078096][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 5062.124087][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 5087.897301][T10910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1526'. [ 5122.606727][T10940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5122.624512][T10940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5133.728503][T10946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5133.732952][T10946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5134.416507][T10946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5134.420740][T10946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5143.531030][T10958] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 5143.532350][T10958] IPv6: NLM_F_CREATE should be set when creating new route [ 5205.482517][T11008] binder: 11006:11008 ioctl c0306201 20000480 returned -22 [ 5212.819111][T11011] sctp: [Deprecated]: syz.5.1562 (pid 11011) Use of int in max_burst socket option deprecated. [ 5212.819111][T11011] Use struct sctp_assoc_value instead [ 5223.073654][T11021] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 5235.312324][T11034] sctp: [Deprecated]: syz.4.1569 (pid 11034) Use of int in max_burst socket option deprecated. [ 5235.312324][T11034] Use struct sctp_assoc_value instead [ 5242.828987][T11041] binder: 11039:11041 ioctl c0306201 20000480 returned -22 [ 5243.181503][T11038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5243.193220][T11038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5246.591657][T11045] netlink: 'syz.5.1573': attribute type 21 has an invalid length. [ 5246.601283][T11045] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1573'. [ 5262.940152][T11052] sctp: [Deprecated]: syz.4.1575 (pid 11052) Use of int in max_burst socket option deprecated. [ 5262.940152][T11052] Use struct sctp_assoc_value instead [ 5273.149127][T11065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5273.180352][T11065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5276.393004][T11071] tmpfs: Group quota inode hardlimit too large. [ 5276.412704][T11071] FAULT_INJECTION: forcing a failure. [ 5276.412704][T11071] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 5276.460366][T11071] CPU: 0 UID: 0 PID: 11071 Comm: syz.5.1579 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 5276.462713][T11071] Hardware name: riscv-virtio,qemu (DT) [ 5276.464346][T11071] Call Trace: [ 5276.465689][T11071] [] dump_backtrace+0x2e/0x3c [ 5276.467689][T11071] [] show_stack+0x30/0x3c [ 5276.469879][T11071] [] dump_stack_lvl+0x12e/0x1a6 [ 5276.471567][T11071] [] dump_stack+0x1c/0x24 [ 5276.473140][T11071] [] should_fail_ex+0x3f8/0x4e0 [ 5276.474789][T11071] [] should_fail+0xe/0x16 [ 5276.476312][T11071] [] should_fail_usercopy+0x1e/0x26 [ 5276.477847][T11071] [] _copy_to_user+0x3e/0x25a [ 5276.479358][T11071] [] simple_read_from_buffer+0xd0/0x154 [ 5276.481185][T11071] [] proc_fail_nth_read+0x194/0x27c [ 5276.482849][T11071] [] vfs_read+0x1c0/0x94a [ 5276.484235][T11071] [] ksys_read+0x126/0x226 [ 5276.485736][T11071] [] __riscv_sys_read+0x6e/0x94 [ 5276.487273][T11071] [] syscall_handler+0x94/0x118 [ 5276.488741][T11071] [] do_trap_ecall_u+0x1aa/0x216 [ 5276.490427][T11071] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 5283.491421][T11076] netlink: 372 bytes leftover after parsing attributes in process `syz.4.1581'. [ 5302.042635][T10272] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 5302.043997][T10272] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0 [ 5302.142145][T10272] hid-generic 0000:0003:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz1 [ 5302.348116][ T8645] hid-generic 0000:0003:0000.0013: unknown main item tag 0x0 [ 5302.349398][ T8645] hid-generic 0000:0003:0000.0013: unknown main item tag 0x0 [ 5302.361244][T11098] FAULT_INJECTION: forcing a failure. [ 5302.361244][T11098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5302.377759][ T8645] hid-generic 0000:0003:0000.0013: hidraw1: HID v0.00 Device [syz0] on syz1 [ 5302.400959][T11098] CPU: 1 UID: 0 PID: 11098 Comm: syz.5.1589 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 5302.402782][T11098] Hardware name: riscv-virtio,qemu (DT) [ 5302.403419][T11098] Call Trace: [ 5302.403958][T11098] [] dump_backtrace+0x2e/0x3c [ 5302.405224][T11098] [] show_stack+0x30/0x3c [ 5302.406022][T11098] [] dump_stack_lvl+0x12e/0x1a6 [ 5302.407003][T11098] [] dump_stack+0x1c/0x24 [ 5302.407852][T11098] [] should_fail_ex+0x3f8/0x4e0 [ 5302.408709][T11098] [] should_fail+0xe/0x16 [ 5302.409538][T11098] [] should_fail_usercopy+0x1e/0x26 [ 5302.410468][T11098] [] _copy_to_user+0x3e/0x25a [ 5302.411333][T11098] [] uhid_char_read+0x464/0x6da [ 5302.412119][T11098] [] vfs_readv+0x520/0x70c [ 5302.412926][T11098] [] do_readv+0x28a/0x306 [ 5302.413666][T11098] [] __riscv_sys_readv+0x6e/0x94 [ 5302.414539][T11098] [] syscall_handler+0x94/0x118 [ 5302.415378][T11098] [] do_trap_ecall_u+0x1aa/0x216 [ 5302.416255][T11098] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 5308.876992][T11115] ======================================================= [ 5308.876992][T11115] WARNING: The mand mount option has been deprecated and [ 5308.876992][T11115] and is ignored by this kernel. Remove the mand [ 5308.876992][T11115] option from the mount to silence this warning. [ 5308.876992][T11115] ======================================================= [ 5320.992770][T11125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5321.026673][T11125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5326.237777][ T8645] hid-generic 0000:0003:0000.0014: unknown main item tag 0x0 [ 5326.240538][ T8645] hid-generic 0000:0003:0000.0014: unknown main item tag 0x0 [ 5326.317372][ T8645] hid-generic 0000:0003:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz1 [ 5338.421129][T11150] binder_alloc: 11148: pid 11148 spamming oneway? 1 buffers allocated for a total size of 4096 [ 5342.821524][T11150] fuse: Unknown parameter 'fdB0x000000000000000c' [ 5343.389957][T11158] sctp: [Deprecated]: syz.5.1601 (pid 11158) Use of int in max_burst socket option deprecated. [ 5343.389957][T11158] Use struct sctp_assoc_value instead [ 5352.259603][T11166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5352.284483][T11166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5361.136440][T11175] ALSA: mixer_oss: invalid OSS volume '' [ 5365.433066][ T4338] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 5365.471870][ T4338] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 5365.584318][ T4338] hid-generic 0000:0003:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz1 [ 5367.723686][T11184] FAULT_INJECTION: forcing a failure. [ 5367.723686][T11184] name fail_futex, interval 1, probability 0, space 0, times 1 [ 5367.726784][T11184] CPU: 0 UID: 0 PID: 11184 Comm: syz.5.1608 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 5367.727823][T11184] Hardware name: riscv-virtio,qemu (DT) [ 5367.728478][T11184] Call Trace: [ 5367.729028][T11184] [] dump_backtrace+0x2e/0x3c [ 5367.729982][T11184] [] show_stack+0x30/0x3c [ 5367.730848][T11184] [] dump_stack_lvl+0x12e/0x1a6 [ 5367.731776][T11184] [] dump_stack+0x1c/0x24 [ 5367.732800][T11184] [] should_fail_ex+0x3f8/0x4e0 [ 5367.734231][T11184] [] should_fail+0xe/0x16 [ 5367.735875][T11184] [] get_futex_key+0x444/0xde8 [ 5367.737338][T11184] [] futex_wake+0xd6/0x420 [ 5367.738287][T11184] [] do_futex+0x1ce/0x274 [ 5367.739320][T11184] [] mm_release+0x210/0x3ec [ 5367.740197][T11184] [] exit_mm_release+0x2a/0x36 [ 5367.741083][T11184] [] do_exit+0x7e8/0x296e [ 5367.742040][T11184] [] do_group_exit+0xd4/0x26c [ 5367.743159][T11184] [] get_signal+0x1f4c/0x22de [ 5367.744192][T11184] [] arch_do_signal_or_restart+0x98a/0x1d2c [ 5367.745300][T11184] [] syscall_exit_to_user_mode+0x29e/0x316 [ 5367.746421][T11184] [] do_trap_ecall_u+0x86/0x216 [ 5367.747398][T11184] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 5369.191615][T11196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5369.207472][T11196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5372.717437][T11203] sctp: [Deprecated]: syz.5.1611 (pid 11203) Use of int in max_burst socket option deprecated. [ 5372.717437][T11203] Use struct sctp_assoc_value instead [ 5385.752995][T11208] loop1: detected capacity change from 0 to 5 [ 5386.609099][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 5386.698816][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 5386.702606][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 5390.471908][T11210] fuse: Unknown parameter '0x0000000000000006' [ 5390.627817][T11215] loop1: detected capacity change from 0 to 5 [ 5390.669964][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 5390.685938][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 5390.688278][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 5394.181327][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 5395.287682][T11223] sctp: [Deprecated]: syz.5.1616 (pid 11223) Use of int in max_burst socket option deprecated. [ 5395.287682][T11223] Use struct sctp_assoc_value instead [ 5398.170176][T11227] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 5398.173119][T11227] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 5404.721145][T11232] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 5408.967822][T11236] FAULT_INJECTION: forcing a failure. [ 5408.967822][T11236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5408.971269][T11236] CPU: 1 UID: 0 PID: 11236 Comm: syz.5.1621 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 5408.973215][T11236] Hardware name: riscv-virtio,qemu (DT) [ 5408.974579][T11236] Call Trace: [ 5408.975619][T11236] [] dump_backtrace+0x2e/0x3c [ 5408.977263][T11236] [] show_stack+0x30/0x3c [ 5408.978670][T11236] [] dump_stack_lvl+0x12e/0x1a6 [ 5408.980270][T11236] [] dump_stack+0x1c/0x24 [ 5408.981831][T11236] [] should_fail_ex+0x3f8/0x4e0 [ 5408.983432][T11236] [] should_fail+0xe/0x16 [ 5408.985456][T11236] [] should_fail_usercopy+0x1e/0x26 [ 5408.987046][T11236] [] _copy_from_user+0x3e/0x2ae [ 5408.988558][T11236] [] memdup_user+0x7e/0xcc [ 5408.990038][T11236] [] strndup_user+0x7e/0xda [ 5408.991505][T11236] [] __riscv_sys_mount+0x13c/0x660 [ 5408.993075][T11236] [] syscall_handler+0x94/0x118 [ 5408.994780][T11236] [] do_trap_ecall_u+0x1aa/0x216 [ 5408.996484][T11236] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 5412.783409][T11239] sctp: [Deprecated]: syz.4.1622 (pid 11239) Use of int in max_burst socket option deprecated. [ 5412.783409][T11239] Use struct sctp_assoc_value instead [ 5419.135841][T11245] FAULT_INJECTION: forcing a failure. [ 5419.135841][T11245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5419.138140][T11245] CPU: 1 UID: 0 PID: 11245 Comm: syz.4.1624 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 5419.139804][T11245] Hardware name: riscv-virtio,qemu (DT) [ 5419.140860][T11245] Call Trace: [ 5419.142010][T11245] [] dump_backtrace+0x2e/0x3c [ 5419.143363][T11245] [] show_stack+0x30/0x3c [ 5419.144214][T11245] [] dump_stack_lvl+0x12e/0x1a6 [ 5419.145187][T11245] [] dump_stack+0x1c/0x24 [ 5419.146755][T11245] [] should_fail_ex+0x3f8/0x4e0 [ 5419.147873][T11245] [] should_fail+0xe/0x16 [ 5419.149410][T11245] [] should_fail_usercopy+0x1e/0x26 [ 5419.151546][T11245] [] _copy_from_user+0x3e/0x2ae [ 5419.153577][T11245] [] binder_ioctl+0x50e/0x3cf8 [ 5419.155984][T11245] [] __riscv_sys_ioctl+0x18e/0x1e2 [ 5419.157687][T11245] [] syscall_handler+0x94/0x118 [ 5419.159395][T11245] [] do_trap_ecall_u+0x1aa/0x216 [ 5419.160789][T11245] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 5419.200784][T11245] binder: 11243:11245 ioctl c0306201 20000480 returned -14 [ 5419.496586][T11242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5419.528796][T11242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5426.731934][T11251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5426.748790][T11251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5436.062226][T11257] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1628'. [ 5436.268070][T11257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5436.334596][T11257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5444.924268][T11272] FAULT_INJECTION: forcing a failure. [ 5444.924268][T11272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5444.934009][T11272] CPU: 0 UID: 0 PID: 11272 Comm: syz.4.1631 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 5444.935194][T11272] Hardware name: riscv-virtio,qemu (DT) [ 5444.936010][T11272] Call Trace: [ 5444.936596][T11272] [] dump_backtrace+0x2e/0x3c [ 5444.937497][T11272] [] show_stack+0x30/0x3c [ 5444.938816][T11272] [] dump_stack_lvl+0x12e/0x1a6 [ 5444.939844][T11272] [] dump_stack+0x1c/0x24 [ 5444.941076][T11272] [] should_fail_ex+0x3f8/0x4e0 [ 5444.942767][T11272] [] should_fail+0xe/0x16 [ 5444.944306][T11272] [] should_fail_usercopy+0x1e/0x26 [ 5444.946023][T11272] [] _copy_from_user+0x3e/0x2ae [ 5444.947597][T11272] [] do_fb_ioctl+0x35c/0x714 [ 5444.949188][T11272] [] fb_ioctl+0xd8/0x136 [ 5444.950756][T11272] [] __riscv_sys_ioctl+0x18e/0x1e2 [ 5444.952350][T11272] [] syscall_handler+0x94/0x118 [ 5444.953830][T11272] [] do_trap_ecall_u+0x1aa/0x216 [ 5444.955655][T11272] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 5447.263718][T11274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5447.308382][T11274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5468.301756][T11289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5468.357760][T11289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5468.483817][T11289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5468.713086][T11289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5469.037805][T11289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5469.042143][T11289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5469.188737][T11289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5469.228881][T11289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5469.381219][T11289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5469.409348][T11289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5471.871876][T11305] FAULT_INJECTION: forcing a failure. [ 5471.871876][T11305] name failslab, interval 1, probability 0, space 0, times 0 [ 5471.890734][T11305] CPU: 0 UID: 0 PID: 11305 Comm: syz.5.1637 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 5471.892785][T11305] Hardware name: riscv-virtio,qemu (DT) [ 5471.893923][T11305] Call Trace: [ 5471.895271][T11305] [] dump_backtrace+0x2e/0x3c [ 5471.896934][T11305] [] show_stack+0x30/0x3c [ 5471.898457][T11305] [] dump_stack_lvl+0x12e/0x1a6 [ 5471.900129][T11305] [] dump_stack+0x1c/0x24 [ 5471.901765][T11305] [] should_fail_ex+0x3f8/0x4e0 [ 5471.903447][T11305] [] should_failslab+0xba/0x102 [ 5471.905741][T11305] [] __kmalloc_cache_noprof+0x292/0x3f4 [ 5471.907548][T11305] [] __riscv_sys_mount+0x1ee/0x660 [ 5471.909111][T11305] [] syscall_handler+0x94/0x118 [ 5471.910588][T11305] [] do_trap_ecall_u+0x1aa/0x216 [ 5471.912181][T11305] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 5475.253547][T11308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5475.260583][T11308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5496.717424][T11340] sctp: [Deprecated]: syz.5.1644 (pid 11340) Use of int in max_burst socket option deprecated. [ 5496.717424][T11340] Use struct sctp_assoc_value instead [ 5503.222511][T11344] FAULT_INJECTION: forcing a failure. [ 5503.222511][T11344] name failslab, interval 1, probability 0, space 0, times 0 [ 5503.224207][T11344] CPU: 0 UID: 0 PID: 11344 Comm: syz.4.1645 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 5503.225382][T11344] Hardware name: riscv-virtio,qemu (DT) [ 5503.226124][T11344] Call Trace: [ 5503.226806][T11344] [] dump_backtrace+0x2e/0x3c [ 5503.227829][T11344] [] show_stack+0x30/0x3c [ 5503.228745][T11344] [] dump_stack_lvl+0x12e/0x1a6 [ 5503.229715][T11344] [] dump_stack+0x1c/0x24 [ 5503.230739][T11344] [] should_fail_ex+0x3f8/0x4e0 [ 5503.231688][T11344] [] should_failslab+0xba/0x102 [ 5503.232666][T11344] [] __kmalloc_noprof+0xce/0x5ba [ 5503.233538][T11344] [] sk_prot_alloc+0x194/0x282 [ 5503.234580][T11344] [] sk_alloc+0x34/0xda6 [ 5503.235506][T11344] [] bpf_prog_test_run_skb+0x2e0/0x1ff2 [ 5503.236416][T11344] [] __sys_bpf+0x1746/0x363c [ 5503.237340][T11344] [] __riscv_sys_bpf+0x6c/0x9e [ 5503.238354][T11344] [] syscall_handler+0x94/0x118 [ 5503.239238][T11344] [] do_trap_ecall_u+0x1aa/0x216 [ 5503.240245][T11344] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 5504.674102][T11345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5504.726545][T11345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5516.232972][T11357] FAULT_INJECTION: forcing a failure. [ 5516.232972][T11357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5516.251471][T11357] CPU: 0 UID: 0 PID: 11357 Comm: syz.5.1650 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 5516.253620][T11357] Hardware name: riscv-virtio,qemu (DT) [ 5516.254848][T11357] Call Trace: [ 5516.255975][T11357] [] dump_backtrace+0x2e/0x3c [ 5516.257677][T11357] [] show_stack+0x30/0x3c [ 5516.259201][T11357] [] dump_stack_lvl+0x12e/0x1a6 [ 5516.260874][T11357] [] dump_stack+0x1c/0x24 [ 5516.262556][T11357] [] should_fail_ex+0x3f8/0x4e0 [ 5516.264139][T11357] [] should_fail+0xe/0x16 [ 5516.265879][T11357] [] should_fail_usercopy+0x1e/0x26 [ 5516.267593][T11357] [] _copy_from_user+0x3e/0x2ae [ 5516.269184][T11357] [] binder_thread_write+0x1440/0x5a78 [ 5516.271237][T11357] [] binder_ioctl+0x2136/0x3cf8 [ 5516.273581][T11357] [] __riscv_sys_ioctl+0x18e/0x1e2 [ 5516.276408][T11357] [] syscall_handler+0x94/0x118 [ 5516.277959][T11357] [] do_trap_ecall_u+0x1aa/0x216 [ 5516.279669][T11357] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 5516.360503][T11357] binder: 11354:11357 ioctl c0306201 20000480 returned -14 [ 5521.887084][T11362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5521.891191][T11362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5522.923098][T11367] xt_hashlimit: invalid interval [ 5526.963874][T11369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5527.046593][T11369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5549.121884][T11386] FAULT_INJECTION: forcing a failure. [ 5549.121884][T11386] name failslab, interval 1, probability 0, space 0, times 0 [ 5549.123475][T11386] CPU: 1 UID: 0 PID: 11386 Comm: syz.4.1658 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 5549.124630][T11386] Hardware name: riscv-virtio,qemu (DT) [ 5549.125329][T11386] Call Trace: [ 5549.125904][T11386] [] dump_backtrace+0x2e/0x3c [ 5549.126991][T11386] [] show_stack+0x30/0x3c [ 5549.128214][T11386] [] dump_stack_lvl+0x12e/0x1a6 [ 5549.129192][T11386] [] dump_stack+0x1c/0x24 [ 5549.130068][T11386] [] should_fail_ex+0x3f8/0x4e0 [ 5549.130996][T11386] [] should_failslab+0xba/0x102 [ 5549.131930][T11386] [] kmem_cache_alloc_noprof+0x62/0x3da [ 5549.132789][T11386] [] skb_clone+0x180/0x3ce [ 5549.133645][T11386] [] netlink_deliver_tap+0xb00/0xc78 [ 5549.134631][T11386] [] netlink_unicast+0x592/0x82c [ 5549.135564][T11386] [] netlink_sendmsg+0x864/0xdc6 [ 5549.136704][T11386] [] __sock_sendmsg+0xcc/0x160 [ 5549.137591][T11386] [] ____sys_sendmsg+0x5ce/0x79e [ 5549.138590][T11386] [] ___sys_sendmsg+0x144/0x1e6 [ 5549.139473][T11386] [] __sys_sendmsg+0x188/0x22a [ 5549.140394][T11386] [] __riscv_sys_sendmsg+0x70/0xa2 [ 5549.141273][T11386] [] syscall_handler+0x94/0x118 [ 5549.142131][T11386] [] do_trap_ecall_u+0x1aa/0x216 [ 5549.143119][T11386] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 5553.389412][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 5559.198424][T11393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5559.350011][T11393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5561.784356][T11398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5561.964752][T11398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5562.392290][T11401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5562.409034][T11401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5574.457950][T11409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5574.480416][T11409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5589.379299][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1665'. [ 5597.040809][T11417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5597.174292][T11417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5608.958829][T11421] FAULT_INJECTION: forcing a failure. [ 5608.958829][T11421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5608.961671][T11421] CPU: 0 UID: 0 PID: 11421 Comm: syz.5.1667 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 5608.963595][T11421] Hardware name: riscv-virtio,qemu (DT) [ 5608.965115][T11421] Call Trace: [ 5608.966291][T11421] [] dump_backtrace+0x2e/0x3c [ 5608.967978][T11421] [] show_stack+0x30/0x3c [ 5608.969488][T11421] [] dump_stack_lvl+0x12e/0x1a6 [ 5608.971187][T11421] [] dump_stack+0x1c/0x24 [ 5608.972748][T11421] [] should_fail_ex+0x3f8/0x4e0 [ 5608.974593][T11421] [] should_fail+0xe/0x16 [ 5608.976264][T11421] [] should_fail_usercopy+0x1e/0x26 [ 5608.977939][T11421] [] _copy_from_user+0x3e/0x2ae [ 5608.979610][T11421] [] __riscv_sys_mount+0x20a/0x660 [ 5608.981191][T11421] [] syscall_handler+0x94/0x118 [ 5608.982869][T11421] [] do_trap_ecall_u+0x1aa/0x216 [ 5608.984654][T11421] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 5609.568768][T11421] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 5618.069434][T11425] netlink: 'syz.5.1669': attribute type 4 has an invalid length. [ 5618.682173][T11428] netlink: 'syz.5.1669': attribute type 4 has an invalid length. [ 5630.821106][T11434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5630.860765][T11434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5637.222331][T11261] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5638.149289][T11261] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5638.890270][T11261] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5639.961624][T11261] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5643.690292][T11261] infiniband syz2: set down [ 5651.231725][T11261] bond0 (unregistering): Released all slaves [ 5651.243818][ T9186] smc: removing ib device syz2 [ 5664.104936][ C1] vxcan1: j1939_tp_rxtimer: 0xff60000019ceec00: rx timeout, send abort [ 5664.109565][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xff60000019ceec00: 0x30100: (3) A timeout occurred and this is the connection abort to close the session. [ 5676.463759][T11510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5676.602459][T11510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5682.449913][T11261] hsr_slave_0: left promiscuous mode [ 5682.539811][T11261] hsr_slave_1: left promiscuous mode [ 5682.923955][T11261] veth1_macvtap: left promiscuous mode [ 5682.928195][T11261] veth0_macvtap: left promiscuous mode [ 5682.933449][T11261] veth1_vlan: left promiscuous mode [ 5682.960827][T11261] veth0_vlan: left promiscuous mode [ 5687.973452][T11549] fuse: Bad value for 'group_id' [ 5688.000594][T11549] fuse: Bad value for 'group_id' [ 5702.353058][T11557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5702.382329][T11557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5730.283558][T11437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5730.472352][T11437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5737.011689][T11686] FAULT_INJECTION: forcing a failure. [ 5737.011689][T11686] name failslab, interval 1, probability 0, space 0, times 0 [ 5737.069248][T11686] CPU: 0 UID: 0 PID: 11686 Comm: syz.5.1682 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 5737.071550][T11686] Hardware name: riscv-virtio,qemu (DT) [ 5737.072718][T11686] Call Trace: [ 5737.073705][T11686] [] dump_backtrace+0x2e/0x3c [ 5737.075546][T11686] [] show_stack+0x30/0x3c [ 5737.077035][T11686] [] dump_stack_lvl+0x12e/0x1a6 [ 5737.078822][T11686] [] dump_stack+0x1c/0x24 [ 5737.080514][T11686] [] should_fail_ex+0x3f8/0x4e0 [ 5737.082304][T11686] [] should_failslab+0xba/0x102 [ 5737.084005][T11686] [] __kmalloc_node_noprof+0xd0/0x5e8 [ 5737.085732][T11686] [] alloc_slab_obj_exts+0x40/0x96 [ 5737.087513][T11686] [] __memcg_slab_post_alloc_hook+0x346/0xa84 [ 5737.089140][T11686] [] __kmalloc_cache_noprof+0x2fc/0x3f4 [ 5737.090924][T11686] [] nf_tables_newtable+0xcce/0x1932 [ 5737.092580][T11686] [] nfnetlink_rcv_batch+0x180a/0x22d0 [ 5737.094337][T11686] [] nfnetlink_rcv+0x3d6/0x436 [ 5737.096082][T11686] [] netlink_unicast+0x4f0/0x82c [ 5737.097766][T11686] [] netlink_sendmsg+0x864/0xdc6 [ 5737.099466][T11686] [] __sock_sendmsg+0xcc/0x160 [ 5737.101105][T11686] [] ____sys_sendmsg+0x5ce/0x79e [ 5737.102746][T11686] [] ___sys_sendmsg+0x144/0x1e6 [ 5737.104381][T11686] [] __sys_sendmsg+0x188/0x22a [ 5737.106029][T11686] [] __riscv_sys_sendmsg+0x70/0xa2 [ 5737.107735][T11686] [] syscall_handler+0x94/0x118 [ 5737.109280][T11686] [] do_trap_ecall_u+0x1aa/0x216 [ 5737.110987][T11686] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 5755.397486][T11437] hsr_slave_0: entered promiscuous mode [ 5755.452691][T11437] hsr_slave_1: entered promiscuous mode [ 5755.497745][T11437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 5755.500171][T11437] Cannot create hsr debugfs directory [ 5762.026077][T11782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5762.192696][T11782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5769.419989][T11437] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 5769.481820][T11437] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 5769.752488][T11437] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 5769.982582][T11437] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 5786.123401][T11858] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1688'. [ 5791.393693][T11437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5793.718543][T11867] loop1: detected capacity change from 0 to 5 [ 5793.825315][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 5793.827233][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 5793.840185][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 5793.842063][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 5793.888163][T11867] loop1: unable to read partition table [ 5793.893269][T11867] loop_reread_partitions: partition scan of loop1 (3Ÿ ¾‚³˜) failed (rc=-5) [ 5794.049084][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 5794.050858][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 5828.872439][T11910] FAULT_INJECTION: forcing a failure. [ 5828.872439][T11910] name failslab, interval 1, probability 0, space 0, times 0 [ 5828.885574][T11910] CPU: 0 UID: 0 PID: 11910 Comm: syz.5.1692 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 5828.887159][T11910] Hardware name: riscv-virtio,qemu (DT) [ 5828.888034][T11910] Call Trace: [ 5828.888841][T11910] [] dump_backtrace+0x2e/0x3c [ 5828.890179][T11910] [] show_stack+0x30/0x3c [ 5828.891328][T11910] [] dump_stack_lvl+0x12e/0x1a6 [ 5828.892749][T11910] [] dump_stack+0x1c/0x24 [ 5828.893789][T11910] [] should_fail_ex+0x3f8/0x4e0 [ 5828.895170][T11910] [] should_failslab+0xba/0x102 [ 5828.896179][T11910] [] __kmalloc_noprof+0xce/0x5ba [ 5828.897050][T11910] [] tomoyo_encode2+0x11e/0x3e6 [ 5828.897954][T11910] [] tomoyo_realpath_from_path+0x18a/0x64a [ 5828.898955][T11910] [] tomoyo_check_open_permission+0x2fe/0x3d6 [ 5828.899884][T11910] [] tomoyo_file_open+0xa0/0xc4 [ 5828.900780][T11910] [] security_file_open+0xa8/0x250 [ 5828.901680][T11910] [] do_dentry_open+0x4de/0x1946 [ 5828.902729][T11910] [] vfs_open+0xbe/0x37c [ 5828.903665][T11910] [] path_openat+0x1b70/0x28c2 [ 5828.904810][T11910] [] do_filp_open+0x19c/0x35c [ 5828.905797][T11910] [] do_sys_openat2+0x174/0x1ca [ 5828.906902][T11910] [] __riscv_sys_openat+0x178/0x1fe [ 5828.907979][T11910] [] syscall_handler+0x94/0x118 [ 5828.908850][T11910] [] do_trap_ecall_u+0x1aa/0x216 [ 5828.909809][T11910] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 5828.945815][T11910] ERROR: Out of memory at tomoyo_realpath_from_path. [ 5859.560979][T11952] binder: 11949:11952 ioctl c0306201 20000480 returned -22 [ 5860.609875][T11437] veth0_vlan: entered promiscuous mode [ 5861.155194][T11437] veth1_vlan: entered promiscuous mode [ 5864.958810][T11437] veth0_macvtap: entered promiscuous mode [ 5865.143770][T11437] veth1_macvtap: entered promiscuous mode [ 5867.427856][T11437] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5867.430110][T11437] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5867.431381][T11437] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5867.433202][T11437] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5870.713322][T11957] sctp: [Deprecated]: syz.5.1698 (pid 11957) Use of int in max_burst socket option deprecated. [ 5870.713322][T11957] Use struct sctp_assoc_value instead [ 5877.701557][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 5878.673723][T11961] FAULT_INJECTION: forcing a failure. [ 5878.673723][T11961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 5878.676814][T11961] CPU: 1 UID: 0 PID: 11961 Comm: syz.5.1699 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 5878.677864][T11961] Hardware name: riscv-virtio,qemu (DT) [ 5878.678662][T11961] Call Trace: [ 5878.679244][T11961] [] dump_backtrace+0x2e/0x3c [ 5878.680273][T11961] [] show_stack+0x30/0x3c [ 5878.681065][T11961] [] dump_stack_lvl+0x12e/0x1a6 [ 5878.681984][T11961] [] dump_stack+0x1c/0x24 [ 5878.682878][T11961] [] should_fail_ex+0x3f8/0x4e0 [ 5878.683774][T11961] [] should_fail+0xe/0x16 [ 5878.685359][T11961] [] should_fail_usercopy+0x1e/0x26 [ 5878.686758][T11961] [] _copy_to_user+0x3e/0x25a [ 5878.687895][T11961] [] simple_read_from_buffer+0xd0/0x154 [ 5878.689059][T11961] [] proc_fail_nth_read+0x194/0x27c [ 5878.690332][T11961] [] vfs_read+0x1c0/0x94a [ 5878.691312][T11961] [] ksys_read+0x126/0x226 [ 5878.692278][T11961] [] __riscv_sys_read+0x6e/0x94 [ 5878.693250][T11961] [] syscall_handler+0x94/0x118 [ 5878.694324][T11961] [] do_trap_ecall_u+0x1aa/0x216 [ 5878.695444][T11961] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 5882.588362][T11967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5882.592698][T11967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5883.671278][T11972] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 5897.693505][T11982] FAULT_INJECTION: forcing a failure. [ 5897.693505][T11982] name failslab, interval 1, probability 0, space 0, times 0 [ 5897.698152][T11982] CPU: 0 UID: 0 PID: 11982 Comm: syz.6.1706 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 5897.699461][T11982] Hardware name: riscv-virtio,qemu (DT) [ 5897.700170][T11982] Call Trace: [ 5897.700781][T11982] [] dump_backtrace+0x2e/0x3c [ 5897.701760][T11982] [] show_stack+0x30/0x3c [ 5897.702691][T11982] [] dump_stack_lvl+0x12e/0x1a6 [ 5897.703656][T11982] [] dump_stack+0x1c/0x24 [ 5897.704596][T11982] [] should_fail_ex+0x3f8/0x4e0 [ 5897.705542][T11982] [] should_failslab+0xba/0x102 [ 5897.706562][T11982] [] __kmalloc_cache_noprof+0x292/0x3f4 [ 5897.707570][T11982] [] shmem_init_fs_context+0x50/0x270 [ 5897.708544][T11982] [] alloc_fs_context+0x4a2/0x8b4 [ 5897.709450][T11982] [] fs_context_for_mount+0x26/0x32 [ 5897.710352][T11982] [] path_mount+0xb82/0x1d36 [ 5897.711225][T11982] [] __riscv_sys_mount+0x4fa/0x660 [ 5897.712178][T11982] [] syscall_handler+0x94/0x118 [ 5897.713106][T11982] [] do_trap_ecall_u+0x1aa/0x216 [ 5897.714102][T11982] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 5902.672423][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 5916.531887][T11994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5916.680634][T11994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5927.779828][T12008] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1711'. [ 5932.440967][T12012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5932.453840][T12012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5932.544094][T12012] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 5933.229943][T12010] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 5947.339182][T12020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5947.554608][T12020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5947.863986][T12020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5947.942469][T12020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5948.167862][T12020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5948.172239][T12020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5948.542541][T12020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5949.230067][T12020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5949.238957][T12037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5949.247603][T12037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5964.251861][T12051] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1719'. [ 5964.447919][T12048] loop1: detected capacity change from 0 to 5 [ 5964.591959][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 5964.692716][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 5964.697344][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 5977.148010][T12067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5977.207728][T12067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5978.193791][T12066] fuse: Unknown parameter ' Q00000000000000000000005' [ 5979.157920][T12071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5979.234038][T12071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5998.461377][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 6014.632288][T12092] binder: 12091:12092 ioctl c018620c 20000200 returned -22 [ 6014.811384][T12092] binder: 12091:12092 ioctl 8933 20000340 returned -22 [ 6015.792105][T12092] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 6019.271770][T12094] tmpfs: Unknown parameter 'grpquota_inode_' [ 6031.189150][T12101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6031.259017][T12101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6037.857316][T12107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6037.963275][T12107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6038.338180][T12107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6038.372946][T12107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6051.360704][T12115] lo: entered promiscuous mode [ 6051.362146][T12115] lo: entered allmulticast mode [ 6052.476961][T12115] tunl0: entered promiscuous mode [ 6052.478404][T12115] tunl0: entered allmulticast mode [ 6052.762339][T12115] gre0: entered promiscuous mode [ 6052.763945][T12115] gre0: entered allmulticast mode [ 6053.370918][T12115] gretap0: entered promiscuous mode [ 6053.372490][T12115] gretap0: entered allmulticast mode [ 6053.816338][T12115] erspan0: entered promiscuous mode [ 6053.817996][T12115] erspan0: entered allmulticast mode [ 6053.971463][T12115] ip_vti0: entered promiscuous mode [ 6053.987347][T12115] ip_vti0: entered allmulticast mode [ 6054.228318][T12115] ip6_vti0: entered promiscuous mode [ 6054.229745][T12115] ip6_vti0: entered allmulticast mode [ 6054.448865][T12115] sit0: entered promiscuous mode [ 6054.450527][T12115] sit0: entered allmulticast mode [ 6055.149188][T12115] ip6tnl0: entered promiscuous mode [ 6055.151371][T12115] ip6tnl0: entered allmulticast mode [ 6057.197875][T12115] ip6gre0: entered promiscuous mode [ 6057.200109][T12115] ip6gre0: entered allmulticast mode [ 6058.159138][T12115] syz_tun: entered promiscuous mode [ 6058.161268][T12115] syz_tun: entered allmulticast mode [ 6058.911720][T12115] ip6gretap0: entered promiscuous mode [ 6058.913121][T12115] ip6gretap0: entered allmulticast mode [ 6059.071583][T12115] vcan0: entered promiscuous mode [ 6059.072885][T12115] vcan0: entered allmulticast mode [ 6059.251648][T12115] bond0: entered promiscuous mode [ 6059.253154][T12115] bond_slave_0: entered promiscuous mode [ 6059.260559][T12115] bond_slave_1: entered promiscuous mode [ 6059.264297][T12115] bond0: entered allmulticast mode [ 6059.272970][T12115] bond_slave_0: entered allmulticast mode [ 6059.279276][T12115] bond_slave_1: entered allmulticast mode [ 6059.513165][T12115] dummy0: entered promiscuous mode [ 6059.514614][T12115] dummy0: entered allmulticast mode [ 6059.850791][T12115] nlmon0: entered promiscuous mode [ 6059.853108][T12115] nlmon0: entered allmulticast mode [ 6060.076998][T12115] vxcan0: entered promiscuous mode [ 6060.078732][T12115] vxcan0: entered allmulticast mode [ 6060.140811][T12115] vxcan1: entered promiscuous mode [ 6060.143057][T12115] vxcan1: entered allmulticast mode [ 6060.323744][T12115] veth0: entered promiscuous mode [ 6060.369799][T12115] veth0: entered allmulticast mode [ 6061.213622][T12122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6061.308934][T12122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6061.911364][T12115] veth1: entered promiscuous mode [ 6061.913605][T12115] veth1: entered allmulticast mode [ 6062.781482][T12115] wg0: entered promiscuous mode [ 6062.783813][T12115] wg0: entered allmulticast mode [ 6063.072346][T12115] wg1: entered promiscuous mode [ 6063.073629][T12115] wg1: entered allmulticast mode [ 6063.403091][T12115] wg2: entered promiscuous mode [ 6063.407303][T12115] wg2: entered allmulticast mode [ 6063.561232][T12115] veth0_to_bridge: entered promiscuous mode [ 6063.562571][T12115] veth0_to_bridge: entered allmulticast mode [ 6063.743611][T12115] bridge_slave_0: entered promiscuous mode [ 6063.760037][T12115] bridge_slave_0: entered allmulticast mode [ 6063.903939][T12115] veth1_to_bridge: entered promiscuous mode [ 6063.916601][T12115] veth1_to_bridge: entered allmulticast mode [ 6064.160824][T12115] bridge_slave_1: entered promiscuous mode [ 6064.162143][T12115] bridge_slave_1: entered allmulticast mode [ 6064.273913][T12115] veth0_to_bond: entered promiscuous mode [ 6064.276299][T12115] veth0_to_bond: entered allmulticast mode [ 6064.600444][T12115] veth1_to_bond: entered promiscuous mode [ 6064.601769][T12115] veth1_to_bond: entered allmulticast mode [ 6065.911190][T12115] veth0_to_team: entered promiscuous mode [ 6065.913661][T12115] veth0_to_team: entered allmulticast mode [ 6066.209612][T12115] team_slave_0: entered promiscuous mode [ 6066.212129][T12115] team_slave_0: entered allmulticast mode [ 6066.312744][T12115] veth1_to_team: entered promiscuous mode [ 6066.330744][T12115] veth1_to_team: entered allmulticast mode [ 6066.522739][T12115] team_slave_1: entered promiscuous mode [ 6066.583575][T12115] team_slave_1: entered allmulticast mode [ 6066.647337][T12115] veth0_to_batadv: entered promiscuous mode [ 6066.649584][T12115] veth0_to_batadv: entered allmulticast mode [ 6067.267512][T12115] batadv_slave_0: entered promiscuous mode [ 6067.269864][T12115] batadv_slave_0: entered allmulticast mode [ 6068.069935][T12115] veth1_to_batadv: entered promiscuous mode [ 6068.072296][T12115] veth1_to_batadv: entered allmulticast mode [ 6068.421890][T12115] batadv_slave_1: entered promiscuous mode [ 6068.469613][T12115] batadv_slave_1: entered allmulticast mode [ 6069.291285][T12115] xfrm0: entered promiscuous mode [ 6069.293623][T12115] xfrm0: entered allmulticast mode [ 6070.093477][T12115] veth0_to_hsr: entered promiscuous mode [ 6070.098016][T12115] veth0_to_hsr: entered allmulticast mode [ 6071.559007][T12115] hsr_slave_0: entered allmulticast mode [ 6071.579365][T12126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6071.583529][T12126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6072.008102][T12115] veth1_to_hsr: entered promiscuous mode [ 6072.010587][T12115] veth1_to_hsr: entered allmulticast mode [ 6072.239954][T12115] hsr_slave_1: entered allmulticast mode [ 6072.458674][T12115] hsr0: entered promiscuous mode [ 6072.459937][T12115] hsr0: entered allmulticast mode [ 6072.718674][T12115] veth1_virt_wifi: entered promiscuous mode [ 6072.720139][T12115] veth1_virt_wifi: entered allmulticast mode [ 6073.038927][T12115] veth0_virt_wifi: entered promiscuous mode [ 6073.040327][T12115] veth0_virt_wifi: entered allmulticast mode [ 6073.234546][T12115] veth1_vlan: entered allmulticast mode [ 6073.418818][T12115] veth0_vlan: entered allmulticast mode [ 6073.943578][T12115] vlan0: entered promiscuous mode [ 6073.948952][T12115] vlan0: entered allmulticast mode [ 6073.951770][T12115] vlan1: entered promiscuous mode [ 6073.952921][T12115] vlan1: entered allmulticast mode [ 6074.002583][T12115] macvlan0: entered promiscuous mode [ 6074.003886][T12115] macvlan0: entered allmulticast mode [ 6074.318610][T12115] macvlan1: entered promiscuous mode [ 6074.321605][T12115] macvlan1: entered allmulticast mode [ 6074.848969][T12115] ipvlan0: entered promiscuous mode [ 6074.851311][T12115] ipvlan0: entered allmulticast mode [ 6074.858493][T12115] ipvlan1: entered promiscuous mode [ 6074.860615][T12115] ipvlan1: entered allmulticast mode [ 6074.920699][T12115] veth1_macvtap: entered allmulticast mode [ 6075.153194][T12115] veth0_macvtap: entered allmulticast mode [ 6075.725932][T12115] macvtap0: entered promiscuous mode [ 6075.728787][T12115] macvtap0: entered allmulticast mode [ 6076.158529][T12115] macsec0: entered promiscuous mode [ 6076.160854][T12115] macsec0: entered allmulticast mode [ 6076.658704][T12115] geneve0: entered promiscuous mode [ 6076.681506][T12115] geneve0: entered allmulticast mode [ 6077.558352][T12115] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6077.561272][T12115] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6077.563660][T12115] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6077.567741][T12115] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6077.620846][T12115] geneve1: entered promiscuous mode [ 6077.623062][T12115] geneve1: entered allmulticast mode [ 6078.011233][T12115] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 6078.013580][T12115] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 6079.159909][T12115] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 6079.162299][T12115] netdevsim netdevsim6 netdevsim1: entered allmulticast mode [ 6079.269803][T12115] netdevsim netdevsim6 netdevsim2: entered promiscuous mode [ 6079.272259][T12115] netdevsim netdevsim6 netdevsim2: entered allmulticast mode [ 6079.543082][T12115] netdevsim netdevsim6 netdevsim3: entered promiscuous mode [ 6079.549205][T12115] netdevsim netdevsim6 netdevsim3: entered allmulticast mode [ 6104.292951][T12159] fuseblk: Unknown parameter '¸ ©æv¡t0xffffffffffffffff' [ 6136.562925][T10272] hid-generic 0000:0003:0000.0016: unknown main item tag 0x0 [ 6136.567167][T10272] hid-generic 0000:0003:0000.0016: unknown main item tag 0x0 [ 6136.599332][T10272] hid-generic 0000:0003:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz1 [ 6147.391292][T12209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6147.433590][T12209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6158.189162][T12218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6158.197585][T12218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6160.118583][T12223] virtiofs: Unknown parameter 'f' [ 6167.090082][T11320] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 6167.092633][T11320] hid-generic 0000:0003:0000.0017: unknown main item tag 0x0 [ 6167.603326][T11320] hid-generic 0000:0003:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz1 [ 6168.997576][T12239] binder: 12233:12239 ioctl c0306201 200003c0 returned -22 [ 6169.059987][T12239] binder: 12233:12239 ioctl c0306201 200011c0 returned -14 [ 6169.109961][T12239] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1770'. [ 6175.303484][T12246] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 6182.183302][T12252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6182.281964][T12252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6191.003748][T12259] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1775'. [ 6193.564245][T12265] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1777'. [ 6197.599672][T12269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6197.612358][T12269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6198.207351][T12273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6198.213173][T12273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6207.180019][T12277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6207.192380][T12277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6227.044298][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1786'. [ 6227.927209][T12303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6227.991344][T12303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6242.800424][T12336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6242.829983][T12336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6257.458348][T12354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6257.480682][T12354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6274.622949][T12369] netlink: 2756 bytes leftover after parsing attributes in process `syz.5.1796'. [ 6274.631571][T12369] netlink: 1740 bytes leftover after parsing attributes in process `syz.5.1796'. [ 6275.099262][T12369] netlink: 1740 bytes leftover after parsing attributes in process `syz.5.1796'. [ 6288.091738][ T5494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6288.599426][ T5494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6288.709838][ T5494] bond0 (unregistering): Released all slaves [ 6289.392485][ C1] vkms_vblank_simulate: vblank timer overrun [ 6328.362738][ T5324] hid-generic 0000:0003:0000.0018: unknown main item tag 0x0 [ 6328.389095][ T5324] hid-generic 0000:0003:0000.0018: unknown main item tag 0x0 [ 6328.506826][ T5324] hid-generic 0000:0003:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz1 [ 6366.070084][T12529] fuseblk: Invalid rootmode [ 