last executing test programs: 4m5.705897253s ago: executing program 32 (id=221): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x8683, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x0, 0x2, 0x1b}, &(0x7f0000000200), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x8000, 0x9, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) unshare(0x26020480) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) openat$cgroup_int(r3, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x10000, 0x800}, 0x20) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000100)=0x4, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000108)=0x4, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f000000010c)=0x4, 0x4) bind$xdp(r4, &(0x7f0000000200)={0x2c, 0x0, 0x2, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={0xffffffffffffffff, 0x0, &(0x7f0000000480)=@udp=r4}, 0x20) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) 4m0.952065154s ago: executing program 33 (id=241): socket$pppl2tp(0x18, 0x1, 0x1) chown(&(0x7f00000003c0)='./cgroup\x00', 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x40000000, 0x0, 0x4, 0x40, 0x1}}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000200)=0x4, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x3, 0x8001, @remote, 0x5}, 0x1c) r3 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$TIOCCBRK(r3, 0x5428) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) fcntl$getownex(r5, 0x11, 0x0) r6 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000080)={r7}, 0x8) socket$kcm(0x10, 0x2, 0x4) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x60}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m58.866759575s ago: executing program 34 (id=251): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) openat$fb1(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000010029078ac1e0001e000000111009078e0000001144a1ba2"], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x60540, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r2, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r2, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 3m28.129120719s ago: executing program 35 (id=343): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) pread64(r1, &(0x7f00000024c0)=""/209, 0xd1, 0xa) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f00002d9000/0x1000)=nil, 0x1000, 0x64) (async) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) (async) r4 = openat$qrtrtun(0xffffff9c, &(0x7f0000000240), 0x327902) mmap$qrtrtun(&(0x7f000085a000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r4, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES16=r4], 0x48) (async) mlock(&(0x7f0000371000/0x1000)=nil, 0x1000) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000200"/47], 0x44) (async) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000000500)={'nat\x00', 0x0, 0x4, 0xa1, [0x0, 0x7, 0x2, 0x0, 0x6, 0x5], 0xa, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000600)=""/161}, &(0x7f0000000580)=0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8=r2, @ANYRESHEX, @ANYRES16=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2a, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) unshare(0x6a040000) (async, rerun: 32) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) close(r6) mmap(&(0x7f00005f7000/0x1000)=nil, 0x1000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) (async) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[], 0x24, 0x1) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) 3m25.126411499s ago: executing program 36 (id=353): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x314f9fb3272b80c2) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = openat$cuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r3, &(0x7f0000001c00)={0x2020}, 0x2020) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(r2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x89, @empty, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38f33c131", 0x8}], 0x1, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x24000004}], 0x1, 0x40800) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x1, 0x323b, 0x76}, {@remote, 0x4e27, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 3m22.247856426s ago: executing program 7 (id=376): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000380)={0x1, r3, r2}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m21.621944835s ago: executing program 37 (id=362): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d1) (fail_nth: 3) 3m20.488916573s ago: executing program 7 (id=378): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x1c6a8b68, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000380)={0x1, r3, r2}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m19.546011524s ago: executing program 7 (id=379): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1fd) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/cgroup\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000a00)='1\x00', 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000140)="440f20c0350b000000440f22c0c4e1f91496001800006464440f2356460f233566baa100ed4e0fc7990c000080f3fbf33e410f001766baf80cb8607dbd84ef66bafc0cb0a8eec744240003010000c744240220cb39b4ff1c24", 0x59}], 0x1, 0x42, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x4040000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3m19.428786464s ago: executing program 7 (id=380): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000002c0)={0x200, 0x3, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES16=r1, @ANYRES8], 0x50) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[], 0x9}, 0x1, 0x0, 0x0, 0x14}, 0x40008c0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000300)) getsockopt$inet_opts(r5, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1e0001ac1414aa040090780008000045a60007006600810229100000200000e0000001"], 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000140)={0x33, 0x4, 0xd5da, 0x1, 0x3}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x7fffffff, 0x0, 0x8001, 0x40, 0x10000}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'veth0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) 3m14.089682069s ago: executing program 38 (id=371): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="050000800000000071112400000000008510000002000000850000000e0000009500000000616106db53c7bfd0bc78e7d2003e86cd49a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r6) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001540)={0x1c, r7, 0xd8e0afc25e019b91, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[@ANYRES32=r8, @ANYRES32=r8, @ANYBLOB="9d0600000023000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r1, r1, 0x16, 0x0, @val=@tcx={@void, @value=r5, @void, @void, r9}}, 0x1c) ioctl$FE_GET_INFO(r0, 0x80a86f3d, &(0x7f0000000100)) 3m4.428046873s ago: executing program 39 (id=380): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000002c0)={0x200, 0x3, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES16=r1, @ANYRES8], 0x50) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[], 0x9}, 0x1, 0x0, 0x0, 0x14}, 0x40008c0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000300)) getsockopt$inet_opts(r5, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1e0001ac1414aa040090780008000045a60007006600810229100000200000e0000001"], 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000140)={0x33, 0x4, 0xd5da, 0x1, 0x3}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x7fffffff, 0x0, 0x8001, 0x40, 0x10000}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'veth0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) 2m58.926964269s ago: executing program 40 (id=398): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000180)=""/112, 0x70}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc010643a, &(0x7f0000000200)={0x0, 0x3, 0x401}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, r4, 0x409, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x6}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008014}, 0x2000050) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff0000312ad5fd708e857955315d3f663c708b00"/36, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r8], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) 2m48.664770099s ago: executing program 41 (id=429): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/215, 0xd7}], 0x1, &(0x7f0000002540)=[{&(0x7f00000021c0)=""/233, 0xe9}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000220100000", @ANYRES32, @ANYBLOB="000000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 2m23.69397859s ago: executing program 1 (id=608): socket$inet(0x2, 0x2, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r1, 0xd9b2794f6a139537, 0x0, 0xe7030000, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0xd5}}, 0x0) 2m23.662896573s ago: executing program 1 (id=609): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) 2m21.788177849s ago: executing program 1 (id=619): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x70, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffc}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x41e}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x32}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r2, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000180), 0x8) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000440)='+[\x00', &(0x7f0000000480)='./sys\x00', 0xffffffffffffffff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x334, 0x103502) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b500)=[{{&(0x7f0000000380)=@file={0x0, './cgroup/../file0/file0\x00'}, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000580)}, {&(0x7f00000005c0)="9f942f1f9ec7853d516589ffe5cef59ab5b152831091b1dd8cb5eaf36e3fc97ed9e404457eb89a00d5f2c6d5f63c6447c2fd3c2e8b481bd86c19d8bc52ad60988d6a3675703a5109fcda56a0fc6a258be8b9e42ff624815bffdd02b12c122212b3487744ecdf5403f6477f62dacf19efe6ce28f0df11b9b5241e43c2a465a02f81727ff1", 0x84}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="74ead1baa501e1e1030fdf775eaeae9304257f29ea90269486ba72c42934cc814645db7a4236beaf49348c495dccd4b12db9e7b2a0", 0x35}, {&(0x7f00000016c0)="6edaf6a565ccff7f52c53090c2616824e6e98dc96e76b92bde4fbc57706eec7703f8ce5cbfe63fdb523633314370b1c8f445afa603337359ed26d17141f82305e19426480cb46fef739490501612797e420cbc1419d78b849951a9b201859c87e1171f23a0cdfaf19b3f3327970f46316229ab367da2aef40153be2ac56d0f9bbabf9492343ebb6f9787bd86a1c57b44846fcfd08af6a98d4c871f125e78ccdfe0817617ffca8187af5da262837a065aa43edd536cf2afe46c111d388509c4a74668d4a3606f70d240f45a4ceb", 0xcd}], 0x5, &(0x7f0000001940)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="300000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2c0000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18f9ffff0000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="280000000100000001000000", @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=r3], 0xf4, 0x50}}, {{&(0x7f0000007540)=@file={0x0, './sys/bus/platform/devices/serial8250/driver/unbind\x00'}, 0x6e, &(0x7f00000076c0)=[{&(0x7f00000075c0)="f4f5a748033cf106e34b1384bd5c1ff83724b6321895095464abc094d8e3f77626bbe5df0663adcde0c54db4fd", 0x2d}, {&(0x7f0000007600)="fd9826180b676b1ca0fef044fa9d6a12baebb794cc8d41a16c9afe08475fb9a44bb7dc50a483f12da8dabacf35b9523e35325a1cf1d81fcad2243bec7bad65c2b330ed195cd16cbbf59c51ba37d83a5035fe607b88b4d453d19859288f897b9d07f59d019d408e4b9aee1a20615ea715427743d77d557b5022608ab05b23085961bd5288721ede91bf93e43c6c983464d0c65044c2dac73bb880ea9e4acb09f312760278525ddc2141c7c5", 0xab}], 0x2, &(0x7f0000007780)=ANY=[@ANYBLOB="fe6d00"/12, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32], 0x4c, 0x4000080}}, {{&(0x7f00000063c0)=@file={0x1, './cgroup/../file0\x00'}, 0x6e, &(0x7f0000007500)=[{&(0x7f0000006440)="357f097713ac4df1619d52b41fcba00d4c3e2b6159c57ba413501862e9c1bf8b02cf0a4dee8cb4683d7267342ae247e70db66f11e6533d8ce607e68a99efddd66e433042ef67d4a7094d6ca613c019ba54b8856e5cf7d71c77a78745ce4e6804ce956303146fc8dc1f25ca1e6b2041486f3e339961c17ff645ab2cc585f1913874ba09b8041366484588682bc828fd6130ee8f5e25ffb2f0a5ae", 0x9a}, {&(0x7f0000006500)="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", 0x1000}], 0x2, 0x0, 0x0, 0x4000050}}, {{&(0x7f0000001800)=@file={0x1, './cgroup/../file0\x00'}, 0x6e, &(0x7f0000007c80)=[{&(0x7f0000007880)="553025d0292504fb8560ec77d19ee28e828278afb564f8b42f54bd070239edd8eca17182c89551eeae0311deef59bb938a62206b2d247eebb3228082aaa9a66f9eec9a57f7fe3fb2ff5aa7baf0434901bc484ec4ddbd829df9d5af94d06aec3c6e6ae98dc34ffd24bc6b2708897cf3d74e97a48e77c298c85adf99a81877030912ef4af933c3f07cb867bcf8143b95cd7b680049ace557", 0x97}, {&(0x7f0000007940)="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", 0xff}, {&(0x7f0000007a40)="34d2d73a2435c40fdb38b3b333fd1a799e1336e27f272023c75c3042cd81b89535dbb1ffb9cca102fa09ca5b625a432062fb59f957a9ea5b5b163b17d8c295d219b4aa39df1b55977d61877659b58758a722a621bcea5a8ca188b380d76e5b7a3197037c6082c04cf928dd0cc9636e4f1cc368eaae621fb7709841c0ff3c129bf0b4b903a91823b68b28d8c62d63f3f1be1568c59ce4ac682c89838f06f41d850f1e9b05c37394fa9cb7e023d0434e9a8944df64aff6dc85f5423bd001b9", 0xbe}, {&(0x7f0000007b00)="382c564ad8486c5d82464964199b1e17d8c3bb3f14ca057c28fd35a553730eb6de2f2a52b9836b31e47cb8ecc66d8005ff1af43bbab5a312521264e834626eafd4603ba499387f1878e9ee403238ba017ed3948273faa2cd5ed5ad88e3", 0x5d}, {&(0x7f0000007b80)="8a50a54d69b5e372c481edaef489421128b3ff965e5b18c493d2243afc025b9765056be8a1a31e1f4b92f37f95baa90eaf8225a1e064017dd43f9c764f62a2c4e09de9fac0f8a042fb55f56ec5ad803e2f0371a940dfd8b45c397088d25c1d8f4050c8acd5c0c7abb0c182e683dd86227c431ad6f4a476605e4ca4677ac70476d8cee69e5da5210cb304bf3bcdbb3e50a5bd0a55890bbc1eadb548aa56d741d55880d35a751405236c5d6077f3349dfb82d5ed570b739b3dca01e53fda7598f68da02c20c6a20aa37b7fc7189ec2c79b5ed506f6958f0a5b43a133f796017350acf570", 0xe3}], 0x5, &(0x7f0000001880)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r1, 0xffffffffffffffff, r1]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r3, r0]}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x8c, 0x4861}}, {{&(0x7f0000007dc0)=@file={0x1, './sys\x00'}, 0x6e, &(0x7f000000b4c0)=[{&(0x7f0000007e40)="8f2cc23b66727646318bb72f10a567d615cff7c194579740ba795a2f063aecfc542e381126e130adacc306b2f47b8479d90753e90853bf8ca21662714c8d522a5c372dee349afceabfa6cde3703c07feaf5e8151da40bb676cb006ad70c29d84f1d4543ffd7250a903556d4f7a6b1a5508be9e0fdd10572d7cac8c07a11085c6fe57837f60eb1701696d0a", 0x8b}, {&(0x7f0000007f00)="1b9a62076db3a4f197cd278a241f53234815b44f676fda472fff2564a6bef158049a2d09f617844bf5bd929750c506f34bc8982c42ffb5a2a0db17861cd9c5cb5d6dee8a601e6c4251083635345507ef03f641d73660e713e07a11b1a195cf5c73abf0225e10baf9a91038430b7c45f19ab6ef3b8298e6465378747377a241b8228448aed9778310c84e8706e338036b1a7cdb393b55220c4acbddb5fc2f1d5e45609792f839f666bca545a250a7df154126847d83d2b020f182533d7437774323e135b77b", 0xc5}, {&(0x7f0000008000)="31fe5d0f52c3536acde1b43623d62f8c31d7896f60f5c124aa6e3abbb0d1560f00fcd7f38fa9c0293fa57ff3", 0x2c}, {&(0x7f0000008040)="f5a4b7b0becec89f48008b0e70d330b5dc2ab8cf31e90c5d38d167c9a17dc539a9ef98ff74bf4223a09404f10a5e998d4b9183eea14a8f644dbef4da67397d8b1fdcbebe489313e1170e3087969f80212cc9fcbe74764b960416a047cf0918ba370e44c74f1e6efc798534121ebefefa2c8e36714c7d57b8058700cc", 0x7c}, {&(0x7f000000a3c0)="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", 0x1000}, {&(0x7f000000b3c0)="bd5661c62c7401cd90dcbf038d5acdfc1a16cf2c0cafcd41527b0e3fe3ab96d386b2ac8bb31ba73690c4e2a75895", 0x2e}, {&(0x7f000000b400)="a0d1f38108d148ae1c1ae2402b8d31f8323dc6e1f77dab376e47a4a7d2e9d227b58747bb1a63b77bae0da2b1c4aa1ab08f70faa40873da2cce341f1a5e6f43b0b862ed7d002071c16aca9069730fb2b5d24bd498a244305cc602dd8d659576e3cba47dfc89404c671e47c1dd8f17eba37954dff2262b2ed6b4b315a2e03332662c9bf8bc379862cea208354e0bec49b7b770d6a682851138163dddca91f0003343aaa089c546e8c722a78b97ada83d", 0xaf}], 0x7, 0x0, 0x0, 0x4004044}}], 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) get_robust_list(0x0, &(0x7f0000000300)=0x0, &(0x7f0000000340)) (async) get_robust_list(0x0, &(0x7f0000000300)=0x0, &(0x7f0000000340)) setsockopt$MRT6_PIM(r5, 0x29, 0xcf, 0x0, 0x0) (async) setsockopt$MRT6_PIM(r5, 0x29, 0xcf, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x1, 0xe) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) fchdir(r6) ioprio_set$pid(0x3, 0x0, 0x0) r7 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) (async) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/serial8250/driver/unbind\x00', 0x1, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/serial8250/driver/unbind\x00', 0x1, 0x0) write(r8, &(0x7f0000000140)='serial8250\x00', 0xb) (async) write(r8, &(0x7f0000000140)='serial8250\x00', 0xb) 2m21.609043102s ago: executing program 1 (id=621): socket$inet(0x2, 0x2, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, 0x0, 0x24004098) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r1, 0xd9b2794f6a139537, 0x0, 0xe7030000, {{}, {@val={0x8}, @void}}}, 0xd5}}, 0x0) 2m21.546508144s ago: executing program 1 (id=623): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1fd) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/cgroup\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) write(r0, &(0x7f0000000200)='md0', 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r3) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x3e3, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x2, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x6, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x6, 0xa, 0x1b, 0x202, 0x2, 0x5, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xa0, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0x9, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x6, 0xe6, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x4, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x1, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x5, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x3, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1f, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x3ff, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xfff7, 0x2, 0x89, 0x2, 0x6, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x2, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x0, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x40000001, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x3, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0x7, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0xc, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0x1002, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b14, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x2, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x10ff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0x3, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x7ff, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x80001, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fef, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x9f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x9, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x6, 0x2, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0x0, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x2000008, 0x2000a, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf2, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x9, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x4, 0x62, 0x2, 0xd, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x1000040, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x0, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x101, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m21.385477167s ago: executing program 1 (id=625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2712, &(0x7f0000000080)=""/3, &(0x7f0000000100)=0x48) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x4, 0x82, 0x3}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 2m12.2851329s ago: executing program 42 (id=592): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x6, 0x72}]}) r1 = socket$kcm(0x2, 0x2, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x140, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$CDROM_LOCKDOOR(r2, 0x5329, 0x70) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x10001, 0x0) read$msr(r3, &(0x7f0000000180)=""/17, 0x11) pread64$ublk_ch(r1, &(0x7f0000000680), 0x1000, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x2, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x2, 0x0, @empty}}}}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000400000000000000a1c000000000a01021bbfb6acc32bbd06010000000840000000160a0300000000000000bd00010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000005c000000180a0101000b000000000000010000000900020073797a300000000009000100000000000000"], 0xe0}}, 0x0) timer_create(0x3, &(0x7f00000000c0)={0x0, 0xf}, &(0x7f0000000100)) 2m6.371579392s ago: executing program 43 (id=625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2712, &(0x7f0000000080)=""/3, &(0x7f0000000100)=0x48) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x4, 0x82, 0x3}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 2m1.569939959s ago: executing program 9 (id=724): userfaultfd(0x80001) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in={{0x2, 0x4e21, @remote}}, 0x2, 0xf, 0x0, 0x2, 0x5, 0x7, 0x4}, 0x9c) sendmsg$key(0xffffffffffffffff, 0x0, 0xeec93a447edcb7f) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt/events/cdns3/cdns3_ep0_queue/enable\x00', 0x1, 0x0) write(r6, &(0x7f0000001100)='1', 0x1) close(r6) r7 = openat(r0, &(0x7f0000001140)='./mnt/events/cdns3/cdns3_ep0_queue/inject\x00', 0x1, 0x0) write(r7, &(0x7f0000001180)='dir=1 length=10', 0xf) close(r7) openat(0xffffffffffffff9c, &(0x7f00000011c0)='./mnt/trace\x00', 0x0, 0x0) 2m1.111627083s ago: executing program 9 (id=725): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x20004010) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@random="d3", 0x1, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x403, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x42da4}, [@IFLA_MAP={0x20, 0xe, {0x10001, 0x7a, 0x92a, 0x5, 0x6, 0xf8}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x8000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) getdents64(r6, &(0x7f0000000340)=""/240, 0xf0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2m1.08582814s ago: executing program 9 (id=727): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f0000000100)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40046602, &(0x7f0000000100)=0x10000000) r6 = socket(0x400000000010, 0x3, 0x0) r7 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x100, 0xe0) write$uinput_user_dev(r7, &(0x7f0000000600)={'syz0\x00', {0x4, 0xd1, 0x83, 0x6}, 0x10, [0x40, 0x401, 0x0, 0x10001, 0x8, 0x8001, 0x1, 0x81, 0x6f9, 0x2, 0x2, 0x6, 0x1, 0x200, 0x7, 0x6, 0x249, 0x5, 0x0, 0x9, 0xffffffff, 0x3, 0x40d, 0x7ef3, 0x2, 0x3, 0x2800, 0x7, 0xb, 0x3, 0x0, 0x0, 0x3, 0x400, 0x3, 0x3, 0x52, 0x7, 0x7, 0x5, 0x9191, 0x8001, 0x7, 0x514, 0x7fffffff, 0x5, 0x5, 0x2, 0x3, 0x1, 0x7, 0x4, 0x7, 0x4, 0x100, 0xffffff80, 0x1, 0x4, 0x1, 0x7fff, 0x435, 0x6, 0x80, 0xffffff1e], [0x2, 0xffffff00, 0x4e, 0x0, 0x8, 0xfffffffe, 0x2, 0x1, 0x3, 0x2, 0xfffffffc, 0xfffffffd, 0x10000, 0x1e, 0x0, 0x3ec0000, 0x8, 0x1b76, 0xfffffffe, 0x0, 0x4, 0x0, 0x2, 0x20000010, 0x3, 0x3c60, 0x10, 0x10001, 0x8, 0x2, 0x5, 0x300000, 0x1, 0xfffffff7, 0x400, 0xe97, 0xb675, 0x61274e07, 0x2, 0x6, 0x5, 0x7fff, 0x4, 0x401, 0x6, 0x3, 0xfffffff8, 0xcf4, 0xfff, 0x0, 0x7ff, 0x43, 0x69e, 0x8, 0x5, 0x0, 0x3ff, 0x7, 0xc, 0xffff3b06, 0x7, 0x0, 0x9, 0x400], [0x1c0, 0x6, 0x18, 0x7, 0x7, 0x48000000, 0x1ff, 0x7, 0x558, 0x81, 0x1, 0xffffffa1, 0xffff, 0x0, 0x0, 0x0, 0x6de, 0x9d19, 0x80000000, 0x3216867f, 0x9, 0x9, 0x5, 0x1, 0x53a5, 0x0, 0x8, 0x2, 0x136cf0e5, 0x1, 0x40, 0x7, 0x6, 0x2, 0x70f, 0x1, 0xfffffff9, 0x5, 0x2, 0x8, 0x101, 0xfffffff9, 0x0, 0xfffffffa, 0x1686, 0x2, 0x7, 0x0, 0x484e, 0x180, 0x4, 0xa, 0x1dd, 0x1f94, 0x8, 0xff5, 0x3ff, 0x80000001, 0x9, 0x5, 0x8, 0x6, 0x3, 0x7], [0x5, 0x5, 0x9, 0x7, 0x9, 0x0, 0x10, 0x6, 0x7, 0x2, 0x7, 0x7, 0x5, 0x1, 0x7, 0x0, 0x4, 0x3bf5db6e, 0x2c, 0x8, 0x401, 0x80, 0x8, 0x101, 0x3, 0x8001, 0x6, 0xffffff2e, 0x6, 0x7, 0x8, 0xfffffffe, 0x100800, 0x1, 0xfffffffe, 0x8, 0x607e, 0x200, 0xfffffff7, 0x0, 0x80000001, 0xf756, 0x0, 0x8, 0x4, 0x4, 0x4, 0x10000, 0x4, 0x7, 0x7, 0x1000, 0x10000, 0xc152, 0x7, 0x3ff, 0x6, 0x2, 0x7f, 0xa, 0xffff, 0x400, 0x10, 0x2]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x2, &(0x7f0000000000)=[{0x80}, {0x6}]}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003cc0)=@delchain={0x24, 0x64, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xf, 0xe}, {0x0, 0xfff1}, {0xc, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x41090) syz_clone(0xa0000, &(0x7f0000000180)="435434569a5fdd8c5b8eebc34de89f8a7a7307df97786b3ddc2817fd0b6e808ca46e5432161e5a603cd34d63549855a4ab7c42200b23dad213dddfb609f4043b10a26c4b759025d001d039730605f6eec42cdc3bf0371cab4f510cc5b2a0c24b342a330f30", 0x65, &(0x7f0000000200), &(0x7f0000000280), &(0x7f00000003c0)="4778576e55c591d66c0719690d82ed876eb59e6aec7d77c04ec0407ce0f2e4050875e723187b3d5f7a21ce1d95b7544a533be681e291766a4e1d72b89252f83d44f537774ad0e0b2dcd357e2cc13f4c3c6e8288a6ce2103bced7976764b977d7ee07636655baa9f59a8265727367ed62479ccb27b32f3a18db9eee0e1d618c2935fe28b41523fa19472d1f61c46d1d983850c9d0f0976266ab6e347d9feab8ca11282fab6e6db05837a29e0ad1502dc446fcb3f26f7c68cb160b8652b33d80501af3b637418fbaa0e27d896954021e58f103dfed03a63b8ea64f3c2ffbb8") 2m0.167058264s ago: executing program 9 (id=730): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240), 0x0}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x1c6a8b68, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000380)={0x1, r2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m0.165024426s ago: executing program 9 (id=731): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1fd) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r2) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x3e3, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x2, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x6, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x6, 0xa, 0x1b, 0x202, 0x2, 0x5, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xa0, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0x9, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x6, 0xe6, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x4, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x1, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x5, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x3, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1f, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x3ff, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xfff7, 0x2, 0x89, 0x2, 0x6, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x2, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x0, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x40000001, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x3, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0x7, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0xc, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0x1002, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b14, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x2, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x10ff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0x3, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x7ff, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x80001, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fef, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x9f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x9, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x6, 0x2, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0x0, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x2000008, 0x2000a, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf2, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x9, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x4, 0x62, 0x2, 0xd, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x1000040, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x0, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x101, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m0.068658085s ago: executing program 9 (id=732): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000100)=0x16, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64007d00ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000100000000000000", 0x58}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000002c0)=[{&(0x7f0000000180)="776945ddcfbe1fbb66ec", 0xa}, {&(0x7f00000001c0)="a32b177dd66e0107c7de5e6bef21cdcb28326449f0a9c6984b11cf5a01c558c018c1bf74fc1d918ae0a89f0d023b2de31221f124fd6e92293f0bca96500ef928aefb5949ce1cd3ee704c655834789e1ea6520cda585f7a35a8567a3a1eaa38c0cc1c16c5fdf7174bb8d92313818f8f514f577f5d4e9c2aa0db58eb93c537c931533fff1083a82e7312", 0x89}], 0x2, 0x1) r3 = socket$inet(0x2, 0x3, 0x8) getrusage(0x0, &(0x7f00000003c0)) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="0f", 0x1) splice(r1, 0x0, r4, 0x0, 0x25a5, 0x0) 1m55.597299252s ago: executing program 3 (id=749): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80003, 0x0) r2 = socket(0x10, 0x80003, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000000)="aaf3a4cd08258cebe46db996738b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x66032, 0xffffffffffffffff, 0x40000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3bc480f985a57f0640a5934e17a5414ba3f0c000c623fd17c5d38ceca91597e44467487f015c9b174d06f818c2c075a7c67b4abca13724652bdf8770be7b6a7a17230d1b6454f099bb9d7b6d284e921e625685b17ea7abfbed630dd7c007898914754fb95fb93e8c180c252ca58a86247c71c47e4e96fe12a7ddae77ace1728b6aeb97bce122b05f83e066d3550207d6ef69ebb949ccd282c6ec25f4bedf2f2f7d46fde831ee02776bbb83abfe315a79df3b3fb89ec3a93b00a86333de8d3588843d3e", @ANYRES16=r4, @ANYBLOB="00042abd7000fcdbdf251800000088000280800003802c00018008000100890000000600020026000000040003000800010000000000040003000800010009000000100001800400030006000200250000000800018004000300240001800400030008000100ee060000040003000800010004000000070002002e24000014000180060002002100000008000100fa06000004000100"], 0x9c}, 0x1, 0x0, 0x0, 0x50}, 0x20000010) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r8, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x24044000) 1m55.426380268s ago: executing program 3 (id=750): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f800000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000005000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f0000000000000000000000000000fdffffffffffffffffffffffffffffffffffff7f0000000000000000000000000200000000000000f9ffffffffffffff000000000080400000000000000000080000000000000000010000004400050000"], 0xf8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[], 0xfc}}, 0x0) (fail_nth: 8) 1m55.317720916s ago: executing program 3 (id=751): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 1m55.300371532s ago: executing program 3 (id=752): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x1c6a8b68, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000380)={0x1, 0x0, r2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m53.407084273s ago: executing program 6 (id=759): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000000)=""/221, 0x26, 0xdd, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r0, 0x20, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000100)=""/104, 0x68}}, 0x10) (async) set_mempolicy(0x2, &(0x7f0000000080)=0x3, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x1cbf8000) 1m53.362044378s ago: executing program 6 (id=761): r0 = openat$vimc0(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x6, 0x1, 0x3, 0x80}) 1m53.354023455s ago: executing program 6 (id=762): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) connect$can_bcm(r0, &(0x7f0000000000), 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000180)=""/112, 0x70}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc010643a, &(0x7f0000000200)={0x0, 0x3, 0x401}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, 0x0, 0x200048c4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, r4, 0x409, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x6}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008014}, 0x2000050) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff0000312ad5fd708e857955315d3f663c708b00"/36, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r8], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) 1m53.296195623s ago: executing program 3 (id=763): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1fd) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) write(r0, &(0x7f0000000200)='md0', 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r2) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x3e3, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x2, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x6, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x6, 0xa, 0x1b, 0x202, 0x2, 0x5, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xa0, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0x9, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x6, 0xe6, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x4, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x1, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x5, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x3, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1f, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x3ff, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xfff7, 0x2, 0x89, 0x2, 0x6, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x2, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x0, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x40000001, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x3, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0x7, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0xc, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0x1002, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b14, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x2, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x10ff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0x3, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x7ff, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x80001, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fef, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x9f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x9, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x6, 0x2, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0x0, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x2000008, 0x2000a, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf2, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x9, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x4, 0x62, 0x2, 0xd, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x1000040, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x0, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x101, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m53.238813339s ago: executing program 3 (id=764): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) gettid() timer_create(0x4, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x5b0f, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f00000002c0)={0x2}, 0x8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="010000004200000006000000080000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0c0000e8040000000400000001800000000000006f3164894275582f0119b5c9f1be26eef468f25eb21e092891bf25193a51354468017df83ba9f5c7ed42fa7b98f8ebf44e551000d9d113e4ef168bf0f9734d16ff794c366e8578bdc2138b180acee5557a191995357748660989c43fc5479f81eb7ccfffe52c5cd76c9c4c0162f1bc7199d51d2948891e692150367301602340f2f746ff9f0573dfddb305d1d0296bfededdebde95a9513871ff91f127556ce78aa6bf5b810e711dd2ad5b29a7499a1a4afb112d5fa918f482d9c47c5e2bdb3bca1bbd9f06103269e0e0d4b820a5f97f0a", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) socket$nl_xfrm(0x10, 0x3, 0x6) 1m53.177055137s ago: executing program 6 (id=767): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200000000100905"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000002000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) io_uring_setup(0x7336, &(0x7f0000000140)={0x0, 0x7bfc, 0x40000, 0x7ffffffe, 0xab, 0x0, r3}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) sendto$inet6(r3, 0x0, 0x0, 0x5, 0x0, 0x0) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000100)={0x0, 0xa6fe, 0x1000, 0x13, 0x8b}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2020, 0x0, {0x2}}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r9 = socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r10, 0xfff}, 0x8) r11 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x80000000}) 1m51.447761844s ago: executing program 6 (id=772): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1fd) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) write(r0, &(0x7f0000000200)='md0', 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r2) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x3e3, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x2, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x6, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x6, 0xa, 0x1b, 0x202, 0x2, 0x5, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xa0, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0x9, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x6, 0xe6, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x4, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x1, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x5, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x3, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1f, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x3ff, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xfff7, 0x2, 0x89, 0x2, 0x6, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x2, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x0, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x40000001, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x3, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0x7, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0xc, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0x1002, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b14, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x2, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x10ff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0x3, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x7ff, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x80001, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fef, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x9f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x9, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x6, 0x2, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0x0, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x2000008, 0x2000a, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf2, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x9, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x4, 0x62, 0x2, 0xd, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x1000040, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x0, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x101, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m51.338790625s ago: executing program 6 (id=773): r0 = fsopen(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYRESDEC=r1, @ANYBLOB="73a1caa4218a26234f6dd4903a037c5586f1658de83d41d058c314dbcafafd92173936e2da05c42ea070f0d5c35ed363b01fe3d2", @ANYRES64, @ANYRESDEC, @ANYRES8, @ANYRES16=r1, @ANYRES16, @ANYRES16=r0], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f0000000440)=0x400000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x1c) r6 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0xf4240) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) r7 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000002c0)=0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010028bd700002d4df2500000000", @ANYRES32=r10, @ANYBLOB="984e0600c10a01002c001280110001006272696467655f736c617665000300001400058005001e0001"], 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) fcntl$dupfd(r3, 0x0, r8) 1m46.713378308s ago: executing program 5 (id=777): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000006ffc)=0x4000000000000200, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x31) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000700000000000000000000009532d93c6901bd15afe7d5871b1aede5ce95c9cc3d21a626813aa576abb639bffce476099d8e440214067a4bf050fa34c664a909707860551aacb7fe26a3eecb70b26560b9085246bfbacd845647b5ab6f12a6f85d8e6215ffca74352399f47746d4b98fb6b198c71707564bf6bc1be606aff775a0c7c06a9d37c09bcc38ded1c39d984d7c2bcf3779f5779b898dadee07197d351fec0fbb0e5af64489e00a9d30354fc948dce9676949d361c79cfafab285b373f8710b7db83adf8563c7bd2629a66b4cde2dc93fd3"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)="31301f31203100", 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='1\x00', 0x2) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="3800000012000100010000000000000000000000000000000000000000000000100003006e657464657673696d31300008001d0001000000"], 0x38}}, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x406, r6) ioctl$VIDIOC_G_FREQUENCY(r7, 0xc02c5638, &(0x7f0000000180)={0x4, 0x1, 0x245}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r5) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000041c0)={0x0, 0x0, &(0x7f0000004180)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x40080) 1m45.718770632s ago: executing program 5 (id=778): socket$inet(0x2, 0x2, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, 0x0, 0x24004098) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r1, 0xd9b2794f6a139537, 0x0, 0xe7030000, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0xd5}}, 0x0) 1m45.408590401s ago: executing program 5 (id=779): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000880)={'wlan0\x00'}) (fail_nth: 2) 1m45.364798212s ago: executing program 5 (id=780): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xf7f, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f009, 0x1}) socket$unix(0x1, 0x1, 0x0) r1 = socket(0x28, 0x5, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000007c0)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') mount$9p_virtio(&(0x7f0000000000), &(0x7f00000002c0)='.\x00', &(0x7f0000001b00), 0x10000, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=virtio,posixacl,noxattr,aname=t']) read$FUSE(r4, &(0x7f00000045c0)={0x2020}, 0x2020) sendmsg$NL80211_CMD_NEW_KEY(r3, 0x0, 0x4040) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8000) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x3a) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) socket(0x11, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) syz_open_dev$sndpcmc(&(0x7f0000000500), 0x8, 0x8000) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c00000041000701fefffffffeffffff017c0000040042801000018006000600800a000004000680040002801a1466278f898310c7ee5fae1bb9cdb874e1f862a85d52839402cc29fed467ef2704efbd724e056ba04b263db0df83d3916c9ca7f078cfec3b5aac5059dab65eeb6647"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) syz_ublk_setup_queues(r5, r10, &(0x7f0000000540)={0x0, 0x1aa5, 0x8, 0x2, 0x40020000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3104, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587d, 0x200, 0x1, 0x6a, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffa, 0x800, 0x10000, 0x400000, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6053, 0x10, 0x3, 0x0, 0x0, r5}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) 1m44.978754125s ago: executing program 5 (id=781): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1fd) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') write(r0, &(0x7f0000000200)='md0', 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r1) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x3e3, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x2, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x6, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x6, 0xa, 0x1b, 0x202, 0x2, 0x5, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xa0, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0x9, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x6, 0xe6, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x4, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x1, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x5, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x3, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1f, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x3ff, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xfff7, 0x2, 0x89, 0x2, 0x6, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x2, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x0, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x40000001, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x3, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0x7, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0xc, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0x1002, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b14, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x2, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x10ff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0x3, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x7ff, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x80001, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fef, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x9f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x9, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x6, 0x2, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0x0, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x2000008, 0x2000a, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf2, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x9, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x4, 0x62, 0x2, 0xd, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x1000040, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x0, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x101, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m44.978450674s ago: executing program 44 (id=732): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000100)=0x16, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64007d00ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000100000000000000", 0x58}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000002c0)=[{&(0x7f0000000180)="776945ddcfbe1fbb66ec", 0xa}, {&(0x7f00000001c0)="a32b177dd66e0107c7de5e6bef21cdcb28326449f0a9c6984b11cf5a01c558c018c1bf74fc1d918ae0a89f0d023b2de31221f124fd6e92293f0bca96500ef928aefb5949ce1cd3ee704c655834789e1ea6520cda585f7a35a8567a3a1eaa38c0cc1c16c5fdf7174bb8d92313818f8f514f577f5d4e9c2aa0db58eb93c537c931533fff1083a82e7312", 