6383.077040][T12392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6383.169929][T12392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6410.471299][T12392] hsr_slave_0: entered promiscuous mode [ 6410.537574][T12392] hsr_slave_1: entered promiscuous mode [ 6410.714331][T12392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 6410.718424][T12392] Cannot create hsr debugfs directory [ 6426.887989][T12392] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 6427.117579][T12392] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 6427.402915][T12392] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 6428.053343][T12392] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 6441.801611][T12392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6446.582357][T12804] loop1: detected capacity change from 0 to 5 [ 6446.627974][ C0] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 6447.044292][ C1] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 6447.046352][ C1] Buffer I/O error on dev loop1, logical block 0, async page read [ 6491.391475][T12851] netlink: 'syz.5.1817': attribute type 27 has an invalid length. [ 6492.557657][T12851] loop1: detected capacity change from 0 to 5 [ 6492.876919][T12851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6492.909053][T12851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6513.574428][T12881] loop0: detected capacity change from 0 to 7 [ 6522.842174][T12893] input: syz0 as /devices/virtual/input/input13 [ 6524.533891][T12893] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1821'. [ 6524.537927][T12893] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1821'. [ 6524.667394][T12392] veth0_vlan: entered promiscuous mode [ 6526.222722][T12392] veth1_vlan: entered promiscuous mode [ 6530.185099][T12392] veth0_macvtap: entered promiscuous mode [ 6530.418576][T12392] veth1_macvtap: entered promiscuous mode [ 6533.622561][T12392] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6533.624326][T12392] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6533.714416][T12392] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6533.748520][T12392] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6551.135950][T12911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6551.140402][T12911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6633.018106][T11860] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6633.981068][T11860] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6634.817849][T11860] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6635.594180][T11860] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 6652.245934][T11860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 6652.651597][T11860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 6652.922413][T11860] bond0 (unregistering): Released all slaves [ 6655.962944][T11860] hsr_slave_0: left promiscuous mode [ 6656.027489][T11860] hsr_slave_1: left promiscuous mode [ 6656.339862][T11860] veth1_macvtap: left promiscuous mode [ 6656.362394][T11860] veth0_macvtap: left promiscuous mode [ 6656.390344][T11860] veth1_vlan: left promiscuous mode [ 6656.395448][T11860] veth0_vlan: left promiscuous mode [ 6691.027493][T13029] netlink: 596 bytes leftover after parsing attributes in process `syz.5.1841'. [ 6721.941857][T12958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6722.764050][T12958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6741.512244][T13213] syz.5.1843 (13213): /proc/13205/oom_adj is deprecated, please use /proc/13205/oom_score_adj instead. [ 6753.233242][T12958] hsr_slave_0: entered promiscuous mode [ 6753.309176][T12958] hsr_slave_1: entered promiscuous mode [ 6753.411879][T12958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 6753.413719][T12958] Cannot create hsr debugfs directory [ 6753.519384][T13285] tmpfs: Bad value for 'mpol' [ 6758.273464][ T8180] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 6758.402308][ T8180] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz0 [ 6758.458954][T13317] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1845'. [ 6758.552946][T13306] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1845'. [ 6759.903963][T13317] 8021q: adding VLAN 0 to HW filter on device bond1 [ 6767.003123][T12958] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 6767.251871][T12958] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 6767.419143][T12958] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 6767.541129][T12958] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 6771.768171][T13407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6771.809572][T13407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6793.062402][T12958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6801.829641][T13426] netlink: 'syz.5.1849': attribute type 4 has an invalid length. [ 6822.547184][T13449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1850'. [ 6822.548724][T13449] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1850'. [ 6830.323273][T13453] pimreg: entered allmulticast mode [ 6890.295260][T12958] veth0_vlan: entered promiscuous mode [ 6891.107840][T12958] veth1_vlan: entered promiscuous mode [ 6898.298971][T12958] veth0_macvtap: entered promiscuous mode [ 6898.421899][T12958] veth1_macvtap: entered promiscuous mode [ 6900.651399][T12958] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6900.653012][T12958] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6900.654358][T12958] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6900.733275][T12958] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6927.933640][T13559] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1861'. [ 6928.323491][T13559] netlink: 'syz.8.1861': attribute type 1 has an invalid length. [ 6928.335946][T13559] netlink: 'syz.8.1861': attribute type 2 has an invalid length. [ 6933.629703][T13566] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1864'. [ 6934.416848][T13568] tmpfs: Bad value for 'mpol' [ 6936.248628][T13568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6936.268721][T13568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6957.629640][T13584] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1868'. [ 6964.923133][T13596] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1872'. [ 7002.598414][T13627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7002.654268][T13627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7014.688095][T13639] PKCS7: Unknown OID: [5] 0.0 [ 7014.692644][T13639] PKCS7: Only support pkcs7_signedData type [ 7025.691662][T13647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1887'. [ 7046.466875][T13667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7046.478363][T13667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7046.809045][T13667] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1891'. [ 7046.811642][T13667] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1891'. [ 7049.331058][T13673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7049.608226][T13673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7063.844352][T13682] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1895'. [ 7086.456495][T13706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7086.494303][T13706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7094.379329][T13711] fuse: Bad value for 'user_id' [ 7094.380677][T13711] fuse: Bad value for 'user_id' [ 7099.789197][T13714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7099.793459][T13714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7099.897556][T13717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7099.928620][T13717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7100.294428][T13717] netlink: 'syz.8.1901': attribute type 2 has an invalid length. [ 7100.297187][T13717] netlink: 211132 bytes leftover after parsing attributes in process `syz.8.1901'. [ 7100.789520][T13722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7100.809965][T13722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7106.019937][T13728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7106.034379][T13728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7106.193899][T13728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7106.216570][T13728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7106.310563][T13728] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 7128.408482][T13759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7128.431472][T13759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7142.316180][T13771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7142.321596][T13771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7145.017596][T13775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7145.024211][T13775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7146.107384][T13775] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1914'. [ 7147.946778][T13775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7147.958980][T13775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7159.314034][T13781] fuse: Bad value for 'fd' [ 7170.582680][T13798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7170.619629][T13798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7209.413144][T13840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7209.917706][T13840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7226.487987][T13855] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1927'. [ 7226.490009][T13855] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1927'. [ 7230.670240][T13856] FAULT_INJECTION: forcing a failure. [ 7230.670240][T13856] name failslab, interval 1, probability 0, space 0, times 0 [ 7230.673028][T13856] CPU: 0 UID: 0 PID: 13856 Comm: syz.5.1928 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 7230.675731][T13856] Hardware name: riscv-virtio,qemu (DT) [ 7230.677138][T13856] Call Trace: [ 7230.678331][T13856] [] dump_backtrace+0x2e/0x3c [ 7230.680051][T13856] [] show_stack+0x30/0x3c [ 7230.681567][T13856] [] dump_stack_lvl+0x12e/0x1a6 [ 7230.683379][T13856] [] dump_stack+0x1c/0x24 [ 7230.685737][T13856] [] should_fail_ex+0x3f8/0x4e0 [ 7230.688373][T13856] [] should_failslab+0xba/0x102 [ 7230.690169][T13856] [] __kmalloc_noprof+0xce/0x5ba [ 7230.691866][T13856] [] sock_kmalloc+0x110/0x170 [ 7230.693549][T13856] [] hash_recvmsg+0x456/0x8e0 [ 7230.696297][T13856] [] ____sys_recvmsg+0x5a6/0x7c0 [ 7230.697910][T13856] [] ___sys_recvmsg+0x112/0x19e [ 7230.699582][T13856] [] do_recvmmsg+0x320/0x9b6 [ 7230.701245][T13856] [] __riscv_sys_recvmmsg+0x228/0x26e [ 7230.703947][T13856] [] syscall_handler+0x94/0x118 [ 7230.706007][T13856] [] do_trap_ecall_u+0x1aa/0x216 [ 7230.707962][T13856] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 7259.852448][ T5494] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7261.802547][ T5494] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7264.251145][T13885] FAULT_INJECTION: forcing a failure. [ 7264.251145][T13885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 7264.252912][T13885] CPU: 1 UID: 0 PID: 13885 Comm: syz.5.1934 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 7264.254066][T13885] Hardware name: riscv-virtio,qemu (DT) [ 7264.255130][T13885] Call Trace: [ 7264.255804][T13885] [] dump_backtrace+0x2e/0x3c [ 7264.256830][T13885] [] show_stack+0x30/0x3c [ 7264.257777][T13885] [] dump_stack_lvl+0x12e/0x1a6 [ 7264.258839][T13885] [] dump_stack+0x1c/0x24 [ 