0x89}], 0x2, 0x1) r3 = socket$inet(0x2, 0x3, 0x8) getrusage(0x0, &(0x7f00000003c0)) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="0f", 0x1) splice(r1, 0x0, r4, 0x0, 0x25a5, 0x0) 1m44.878318404s ago: executing program 5 (id=783): openat$uhid(0xffffff9c, 0x0, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x8) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1m38.033108434s ago: executing program 45 (id=764): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) gettid() timer_create(0x4, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x5b0f, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f00000002c0)={0x2}, 0x8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="010000004200000006000000080000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0c0000e8040000000400000001800000000000006f3164894275582f0119b5c9f1be26eef468f25eb21e092891bf25193a51354468017df83ba9f5c7ed42fa7b98f8ebf44e551000d9d113e4ef168bf0f9734d16ff794c366e8578bdc2138b180acee5557a191995357748660989c43fc5479f81eb7ccfffe52c5cd76c9c4c0162f1bc7199d51d2948891e692150367301602340f2f746ff9f0573dfddb305d1d0296bfededdebde95a9513871ff91f127556ce78aa6bf5b810e711dd2ad5b29a7499a1a4afb112d5fa918f482d9c47c5e2bdb3bca1bbd9f06103269e0e0d4b820a5f97f0a", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) socket$nl_xfrm(0x10, 0x3, 0x6) 1m35.506158583s ago: executing program 46 (id=773): r0 = fsopen(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYRESDEC=r1, @ANYBLOB="73a1caa4218a26234f6dd4903a037c5586f1658de83d41d058c314dbcafafd92173936e2da05c42ea070f0d5c35ed363b01fe3d2", @ANYRES64, @ANYRESDEC, @ANYRES8, @ANYRES16=r1, @ANYRES16, @ANYRES16=r0], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f0000000440)=0x400000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x1c) r6 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0xf4240) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) r7 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000002c0)=0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010028bd700002d4df2500000000", @ANYRES32=r10, @ANYBLOB="984e0600c10a01002c001280110001006272696467655f736c617665000300001400058005001e0001"], 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) fcntl$dupfd(r3, 0x0, r8) 1m31.998271277s ago: executing program 7 (id=790): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1fd) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000200)='md0', 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r1) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x3e3, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x2, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x6, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x6, 0xa, 0x1b, 0x202, 0x2, 0x5, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xa0, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0x9, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x6, 0xe6, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x4, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x1, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x5, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x3, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1f, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x3ff, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xfff7, 0x2, 0x89, 0x2, 0x6, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x2, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x0, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x40000001, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x3, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0x7, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0xc, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0x1002, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b14, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x2, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x10ff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0x3, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x7ff, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x80001, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fef, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x9f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x9, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x6, 0x2, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0x0, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x2000008, 0x2000a, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf2, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x9, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x4, 0x62, 0x2, 0xd, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x1000040, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x0, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x101, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m31.877017202s ago: executing program 7 (id=799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="20020000", @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000900010073797a3000000000"], 0x20}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setlease(r3, 0x400, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x90200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='0', 0x1}, {&(0x7f0000000080)="7a67b6", 0x3}], 0x2) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a7) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x545001) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 1m29.394008599s ago: executing program 47 (id=783): openat$uhid(0xffffff9c, 0x0, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x8) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1m16.508888016s ago: executing program 48 (id=799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="20020000", @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000900010073797a3000000000"], 0x20}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setlease(r3, 0x400, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x90200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='0', 0x1}, {&(0x7f0000000080)="7a67b6", 0x3}], 0x2) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a7) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x545001) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 8.164892919s ago: executing program 4 (id=1121): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x501081, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f0000000400)=[{0x0}], 0x1, 0x4, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) recvmmsg(r4, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="b48813d9e005000dfffff7000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000010000104000000004b8d8bb1020000ff", @ANYRES32=0x0, @ANYBLOB="1e00050000000000280012800b00010067656e65766500001800028014000700fc0000000000000000000000000000001400030067656e65766531000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20044090}, 0x2000000) r5 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005", @ANYRESOCT=r5, @ANYRES64=r0, @ANYRES8=0x0, @ANYRES16=r2, @ANYRES64=r3, @ANYBLOB="e75a565384d05054c389e7741779c11e91489e464e92d6880f0e9719c18c3d121346d139a4b82588b2b8", @ANYRESDEC], 0x3c}}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r7, 0x0) 5.147971428s ago: executing program 2 (id=1132): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8eceb2e30985c02b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x80a4d1, 0x2) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x1, 0x0, 0x2080, {0xffffffffffffffff, 0xffffffffffffffff, {}, 0x0, 0x5}}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000180)={0x320, 0xa0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x0, 0x8, 0xfffffffd}, {0x10, 0xb, 0xfffdfffd}, 0x0, 0x10, 0x0, 0x4, 0x0, 0x80, 0xffff, 0x0, 0xb, 0x400009, 0x6, 0x0, 0x17, 0x200, 0x2, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) writev(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="d7888530a45a9e", 0x200e4}, {0x0, 0xe4}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) 5.073361239s ago: executing program 4 (id=1133): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0c42, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x2, 0x202000) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x58) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') ioctl$FIOCLEX(r0, 0x5451) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x9, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xb972, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0xc0b45545, &(0x7f0000000040)=0x1000) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, &(0x7f0000000600)={0xc, @pix_mp={0x3, 0x81, 0x200141e, 0x7, 0x2, [{0xfff, 0x8}, {0x4, 0x5}, {0x3, 0x3}, {0x1, 0x1}, {0x6, 0x9}, {0x287c, 0x6}, {0x7897, 0x11}, {0xfffffc00, 0x2}], 0x85, 0x0, 0x6, 0x2, 0x3}}) write$uinput_user_dev(r6, &(0x7f00000003c0)={'syz1\x00', {0x4, 0x694b, 0x7, 0x725}, 0x4d, [0x3, 0x5, 0x3, 0x7ff, 0x8, 0x7, 0x7ff, 0xcd28, 0xffff0000, 0x3, 0x9, 0x2, 0x7, 0xffffffff, 0x80000001, 0x401, 0x9, 0x6, 0x1, 0x1ff, 0x1, 0x3, 0x6, 0x7, 0x9, 0x656, 0x1, 0x80, 0x8000, 0x0, 0xffffffff, 0xfffffff7, 0x1, 0x0, 0x0, 0x1, 0x8, 0xb6, 0xbb93, 0x10001, 0x6, 0xffff, 0x400, 0x5, 0xffffff04, 0x4, 0x5e0, 0x101, 0xfdc, 0x7, 0x8001, 0x6, 0x5, 0x7fff, 0x9, 0xd8d8, 0x4, 0x2, 0x3, 0x0, 0xfffffff8, 0x1000, 0xfb9, 0xffffffff], [0xffffffff, 0x830, 0x7, 0x5, 0x6, 0x7, 0x2, 0x80000000, 0x9, 0xfffffff9, 0x74, 0x3, 0x18, 0x9, 0x2, 0xfff, 0x7fff, 0x6, 0x331, 0x8000, 0x0, 0xffffff13, 0x3, 0x1, 0xfffffff8, 0x45b, 0x6, 0x8, 0x101, 0x5, 0x81, 0xfffffff7, 0x9, 0x7, 0xf4, 0x5, 0x0, 0x8, 0x52, 0x2, 0x4, 0x8, 0x8, 0x7, 0x0, 0xb, 0x1000062, 0x2, 0xfffffff9, 0x9, 0x5, 0xf2b, 0xe, 0x5, 0x1, 0x5, 0x8, 0x36, 0x3, 0x6, 0x2, 0x7, 0x2, 0x8], [0x7ff, 0x5, 0x6b7cc830, 0x40, 0x434, 0x1ff, 0x7fff, 0x8000, 0x7, 0x8, 0x7fff, 0x32, 0x7ff, 0x1, 0x2, 0x2, 0x0, 0x3, 0xe7a, 0x6, 0x5, 0x9, 0x956e, 0x9, 0x76c, 0x9, 0xff, 0x734, 0x1, 0x5, 0x5, 0x0, 0x19b, 0x802, 0x0, 0x6, 0xa, 0x7fff, 0xcbfd, 0x81, 0x5, 0x80001000, 0x1, 0x101, 0xa35, 0x262c, 0xfffffffd, 0x0, 0xe2d, 0x5, 0x4, 0x9, 0x7fffffff, 0x4, 0x5, 0x10000, 0x0, 0x0, 0x0, 0xb715, 0x304, 0x6, 0x5, 0x4], [0xa166, 0x151, 0xd68e, 0x8000, 0x6, 0x6, 0x7, 0x5, 0x6, 0x7, 0x5, 0x3, 0x5, 0x7, 0x6, 0x80, 0xfffffff3, 0x7ff, 0x6a1, 0x5, 0x10000, 0x3, 0x2, 0x7, 0x45f2, 0x10, 0x7, 0x98, 0xff, 0x7, 0x1, 0x5, 0x8, 0x10, 0x26, 0x5, 0x3ff, 0x10, 0x9, 0x40, 0x3, 0x7f, 0x5, 0x3, 0x1606d85b, 0x9, 0x8, 0x3, 0x2, 0x20000000, 0x1, 0x8001, 0x8, 0x4060, 0x10, 0x7, 0x80, 0x2, 0x31c, 0x1, 0x7, 0x249, 0x8, 0x5]}, 0x45c) 4.617347331s ago: executing program 0 (id=1135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = syz_ublk_setup_io_uring(0xd30, &(0x7f0000000100)={0x0, 0x11aa, 0x80, 0x2, 0x313}, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000640)={&(0x7f0000002000)={[{&(0x7f0000000340)="f2816b4da9bc64351dbd293ca3bbe9804a894729259fd6f6c97458f103cd9dd1f6123032a690d2add5e3bdb51c34e67d2da6bf30ea63865a034014dfc25b7f80d950e1d8617e8ae15e3e03094b91462997dfc6bd530d94871bcaef40691565e3bdadeab43575208bbeac1a69771233", 0x6f}]}, 0x1}, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaae1ffffffffff85dd60fca33f0000fa0e00000000000000000000000000000000fe8000000000000000000000fcb400aab23ecab2dd74e174dc18246e44cbfc51cbcb99a8dca250200a30663286a5"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x11c}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe48, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2, 0x4}, 0xfffe}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8820}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x400800, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.state\x00', 0x275a, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r3) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r4, @ANYBLOB="000125bd7000fbdbdf250100000014000300fc000000000a0000000000000000000014000600697036677265746170300000000000001400060076657468305f766c616e00000000000008000400e000000108000500ffffffff1400060400756d6d79300000000000000000000014000200fc020000000000000000000000000000140006006d616376746170300000000000000000"], 0x9c}, 0x1, 0x0, 0x0, 0xc081}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b7000000639d0000bca30000000000002403000030feffff720af0ffa4ffffff71a4f0ff000000001f030000000000002ea00200000000002604f8ffffff000414010000000300001d130000000000007a0a00fe0020001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb150c537bf2085651d6dd6ce9bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf0134c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4136dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91ff073e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30c1675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab000000000000003f8dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc090000000000000061563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9901010000b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba435926b61c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0aa81192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e5789c6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06eef98aee88ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06ee0ff698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e913ac1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e495295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000060000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c97552606ffff97e86dc995604346262a177b06c634969a31b5717c416f8224662f4dd46d6081cb96dd607410ee222ec8f206c4b74"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x35861afe2a15ad58}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) 4.190919143s ago: executing program 4 (id=1136): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x0, 0x2, 0x1b}, &(0x7f0000000200), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$kcm(0xa, 0x1, 0x106) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x4c, 0x0, 0x2}, 0x28) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x8000, 0x9, 0x5}}) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0xf4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r4, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRES8, @ANYRESDEC=r0], 0xff2e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(r6, 0x540b, 0x1) write$cgroup_int(r5, &(0x7f0000000000), 0x12) 3.966355807s ago: executing program 2 (id=1137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x300, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x84}}, 0x0) 3.551332772s ago: executing program 2 (id=1139): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x0, 0x2, 0x1b}, &(0x7f0000000200), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$kcm(0xa, 0x1, 0x106) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x4c, 0x0, 0x2}, 0x28) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x8000, 0x9, 0x5}}) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0xf4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r4, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRES8, @ANYRESDEC=r0], 0xff2e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(r6, 0x540b, 0x1) write$cgroup_int(r5, &(0x7f0000000000), 0x12) 3.411096375s ago: executing program 0 (id=1140): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffd}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f00000005c0)=ANY=[@ANYBLOB="6e725f696e6f6465733d352c6e725f626c6f636b733d322c008fff1d90e391fea3dcbe1b6f6eefe094ffff34cf664827a87e9d83536541511bda2aa68ae2e0300efc463a8d6280d866e491593240ac8eac6ce6d77bee02b4f05be4a0a7cbc01740e5a967d9fbb22e8d4985f7dea102e96292cf100e73b6d22f11c184e762c863bc37990158928b6f5e0a3b955859af45f13806ec1a9f7f7e6aec16241fbea834f398e65a0da4896e2e4e8f272b6b1afb070dedae3768547ba67d9df69ab9cca32aeb89c980b8c9b42ba53d0bf24f7a02b1bab576"]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x20, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0x2, 0xc5833c80, 0x7}]}}}}}}}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f6700040002802800018008000100666962001c00028008000140000000110800034000000005080002"], 0xec}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r2], 0x48) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000200"], 0x44) r4 = timerfd_create(0x8, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timerfd_settime(r4, 0x3, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000500)={'nat\x00', 0x0, 0x4, 0x97, [0x0, 0x7, 0x2, 0x0, 0x6, 0x5], 0x0, &(0x7f00000002c0), &(0x7f0000000400)=""/151}, &(0x7f0000000580)=0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRESHEX, @ANYRES16], 0x48) ptrace(0x4206, 0x0) tkill(0x0, 0x12) 3.1379003s ago: executing program 4 (id=1141): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMBIS(r0, 0x5416, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x0, 0x10000]}]}, 0xa0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r5, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea42, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0xda40, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x3, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x8, 0x5, 0x4009, 0x401, 0xb, 0xfffffff8, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xb, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x6], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x7fff, 0x2ae, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0x8, 0x1, 0x1, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x17a1, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xf, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x147c}}, 0x0) 2.488486906s ago: executing program 2 (id=1143): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0xf6ff, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000040)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f6700040002802800018008000100666962001c00028008000140000000110800034000000005080002"], 0xec}}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x48) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000200"], 0x44) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000500)={'nat\x00', 0x0, 0x4, 0x97, [0x0, 0x7, 0x2, 0x0, 0x6, 0x5], 0x0, &(0x7f00000002c0), &(0x7f0000000400)=""/151}, &(0x7f0000000580)=0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRESHEX, @ANYRES16], 0x48) ptrace(0x4206, 0x0) tkill(0x0, 0x12) ptrace(0x4208, 0x0) unshare(0x6a040200) 2.488005669s ago: executing program 4 (id=1144): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x1c6a8b68, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000380)={0x1, r3, r2}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x40c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.348370188s ago: executing program 8 (id=1145): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8eceb2e30985c02b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x80a4d1, 0x2) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x1, 0x0, 0x2080, {0xffffffffffffffff, 0xffffffffffffffff, {}, 0x0, 0x5}}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000180)={0x320, 0xa0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {0x0, 0x8, 0xfffffffd}, {0x10, 0xb, 0xfffdfffd}, 0x0, 0x10, 0x0, 0x4, 0x0, 0x80, 0xffff, 0x0, 0xb, 0x400009, 0x6, 0x0, 0x17, 0x200, 0x2, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) writev(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="d7888530a45a9e", 0x200e4}, {0x0, 0xe4}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) 2.187519744s ago: executing program 0 (id=1146): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x6, 0x72}]}) r1 = socket$kcm(0x2, 0x2, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x140, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$CDROM_LOCKDOOR(r2, 0x5329, 0x70) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x10001, 0x0) read$msr(r3, &(0x7f0000000180)=""/17, 0x11) pread64$ublk_ch(r1, &(0x7f0000000680), 0x1000, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x2, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x2, 0x0, @empty}}}}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000400000000000000a1c000000000a01021bbfb6acc32bbd06010000000840000000160a0300000000000000bd00010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000005c000000180a0101000b000000000000010000000900020073797a300000000009000100000000000000"], 0xe0}}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) timer_create(0x3, &(0x7f00000000c0)={0x0, 0xf}, &(0x7f0000000100)) 1.958350432s ago: executing program 2 (id=1147): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x314f9fb3272b80c2) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(r2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x89, @empty, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x24000004}], 0x1, 0x40800) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x1, 0x323b, 0x76}, {@remote, 0x4e27, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) 1.335683272s ago: executing program 8 (id=1148): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @broadcast}]}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1}, &(0x7f0000000040)=0x6) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000080)=0x9, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000000240)) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r3, &(0x7f0000000380)=ANY=[@ANYBLOB='OGAIN \'Capture Volume\' 00000000000000000000\nIGAIN\nPHl'], 0x4000) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1b8}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x38, 0x6, 0x0, @private0, @mcast2, {[@dstopts={0x33, 0x3, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x40, 0x8, [0x6]}}, @jumbo={0xc2, 0x4, 0xdf}]}], {{0x4e23, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x60, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e002a3afffe800000000000000000000000000030ff0200000000000000000000000000018900907800000000201318a3a0153f315c00000000000000fc0200000000000000000000000000000400"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, &(0x7f00000000c0)={0xfffffffd, 0x101, 0x5, @local, 'nr0\x00'}) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000000)={'veth1_to_batadv\x00'}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b3a, 0x1) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0xf0, 0x4b0, 0x10, 0x0, 0xf, 0x10000000, {0x1ff, 0x9}, {0x350, 0x20002}, {0x925, 0xfffffffd, 0x1}, {0x1029, 0x0, 0x7fe}, 0x1, 0x100, 0x9, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0)=0x4, 0x4) close_range(r0, r0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r4}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f00000001c0)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x7fc0ef715599ec6d, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee, @value=r9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0xe, 0xf0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) 1.246964893s ago: executing program 8 (id=1149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) (fail_nth: 10) 1.012964047s ago: executing program 8 (id=1150): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x342) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x2120054, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f00000005c0)=ANY=[@ANYBLOB="6e725f696e6f6465733d352c6e725f626c6f636b733d322c00b42c8d1c993b5645b7893499ba4080d9215ddc32d107308dca891a57d1649d0bec25482c1df99fd5ea3ce992df1b63a3bf4bf918887ffb42a47f71fc1ada6b0602da2adf0a6bb8239728d703d737477fa61679e3a03cc8ea033357a95bbd12ca3987a21684a7c9e7f5b72523b99ac50057697898a72d77e5dd676ed3f5d9cf7a26f6494aab660250399cc2579f8d19b1d186ae3f94374b3a8ef60d9a921541b2dbef5e3775b26e08d4084acd03d40c93"]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f6700040002802800018008000100666962001c00028008000140000000110800034000000005080002"], 0xec}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x48) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000500)={'nat\x00', 0x0, 0x4, 0x97, [0x0, 0x7, 0x2, 0x0, 0x6, 0x5], 0x0, &(0x7f00000002c0), &(0x7f0000000400)=""/151}, &(0x7f0000000580)=0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES8, @ANYRESHEX=r1, @ANYRES16], 0x48) ptrace(0x4206, 0x0) r5 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/failslab/space\x00', 0x1, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)='9', 0x1}], 0x1) tkill(0x0, 0x12) ptrace(0x4208, 0x0) tkill(0x0, 0x12) 852.694402ms ago: executing program 0 (id=1151): socket$inet(0x2, 0x2, 0x1) timer_create(0x0, 0x0, &(0x7f0000000100)) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, 0x0, 0x24004098) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r1, 0xd9b2794f6a139537, 0x0, 0xe7030000, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0xd5}}, 0x0) 704.860863ms ago: executing program 2 (id=1152): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x0, 0x2, 0x1b}, &(0x7f0000000200), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x4c, 0x0, 0x2}, 0x28) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x8000, 0x9, 0x5}}) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0xf4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r4, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRES8, @ANYRESDEC=r0], 0xff2e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(r6, 0x540b, 0x1) write$cgroup_int(r5, &(0x7f0000000000), 0x12) 702.787619ms ago: executing program 0 (id=1153): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) connect$can_bcm(r0, &(0x7f0000000000), 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000180)=""/112, 0x70}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc010643a, &(0x7f0000000200)={0x0, 0x3, 0x401}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, r4, 0x409, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x6}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008014}, 0x2000050) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) shutdown(r1, 0x1) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff0000312ad5fd708e857955315d3f663c708b00"/36, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r8], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) 674.225263ms ago: executing program 8 (id=1154): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) gettid() timer_create(0x4, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x5b0f, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f00000002c0)={0x2}, 0x8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="010000004200000006000000080000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0c0000e8040000000400000001800000000000006f3164894275582f0119b5c9f1be26eef468f25eb21e092891bf25193a51354468017df83ba9f5c7ed42fa7b98f8ebf44e551000d9d113e4ef168bf0f9734d16ff794c366e8578bdc2138b180acee5557a191995357748660989c43fc5479f81eb7ccfffe52c5cd76c9c4c0162f1bc7199d51d2948891e692150367301602340f2f746ff9f0573dfddb305d1d0296bfededdebde95a9513871ff91f127556ce78aa6bf5b810e711dd2ad5b29a7499a1a4afb112d5fa918f482d9c47c5e2bdb3bca1bbd9f06103269e0e0d4b820a5f97f0a", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@migrate={0x50, 0x21, 0xd39, 0x0, 0x25dfdbfb, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2}, 0xfffffffe}}, 0x50}}, 0x0) 256.078053ms ago: executing program 0 (id=1155): syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000940)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30000019", @ANYRES16=r2, @ANYBLOB="010029bd7000fddbdf2567000000080001007700000008000300", @ANYRES32=r3, @ANYBLOB="0c0099006000000068000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30000019", @ANYRES16=r2, @ANYBLOB="010029bd7000fddbdf2567000000080001007700000008000300", @ANYRES32=r3, @ANYBLOB="0c0099006000000068000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) (async) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000700), &(0x7f0000000740)=0x4) socket(0x848000000015, 0x805, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) (async) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x22, 0x800, 0xfffffffd, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) (async) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r9 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x0, 0x10) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00') bind$inet6(r9, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x10}, 0x1c) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@cgroup=r10, r10, 0x2e}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x3, 0x8, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r9}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x3, 0x8, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r9}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r11, 0x4) 213.557863ms ago: executing program 8 (id=1156): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040991100b00000000000010902200001010080320904000002000000000705810200020007050202000200"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x94) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x8, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x4, 0x5, 0xf7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0x6, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x4, 0x40}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x250, 0xf9, 0x8, 0x8, 0x10, 0x80}, 0x16, &(0x7f0000000300)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x4, 0x1}]}, 0x6, [{0xb0, &(0x7f0000000400)=@string={0xb0, 0x3, "135e82bc5e993244a88f11dcb506ace464b518497e3816604213d577a02cb235b0e8961a04c400b05d1f25631903c870a6de75efb2918ab7d71e26edac161f359587bbbea1e354b8344eb186d8fff99d89364df72e40331f3a2385d219a03f4a479bd94699ffa3a4f19d890418321ddf9dde0ba811c62efb23c36a9826882393a21ad2c22b1186397d216371ce87182a5c26f8836ac6b8cf5184f3f90aaac27b6d0ffc1cc2e12dfcde68de3e31c7"}}, {0x22, &(0x7f00000004c0)=@string={0x22, 0x3, "0722bc87c78d39202a168ac021408ef884c30c44e58c35e782d0913ba36228a4"}}, {0x8c, &(0x7f0000000500)=@string={0x8c, 0x3, "711794d6632563440727d18ec507e0169935ad7e8d0dcb6afa2d6020b3d7fdc75638f48931419196fc987ca8ac27f5171e9f044e33575687e86d59f8f4186b242f95fd5fb49ed32cfd4618b0f3e06facae75b72007c14d586a12866474949fa5ed9428bc3ac0e74b784525952c0b8dfc8e15932c1964abda87eee9e61c899e4fb22ee61d838a1b9e02cd"}}, {0xbc, &(0x7f00000005c0)=@string={0xbc, 0x3, "d3c2ae3d9378037450327a3239c41293029176bbc87e9a2cf63c0e32bc7017722434d21bde5e045bfb1c312b5d60f4e4839389c012d738135f78b9e04b9996050d74fa92fdec9c053ab03e01ed4a0e9ab94cfc404c6fc15ed8f6b40e335d56eafc520ad3bd486d33b74992cc7b5dcb272f7c2d7cebb079f30a442a1446801e2581fdf291cb558a3536b33f1de31a6032596f24c0c5d8e8b18f46b6bf1a231969b925c0e8cc674930b6c8dbdda18ab5298583c3fdb5f20bbab750"}}, {0xe0, &(0x7f0000000680)=@string={0xe0, 0x3, "175083445c2996146e89ac547b918db35b6ea8edc2e27fc6f6b422b8774ca97e9479e02459959bbdb2ccc353ee84d71d02ed5febcabd06ef1fbe380aaa48804ece47dfc40b9b23306e7f531b16cae8edaad5e69825ddbf2b392439c89437fec5c3f021b6d9d4cc470ad2d5b1fee54dface4a425ac0c7f47d3af182d8efcc40b4ad18d1450f9912d0d59c95c5b10e8bccb54031facdac9e2ce64cd68a859aeceeb38c57d501597f8ca0fbb6015d20fa8b510dbfbda2f9466c00d5d11b55f88ce404a550e09e4b73c8a450313cad7e0c39ed7706f1eb9c761806a345b05be0"}}, {0x30, &(0x7f0000000780)=@string={0x30, 0x3, "4d62f18d5066235446bde1d6aae0f7f245eafe57276a7044c060a1aece9ab6bb6b46ce472eaf1ddff4106d5cb252"}}]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x30, 0x4, @val=@netkit={@void, @value=r1}}, 0x1c) nanosleep(&(0x7f0000000100)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001200010227bd7000fadbdf250700100008000800060000000c00e88008003f"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000600)=ANY=[@ANYBLOB="4000000010000305fcffffff03d9ede380000000", @ANYRES32=0x0, @ANYBLOB="11110200714000002000128008000100736974001400028006000e000900000008000200e0000002"], 0x40}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x8040) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84c40020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20048000}, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000380)={0x28, r6, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80, 0x47}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x2]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20040004) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/gnss0\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2fff) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10) 0s ago: executing program 4 (id=1157): prctl$PR_GET_SECCOMP(0x15) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000240)=@sr0, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='gfs2\x00', 0x0, &(0x7f00000035c0)='quota') connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "000000007fffffff", "91e5e93c7849264948c051ffd0d55fb8", "a0369233", "00acea3a3a89f14b"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) recvfrom$inet6(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) shutdown(r0, 0x0) kernel console output (not intermixed with test programs): b_gadget_register_driver returned -16 [ 252.512211][ T7364] usb 11-1: USB disconnect, device number 3 [ 253.091605][ T9963] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 254.726923][ T1042] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 254.877143][ T1042] usb 10-1: Using ep0 maxpacket: 8 [ 254.882932][ T1042] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 254.896892][ T1042] usb 10-1: config 0 has no interface number 0 [ 254.899994][ T1042] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 254.904639][ T1042] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 254.921238][ T1042] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 254.933832][ T1042] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 254.940048][ T1042] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 254.944180][ T1042] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.959733][ T1042] usb 10-1: config 0 descriptor?? [ 254.979798][ T1042] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 255.467308][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.577108][ T8001] usb 10-1: USB disconnect, device number 4 [ 255.595227][ T8001] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 256.290776][ T9997] netlink: 'syz.5.775': attribute type 1 has an invalid length. [ 256.294121][ T9997] netlink: 756 bytes leftover after parsing attributes in process `syz.5.775'. [ 256.870727][ T42] kauditd_printk_skb: 139 callbacks suppressed [ 256.870747][ T42] audit: type=1800 audit(1785946507.620:305): pid=10002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.776" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 258.459093][ T13] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.010629][T10012] FAULT_INJECTION: forcing a failure. [ 259.010629][T10012] name failslab, interval 1, probability 0, space 9, times 0 [ 259.015707][T10012] CPU: 3 UID: 0 PID: 10012 Comm: syz.5.779 Not tainted syzkaller #0 PREEMPT(full) [ 259.015730][T10012] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 259.015740][T10012] Call Trace: [ 259.015746][T10012] [ 259.015753][T10012] dump_stack_lvl+0x100/0x190 [ 259.015779][T10012] should_fail_ex.cold+0x5/0xa [ 259.015800][T10012] should_failslab+0xc2/0x120 [ 259.015824][T10012] __kmalloc_noprof+0xfc/0x820 [ 259.015845][T10012] ? __pfx_dynamic_dname+0x10/0x10 [ 259.015868][T10012] ? tomoyo_encode2+0xfb/0x3c0 [ 259.015897][T10012] tomoyo_encode2+0xfb/0x3c0 [ 259.015924][T10012] tomoyo_encode+0x29/0x50 [ 259.015947][T10012] tomoyo_realpath_from_path+0x18c/0x690 [ 259.015976][T10012] tomoyo_path_number_perm+0x23c/0x580 [ 259.015996][T10012] ? tomoyo_path_number_perm+0x22e/0x580 [ 259.016019][T10012] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 259.016041][T10012] ? get_pid_task+0x106/0x250 [ 259.016083][T10012] ? find_held_lock+0x2b/0x80 [ 259.016103][T10012] ? __fget_files+0x215/0x3d0 [ 259.016118][T10012] ? hook_file_ioctl_common+0x140/0x440 [ 259.016138][T10012] ? __fget_files+0x215/0x3d0 [ 259.016157][T10012] ? __fget_files+0x21f/0x3d0 [ 259.016176][T10012] security_file_ioctl_compat+0xd3/0x230 [ 259.016200][T10012] __ia32_compat_sys_ioctl+0xc2/0x360 [ 259.016227][T10012] __do_fast_syscall_32+0xe7/0x970 [ 259.016250][T10012] ? lockdep_hardirqs_on+0x78/0x100 [ 259.016272][T10012] do_fast_syscall_32+0x32/0x70 [ 259.016294][T10012] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 259.016315][T10012] RIP: 0023:0xf7f03fec [ 259.016336][T10012] Code: Unable to access opcode bytes at 0xf7f03fc2. [ 259.016343][T10012] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 259.016360][T10012] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008b05 [ 259.016370][T10012] RDX: 0000000080000880 RSI: 0000000000000000 RDI: 0000000000000000 [ 259.016380][T10012] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 259.016389][T10012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.016397][T10012] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 259.016411][T10012] [ 259.016425][T10012] ERROR: Out of memory at tomoyo_realpath_from_path. [ 259.180814][T10014] 9pnet_virtio: no channels available for device syz [ 259.190864][T10014] openvswitch: netlink: Duplicate key (type 6). [ 259.554863][T10019] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 259.588729][ T5752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 259.598148][ T5752] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 259.603064][ T5752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 259.606118][ T5752] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 259.610197][ T5752] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 260.470825][T10021] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.473928][T10021] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.477086][T10021] bridge_slave_0: entered allmulticast mode [ 260.481771][T10021] bridge_slave_0: entered promiscuous mode [ 260.486736][T10021] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.492436][T10021] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.495566][T10021] bridge_slave_1: entered allmulticast mode [ 260.500457][T10021] bridge_slave_1: entered promiscuous mode [ 260.541865][T10021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.548546][T10021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.581610][T10021] team0: Port device team_slave_0 added [ 260.585766][T10021] team0: Port device team_slave_1 added [ 260.614320][T10021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.617173][T10021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.626017][T10021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.630781][T10021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.633013][T10021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.641302][T10021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.709378][T10021] hsr_slave_0: entered promiscuous mode [ 260.717526][T10021] hsr_slave_1: entered promiscuous mode [ 261.659885][T10021] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 261.673160][T10021] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 261.680789][T10021] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 261.687305][ T5752] Bluetooth: hci1: command tx timeout [ 261.691496][T10021] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 261.694470][T10021] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 261.706758][T10021] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 261.712887][T10021] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 261.733046][T10021] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 261.854888][T10021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.895753][T10021] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.906351][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.908684][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.925516][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.928060][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.309184][T10021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.382573][T10021] veth0_vlan: entered promiscuous mode [ 262.393803][T10021] veth1_vlan: entered promiscuous mode [ 262.425290][T10021] veth0_macvtap: entered promiscuous mode [ 262.434269][T10021] veth1_macvtap: entered promiscuous mode [ 262.455658][T10021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.469397][T10021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.474768][ T7006] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.480712][ T7006] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.537344][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.553403][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.595807][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.602775][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.632313][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.639900][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.986911][ T7754] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 263.146890][ T7754] usb 5-1: Using ep0 maxpacket: 8 [ 263.152022][ T7754] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 263.158290][ T7754] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 263.166849][ T7754] usb 5-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 263.172762][ T7754] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 263.186890][ T7754] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 263.190110][ T7754] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.194113][ T7754] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 263.206915][ T7754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.427413][ T7754] usb 5-1: GET_CAPABILITIES returned 0 [ 263.429433][ T7754] usbtmc 5-1:16.0: can't read capabilities [ 263.630218][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.633090][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.635890][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.638701][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.641537][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.644332][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.647118][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.649949][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.653089][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.655939][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.658743][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.661587][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.664382][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.666913][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.669735][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.672530][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.683888][T10112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.692990][T10112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.702699][ T7754] usb 5-1: USB disconnect, device number 11 [ 263.767387][ T5752] Bluetooth: hci1: command tx timeout [ 264.268144][T10122] nvme_fabrics: unknown parameter or missing value 'transpor.=loop' in ctrl creation request [ 264.481636][T10128] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.785' sets config #24 [ 265.292626][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.788'. [ 265.305459][T10137] team0: Port device team_slave_0 removed [ 265.846903][ T5752] Bluetooth: hci1: command tx timeout [ 266.549119][ T5754] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 266.554972][ T5754] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 266.558738][ T5754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 266.564815][ T5754] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 266.572562][ T5754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 267.327855][T10142] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.335139][T10142] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.347040][T10142] bridge_slave_0: entered allmulticast mode [ 267.349907][T10142] bridge_slave_0: entered promiscuous mode [ 267.357408][T10142] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.366594][T10142] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.372787][T10142] bridge_slave_1: entered allmulticast mode [ 267.382816][T10142] bridge_slave_1: entered promiscuous mode [ 267.464899][T10142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.470298][T10142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.490298][T10142] team0: Port device team_slave_0 added [ 267.511986][T10142] team0: Port device team_slave_1 added [ 267.539118][ T13] bridge_slave_1: left allmulticast mode [ 267.540997][ T13] bridge_slave_1: left promiscuous mode [ 267.543023][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.547542][ T13] bridge_slave_0: left allmulticast mode [ 267.549674][ T13] bridge_slave_0: left promiscuous mode [ 267.551601][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.683577][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.692174][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.695755][ T13] bond0 (unregistering): Released all slaves [ 267.705675][T10142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.708552][T10142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.717217][T10142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.722797][T10142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.725142][T10142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.737762][T10142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.777494][T10142] hsr_slave_0: entered promiscuous mode [ 267.780161][T10142] hsr_slave_1: entered promiscuous mode [ 267.782519][T10142] debugfs: 'hsr0' already exists in 'hsr' [ 267.784429][T10142] Cannot create hsr debugfs directory [ 267.928174][ T5752] Bluetooth: hci1: command tx timeout [ 268.267625][ T5454] 8021q: adding VLAN 0 to HW filter on device eth22 [ 268.280095][ T13] hsr_slave_0: left promiscuous mode [ 268.283341][ T13] hsr_slave_1: left promiscuous mode [ 268.286140][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.290381][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.464521][ T13] team0 (unregistering): Port device team_slave_1 removed [ 268.484459][ T13] team0 (unregistering): Port device team_slave_0 removed [ 268.657038][ T5752] Bluetooth: hci0: command tx timeout [ 268.824214][ T5454] 8021q: adding VLAN 0 to HW filter on device eth23 [ 269.104437][ T5754] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 269.114058][ T5754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 269.119747][ T5754] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 269.124733][ T5754] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 269.131371][ T5754] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 269.131441][ T5454] 8021q: adding VLAN 0 to HW filter on device eth24 [ 269.217083][ T7364] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 269.362945][ T5454] 8021q: adding VLAN 0 to HW filter on device eth25 [ 269.377099][ T7364] usb 5-1: Using ep0 maxpacket: 8 [ 269.386061][ T7364] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.392860][ T7364] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 269.396067][ T7364] usb 5-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 