7264.259777][T13885] [] should_fail_ex+0x3f8/0x4e0 [ 7264.260854][T13885] [] should_fail+0xe/0x16 [ 7264.261837][T13885] [] should_fail_usercopy+0x1e/0x26 [ 7264.262909][T13885] [] _copy_from_user+0x3e/0x2ae [ 7264.263872][T13885] [] copy_msghdr_from_user+0xbe/0x176 [ 7264.265163][T13885] [] ___sys_recvmsg+0xde/0x19e [ 7264.266176][T13885] [] do_recvmmsg+0x320/0x9b6 [ 7264.267185][T13885] [] __riscv_sys_recvmmsg+0x228/0x26e [ 7264.268206][T13885] [] syscall_handler+0x94/0x118 [ 7264.269128][T13885] [] do_trap_ecall_u+0x1aa/0x216 [ 7264.270114][T13885] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 7264.900816][ T5494] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7266.222028][ T5494] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 7282.399980][ T5494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 7283.497556][ T5494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 7283.817644][ T5494] bond0 (unregistering): Released all slaves [ 7285.868572][ T5494] hsr_slave_0: left promiscuous mode [ 7285.960621][ T5494] hsr_slave_1: left promiscuous mode [ 7286.426128][ T5494] veth1_macvtap: left promiscuous mode [ 7286.428056][ T5494] veth0_macvtap: left promiscuous mode [ 7286.430114][ T5494] veth1_vlan: left promiscuous mode [ 7286.432182][ T5494] veth0_vlan: left promiscuous mode [ 7306.242069][T13916] FAULT_INJECTION: forcing a failure. [ 7306.242069][T13916] name failslab, interval 1, probability 0, space 0, times 0 [ 7306.254344][T13916] CPU: 0 UID: 0 PID: 13916 Comm: syz.5.1938 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 7306.256762][T13916] Hardware name: riscv-virtio,qemu (DT) [ 7306.258063][T13916] Call Trace: [ 7306.259246][T13916] [] dump_backtrace+0x2e/0x3c [ 7306.261004][T13916] [] show_stack+0x30/0x3c [ 7306.262538][T13916] [] dump_stack_lvl+0x12e/0x1a6 [ 7306.264291][T13916] [] dump_stack+0x1c/0x24 [ 7306.265987][T13916] [] should_fail_ex+0x3f8/0x4e0 [ 7306.267716][T13916] [] should_failslab+0xba/0x102 [ 7306.269486][T13916] [] __kmalloc_noprof+0xce/0x5ba [ 7306.271143][T13916] [] sock_kmalloc+0x110/0x170 [ 7306.272914][T13916] [] hash_recvmsg+0x456/0x8e0 [ 7306.274661][T13916] [] ____sys_recvmsg+0x5a6/0x7c0 [ 7306.276330][T13916] [] ___sys_recvmsg+0x112/0x19e [ 7306.277987][T13916] [] do_recvmmsg+0x320/0x9b6 [ 7306.279650][T13916] [] __riscv_sys_recvmmsg+0x228/0x26e [ 7306.281308][T13916] [] syscall_handler+0x94/0x118 [ 7306.282946][T13916] [] do_trap_ecall_u+0x1aa/0x216 [ 7306.284646][T13916] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 7344.040200][T14018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7344.179376][T14018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7360.502108][T13883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 7360.949599][T13883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 7382.920789][T14163] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1945'. [ 7382.923689][T14163] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1945'. [ 7387.621570][T13883] hsr_slave_0: entered promiscuous mode [ 7387.703183][T13883] hsr_slave_1: entered promiscuous mode [ 7387.759358][T13883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 7387.760697][T13883] Cannot create hsr debugfs directory [ 7400.239232][T13883] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 7400.903539][T13883] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 7401.851086][T13883] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 7403.650501][T13883] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 7410.464026][T14272] binder: 14267:14272 ioctl c0045006 20000080 returned -22 [ 7420.971580][T14279] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1947'. [ 7425.304395][T14279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7425.552606][T14279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7426.157281][T14279] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 7431.503123][T13883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 7444.619590][T14299] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1948'. [ 7444.621128][T14299] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1948'. [ 7444.857976][T14299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7444.862244][T14299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7550.354348][T13883] veth0_vlan: entered promiscuous mode [ 7552.421292][T13883] veth1_vlan: entered promiscuous mode [ 7567.629392][T13883] veth0_macvtap: entered promiscuous mode [ 7568.353282][T13883] veth1_macvtap: entered promiscuous mode [ 7570.743819][T13883] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 7570.746137][T13883] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 7570.747476][T13883] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 7570.748756][T13883] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 7603.252047][T14507] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1951'. [ 7603.288541][T14507] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1951'. [ 7604.100893][T14353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 7604.495670][T14353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 7613.851300][T14562] binder: 14561:14562 unknown command 24 [ 7613.852620][T14562] binder: 14561:14562 ioctl c0306201 20000380 returned -22 [ 7630.770400][T14593] netlink: 'syz.9.1953': attribute type 16 has an invalid length. [ 7630.772745][T14593] netlink: 64138 bytes leftover after parsing attributes in process `syz.9.1953'. [ 7634.764358][T14353] hsr_slave_0: entered promiscuous mode [ 7634.819257][T14353] hsr_slave_1: entered promiscuous mode [ 7634.904368][T14353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 7634.915538][T14353] Cannot create hsr debugfs directory [ 7653.891437][T14697] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96 [ 7654.352386][T14697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7654.394140][T14697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7655.137716][T14353] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 7655.429613][T14353] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 7656.671464][T14353] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 7657.083193][T14353] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 7679.085799][T14732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7679.093054][T14732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7682.983289][T14353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 7738.353433][T14775] x_tables: unsorted underflow at hook 3 [ 7787.547367][T14353] veth0_vlan: entered promiscuous mode [ 7789.023604][T14353] veth1_vlan: entered promiscuous mode [ 7791.761349][T14353] veth0_macvtap: entered promiscuous mode [ 7791.833316][T14353] veth1_macvtap: entered promiscuous mode [ 7797.472354][T14353] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 7797.490627][T14353] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 7797.493253][T14353] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 7797.547652][T14353] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 7839.651334][T14854] sctp: [Deprecated]: syz.9.1967 (pid 14854) Use of int in max_burst socket option deprecated. [ 7839.651334][T14854] Use struct sctp_assoc_value instead [ 7854.513117][T14873] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1970'. [ 7867.090453][T14879] usb usb1: usbfs: process 14879 (syz.1.1972) did not claim interface 8 before use [ 7868.863750][T14879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1972'. [ 7868.911686][T14879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1972'. [ 7873.002935][T13536] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 7873.696124][T13536] usb 2-1: Using ep0 maxpacket: 16 [ 7873.916548][T13536] usb 2-1: config index 0 descriptor too short (expected 42, got 18) [ 7873.919302][T13536] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 7873.921940][T13536] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 7874.928027][T13536] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 7874.930155][T13536] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 7874.931728][T13536] usb 2-1: Product: syz [ 7874.932815][T13536] usb 2-1: SerialNumber: syz [ 7875.858579][T13536] r8152-cfgselector 2-1: Unknown version 0x0000 [ 7875.861483][T13536] r8152-cfgselector 2-1: config 0 descriptor?? [ 7876.097554][T13536] hub 2-1:0.0: bad descriptor, ignoring hub [ 7876.103215][T13536] hub 2-1:0.0: probe with driver hub failed with error -5 [ 7881.947031][ T5873] r8152-cfgselector 2-1: USB disconnect, device number 10 [ 7894.957349][T14907] sctp: [Deprecated]: syz.1.1974 (pid 14907) Use of int in max_burst socket option deprecated. [ 7894.957349][T14907] Use struct sctp_assoc_value instead [ 7913.901622][T14927] FAULT_INJECTION: forcing a failure. [ 7913.901622][T14927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 7913.903310][T14927] CPU: 1 UID: 0 PID: 14927 Comm: syz.9.1979 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 7913.904322][T14927] Hardware name: riscv-virtio,qemu (DT) [ 7913.905095][T14927] Call Trace: [ 7913.905689][T14927] [] dump_backtrace+0x2e/0x3c [ 7913.906729][T14927] [] show_stack+0x30/0x3c [ 7913.907552][T14927] [] dump_stack_lvl+0x12e/0x1a6 [ 7913.908466][T14927] [] dump_stack+0x1c/0x24 [ 7913.909346][T14927] [] should_fail_ex+0x3f8/0x4e0 [ 7913.910332][T14927] [] should_fail+0xe/0x16 [ 7913.911214][T14927] [] should_fail_usercopy+0x1e/0x26 [ 7913.912244][T14927] [] _copy_from_user+0x3e/0x2ae [ 7913.913117][T14927] [] copy_msghdr_from_user+0xbe/0x176 [ 7913.914005][T14927] [] ___sys_recvmsg+0xde/0x19e [ 7913.914993][T14927] [] do_recvmmsg+0x320/0x9b6 [ 7913.915909][T14927] [] __riscv_sys_recvmmsg+0x228/0x26e [ 7913.916816][T14927] [] syscall_handler+0x94/0x118 [ 7913.917655][T14927] [] do_trap_ecall_u+0x1aa/0x216 [ 7913.918681][T14927] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 7919.236462][T11320] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 7919.497733][T11320] usb 2-1: Using ep0 maxpacket: 8 [ 7921.686485][T11320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 7921.688213][T11320] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 7921.690092][T11320] usb 2-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 7921.691479][T11320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 7921.897984][T11320] usb 2-1: config 0 descriptor?? [ 7925.810879][T14930] tls_set_device_offload_rx: netdev not found [ 7926.924024][T11320] nti 0003:0757:0A00.001A: unknown global tag 0xd [ 7926.928326][T11320] nti 0003:0757:0A00.001A: item 0 4 1 13 parsing failed [ 7927.064165][T11320] nti 0003:0757:0A00.001A: probe with driver nti failed with error -22 [ 7927.660974][T11320] usb 2-1: USB disconnect, device number 11 [ 7949.564118][T14970] FAULT_INJECTION: forcing a failure. [ 7949.564118][T14970] name failslab, interval 1, probability 0, space 0, times 0 [ 7949.608194][T14970] CPU: 1 UID: 0 PID: 14970 Comm: syz.9.1985 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 7949.609338][T14970] Hardware name: riscv-virtio,qemu (DT) [ 7949.610379][T14970] Call Trace: [ 7949.610989][T14970] [] dump_backtrace+0x2e/0x3c [ 7949.612041][T14970] [] show_stack+0x30/0x3c [ 7949.612919][T14970] [] dump_stack_lvl+0x12e/0x1a6 [ 7949.613891][T14970] [] dump_stack+0x1c/0x24 [ 7949.615203][T14970] [] should_fail_ex+0x3f8/0x4e0 [ 7949.616154][T14970] [] should_failslab+0xba/0x102 [ 7949.617141][T14970] [] __kmalloc_noprof+0xce/0x5ba [ 7949.618028][T14970] [] sock_kmalloc+0x110/0x170 [ 7949.618980][T14970] [] hash_recvmsg+0x456/0x8e0 [ 7949.619902][T14970] [] ____sys_recvmsg+0x5a6/0x7c0 [ 7949.620811][T14970] [] ___sys_recvmsg+0x112/0x19e [ 7949.621752][T14970] [] do_recvmmsg+0x320/0x9b6 [ 7949.623468][T14970] [] __riscv_sys_recvmmsg+0x228/0x26e [ 7949.624677][T14970] [] syscall_handler+0x94/0x118 [ 7949.625696][T14970] [] do_trap_ecall_u+0x1aa/0x216 [ 7949.626708][T14970] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 7961.479483][T14982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 7961.483955][T14982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 7989.958766][T15001] FAULT_INJECTION: forcing a failure. [ 7989.958766][T15001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 7989.960515][T15001] CPU: 1 UID: 0 PID: 15001 Comm: syz.9.1991 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 7989.961775][T15001] Hardware name: riscv-virtio,qemu (DT) [ 7989.962930][T15001] Call Trace: [ 7989.963594][T15001] [] dump_backtrace+0x2e/0x3c [ 7989.964602][T15001] [] show_stack+0x30/0x3c [ 7989.965457][T15001] [] dump_stack_lvl+0x12e/0x1a6 [ 7989.966484][T15001] [] dump_stack+0x1c/0x24 [ 7989.967436][T15001] [] should_fail_ex+0x3f8/0x4e0 [ 7989.968403][T15001] [] should_fail+0xe/0x16 [ 7989.969368][T15001] [] should_fail_usercopy+0x1e/0x26 [ 7989.970573][T15001] [] _copy_from_user+0x3e/0x2ae [ 7989.971565][T15001] [] copy_msghdr_from_user+0xbe/0x176 [ 7989.972488][T15001] [] ___sys_recvmsg+0xde/0x19e [ 7989.973403][T15001] [] do_recvmmsg+0x320/0x9b6 [ 7989.974610][T15001] [] __riscv_sys_recvmmsg+0x228/0x26e [ 7989.975649][T15001] [] syscall_handler+0x94/0x118 [ 7989.976657][T15001] [] do_trap_ecall_u+0x1aa/0x216 [ 7989.977687][T15001] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 8013.058683][T15036] netlink: 'syz.9.1996': attribute type 11 has an invalid length. [ 8013.060712][T15036] netlink: 140 bytes leftover after parsing attributes in process `syz.9.1996'. [ 8019.728508][T15045] sctp: [Deprecated]: syz.1.1997 (pid 15045) Use of int in max_burst socket option deprecated. [ 8019.728508][T15045] Use struct sctp_assoc_value instead [ 8025.999675][T15051] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 8027.120005][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2000'. [ 8032.836733][T15053] dlm: plock device version mismatch: kernel (1.2.0), user (1851878519.49.0) [ 8048.717795][T15078] sctp: [Deprecated]: syz.1.2004 (pid 15078) Use of int in max_burst socket option deprecated. [ 8048.717795][T15078] Use struct sctp_assoc_value instead [ 8069.102029][T15092] netem: incorrect gi model size [ 8069.106218][T15092] netem: change failed [ 8082.224390][T15100] sctp: [Deprecated]: syz.9.2010 (pid 15100) Use of int in max_burst socket option deprecated. [ 8082.224390][T15100] Use struct sctp_assoc_value instead [ 8096.455727][ T5324] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 8097.122267][ T5324] usb 2-1: device descriptor read/64, error -71 [ 8097.919336][ T5324] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 8098.217134][ T5324] usb 2-1: device descriptor read/64, error -71 [ 8098.341342][ T5324] usb usb2-port1: attempt power cycle [ 8099.296526][ T5324] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 8099.516844][ T5324] usb 2-1: device descriptor read/8, error -71 [ 8099.787840][ T5324] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 8100.589662][ T5324] usb 2-1: device descriptor read/8, error -71 [ 8100.822712][ T5324] usb usb2-port1: unable to enumerate USB device [ 8124.727449][ T35] audit: type=1326 audit(8123.600:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15131 comm="syz.1.2016" exe="/syz-executor" sig=31 arch=c00000f3 syscall=98 compat=0 ip=0xdb5be code=0x0 [ 8143.219040][T15147] sctp: [Deprecated]: syz.9.2018 (pid 15147) Use of int in max_burst socket option deprecated. [ 8143.219040][T15147] Use struct sctp_assoc_value instead [ 8158.367706][T15043] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8159.483095][T15043] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8160.828362][T15043] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8163.271039][T15043] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8171.110733][T15172] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2025'. [ 8187.283254][T15043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 8188.429136][T15043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 8188.752328][T15043] bond0 (unregistering): Released all slaves [ 8191.660432][T15043] hsr_slave_0: left promiscuous mode [ 8191.866474][T15043] hsr_slave_1: left promiscuous mode [ 8192.178654][T15043] veth1_macvtap: left promiscuous mode [ 8192.180823][T15043] veth0_macvtap: left promiscuous mode [ 8192.183752][T15043] veth1_vlan: left promiscuous mode [ 8192.188646][T15043] veth0_vlan: left promiscuous mode [ 8214.933984][T15200] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2028'. [ 8215.012370][T15200] netlink: 'syz.9.2028': attribute type 2 has an invalid length. [ 8249.093428][T15222] syzkaller0: entered promiscuous mode [ 8249.099793][T15222] syzkaller0: entered allmulticast mode [ 8307.473714][T13867] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8309.047723][T13867] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8310.238817][T13867] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8311.171935][T13867] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8327.743132][T13867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 8328.028118][T13867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 8328.498837][T13867] bond0 (unregistering): Released all slaves [ 8329.719247][T15185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 8329.932402][T15185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 8330.417469][T13867] hsr_slave_0: left promiscuous mode [ 8330.498819][T13867] hsr_slave_1: left promiscuous mode [ 8330.890227][T13867] veth1_macvtap: left promiscuous mode [ 8330.892263][T13867] veth0_macvtap: left promiscuous mode [ 8330.907675][T13867] veth1_vlan: left promiscuous mode [ 8330.912777][T13867] veth0_vlan: left promiscuous mode [ 8400.603991][T15185] hsr_slave_0: entered promiscuous mode [ 8400.782752][T15185] hsr_slave_1: entered promiscuous mode [ 8400.907170][T15185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 8400.909534][T15185] Cannot create hsr debugfs directory [ 8416.240466][T15289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 8417.040926][T15185] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8417.372817][T15289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 8418.683612][T15185] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8420.683835][T15185] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8421.930586][T15185] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 8426.612354][T15185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 8426.806895][T15185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 8427.101223][T15185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 8427.783679][T15185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 8451.680644][T15289] hsr_slave_0: entered promiscuous mode [ 8451.710267][T15289] hsr_slave_1: entered promiscuous mode [ 8451.757552][T15289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 8451.759083][T15289] Cannot create hsr debugfs directory [ 8458.313080][T15185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 8479.377457][T15289] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 8480.091544][T15289] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 8482.041033][T15289] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 8482.441144][T15289] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 8517.101972][T15289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 8568.212574][T15185] veth0_vlan: entered promiscuous mode [ 8569.419929][T15185] veth1_vlan: entered promiscuous mode [ 8576.448373][T15185] veth0_macvtap: entered promiscuous mode [ 8577.167627][T15185] veth1_macvtap: entered promiscuous mode [ 8580.993775][T15185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 8581.016074][T15185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 8581.018816][T15185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 8581.020421][T15185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 8621.610532][T15289] veth0_vlan: entered promiscuous mode [ 8623.257084][T15289] veth1_vlan: entered promiscuous mode [ 8631.743551][T15289] veth0_macvtap: entered promiscuous mode [ 8633.440966][T15289] veth1_macvtap: entered promiscuous mode [ 8640.158619][T15289] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 8640.160199][T15289] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 8640.161430][T15289] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 8640.162697][T15289] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 8653.898658][T16028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2031'. [ 8653.901173][T16028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2031'. [ 8762.008938][T15985] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 8762.971554][T15985] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 8762.974251][T15985] usb 1-1: config 0 has no interface number 0 [ 8763.148967][T15985] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 8763.202122][T15985] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 8763.279678][T15985] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 8763.282420][T15985] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 8764.302956][T15985] usb 1-1: config 0 descriptor?? [ 8764.749922][T15985] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 8769.437967][T16025] usb 1-1: USB disconnect, device number 41 [ 8821.566682][T16023] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 8823.771438][T16023] usb 1-1: Using ep0 maxpacket: 16 [ 8824.262315][T16023] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 8824.333657][T16023] usb 1-1: config 0 has no interface number 0 [ 8824.397492][T16023] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 8824.400013][T16023] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x4 has an invalid bInterval 127, changing to 7 [ 8824.402394][T16023] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 8824.458120][T16023] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 8824.460604][T16023] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 8824.840146][T16023] usb 1-1: config 0 descriptor?? [ 8825.806150][T16023] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 8831.021717][T16025] usb 1-1: USB disconnect, device number 42 [ 8938.609012][T16294] netlink: 'syz.3.2081': attribute type 10 has an invalid length. [ 8938.976647][T16294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8938.982010][T16294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 8966.041333][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2085'. [ 8987.086709][T16341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 8987.129057][T16341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9043.147196][T16382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9043.165574][T16382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9181.998601][T16445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 9182.002819][T16445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 9266.559988][T16440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 