269.400065][ T7364] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 269.403571][ T7364] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 269.407028][ T7364] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.410993][ T7364] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 269.413797][ T7364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.535443][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.624005][ T7364] usb 5-1: GET_CAPABILITIES returned 0 [ 269.625986][ T7364] usbtmc 5-1:16.0: can't read capabilities [ 269.696215][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.710605][T10142] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 269.717448][T10142] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 269.726081][T10142] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 269.731727][T10142] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 269.737972][T10142] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 269.743220][T10142] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 269.750078][T10142] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 269.764847][T10142] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 269.809085][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.828987][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 269.832514][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 269.836065][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 269.839693][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 269.843277][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 269.846764][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 269.850306][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 269.853728][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 269.861900][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 269.865512][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 269.869049][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 269.872534][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 269.905272][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 269.909042][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 269.910290][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.913517][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 269.920359][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 269.924148][ C2] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 269.932925][T10178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.939852][T10178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.956345][ T1042] usb 5-1: USB disconnect, device number 12 [ 269.998116][T10142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.040859][T10142] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.109211][T10183] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.112460][T10183] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.115635][T10183] bridge_slave_0: entered allmulticast mode [ 270.119867][T10183] bridge_slave_0: entered promiscuous mode [ 270.144636][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.147682][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.161613][T10183] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.164775][T10183] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.172185][T10183] bridge_slave_1: entered allmulticast mode [ 270.176373][T10183] bridge_slave_1: entered promiscuous mode [ 270.221730][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.224842][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.271682][ T13] bridge_slave_1: left allmulticast mode [ 270.273404][ T13] bridge_slave_1: left promiscuous mode [ 270.275396][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.281829][ T13] bridge_slave_0: left allmulticast mode [ 270.283650][ T13] bridge_slave_0: left promiscuous mode [ 270.287878][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.433391][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.441596][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.445448][ T13] bond0 (unregistering): Released all slaves [ 270.454981][T10183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.472260][T10183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.548487][T10183] team0: Port device team_slave_0 added [ 270.589698][T10183] team0: Port device team_slave_1 added [ 270.720185][T10183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.727171][ T5752] Bluetooth: hci0: command tx timeout [ 270.731968][T10183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.750810][T10183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.773059][T10183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.780380][T10183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.796913][T10183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.962813][T10183] hsr_slave_0: entered promiscuous mode [ 270.968212][T10183] hsr_slave_1: entered promiscuous mode [ 270.978281][T10183] debugfs: 'hsr0' already exists in 'hsr' [ 270.982513][T10183] Cannot create hsr debugfs directory [ 270.993957][ T13] hsr_slave_0: left promiscuous mode [ 270.996574][ T13] hsr_slave_1: left promiscuous mode [ 271.000305][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.002742][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.005703][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.009178][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.017706][ T13] veth1_macvtap: left promiscuous mode [ 271.021843][ T13] veth0_macvtap: left promiscuous mode [ 271.023680][ T13] veth1_vlan: left promiscuous mode [ 271.029846][ T13] veth0_vlan: left promiscuous mode [ 271.209089][ T5752] Bluetooth: hci3: command tx timeout [ 271.216300][ T13] team0 (unregistering): Port device team_slave_1 removed [ 271.228696][ T13] team0 (unregistering): Port device team_slave_0 removed [ 271.805992][T10280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.797'. [ 271.806329][T10142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.856680][T10280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 271.960592][T10280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 271.963076][T10280] bond1: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 271.968633][T10280] bond1: (slave ip_vti0): Error -95 calling set_mac_address [ 271.995907][T10286] bond1: (slave vlan2): Opening slave failed [ 272.150689][T10142] veth0_vlan: entered promiscuous mode [ 272.165715][T10142] veth1_vlan: entered promiscuous mode [ 272.251840][T10142] veth0_macvtap: entered promiscuous mode [ 272.270684][T10142] veth1_macvtap: entered promiscuous mode [ 272.291691][T10142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.300539][T10142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.375365][ T217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.380574][ T217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.387032][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.390901][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.404810][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.407538][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.410527][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.426428][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.546709][T10312] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 272.549007][ T5454] 8021q: adding VLAN 0 to HW filter on device eth2 [ 272.557929][T10183] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 272.563966][T10183] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 272.571832][T10183] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 272.583243][T10183] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 272.589311][T10183] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 272.596548][T10183] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 272.610333][T10183] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 272.627491][T10183] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 272.755420][T10183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.778225][T10183] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.786363][ T217] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.788849][ T217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.808135][ T217] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.811306][ T217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.817051][ T5752] Bluetooth: hci0: command tx timeout [ 272.881420][ T5454] 8021q: adding VLAN 0 to HW filter on device eth3 [ 273.260486][ T5454] 8021q: adding VLAN 0 to HW filter on device eth4 [ 273.297798][ T5752] Bluetooth: hci3: command tx timeout [ 273.311500][T10183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.457780][ T5454] 8021q: adding VLAN 0 to HW filter on device eth5 [ 273.579374][T10183] veth0_vlan: entered promiscuous mode [ 273.601394][T10183] veth1_vlan: entered promiscuous mode [ 273.638610][T10183] veth0_macvtap: entered promiscuous mode [ 273.648931][T10183] veth1_macvtap: entered promiscuous mode [ 273.658438][T10183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.664289][T10183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.728034][ T7006] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.743583][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.746994][ T7006] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.751179][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.775547][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.779705][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.797956][ T7006] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.805094][ T7006] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.867260][T10365] CacheFiles: Failed to register: -95 [ 274.409716][ T8001] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 274.556908][ T8001] usb 13-1: Using ep0 maxpacket: 8 [ 274.562305][ T8001] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 274.568373][ T8001] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 274.576610][ T8001] usb 13-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 274.586326][ T8001] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 274.592477][ T8001] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 274.600339][ T8001] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.609256][ T8001] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 274.614518][ T8001] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.861309][ T8001] usb 13-1: GET_CAPABILITIES returned 0 [ 274.863426][ T8001] usbtmc 13-1:16.0: can't read capabilities [ 274.887715][T10391] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 274.893778][T10391] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 274.897095][ T5752] Bluetooth: hci0: command tx timeout [ 274.901373][T10391] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 274.907672][T10391] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 274.913319][T10391] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 274.918520][T10391] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 274.922184][T10391] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 274.925843][T10391] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 274.930492][T10391] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 274.935878][T10391] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 275.073473][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 275.076608][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 275.080098][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 275.083508][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 275.086875][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 275.089932][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 275.124813][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 275.127758][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 275.130659][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 275.133594][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 275.136458][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 275.139334][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 275.142219][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 275.145088][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 275.195968][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 275.199522][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 275.222722][T10376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.229158][T10376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.233372][ T1042] usb 13-1: USB disconnect, device number 3 [ 275.237810][ T5754] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 275.258071][ T5754] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 275.263012][ T5754] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 275.273740][ T5754] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 275.281468][ T5754] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 275.377994][ T5752] Bluetooth: hci3: command tx timeout [ 275.590016][T10419] syz.0.803 (10419): drop_caches: 2 [ 275.741259][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.434725][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.941830][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.998882][T10449] UDC core: g1: couldn't find an available UDC or it's busy [ 277.118548][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.446920][ T5752] Bluetooth: hci3: command tx timeout [ 277.448782][ T5754] Bluetooth: hci4: command tx timeout [ 278.068814][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.8.809'. [ 278.241023][T10409] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.243382][T10409] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.245678][T10409] bridge_slave_0: entered allmulticast mode [ 278.253271][T10409] bridge_slave_0: entered promiscuous mode [ 278.261979][T10472] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 278.272471][T10467] bond1: invalid ARP target 0.0.0.0 specified for addition [ 278.277064][T10467] bond1: option arp_ip_target: invalid value (0) [ 278.297836][T10467] bond1 (unregistering): Released all slaves [ 278.335382][T10409] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.337761][T10409] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.340223][T10409] bridge_slave_1: entered allmulticast mode [ 278.343112][T10409] bridge_slave_1: entered promiscuous mode [ 278.418071][T10409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.424800][T10409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.471368][T10409] team0: Port device team_slave_0 added [ 278.475000][T10409] team0: Port device team_slave_1 added [ 278.530666][ T12] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.555660][T10409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.558313][T10409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.572159][T10409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.581464][T10409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.588754][T10409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.603229][T10409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.726251][T10409] hsr_slave_0: entered promiscuous mode [ 278.734436][T10409] hsr_slave_1: entered promiscuous mode [ 278.747608][T10409] debugfs: 'hsr0' already exists in 'hsr' [ 278.750791][T10409] Cannot create hsr debugfs directory [ 278.808347][ T12] bridge_slave_1: left allmulticast mode [ 278.810254][ T12] bridge_slave_1: left promiscuous mode [ 278.818863][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.825948][ T12] bridge_slave_0: left allmulticast mode [ 278.834875][ T12] bridge_slave_0: left promiscuous mode [ 278.839599][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.063685][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.069606][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.073852][ T12] bond0 (unregistering): Released all slaves [ 279.105902][ T5454] 8021q: adding VLAN 0 to HW filter on device eth6 [ 279.193561][ T42] audit: type=1326 audit(1785946529.940:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.0.813" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe3fec code=0x0 [ 279.202425][T10488] netlink: 'syz.8.812': attribute type 1 has an invalid length. [ 279.202441][T10488] netlink: 756 bytes leftover after parsing attributes in process `syz.8.812'. [ 279.291676][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.813'. [ 279.301740][T10492] dvmrp1: entered allmulticast mode [ 279.503087][ T12] hsr_slave_0: left promiscuous mode [ 279.508199][ T12] hsr_slave_1: left promiscuous mode [ 279.510291][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.516902][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.523318][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.527028][ T5754] Bluetooth: hci4: command tx timeout [ 279.527359][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.552851][ T12] veth1_macvtap: left promiscuous mode [ 279.555831][ T12] veth0_macvtap: left promiscuous mode [ 279.561802][ T12] veth1_vlan: left promiscuous mode [ 279.565731][ T12] veth0_vlan: left promiscuous mode [ 279.642934][T10501] netlink: 4 bytes leftover after parsing attributes in process `syz.8.815'. [ 279.841754][ T12] team0 (unregistering): Port device team_slave_1 removed [ 279.850952][ T12] team0 (unregistering): Port device team_slave_0 removed [ 279.949131][ T5454] 8021q: adding VLAN 0 to HW filter on device eth7 [ 280.134319][T10509] syz.0.816 (10509): drop_caches: 2 [ 280.279975][ T5454] 8021q: adding VLAN 0 to HW filter on device eth9 [ 280.506019][T10409] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 280.517037][T10409] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 280.522056][T10409] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 280.526657][T10409] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 280.530470][T10409] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 280.535388][T10409] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 280.540025][T10409] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 280.547651][T10409] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 280.609099][ T5454] 8021q: adding VLAN 0 to HW filter on device eth8 [ 280.623064][T10409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.652962][T10409] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.660101][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.662228][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.669569][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.671800][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.979193][T10409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.009258][T10409] veth0_vlan: entered promiscuous mode [ 281.015993][T10409] veth1_vlan: entered promiscuous mode [ 281.035886][T10409] veth0_macvtap: entered promiscuous mode [ 281.045593][T10409] veth1_macvtap: entered promiscuous mode [ 281.056766][T10409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.063886][T10409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.104373][ T217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.108906][ T217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.125184][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.128964][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.138932][ T5820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.158189][ T7006] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.166065][ T7006] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.176120][ T7006] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.201763][ T5454] 8021q: adding VLAN 0 to HW filter on device eth26 [ 281.513777][T10561] netlink: 'syz.2.821': attribute type 1 has an invalid length. [ 281.517173][T10561] netlink: 756 bytes leftover after parsing attributes in process `syz.2.821'. [ 281.619847][ T5754] Bluetooth: hci4: command tx timeout [ 281.694026][T10575] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 281.811620][T10580] netlink: 40 bytes leftover after parsing attributes in process `syz.0.825'. [ 282.456175][T10604] 9pnet_virtio: no channels available for device syz [ 283.696912][ T5754] Bluetooth: hci4: command tx timeout [ 284.714930][T10681] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 286.543908][T10710] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 286.545970][T10710] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 286.551179][T10710] vhci_hcd vhci_hcd.0: Device attached [ 286.672383][T10710] wg2 speed is unknown, defaulting to 1000 [ 286.681996][T10710] wg2 speed is unknown, defaulting to 1000 [ 286.695389][T10710] wg2 speed is unknown, defaulting to 1000 [ 286.816901][ T846] usb 42-1: SetAddress Request (2) to port 0 [ 286.818885][ T846] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 286.867209][ T5747] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 287.037237][ T5747] usb 13-1: Using ep0 maxpacket: 32 [ 287.043038][ T5747] usb 13-1: unable to get BOS descriptor or descriptor too short [ 287.060846][T10710] infiniband syz2: set active [ 287.064241][ T5849] wg2 speed is unknown, defaulting to 1000 [ 287.069908][ T5747] usb 13-1: config 14 has an invalid interface number: 57 but max is 1 [ 287.075033][T10710] infiniband syz2: added wg2 [ 287.089544][T10711] vhci_hcd: connection reset by peer [ 287.089539][ T5747] usb 13-1: config 14 has an invalid interface number: 228 but max is 1 [ 287.100120][ T5747] usb 13-1: config 14 has no interface number 0 [ 287.102994][ T5747] usb 13-1: config 14 has no interface number 1 [ 287.106258][T10710] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 287.107091][ T5747] usb 13-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 287.111453][T10710] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 287.117249][ T7006] vhci_hcd vhci_hcd.2: stop threads [ 287.121185][T10710] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 287.125916][ T7006] vhci_hcd vhci_hcd.2: release socket [ 287.125999][ T7006] vhci_hcd vhci_hcd.2: disconnect device [ 287.135833][ T5747] usb 13-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 287.149666][T10710] RDS/IB: syz2: added [ 287.151320][T10710] smc: adding ib device syz2 with port count 1 [ 287.153319][T10710] smc: ib device syz2 port 1 has no pnetid [ 287.160084][ T5849] wg2 speed is unknown, defaulting to 1000 [ 287.160200][ T5747] usb 13-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 287.165454][T10710] wg2 speed is unknown, defaulting to 1000 [ 287.172887][ T5747] usb 13-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 287.188035][ T5747] usb 13-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 287.201739][ T5747] usb 13-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.217736][ T5747] usb 13-1: config 14 interface 57 has no altsetting 0 [ 287.233845][ T5747] usb 13-1: config 14 interface 228 has no altsetting 0 [ 287.262601][ T5747] usb 13-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 287.279882][ T5747] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.291243][ T5747] usb 13-1: Product: syz [ 287.295851][ T5747] usb 13-1: Manufacturer: syz [ 287.298082][ T5747] usb 13-1: SerialNumber: syz [ 287.381761][T10710] wg2 speed is unknown, defaulting to 1000 [ 287.548658][T10710] wg2 speed is unknown, defaulting to 1000 [ 287.672493][T10710] wg2 speed is unknown, defaulting to 1000 [ 287.745309][ T5747] legousbtower 13-1:14.57: interrupt endpoints not found [ 287.788180][T10710] wg2 speed is unknown, defaulting to 1000 [ 288.148962][ T5747] legousbtower 13-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 288.151811][ T5752] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 288.155204][ T5747] legousbtower 13-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 288.167794][ T5752] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 288.172165][ T5752] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 288.175791][ T5752] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 288.179263][ T5752] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 288.365583][T10732] wg2 speed is unknown, defaulting to 1000 [ 288.563321][ T7006] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.593111][T10742] xt_connbytes: Forcing CT accounting to be enabled [ 288.596269][T10742] Cannot find del_set index 0 as target [ 288.605304][T10724] wg2 speed is unknown, defaulting to 1000 [ 288.695167][T10742] ceph: No mds server is up or the cluster is laggy [ 288.734011][ T5849] libceph: connect (1)[c::]:6789 error -101 [ 288.737256][ T5849] libceph: mon0 (1)[c::]:6789 connect error [ 288.871297][ T7006] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.969337][ T7006] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.060336][ T7006] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.175581][T10724] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.178005][T10724] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.180378][T10724] bridge_slave_0: entered allmulticast mode [ 289.183392][T10724] bridge_slave_0: entered promiscuous mode [ 289.186930][T10724] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.189297][T10724] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.191763][T10724] bridge_slave_1: entered allmulticast mode [ 289.194846][T10724] bridge_slave_1: entered promiscuous mode [ 289.216002][T10724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.241546][T10724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.288263][T10724] team0: Port device team_slave_0 added [ 289.292878][T10724] team0: Port device team_slave_1 added [ 289.336323][T10724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.339529][T10724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.348483][T10724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.355694][ T7006] bridge_slave_1: left allmulticast mode [ 289.358490][ T7006] bridge_slave_1: left promiscuous mode [ 289.360433][ T7006] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.364296][ T7006] bridge_slave_0: left allmulticast mode [ 289.366130][ T7006] bridge_slave_0: left promiscuous mode [ 289.368386][ T7006] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.505983][ T7006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.514108][ T7006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.514273][ T42] audit: type=1326 audit(1785946540.260:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.2.849" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fec code=0x0 [ 289.527438][ T7006] bond0 (unregistering): Released all slaves [ 289.536913][T10724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.542003][T10724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.554381][T10724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.624888][T10724] hsr_slave_0: entered promiscuous mode [ 289.628485][T10724] hsr_slave_1: entered promiscuous mode [ 289.631583][T10724] debugfs: 'hsr0' already exists in 'hsr' [ 289.634134][T10724] Cannot create hsr debugfs directory [ 289.675809][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.849'. [ 289.765832][ T24] usb 13-1: USB disconnect, device number 4 [ 289.776276][ T24] legousbtower 13-1:14.228: LEGO USB Tower #-160 now disconnected [ 289.891390][ T5454] 8021q: adding VLAN 0 to HW filter on device eth10 [ 290.247666][ T5754] Bluetooth: hci2: command tx timeout [ 290.502408][ T7006] hsr_slave_0: left promiscuous mode [ 290.507018][ T7006] hsr_slave_1: left promiscuous mode [ 290.509158][ T7006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.511663][ T7006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.516727][ T7006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.522495][ T7006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.533660][ T7006] veth1_macvtap: left promiscuous mode [ 290.539821][ T7006] veth0_macvtap: left promiscuous mode [ 290.542946][ T7006] veth1_vlan: left promiscuous mode [ 290.549093][ T7006] veth0_vlan: left promiscuous mode [ 290.643183][T10789] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 290.648347][T10789] xt_TPROXY: Can be used only with -p tcp or -p udp [ 290.860337][ T7006] team0 (unregistering): Port device team_slave_1 removed [ 290.919406][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'. [ 290.923043][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'. [ 290.926983][T10795] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 290.998605][T10798] 9pnet_virtio: no channels available for device syz [ 291.665961][ T7006] team0 (unregistering): Port device team_slave_0 removed [ 291.728208][T10802] FAULT_INJECTION: forcing a failure. [ 291.728208][T10802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.734513][T10802] CPU: 3 UID: 0 PID: 10802 Comm: syz.2.856 Not tainted syzkaller #0 PREEMPT(full) [ 291.734537][T10802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 291.734548][T10802] Call Trace: [ 291.734554][T10802] [ 291.734561][T10802] dump_stack_lvl+0x100/0x190 [ 291.734618][T10802] should_fail_ex.cold+0x5/0xa [ 291.734639][T10802] _copy_from_user+0x2e/0xd0 [ 291.734668][T10802] cache_do_downcall+0x47/0x130 [ 291.734698][T10802] cache_write_procfs+0xfb/0x170 [ 291.734724][T10802] ? __pfx_cache_write_procfs+0x10/0x10 [ 291.734752][T10802] proc_reg_write+0x240/0x330 [ 291.734776][T10802] vfs_write+0x2aa/0x1050 [ 291.734794][T10802] ? __pfx_proc_reg_write+0x10/0x10 [ 291.734814][T10802] ? __pfx_vfs_write+0x10/0x10 [ 291.734830][T10802] ? find_held_lock+0x2b/0x80 [ 291.734854][T10802] ? __fget_files+0x215/0x3d0 [ 291.734878][T10802] ? __fget_files+0x21f/0x3d0 [ 291.734902][T10802] ksys_write+0x12a/0x250 [ 291.734919][T10802] ? __pfx_ksys_write+0x10/0x10 [ 291.734934][T10802] ? ksys_write+0x1ac/0x250 [ 291.734951][T10802] ? __pfx_ksys_write+0x10/0x10 [ 291.734973][T10802] __do_fast_syscall_32+0xe7/0x970 [ 291.734999][T10802] ? lockdep_hardirqs_on+0x78/0x100 [ 291.735031][T10802] do_fast_syscall_32+0x32/0x70 [ 291.735056][T10802] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 291.735080][T10802] RIP: 0023:0xf7fa4fec [ 291.735101][T10802] Code: Unable to access opcode bytes at 0xf7fa4fc2. [ 291.735109][T10802] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 291.735127][T10802] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000200 [ 291.735139][T10802] RDX: 000000000000002b RSI: 0000000000000000 RDI: 0000000000000000 [ 291.735150][T10802] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 291.735160][T10802] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 291.735170][T10802] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 291.735218][T10802] [ 291.788187][T10805] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.857' sets config #24 [ 291.860469][ T846] usb 42-1: device descriptor read/8, error -110 [ 291.873857][T10804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.856'. [ 292.080877][T10804] team0: Port device team_slave_0 removed [ 292.259872][ T846] usb usb42-port1: attempt power cycle [ 292.326859][ T5754] Bluetooth: hci2: command tx timeout [ 292.600198][ T5454] 8021q: adding VLAN 0 to HW filter on device eth11 [ 292.877827][ T846] usb usb42-port1: unable to enumerate USB device [ 293.326243][ T5454] 8021q: adding VLAN 0 to HW filter on device eth12 [ 293.407461][ T846] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 293.587280][ T846] usb 13-1: Using ep0 maxpacket: 32 [ 293.613423][ T846] usb 13-1: config 0 has no interfaces? [ 293.620316][ T846] usb 13-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 293.664313][ T846] usb 13-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 293.690869][ T846] usb 13-1: Product: syz [ 293.692471][ T846] usb 13-1: Manufacturer: syz [ 293.701910][ T846] usb 13-1: SerialNumber: syz [ 294.277268][T10872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.862'. [ 294.407000][ T5754] Bluetooth: hci2: command tx timeout [ 294.419435][ T5454] 8021q: adding VLAN 0 to HW filter on device eth13 [ 294.432884][ T846] usb 13-1: config 0 descriptor?? [ 295.001578][T10724] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 295.024302][T10724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 295.030795][T10724] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 295.037809][T10724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 295.050796][T10724] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 295.062852][T10724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 295.068009][T10724] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 295.074483][T10724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 295.134396][ T7715] usb 13-1: USB disconnect, device number 5 [ 295.161177][T10724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.182158][T10724] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.192043][ T781] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.194489][ T781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.219476][ T781] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.221920][ T781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.000586][T10724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.368309][T10724] veth0_vlan: entered promiscuous mode [ 296.383945][T10724] veth1_vlan: entered promiscuous mode [ 296.442342][T10724] veth0_macvtap: entered promiscuous mode [ 296.484416][T10724] veth1_macvtap: entered promiscuous mode [ 296.486866][ T5754] Bluetooth: hci2: command tx timeout [ 296.507997][T10724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.512731][T10724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.581863][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.603678][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.614166][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.640225][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.645858][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.672649][ T217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.700863][ T217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.738262][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.952070][T10982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.868'. [ 297.024018][ T42] audit: type=1326 audit(1785946547.770:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10994 comm="syz.8.869" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x0 [ 297.117095][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.8.869'. [ 298.125236][T11024] netlink: 36 bytes leftover after parsing attributes in process `syz.8.870'. [ 298.130706][T11024] batadv_slave_1: entered allmulticast mode [ 298.487220][ T50] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 298.646996][ T50] usb 9-1: Using ep0 maxpacket: 8 [ 298.656615][ T50] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 298.662274][ T50] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 298.666562][ T50] usb 9-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 298.671833][ T50] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 298.677323][ T50] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 298.681666][ T50] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.688848][ T50] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 298.692571][ T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.935600][ T50] usb 9-1: GET_CAPABILITIES returned 0 [ 298.937549][ T50] usbtmc 9-1:16.0: can't read capabilities [ 299.194749][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 299.200322][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 299.203210][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 299.206338][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 299.211317][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 299.215478][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 299.220272][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 299.225486][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 299.240880][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 299.244710][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 299.256879][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 299.261685][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 299.266103][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 299.273523][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 299.278898][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 299.283258][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 299.419683][T11027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.437581][T11027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.519847][ T6221] usb 9-1: USB disconnect, device number 6 [ 300.239817][T11086] tipc: Started in network mode [ 300.241565][T11086] tipc: Node identity aa3a, cluster identity 4711 [ 300.251621][T11086] tipc: Node number set to 43578 [ 300.254470][T11088] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.877' sets config #24 [ 300.289715][T11073] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 300.915727][T11114] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 300.989453][T11119] netlink: 'syz.0.879': attribute type 1 has an invalid length. [ 301.664897][T11136] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.881' sets config #24 [ 302.214213][T11143] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 302.704419][ T42] audit: type=1326 audit(1785946553.450:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11144 comm="syz.8.883" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x0 [ 302.790184][T11146] netlink: 8 bytes leftover after parsing attributes in process `syz.8.883'. [ 304.063992][ T42] audit: type=1326 audit(1785946554.810:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.2.894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 304.082886][ T42] audit: type=1326 audit(1785946554.820:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.2.894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 304.102735][ T42] audit: type=1326 audit(1785946554.820:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.2.894" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 304.112761][ T42] audit: type=1326 audit(1785946554.820:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.2.894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 304.122068][ T42] audit: type=1326 audit(1785946554.820:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.2.894" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 304.130864][ T42] audit: type=1326 audit(1785946554.820:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.2.894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 304.141432][ T42] audit: type=1326 audit(1785946554.820:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.2.894" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 304.153673][ T42] audit: type=1326 audit(1785946554.820:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.2.894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 304.171322][ T42] audit: type=1326 audit(1785946554.820:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11167 comm="syz.2.894" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fa4fec code=0x7ffc0000 [ 304.293476][T11182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.309896][T11182] netlink: 16 bytes leftover after parsing attributes in process `syz.8.896'. [ 304.454337][T11188] netlink: 24 bytes leftover after parsing attributes in process `syz.8.898'. [ 304.694150][T11194] FAULT_INJECTION: forcing a failure. [ 304.694150][T11194] name failslab, interval 1, probability 0, space 9, times 0 [ 304.698723][T11194] CPU: 1 UID: 0 PID: 11194 Comm: syz.0.899 Not tainted syzkaller #0 PREEMPT(full) [ 304.698753][T11194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 304.698760][T11194] Call Trace: [ 304.698764][T11194] [ 304.698768][T11194] dump_stack_lvl+0x100/0x190 [ 304.698788][T11194] should_fail_ex.cold+0x5/0xa [ 304.698802][T11194] should_failslab+0xc2/0x120 [ 304.698819][T11194] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 304.698836][T11194] ? __d_alloc+0x35/0xa50 [ 304.698852][T11194] __d_alloc+0x35/0xa50 [ 304.698863][T11194] ? __lock_acquire+0x49f/0x1a40 [ 304.698883][T11194] d_alloc_parallel+0x105/0x14b0 [ 304.698904][T11194] ? __pfx_d_alloc_parallel+0x10/0x10 [ 304.698920][T11194] ? __d_lookup+0x25c/0x4a0 [ 304.698938][T11194] ? __d_lookup+0x266/0x4a0 [ 304.698953][T11194] ? d_lookup+0x156/0x190 [ 304.698971][T11194] path_openat+0x271c/0x4280 [ 304.698990][T11194] ? __pfx_path_openat+0x10/0x10 [ 304.699005][T11194] do_file_open+0x20e/0x430 [ 304.699016][T11194] ? __lock_acquire+0x49f/0x1a40 [ 304.699034][T11194] ? __pfx_do_file_open+0x10/0x10 [ 304.699055][T11194] ? _raw_spin_unlock+0x28/0x50 [ 304.699068][T11194] ? alloc_fd+0x471/0x7a0 [ 304.699083][T11194] do_sys_openat2+0x10f/0x1e0 [ 304.699100][T11194] ? __pfx_do_sys_openat2+0x10/0x10 [ 304.699116][T11194] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 304.699153][T11194] __ia32_compat_sys_openat+0x12d/0x210 [ 304.699171][T11194] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 304.699186][T11194] ? fput+0x79/0x100 [ 304.699200][T11194] ? exit_to_user_mode_loop+0x166/0x6f0 [ 304.699212][T11194] ? rcu_is_watching+0x12/0xc0 [ 304.699229][T11194] __do_fast_syscall_32+0xe7/0x970 [ 304.699244][T11194] ? lockdep_hardirqs_on+0x78/0x100 [ 304.699260][T11194] do_fast_syscall_32+0x32/0x70 [ 304.699276][T11194] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 304.699291][T11194] RIP: 0023:0xf7fe3fec [ 304.699303][T11194] Code: Unable to access opcode bytes at 0xf7fe3fc2. [ 304.699309][T11194] RSP: 002b:00000000f546450c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 304.699320][T11194] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000c00 [ 304.699327][T11194] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 304.699333][T11194] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 304.699339][T11194] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 304.699346][T11194] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 304.699360][T11194] [ 305.495090][T11203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.901'. [ 305.546537][T11205] FAULT_INJECTION: forcing a failure. [ 305.546537][T11205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.550827][T11205] CPU: 0 UID: 0 PID: 11205 Comm: syz.8.902 Not tainted syzkaller #0 PREEMPT(full) [ 305.550842][T11205] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 305.550848][T11205] Call Trace: [ 305.550852][T11205] [ 305.550857][T11205] dump_stack_lvl+0x100/0x190 [ 305.550877][T11205] should_fail_ex.cold+0x5/0xa [ 305.550891][T11205] strncpy_from_user+0x3b/0x2d0 [ 305.550911][T11205] do_getname+0x78/0x390 [ 305.550928][T11205] do_fchownat+0xc6/0x1f0 [ 305.550942][T11205] ? __pfx_do_fchownat+0x10/0x10 [ 305.550956][T11205] ? ksys_write+0x1ac/0x250 [ 305.550969][T11205] __ia32_sys_chown16+0xe3/0x110 [ 305.550990][T11205] __do_fast_syscall_32+0xe7/0x970 [ 305.551006][T11205] ? lockdep_hardirqs_on+0x78/0x100 [ 305.551022][T11205] do_fast_syscall_32+0x32/0x70 [ 305.551038][T11205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 305.551053][T11205] RIP: 0023:0xf6fdefec [ 305.551067][T11205] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 305.551072][T11205] RSP: 002b:00000000f538b50c EFLAGS: 00000292 ORIG_RAX: 00000000000000b6 [ 305.551083][T11205] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 0000000000000000 [ 305.551090][T11205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 305.551096][T11205] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 305.551102][T11205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.551109][T11205] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 305.551123][T11205] [ 306.423020][T11209] netlink: 'syz.0.903': attribute type 1 has an invalid length. [ 306.426122][T11209] netlink: 756 bytes leftover after parsing attributes in process `syz.0.903'. [ 306.527726][T11220] xt_hl: Unknown Hop Limit match mode: 230 [ 307.082459][T11228] CIFS: Attempting to mount //127.0.0.1/share [ 307.258867][T11235] 9pnet_virtio: no channels available for device syz [ 307.550665][T11240] netlink: 8 bytes leftover after parsing attributes in process `syz.8.911'. [ 308.132349][T11228] CIFS: VFS: cifs_mount failed w/return code = -512 [ 309.869831][T11269] nvme nvme0: rdma connection establishment failed (-104) [ 309.961795][T11281] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.921' sets config #24 [ 310.096963][ T34] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 310.248705][ T34] usb 9-1: Using ep0 maxpacket: 32 [ 310.254575][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.259730][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.263937][ T34] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 310.273842][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.286744][ T34] usb 9-1: config 0 descriptor?? [ 310.616431][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 310.616442][ T42] audit: type=1326 audit(1785946561.360:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11296 comm="syz.2.923" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fec code=0x0 [ 310.731457][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.923'. [ 311.132780][T11278] 9p: Bad value for 'wfdno' [ 311.361567][ T34] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 311.704839][T11312] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 311.707632][T11312] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 311.711490][T11312] vhci_hcd vhci_hcd.0: Device attached [ 311.726310][T11312] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 311.992181][ T24] usb 42-1: SetAddress Request (6) to port 0 [ 312.002893][ T24] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 312.022614][T11319] 9pnet_virtio: no channels available for device syz [ 312.429889][T11313] vhci_hcd: connection reset by peer [ 312.433768][ T12] vhci_hcd vhci_hcd.2: stop threads [ 312.435966][ T12] vhci_hcd vhci_hcd.2: release socket [ 312.438652][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 312.878344][ T1042] usb 9-1: USB disconnect, device number 7 [ 313.073208][T11349] netlink: 176 bytes leftover after parsing attributes in process `syz.4.930'. [ 313.370957][T11353] 9pnet_virtio: no channels available for device syz [ 313.382457][T11353] FAULT_INJECTION: forcing a failure. [ 313.382457][T11353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.402665][T11353] CPU: 2 UID: 0 PID: 11353 Comm: syz.0.931 Not tainted syzkaller #0 PREEMPT(full) [ 313.402682][T11353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 313.402689][T11353] Call Trace: [ 313.402694][T11353] [ 313.402698][T11353] dump_stack_lvl+0x100/0x190 [ 313.402717][T11353] should_fail_ex.cold+0x5/0xa [ 313.402731][T11353] _copy_from_user+0x2e/0xd0 [ 313.402751][T11353] kstrtouint_from_user+0xd6/0x1d0 [ 313.402764][T11353] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 313.402778][T11353] ? __lock_acquire+0x49f/0x1a40 [ 313.402802][T11353] proc_fail_nth_write+0x83/0x220 [ 