9267.950236][T16440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 9272.712086][T16639] binder_alloc: 16612: binder_alloc_buf, no vma [ 9323.531939][T16440] hsr_slave_0: entered promiscuous mode [ 9324.112402][T16440] hsr_slave_1: entered promiscuous mode [ 9324.199808][T16440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 9324.201145][T16440] Cannot create hsr debugfs directory [ 9324.270605][T16717] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 9324.407606][T16717] netlink: 'syz.3.2124': attribute type 1 has an invalid length. [ 9330.789046][T16717] 8021q: adding VLAN 0 to HW filter on device bond1 [ 9335.857028][T16727] bond1: (slave veth3): Enslaving as an active interface with a down link [ 9364.083449][T16845] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 9368.721889][T16440] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 9370.032172][T16440] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 9370.920064][T16440] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 9371.611810][T16440] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 9411.112518][T16440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 9535.788707][T16440] veth0_vlan: entered promiscuous mode [ 9535.976684][T16440] veth1_vlan: entered promiscuous mode [ 9541.949475][T16440] veth0_macvtap: entered promiscuous mode [ 9542.208613][T16440] veth1_macvtap: entered promiscuous mode [ 9551.832453][T16440] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 9551.834053][T16440] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 9551.841072][T16440] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 9551.842486][T16440] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 9552.970794][ T39] INFO: task syz.0.2107:16420 blocked for more than 433 seconds. [ 9552.973011][ T39] Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 9552.999640][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 9553.001967][ T39] task:syz.0.2107 state:D stack:0 pid:16420 tgid:16420 ppid:15185 flags:0x00000000 [ 9553.081066][ T39] Call Trace: [ 9553.083040][ T39] [] __schedule+0xdaa/0x393a [ 9553.138433][ T39] [] schedule+0xc4/0x324 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 9553.198644][ T39] [] schedule_preempt_disabled+0x16/0x28 [ 9553.201050][ T39] [] rwsem_down_read_slowpath+0x56a/0x91e [ 9553.203065][ T39] [] down_read+0xe4/0x45e [ 9553.306790][ T39] [] do_exit+0x810/0x296e [ 9553.309073][ T39] [] do_group_exit+0xd4/0x26c [ 9553.311101][ T39] [] __riscv_sys_exit_group+0x4a/0x54 [ 9553.313057][ T39] [] syscall_handler+0x94/0x118 [ 9553.367603][ T39] [] do_trap_ecall_u+0x1aa/0x216 [ 9553.370142][ T39] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 9553.373947][ T39] INFO: task syz.0.2107:16424 blocked for more than 433 seconds. [ 9553.485309][ T39] Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 9553.486911][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 9553.488600][ T39] task:syz.0.2107 state:D stack:0 pid:16424 tgid:16420 ppid:15185 flags:0x0000000c [ 9553.491079][ T39] Call Trace: [ 9553.492386][ T39] [] __schedule+0xdaa/0x393a [ 9553.494293][ T39] [] schedule+0xc4/0x324 [ 9553.591057][ T39] [] schedule_preempt_disabled+0x16/0x28 [ 9553.593176][ T39] [] rwsem_down_write_slowpath+0x4de/0xe48 [ 9553.677120][ T39] [] down_write+0x17e/0x19a [ 9553.679570][ T39] [] do_mbind+0x254/0xe78 [ 9553.681530][ T39] [] __riscv_sys_mbind+0x324/0x392 [ 9553.683572][ T39] [] syscall_handler+0x94/0x118 [ 9553.737681][ T39] [] do_trap_ecall_u+0x1aa/0x216 [ 9553.740065][ T39] [] _new_vmalloc_restore_context_a0+0xc2/0xce [ 9553.809836][ T39] [ 9553.809836][ T39] Showing all locks held in the system: [ 9553.812931][ T39] 1 lock held by khungtaskd/39: [ 9553.895791][ T39] #0: ffffffff881d0c40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x68/0x2e6 [ 9553.902256][ T39] 1 lock held by syslogd/2973: [ 9553.903975][ T39] 2 locks held by getty/3124: [ 9554.007568][ T39] #0: ff6000001d7500a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3a/0x46 [ 9554.012878][ T39] #1: ff2000000008b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xd7c/0x129a [ 9554.135649][ T39] 2 locks held by syz-executor/3153: [ 9554.137765][ T39] 3 locks held by kworker/u9:8/13670: [ 9554.139436][ T39] 2 locks held by kworker/u8:2/15043: [ 9554.141002][ T39] 3 locks held by kworker/0:4/16023: [ 9554.142579][ T39] 3 locks held by kworker/u9:2/16068: [ 9554.144097][ T39] 3 locks held by kworker/u9:9/16110: [ 9554.230135][ T39] 3 locks held by kworker/u9:12/16118: [ 9554.232217][ T39] 1 lock held by syz.0.2107/16420: [ 9554.233762][ T39] #0: ff60000018795090 (&mm->mmap_lock){++++}-{4:4}, at: do_exit+0x810/0x296e [ 9554.401731][ T39] 2 locks held by syz.0.2107/16423: [ 9554.403435][ T39] 1 lock held by syz.0.2107/16424: [ 9554.437020][ T39] #0: ff60000018795090 (&mm->mmap_lock){++++}-{4:4}, at: do_mbind+0x254/0xe78 [ 9554.442059][ T39] 1 lock held by syz-executor/16440: [ 9554.443641][ T39] 2 locks held by kworker/1:4/16478: [ 9554.567290][ T39] 3 locks held by kworker/u8:0/16480: [ 9554.569344][ T39] 3 locks held by kworker/u10:13/16693: [ 9554.570956][ T39] 1 lock held by kworker/u8:1/16840: [ 9554.572501][ T39] #0: ff6000005cdd3a58 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x278/0x393a [ 9554.642630][ T39] 3 locks held by dhcpcd-run-hook/16972: [ 9554.699626][ T39] [ 9554.701311][ T39] ============================================= [ 9554.701311][ T39] [ 9554.703668][ T39] NMI backtrace for cpu 1 [ 9554.704944][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 9554.706843][ T39] Hardware name: riscv-virtio,qemu (DT) [ 9554.708082][ T39] Call Trace: [ 9554.709108][ T39] [] dump_backtrace+0x2e/0x3c [ 9554.710750][ T39] [] show_stack+0x30/0x3c [ 9554.712274][ T39] [] dump_stack_lvl+0x12e/0x1a6 [ 9554.713963][ T39] [] dump_stack+0x1c/0x24 [ 9554.715609][ T39] [] nmi_cpu_backtrace+0x3b0/0x3b2 [ 9554.717284][ T39] [] nmi_trigger_cpumask_backtrace+0x2b6/0x458 [ 9554.718977][ T39] [] arch_trigger_cpumask_backtrace+0x2c/0x3e [ 9554.720757][ T39] [] watchdog+0xcee/0x1170 [ 9554.722350][ T39] [] kthread+0x28c/0x3a4 [ 9554.723857][ T39] [] ret_from_fork+0xe/0x18 [ 9554.728862][ T39] Sending NMI from CPU 1 to CPUs 0: [ 9554.731580][ C0] NMI backtrace for cpu 0 [ 9554.733250][ C0] CPU: 0 UID: 0 PID: 13670 Comm: kworker/u9:8 Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 9554.735518][ C0] Hardware name: riscv-virtio,qemu (DT) [ 9554.737085][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 9554.739158][ C0] epc : crng_make_state+0x300/0x706 [ 9554.740596][ C0] ra : crng_make_state+0x2fc/0x706 [ 9554.742106][ C0] epc : ffffffff81d66042 ra : ffffffff81d6603e sp : ff20000002a57820 [ 9554.743689][ C0] gp : ffffffff899f4f80 tp : ff60000014f61a40 t0 : ff20000002a57780 [ 9554.745962][ C0] t1 : 000000004f892b2e t2 : 000000004133ce2c s0 : ff20000002a578a0 [ 9554.747615][ C0] s1 : 0000000000000000 a0 : 0000000000000007 a1 : 0000000000000000 [ 9554.749191][ C0] a2 : 0000000000000002 a3 : ffffffff81d6603e a4 : 0000000000000000 [ 9554.750768][ C0] a5 : ff60000014f62a40 a6 : 0000000000000003 a7 : 1fec0000029ec4bf [ 9554.752332][ C0] s2 : ff6000005cdd0500 s3 : 0000000000000002 s4 : ffffffff90da1fc0 [ 9554.753852][ C0] s5 : 0000000000000000 s6 : ff20000002a578e0 s7 : ff6000001e5a4000 [ 9554.756199][ C0] s8 : ff6000005cdd04b0 s9 : 1fec00000b9ba09a s10: ff6000005cdd04d0 [ 9554.757785][ C0] s11: ffffffff8887f7a0 t3 : 0000000000000052 t4 : ff20000002a57620 [ 9554.759372][ C0] t5 : 000000004145ac91 t6 : ff6000001e5a4006 [ 9554.760717][ C0] status: 0000000200000120 badaddr: 0000000000000000 cause: 8000000000000001 [ 9554.762472][ C0] [] crng_make_state+0x300/0x706 [ 9554.764233][ C0] [] _get_random_bytes+0x142/0x228 [ 9554.765880][ C0] [] get_random_bytes+0x20/0x2c [ 9554.767375][ C0] [] nsim_dev_trap_report_work+0x2fe/0xc96 [ 9554.769001][ C0] [] process_one_work+0x968/0x1f38 [ 9554.770687][ C0] [] worker_thread+0x5be/0xdc6 [ 9554.772279][ C0] [] kthread+0x28c/0x3a4 [ 9554.773762][ C0] [] ret_from_fork+0xe/0x18 [ 9555.428948][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 9555.431085][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted 6.13.0-rc2-syzkaller-g21f1b85c8912 #0 [ 9555.432287][ T39] Hardware name: riscv-virtio,qemu (DT) [ 9555.433084][ T39] Call Trace: [ 9555.433809][ T39] [] dump_backtrace+0x2e/0x3c [ 9555.435861][ T39] [] show_stack+0x30/0x3c [ 9555.437381][ T39] [] dump_stack_lvl+0x110/0x1a6 [ 9555.438893][ T39] [] dump_stack+0x1c/0x24 [ 9555.439795][ T39] [] panic+0x38c/0x86e [ 9555.440595][ T39] [] watchdog+0x772/0x1170 [ 9555.441402][ T39] [] kthread+0x28c/0x3a4 [ 9555.442308][ T39] [] ret_from_fork+0xe/0x18 [ 9555.443442][ T39] SMP: stopping secondary CPUs [ 9555.446161][ T39] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:17:50 Registers: info registers vcpu 0 CPU#0 V = 0 pc ffffffff804b66de mhartid 0000000000000000 mstatus 0000000a000000a2 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff861e63e4 vstvec 0000000000000000 mepc ffffffff859f712a sepc ffffffff803c60c8 vsepc 0000000000000000 mcause 8000000000000003 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 000000008004a000 sscratch 0000000000000000 satp a136f000000aec43 x0/zero 0000000000000000 x1/ra ffffffff80094384 x2/sp ff20000000005d00 x3/gp ffffffff899f4f80 x4/tp ff60000011fc8000 x5/t0 d3a4f72a92f0068f x6/t1 ffebffff0371275c x7/t2 0000000000000005 x8/s0 ff20000000005d40 x9/s1 ff6000001369c8c0 x10/a0 ff6000003568b780 x11/a1 00000000000000f0 x12/a2 0000000000f00000 x13/a3 ffffffffdfffffff x14/a4 0000000000000304 x15/a5 0000000000000305 x16/a6 ffffffff90c86870 x17/a7 ff20000000005cc0 x18/s2 0000000000000000 x19/s3 1fe4000000000b54 x20/s4 ffffffff90da1fc0 x21/s5 0000000000000000 x22/s6 ffffffff90c86870 x23/s7 dfffffff00000000 x24/s8 dfffffff00000000 x25/s9 ffffffff861e63e4 x26/s10 0000000000007fff x27/s11 ff20000000005a80 x28/t3 ff60000011fc8b20 x29/t4 fffffffffffff000 x30/t5 ffebffff0371275d x31/t6 0000000000000002 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 CPU#1 V = 0 pc 00007fffa39482ec mhartid 0000000000000001 mstatus 0000000a000040a2 hstatus 0000000200000000 vsstatus 0000000a00000000 mip 0000000000000000 mie 000000000000022a mideleg 0000000000001666 hideleg 0000000000000444 medeleg 0000000000f0b509 hedeleg 000000000000b109 mtvec 00000000800004f0 stvec ffffffff861e63e4 vstvec 0000000000000000 mepc ffffffff8008378a sepc 00007fffa39478a4 vsepc 0000000000000000 mcause 0000000000000009 scause 8000000000000005 vscause 0000000000000000 mtval 0000000000000000 stval 0000000000000000 htval 0000000000000000 mtval2 0000000000000000 mscratch 0000000080048000 sscratch ff6000001c80b480 satp a0018000000989a3 x0/zero 0000000000000000 x1/ra 00007fffa39433b4 x2/sp 00007fffdd20e850 x3/gp 0000555573301800 x4/tp 00007fffa37efc20 x5/t0 0000000000000400 x6/t1 00007fffa38a23ac x7/t2 000000000000002b x8/s0 00007fffa39c8968 x9/s1 0000555577bc6910 x10/a0 0000000000000003 x11/a1 0000555577bcb8b0 x12/a2 0000000000000070 x13/a3 0000000000004000 x14/a4 0000000000000000 x15/a5 0000000000000000 x16/a6 c378b8aaafbd1ac2 x17/a7 00000000000000ce x18/s2 0000000000000013 x19/s3 00007fffa39c11a4 x20/s4 00007fffdd20e8a8 x21/s5 00007fffa39c8968 x22/s6 00007fffa37efc30 x23/s7 00007fffa3aa6a20 x24/s8 00007fffdd20e9b8 x25/s9 0000000000000000 x26/s10 0000000000000002 x27/s11 0000555577bcb8b3 x28/t3 00007fffa38fbf50 x29/t4 000000000000016d x30/t5 0000000000000000 x31/t6 00000000000003ff f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000