313.402819][T11353] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 313.402838][T11353] vfs_write+0x2aa/0x1050 [ 313.402849][T11353] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 313.402866][T11353] ? __pfx_vfs_write+0x10/0x10 [ 313.402875][T11353] ? find_held_lock+0x2b/0x80 [ 313.402890][T11353] ? __fget_files+0x215/0x3d0 [ 313.402903][T11353] ? __fget_files+0x21f/0x3d0 [ 313.402917][T11353] ksys_write+0x12a/0x250 [ 313.402929][T11353] ? __pfx_ksys_write+0x10/0x10 [ 313.402944][T11353] do_int80_emulation+0x14b/0x720 [ 313.402966][T11353] asm_int80_emulation+0x1a/0x20 [ 313.402982][T11353] RIP: 0023:0xf71e74eb [ 313.402995][T11353] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 313.403008][T11353] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 313.403021][T11353] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54a65d0 [ 313.403031][T11353] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.403041][T11353] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 313.403050][T11353] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 313.403056][T11353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 313.403071][T11353] [ 313.467476][T11356] trusted_key: encrypted_key: insufficient parameters specified [ 313.508947][T11356] lo speed is unknown, defaulting to 1000 [ 313.511903][T11356] lo speed is unknown, defaulting to 1000 [ 313.514966][T11356] lo speed is unknown, defaulting to 1000 [ 313.520055][T11356] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 313.525184][T11356] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 313.542069][T11356] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 313.548808][T11356] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 313.558290][T11356] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 313.575002][T11356] lo speed is unknown, defaulting to 1000 [ 313.579715][T11356] lo speed is unknown, defaulting to 1000 [ 313.583004][T11356] lo speed is unknown, defaulting to 1000 [ 313.586984][T11356] lo speed is unknown, defaulting to 1000 [ 313.589637][T11356] lo speed is unknown, defaulting to 1000 [ 313.609337][T11363] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 313.796923][ T7732] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 313.936847][ T1042] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 313.947062][ T7732] usb 7-1: Using ep0 maxpacket: 16 [ 313.959126][ T7732] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 313.982780][ T7732] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 313.987792][ T7732] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.992936][ T7732] usb 7-1: Product: syz [ 313.994621][ T7732] usb 7-1: Manufacturer: syz [ 313.996758][ T7732] usb 7-1: SerialNumber: syz [ 314.046875][ T7732] usb 7-1: config 0 descriptor?? [ 314.081268][ T7732] hub 7-1:0.0: bad descriptor, ignoring hub [ 314.086162][ T7732] hub 7-1:0.0: probe with driver hub failed with error -5 [ 314.153281][ T7732] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 314.758846][ T56] usb 7-1: USB disconnect, device number 3 [ 314.804201][ T8785] udevd[8785]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.816955][ T1042] usb 5-1: config 0 has no interfaces? [ 314.819340][ T1042] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 314.822319][ T1042] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.829671][ T1042] usb 5-1: config 0 descriptor?? [ 315.022783][T11382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.939'. [ 315.257968][ T7732] usb 5-1: USB disconnect, device number 13 [ 315.319835][T11365] netlink: 44 bytes leftover after parsing attributes in process `syz.0.934'. [ 315.495138][T11385] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 315.567027][ T34] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 315.719904][ T34] usb 7-1: unable to get BOS descriptor or descriptor too short [ 315.723868][ T34] usb 7-1: not running at top speed; connect to a high speed hub [ 315.728385][ T34] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 315.732106][ T34] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 315.736543][ T34] usb 7-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 315.741108][ T34] usb 7-1: config 14 has no interface number 0 [ 315.743936][ T34] usb 7-1: config 14 has no interface number 1 [ 315.746661][ T34] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 315.751347][ T34] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 315.756300][ T34] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 315.761120][ T34] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 315.765939][ T34] usb 7-1: config 14 interface 57 has no altsetting 0 [ 315.769061][ T34] usb 7-1: config 14 interface 228 has no altsetting 0 [ 315.774134][ T34] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 315.778221][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.781683][ T34] usb 7-1: Product: syz [ 315.783487][ T34] usb 7-1: Manufacturer: syz [ 315.785492][ T34] usb 7-1: SerialNumber: syz [ 316.017759][T11392] netlink: 'syz.4.943': attribute type 1 has an invalid length. [ 316.020233][T11392] netlink: 756 bytes leftover after parsing attributes in process `syz.4.943'. [ 316.527537][ T34] legousbtower 7-1:14.57: interrupt endpoints not found [ 316.888184][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.057010][ T24] usb 42-1: device descriptor read/8, error -110 [ 317.058973][ T34] legousbtower 7-1:14.228: get version request failed: -71 [ 317.069081][ T34] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 317.081460][ T34] usb 7-1: USB disconnect, device number 4 [ 317.124962][T11417] usbip-vudc usbip-vudc.0: gadget not bound [ 317.432283][T11421] netlink: 'syz.0.952': attribute type 1 has an invalid length. [ 317.438273][T11421] netlink: 756 bytes leftover after parsing attributes in process `syz.0.952'. [ 317.500774][T11428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.953'. [ 318.035583][ T24] usb usb42-port1: attempt power cycle [ 318.636587][ T24] usb usb42-port1: unable to enumerate USB device [ 319.329560][T11445] netlink: 'syz.2.958': attribute type 1 has an invalid length. [ 319.333653][T11445] netlink: 756 bytes leftover after parsing attributes in process `syz.2.958'. [ 319.494857][T11449] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 319.816874][ T2164] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 320.016919][ T2164] usb 7-1: Using ep0 maxpacket: 32 [ 320.091954][ T2164] usb 7-1: unable to get BOS descriptor or descriptor too short [ 320.107931][ T2164] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 320.110359][ T2164] usb 7-1: can't read configurations, error -71 [ 320.190914][T11456] netlink: 'syz.8.962': attribute type 1 has an invalid length. [ 320.193382][T11456] netlink: 756 bytes leftover after parsing attributes in process `syz.8.962'. [ 320.550963][T11465] usbip-vudc usbip-vudc.0: gadget not bound [ 320.616891][ T6221] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 321.377914][ T6221] usb 9-1: Using ep0 maxpacket: 32 [ 321.527727][ T6221] usb 9-1: unable to get BOS descriptor or descriptor too short [ 321.533914][ T6221] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 321.536301][ T6221] usb 9-1: can't read configurations, error -71 [ 322.588763][T11487] 9pnet_virtio: no channels available for device syz [ 323.264453][T11495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.973'. [ 323.825334][T11500] 9pnet_virtio: no channels available for device syz [ 324.126965][ T6221] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 324.288903][ T6221] usb 9-1: config 0 has an invalid interface number: 50 but max is 0 [ 324.296878][ T6221] usb 9-1: config 0 has no interface number 0 [ 324.299579][ T6221] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 324.309620][ T6221] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 324.315653][ T6221] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.322013][ T6221] usb 9-1: Product: syz [ 324.323749][ T6221] usb 9-1: Manufacturer: syz [ 324.328178][ T6221] usb 9-1: SerialNumber: syz [ 324.346852][ T6221] usb 9-1: config 0 descriptor?? [ 324.356373][ T6221] yurex 9-1:0.50: USB YUREX device now attached to Yurex #0 [ 324.491381][T11516] netlink: 'syz.0.980': attribute type 3 has an invalid length. [ 324.508720][T11516] kvm: apic: phys broadcast and lowest prio [ 324.518348][T11516] sit0: entered promiscuous mode [ 324.522252][T11516] netlink: 'syz.0.980': attribute type 1 has an invalid length. [ 324.524718][T11516] netlink: 1 bytes leftover after parsing attributes in process `syz.0.980'. [ 324.745788][T11519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.749292][T11519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.582094][T11529] 9pnet_virtio: no channels available for device syz [ 326.578641][ C0] usb 9-1: yurex_control_callback - control failed: -2 [ 326.581335][ C0] usb 9-1: yurex_control_callback - control failed: -32 [ 326.587906][ T24] usb 9-1: USB disconnect, device number 10 [ 326.596202][ T24] yurex 9-1:0.50: USB YUREX #0 now disconnected [ 327.162541][T11539] netlink: 4 bytes leftover after parsing attributes in process `syz.8.984'. [ 327.233570][ T42] audit: type=1326 audit(1785946577.980:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11541 comm="syz.4.987" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x0 [ 327.326951][ T7732] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 327.408303][T11545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.987'. [ 327.476901][ T7732] usb 7-1: Using ep0 maxpacket: 8 [ 327.481654][ T7732] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 327.485296][ T7732] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 327.492170][ T7732] usb 7-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 327.498237][ T7732] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 327.502691][ T7732] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 327.505975][ T7732] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.515831][ T7732] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 327.519140][ T7732] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.791607][ T7732] usb 7-1: GET_CAPABILITIES returned 0 [ 327.794158][ T7732] usbtmc 7-1:16.0: can't read capabilities [ 328.012424][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.016095][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.019722][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.023326][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.026628][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.040796][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.043641][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.047142][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.049998][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.053190][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.056053][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.058896][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.061700][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.064477][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.067270][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.070181][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.101125][T11536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.108305][T11536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.115427][ T34] usb 7-1: USB disconnect, device number 7 [ 328.276919][ T2164] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 328.285304][T11550] netlink: 'syz.4.989': attribute type 1 has an invalid length. [ 328.303261][T11550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 328.321686][T11553] loop5: detected capacity change from 0 to 7 [ 328.333236][T11553] Dev loop5: unable to read RDB block 7 [ 328.335228][T11553] loop5: unable to read partition table [ 328.338241][T11553] loop5: partition table beyond EOD, truncated [ 328.341201][T11553] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 328.426853][ T2164] usb 5-1: Using ep0 maxpacket: 8 [ 328.430417][ T2164] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 328.434051][ T2164] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 328.437235][ T2164] usb 5-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 328.441089][ T2164] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 328.444605][ T2164] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 328.448647][ T2164] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 328.452899][ T2164] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 328.455759][ T2164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.692203][ T2164] usb 5-1: GET_CAPABILITIES returned 0 [ 328.695492][ T2164] usbtmc 5-1:16.0: can't read capabilities [ 328.894124][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.897695][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.901038][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.904462][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.909101][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.912533][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.915915][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.919347][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.922994][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.926354][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.929763][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.933136][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.937518][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.940903][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.944269][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.947064][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 328.964251][T11547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.968922][T11547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.979468][ T5821] usb 5-1: USB disconnect, device number 14 [ 329.119188][T11570] 9pnet_virtio: no channels available for device syz [ 329.732138][ T42] audit: type=1326 audit(1785946580.480:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11572 comm="syz.0.996" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe3fec code=0x0 [ 329.862553][T11579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.996'. [ 330.074325][ T42] audit: type=1326 audit(1785946580.820:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11580 comm="syz.4.999" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x0 [ 330.243984][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.999'. [ 331.553687][T11606] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.1006' sets config #24 [ 332.312778][T11617] FAULT_INJECTION: forcing a failure. [ 332.312778][T11617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.319977][T11617] CPU: 2 UID: 0 PID: 11617 Comm: syz.0.1008 Not tainted syzkaller #0 PREEMPT(full) [ 332.319994][T11617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 332.320002][T11617] Call Trace: [ 332.320006][T11617] [ 332.320011][T11617] dump_stack_lvl+0x100/0x190 [ 332.320034][T11617] should_fail_ex.cold+0x5/0xa [ 332.320050][T11617] _copy_from_user+0x2e/0xd0 [ 332.320072][T11617] move_addr_to_kernel+0x65/0x170 [ 332.320088][T11617] get_compat_msghdr+0x3c7/0x480 [ 332.320099][T11617] ? __pfx_get_compat_msghdr+0x10/0x10 [ 332.320111][T11617] ? rcu_is_watching+0x12/0xc0 [ 332.320127][T11617] ? ___sys_sendmsg+0x19d/0x1e0 [ 332.320138][T11617] ? kfree+0x1e5/0x6c0 [ 332.320150][T11617] ? __pfx__kstrtoull+0x10/0x10 [ 332.320165][T11617] ___sys_sendmsg+0x1b6/0x1e0 [ 332.320179][T11617] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.320190][T11617] ? __lock_acquire+0x49f/0x1a40 [ 332.320221][T11617] ? __pfx___might_resched+0x10/0x10 [ 332.320242][T11617] __sys_sendmmsg+0x309/0x440 [ 332.320260][T11617] ? __pfx___sys_sendmmsg+0x10/0x10 [ 332.320276][T11617] ? find_held_lock+0x2b/0x80 [ 332.320293][T11617] ? __mutex_unlock_slowpath+0x35d/0x930 [ 332.320318][T11617] ? fput+0x79/0x100 [ 332.320332][T11617] ? ksys_write+0x1ac/0x250 [ 332.320345][T11617] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 332.320356][T11617] ? lockdep_hardirqs_on+0x78/0x100 [ 332.320371][T11617] __do_fast_syscall_32+0xe7/0x970 [ 332.320387][T11617] ? lockdep_hardirqs_on+0x78/0x100 [ 332.320403][T11617] do_fast_syscall_32+0x32/0x70 [ 332.320419][T11617] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 332.320434][T11617] RIP: 0023:0xf7fe3fec [ 332.320448][T11617] Code: Unable to access opcode bytes at 0xf7fe3fc2. [ 332.320454][T11617] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 332.320465][T11617] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000800002c0 [ 332.320472][T11617] RDX: 000000000000009f RSI: 0000000000000000 RDI: 0000000000000000 [ 332.320478][T11617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 332.320485][T11617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.320491][T11617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 332.320505][T11617] [ 332.548075][T11619] netlink: 'syz.0.1009': attribute type 1 has an invalid length. [ 332.551243][T11619] netlink: 756 bytes leftover after parsing attributes in process `syz.0.1009'. [ 332.610784][ T42] audit: type=1326 audit(1785946583.360:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11626 comm="syz.0.1012" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe3fec code=0x0 [ 332.737776][ T5752] Bluetooth: hci2: command 0x0405 tx timeout [ 332.741062][T11630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1012'. [ 332.756389][T11620] 9p: Bad value for 'rfdno' [ 332.826891][ T1042] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 332.987255][ T1042] usb 13-1: Using ep0 maxpacket: 8 [ 332.992294][ T1042] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 332.997880][ T1042] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 333.005588][ T1042] usb 13-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 333.013565][ T1042] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 333.019483][ T1042] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 333.025165][ T1042] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.035673][ T1042] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 333.041853][ T1042] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.258249][ T1042] usb 13-1: GET_CAPABILITIES returned 0 [ 333.262615][ T1042] usbtmc 13-1:16.0: can't read capabilities [ 333.460427][ C1] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.464078][ C1] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.467417][ C1] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.470749][ C1] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.474603][ C1] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.478035][ C1] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.481383][ C1] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.484740][ C1] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.487981][ C1] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.493229][ C1] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.496627][ C1] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.500002][ C1] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.503316][ C1] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.506555][ C1] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.517181][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.521024][ C0] usbtmc 13-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 333.553185][T11625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.557287][T11625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.563953][ T7644] usb 13-1: USB disconnect, device number 6 [ 333.756666][T11648] FAULT_INJECTION: forcing a failure. [ 333.756666][T11648] name failslab, interval 1, probability 0, space 9, times 0 [ 333.762472][T11648] CPU: 0 UID: 0 PID: 11648 Comm: syz.4.1018 Not tainted syzkaller #0 PREEMPT(full) [ 333.762490][T11648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 333.762497][T11648] Call Trace: [ 333.762502][T11648] [ 333.762507][T11648] dump_stack_lvl+0x100/0x190 [ 333.762526][T11648] should_fail_ex.cold+0x5/0xa [ 333.762540][T11648] should_failslab+0xc2/0x120 [ 333.762559][T11648] __kvmalloc_node_noprof+0x116/0x970 [ 333.762575][T11648] ? bucket_table_alloc.isra.0+0x88/0x460 [ 333.762594][T11648] bucket_table_alloc.isra.0+0x88/0x460 [ 333.762612][T11648] __rhashtable_init_noprof+0x43a/0x890 [ 333.762629][T11648] __rhltable_init_noprof+0x28/0x70 [ 333.762646][T11648] nf_tables_newtable+0xf70/0x1a90 [ 333.762667][T11648] ? __pfx_nf_tables_newtable+0x10/0x10 [ 333.762685][T11648] ? __nla_parse+0x40/0x60 [ 333.762701][T11648] nfnetlink_rcv_batch+0x1410/0x2880 [ 333.762729][T11648] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 333.762745][T11648] ? find_held_lock+0x2b/0x80 [ 333.762762][T11648] ? __local_bh_enable_ip+0x9e/0x120 [ 333.762777][T11648] ? lockdep_hardirqs_on+0x78/0x100 [ 333.762792][T11648] ? __dev_queue_xmit+0xa12/0x4970 [ 333.762824][T11648] ? __nla_parse+0x40/0x60 [ 333.762838][T11648] nfnetlink_rcv+0x3bd/0x440 [ 333.762855][T11648] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 333.762874][T11648] netlink_unicast+0x585/0x850 [ 333.762890][T11648] ? __pfx_netlink_unicast+0x10/0x10 [ 333.762907][T11648] netlink_sendmsg+0x8b0/0xda0 [ 333.762922][T11648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.762937][T11648] ? apparmor_socket_sendmsg+0x15b/0x270 [ 333.762953][T11648] ____sys_sendmsg+0xa4d/0xbe0 [ 333.762965][T11648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.762979][T11648] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.762997][T11648] ___sys_sendmsg+0x190/0x1e0 [ 333.763031][T11648] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.763051][T11648] ? find_held_lock+0x2b/0x80 [ 333.763072][T11648] __sys_sendmsg+0x160/0x210 [ 333.763089][T11648] ? __pfx___sys_sendmsg+0x10/0x10 [ 333.763109][T11648] ? __pfx_ksys_write+0x10/0x10 [ 333.763123][T11648] __do_fast_syscall_32+0xe7/0x970 [ 333.763139][T11648] ? lockdep_hardirqs_on+0x78/0x100 [ 333.763155][T11648] do_fast_syscall_32+0x32/0x70 [ 333.763171][T11648] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 333.763186][T11648] RIP: 0023:0xf6feefec [ 333.763200][T11648] Code: Unable to access opcode bytes at 0xf6feefc2. [ 333.763205][T11648] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 333.763220][T11648] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 333.763227][T11648] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.763234][T11648] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 333.763240][T11648] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 333.763246][T11648] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 333.763260][T11648] [ 333.763428][T11648] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1018'. [ 333.970322][T11651] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1019' sets config #24 [ 334.245435][T11657] 9pnet_virtio: no channels available for device syz [ 334.966624][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1022'. [ 335.356688][T11670] FAULT_INJECTION: forcing a failure. [ 335.356688][T11670] name failslab, interval 1, probability 0, space 9, times 0 [ 335.360837][T11670] CPU: 2 UID: 0 PID: 11670 Comm: syz.8.1025 Not tainted syzkaller #0 PREEMPT(full) [ 335.360864][T11670] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 335.360871][T11670] Call Trace: [ 335.360875][T11670] [ 335.360880][T11670] dump_stack_lvl+0x100/0x190 [ 335.360899][T11670] should_fail_ex.cold+0x5/0xa [ 335.360913][T11670] should_failslab+0xc2/0x120 [ 335.360930][T11670] __kmalloc_noprof+0xfc/0x820 [ 335.360943][T11670] ? lockdep_init_map_type+0x5c/0x250 [ 335.360956][T11670] ? __list_lru_init+0xd9/0x4b0 [ 335.360973][T11670] __list_lru_init+0xd9/0x4b0 [ 335.360986][T11670] sget_fc+0xabf/0x1d80 [ 335.361006][T11670] ? __pfx___schedule+0x10/0x10 [ 335.361020][T11670] ? __pfx_set_anon_super_fc+0x10/0x10 [ 335.361036][T11670] ? __pfx_sget_fc+0x10/0x10 [ 335.361052][T11670] ? preempt_schedule_irq+0x7b/0x90 [ 335.361067][T11670] ? irqentry_exit+0x24d/0xa00 [ 335.361081][T11670] ? lockdep_hardirqs_on+0x78/0x100 [ 335.361096][T11670] ? irqentry_exit+0x24d/0xa00 [ 335.361116][T11670] ? __pfx_mqueue_fill_super+0x10/0x10 [ 335.361135][T11670] get_tree_nodev+0x28/0x190 [ 335.361159][T11670] mqueue_get_tree+0xf1/0x130 [ 335.361176][T11670] vfs_get_tree+0x92/0x320 [ 335.361201][T11670] fc_mount_longterm+0x1a/0x270 [ 335.361223][T11670] mq_init_ns+0x482/0x820 [ 335.361237][T11670] copy_ipcs+0x3dd/0x7e0 [ 335.361251][T11670] create_new_namespaces+0x20a/0xac0 [ 335.361265][T11670] ? security_capable+0x80/0x260 [ 335.361279][T11670] unshare_nsproxy_namespaces+0xf2/0x220 [ 335.361292][T11670] ksys_unshare+0x438/0xab0 [ 335.361323][T11670] ? __pfx___schedule+0x10/0x10 [ 335.361336][T11670] ? __pfx_ksys_unshare+0x10/0x10 [ 335.361350][T11670] ? fput+0x79/0x100 [ 335.361363][T11670] ? exit_to_user_mode_loop+0x166/0x6f0 [ 335.361375][T11670] ? rcu_is_watching+0x12/0xc0 [ 335.361391][T11670] __ia32_sys_unshare+0x30/0x40 [ 335.361406][T11670] __do_fast_syscall_32+0xe7/0x970 [ 335.361422][T11670] ? lockdep_hardirqs_on+0x78/0x100 [ 335.361437][T11670] do_fast_syscall_32+0x32/0x70 [ 335.361453][T11670] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 335.361468][T11670] RIP: 0023:0xf6fdefec [ 335.361481][T11670] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 335.361486][T11670] RSP: 002b:00000000f53ac50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 335.361498][T11670] RAX: ffffffffffffffda RBX: 000000006a040200 RCX: 0000000000000000 [ 335.361505][T11670] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 335.361511][T11670] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 335.361517][T11670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.361524][T11670] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 335.361538][T11670] [ 336.653936][T11683] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 336.659456][ T42] audit: type=1400 audit(1785946587.410:352): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=11679 comm="syz.0.1029" [ 336.789121][T11687] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 336.906608][ T7732] kernel read not supported for file /video9 (pid: 7732 comm: kworker/1:7) [ 338.386957][ T42] audit: type=1326 audit(1785946589.130:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.0.1036" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe3fec code=0x0 [ 338.475026][ T42] audit: type=1326 audit(1785946589.220:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11710 comm="syz.2.1037" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fec code=0x0 [ 338.503046][T11712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1036'. [ 338.946043][T11724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1037'. [ 339.508955][T11732] 9pnet_virtio: no channels available for device syz [ 339.530940][T11732] veth1_to_team: entered promiscuous mode [ 339.766178][T11738] 9pnet_virtio: no channels available for device syz [ 340.245985][T11747] netlink: 'syz.2.1048': attribute type 1 has an invalid length. [ 340.249826][T11747] netlink: 756 bytes leftover after parsing attributes in process `syz.2.1048'. [ 340.497415][ T42] audit: type=1326 audit(1785946591.120:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.2.1052" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fec code=0x0 [ 340.517092][T11759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1052'. [ 342.557613][ T42] audit: type=1800 audit(1785946593.280:356): pid=11780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1059" name="memory_backed" dev="configfs" ino=43853 res=0 errno=0 [ 342.568436][ T42] audit: type=1800 audit(1785946593.300:357): pid=11779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1059" name="zoned" dev="configfs" ino=44748 res=0 errno=0 [ 342.592061][T11779] netlink: 'syz.0.1059': attribute type 1 has an invalid length. [ 342.598356][T11779] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1059'. [ 342.603791][T11779] netlink: 'syz.0.1059': attribute type 2 has an invalid length. [ 342.606893][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1059'. [ 342.631203][T11782] netlink: 'syz.2.1060': attribute type 1 has an invalid length. [ 342.634279][T11782] netlink: 756 bytes leftover after parsing attributes in process `syz.2.1060'. [ 342.764066][ T42] audit: type=1800 audit(1785946593.510:358): pid=11779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1059" name="power" dev="configfs" ino=44754 res=0 errno=0 [ 342.842937][T11779] null_blk: my_zoned_dev: using native zone append [ 343.405004][T11779] null_blk: disk my_zoned_dev created [ 343.788064][T11805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1065'. [ 343.843695][T11815] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 343.845883][T11815] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 343.857404][T11815] vhci_hcd vhci_hcd.0: Device attached [ 344.147598][ T7732] usb 38-1: SetAddress Request (2) to port 0 [ 344.153264][ T7732] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 344.238806][T11819] netlink: 'syz.2.1069': attribute type 1 has an invalid length. [ 344.244300][T11819] netlink: 756 bytes leftover after parsing attributes in process `syz.2.1069'. [ 344.471049][T11816] vhci_hcd: connection reset by peer [ 344.482721][ T7006] vhci_hcd vhci_hcd.0: stop threads [ 344.484704][ T7006] vhci_hcd vhci_hcd.0: release socket [ 344.486534][ T7006] vhci_hcd vhci_hcd.0: disconnect device [ 345.226575][T11834] 9pnet_virtio: no channels available for device syz [ 345.273583][T11835] 9pnet_virtio: no channels available for device syz [ 345.496975][ T34] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 345.666910][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 345.670011][ T34] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 345.676875][ T34] usb 7-1: config 0 has no interface number 0 [ 345.678875][ T34] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 345.686929][ T34] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 345.693672][ T34] usb 7-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 74, changing to 10 [ 345.707603][ T34] usb 7-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 57855, setting to 1024 [ 345.711357][ T34] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 345.732673][ T34] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 345.736124][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.742548][ T34] usb 7-1: Product: syz [ 345.744301][ T34] usb 7-1: Manufacturer: syz [ 345.746235][ T34] usb 7-1: SerialNumber: syz [ 345.753901][ T34] usb 7-1: config 0 descriptor?? [ 345.765572][ T34] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.119/input/input11 [ 345.967476][ T56] usb 7-1: USB disconnect, device number 8 [ 346.276889][ T24] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 346.426888][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 346.431444][ T24] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 346.437006][ T24] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 346.441076][ T24] usb 9-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 346.445599][ T24] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 346.450339][ T56] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 346.453373][ T24] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 346.458637][ T24] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 346.464775][ T24] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 346.468896][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.588566][T11852] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1079' sets config #24 [ 346.608213][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 346.619245][ T56] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 346.623987][ T56] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 346.628656][ T56] usb 5-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 346.633811][ T56] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 346.638485][ T56] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 346.641742][ T56] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 346.645869][ T56] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 346.649263][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.681391][ T24] usb 9-1: GET_CAPABILITIES returned 0 [ 346.683233][ T24] usbtmc 9-1:16.0: can't read capabilities [ 346.862803][ T56] usb 5-1: GET_CAPABILITIES returned 0 [ 346.865018][ T56] usbtmc 5-1:16.0: can't read capabilities [ 346.887641][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.890529][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.893350][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.896160][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.898971][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.901802][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.904952][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.907809][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.910657][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.913478][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.916290][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.919137][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.921946][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.927210][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.930063][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.933334][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 346.943699][T11840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.946519][T11840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.951455][ T56] usb 9-1: USB disconnect, device number 11 [ 347.070645][T11845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.073876][T11845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.079550][ T24] usb 5-1: USB disconnect, device number 15 [ 347.119967][T11857] binder: 11856:11857 ioctl c0306201 80000040 returned -14 [ 347.121282][T11865] CIFS: Attempting to mount //127.0.0.1/share [ 347.163229][T11861] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1082'. [ 347.858508][T11865] CIFS: VFS: cifs_mount failed w/return code = -112 [ 348.001190][T11885] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1088' sets config #24 [ 348.849551][T11898] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1091'. [ 349.108967][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 349.227118][ T7732] usb 38-1: device descriptor read/8, error -110 [ 349.266881][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 349.270135][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 349.276845][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 349.283571][ T24] usb 7-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 349.288737][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 349.292628][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 349.297101][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.305347][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 349.309270][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.519337][ T24] usb 7-1: GET_CAPABILITIES returned 0 [ 349.521348][ T24] usbtmc 7-1:16.0: can't read capabilities [ 349.696628][ T7732] usb usb38-port1: attempt power cycle [ 349.722545][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.725867][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.728743][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.731560][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.734425][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.737334][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.740149][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.743392][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.748232][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.751115][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.754632][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.758085][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.761647][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.765680][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.769325][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.772962][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 349.783995][T11900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.789487][T11900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.794626][ T56] usb 7-1: USB disconnect, device number 9 [ 349.909669][T11912] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 350.094981][T11917] 9pnet_virtio: no channels available for device syz [ 351.268068][ T7732] usb usb38-port1: unable to enumerate USB device [ 351.734256][T11933] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 353.324430][T11955] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1107'. [ 353.745717][T11962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1109'. [ 354.732472][T11969] netlink: 'syz.0.1111': attribute type 1 has an invalid length. [ 354.735114][T11969] netlink: 756 bytes leftover after parsing attributes in process `syz.0.1111'. [ 354.973812][T11976] FAULT_INJECTION: forcing a failure. [ 354.973812][T11976] name failslab, interval 1, probability 0, space 9, times 0 [ 354.982429][T11976] CPU: 3 UID: 0 PID: 11976 Comm: syz.8.1113 Not tainted syzkaller #0 PREEMPT(full) [ 354.982457][T11976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 354.982468][T11976] Call Trace: [ 354.982475][T11976] [ 354.982483][T11976] dump_stack_lvl+0x100/0x190 [ 354.982514][T11976] should_fail_ex.cold+0x5/0xa [ 354.982537][T11976] should_failslab+0xc2/0x120 [ 354.982564][T11976] __kmalloc_cache_noprof+0x91/0x6c0 [ 354.982586][T11976] ? nvme_loop_create_ctrl+0x52/0xee0 [ 354.982630][T11976] nvme_loop_create_ctrl+0x52/0xee0 [ 354.982658][T11976] nvmf_dev_write+0x4ee/0xb60 [ 354.982691][T11976] vfs_write+0x2aa/0x1050 [ 354.982710][T11976] ? __pfx_nvmf_dev_write+0x10/0x10 [ 354.982738][T11976] ? __pfx_vfs_write+0x10/0x10 [ 354.982753][T11976] ? find_held_lock+0x2b/0x80 [ 354.982776][T11976] ? __fget_files+0x215/0x3d0 [ 354.982792][T11976] ? __fget_files+0x215/0x3d0 [ 354.982813][T11976] ? __fget_files+0x21f/0x3d0 [ 354.982836][T11976] ksys_write+0x12a/0x250 [ 354.982853][T11976] ? __pfx_ksys_write+0x10/0x10 [ 354.982867][T11976] ? ksys_write+0x1ac/0x250 [ 354.982883][T11976] ? __pfx_ksys_write+0x10/0x10 [ 354.982928][T11976] __do_fast_syscall_32+0xe7/0x970 [ 354.982956][T11976] ? lockdep_hardirqs_on+0x78/0x100 [ 354.982981][T11976] do_fast_syscall_32+0x32/0x70 [ 354.983006][T11976] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 354.983029][T11976] RIP: 0023:0xf6fdefec [ 354.983051][T11976] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 354.983059][T11976] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 354.983077][T11976] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000780 [ 354.983089][T11976] RDX: 000000000000001a RSI: 0000000000000000 RDI: 0000000000000000 [ 354.983100][T11976] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 354.983110][T11976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.983120][T11976] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 354.983145][T11976] [ 355.217372][T11979] 9pnet_virtio: no channels available for device syz [ 355.225895][T11982] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 356.251518][T11992] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1119' sets config #24 [ 356.269272][T11986] netlink: 'syz.2.1117': attribute type 1 has an invalid length. [ 356.272008][T11986] netlink: 756 bytes leftover after parsing attributes in process `syz.2.1117'. [ 356.582929][T12004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1121'. [ 357.576336][T12014] 9pnet_virtio: no channels available for device syz [ 357.669067][ T42] audit: type=1326 audit(1785946608.420:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12018 comm="syz.8.1124" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x0 [ 357.760779][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1124'. [ 357.853393][T12022] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 357.861605][ T42] audit: type=1400 audit(1785946608.610:360): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=12015 comm="syz.2.1126" [ 358.431999][ T42] audit: type=1326 audit(1785946609.180:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12023 comm="syz.2.1127" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa4fec code=0x0 [ 358.603218][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1127'. [ 358.654640][T12033] 9pnet_virtio: no channels available for device syz [ 359.212287][T12038] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 359.231584][ T42] audit: type=1400 audit(1785946609.980:362): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=12034 comm="syz.0.1130" [ 359.986533][T12053] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 360.058282][T12054] 9pnet_virtio: no channels available for device syz [ 362.262616][T12082] wg2 speed is unknown, defaulting to 1000 [ 362.296388][ T42] audit: type=1326 audit(1785946613.040:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12087 comm="syz.0.1146" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe3fec code=0x0 [ 362.405714][T12082] lo speed is unknown, defaulting to 1000 [ 362.452763][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1146'. [ 362.683878][T12094] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 363.142382][T12096] ALSA: mixer_oss: invalid OSS volume 'PHl' [ 363.159624][T12096] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1148'. [ 363.255249][T12098] FAULT_INJECTION: forcing a failure. [ 363.255249][T12098] name failslab, interval 1, probability 0, space 9, times 0 [ 363.259446][T12098] CPU: 1 UID: 0 PID: 12098 Comm: syz.8.1149 Not tainted syzkaller #0 PREEMPT(full) [ 363.259462][T12098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 363.259469][T12098] Call Trace: [ 363.259474][T12098] [ 363.259478][T12098] dump_stack_lvl+0x100/0x190 [ 363.259497][T12098] should_fail_ex.cold+0x5/0xa [ 363.259511][T12098] should_failslab+0xc2/0x120 [ 363.259529][T12098] __kvmalloc_node_noprof+0x116/0x970 [ 363.259545][T12098] ? bucket_table_alloc.isra.0+0x88/0x460 [ 363.259565][T12098] bucket_table_alloc.isra.0+0x88/0x460 [ 363.259583][T12098] __rhashtable_init_noprof+0x43a/0x890 [ 363.259601][T12098] __rhltable_init_noprof+0x28/0x70 [ 363.259620][T12098] nf_tables_newtable+0xf70/0x1a90 [ 363.259640][T12098] ? __pfx_nf_tables_newtable+0x10/0x10 [ 363.259658][T12098] ? __nla_parse+0x40/0x60 [ 363.259673][T12098] nfnetlink_rcv_batch+0x1410/0x2880 [ 363.259698][T12098] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 363.259715][T12098] ? find_held_lock+0x2b/0x80 [ 363.259731][T12098] ? __local_bh_enable_ip+0x9e/0x120 [ 363.259744][T12098] ? lockdep_hardirqs_on+0x78/0x100 [ 363.259760][T12098] ? __dev_queue_xmit+0xa12/0x4970 [ 363.259792][T12098] ? __nla_parse+0x40/0x60 [ 363.259806][T12098] nfnetlink_rcv+0x3bd/0x440 [ 363.259822][T12098] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 363.259842][T12098] netlink_unicast+0x585/0x850 [ 363.259857][T12098] ? __pfx_netlink_unicast+0x10/0x10 [ 363.259874][T12098] netlink_sendmsg+0x8b0/0xda0 [ 363.259889][T12098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.259903][T12098] ? apparmor_socket_sendmsg+0x15b/0x270 [ 363.259919][T12098] ____sys_sendmsg+0xa4d/0xbe0 [ 363.259931][T12098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.259945][T12098] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.259963][T12098] ___sys_sendmsg+0x190/0x1e0 [ 363.259977][T12098] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.260004][T12098] ? find_held_lock+0x2b/0x80 [ 363.260039][T12098] __sys_sendmsg+0x160/0x210 [ 363.260065][T12098] ? __pfx___sys_sendmsg+0x10/0x10 [ 363.260097][T12098] ? __pfx_ksys_write+0x10/0x10 [ 363.260129][T12098] __do_fast_syscall_32+0xe7/0x970 [ 363.260150][T12098] ? lockdep_hardirqs_on+0x78/0x100 [ 363.260165][T12098] do_fast_syscall_32+0x32/0x70 [ 363.260181][T12098] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 363.260197][T12098] RIP: 0023:0xf6fdefec [ 363.260211][T12098] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 363.260216][T12098] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 363.260227][T12098] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 363.260235][T12098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 363.260241][T12098] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 363.260248][T12098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.260254][T12098] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 363.260268][T12098] [ 364.141854][T12108] netlink: 'syz.0.1153': attribute type 1 has an invalid length. [ 364.144537][T12108] netlink: 756 bytes leftover after parsing attributes in process `syz.0.1153'. [ 364.533590][ T42] audit: type=1800 audit(1785946615.280:364): pid=12117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1155" name="enable" dev="configfs" ino=48476 res=0 errno=0 [ 364.544954][T12117] [ 364.545968][T12117] ====================================================== [ 364.548226][T12117] WARNING: possible circular locking dependency detected [ 364.550399][T12117] syzkaller #0 Not tainted [ 364.551941][T12117] ------------------------------------------------------ [ 364.554117][T12117] syz.0.1155/12117 is trying to acquire lock: [ 364.556026][T12117] ffffffff8fd8a928 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5ae/0x950 [ 364.558948][T12117] [ 364.558948][T12117] but task is already holding lock: [ 364.561265][T12117] ffff8880445c6500 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 364.564258][T12117] [ 364.564258][T12117] which lock already depends on the new lock. [ 364.564258][T12117] [ 364.567463][T12117] [ 364.567463][T12117] the existing dependency chain (in reverse order) is: [ 364.570239][T12117] [ 364.570239][T12117] -> #3 (&sb->s_type->i_mutex_key#27){++++}-{4:4}: [ 364.572954][T12117] lock_acquire+0x1b9/0x370 [ 364.574572][T12117] down_write+0x8b/0x1f0 [ 364.576121][T12117] configfs_depend_item_unlocked+0xf3/0x6a0 [ 364.578142][T12117] usbg_make_tpg+0x261/0x620 [ 364.579776][T12117] target_fabric_make_tpg+0xab/0x8c0 [ 364.581626][T12117] configfs_mkdir+0x51e/0xb70 [ 364.583287][T12117] vfs_mkdir+0x361/0x850 [ 364.584811][T12117] filename_mkdirat+0x48b/0x5e0 [ 364.586507][T12117] __ia32_sys_mkdir+0x6a/0x90 [ 364.588165][T12117] __do_fast_syscall_32+0xe7/0x970 [ 364.589961][T12117] do_fast_syscall_32+0x32/0x70 [ 364.591675][T12117] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.593860][T12117] [ 364.593860][T12117] -> #2 (&opts->dep_lock){+.+.}-{4:4}: [ 364.596269][T12117] lock_acquire+0x1b9/0x370 [ 364.597880][T12117] __mutex_lock+0x1a4/0x1bd0 [ 364.599534][T12117] usbg_make_tpg+0x1a4/0x620 [ 364.601157][T12117] target_fabric_make_tpg+0xab/0x8c0 [ 364.603012][T12117] configfs_mkdir+0x51e/0xb70 [ 364.604685][T12117] vfs_mkdir+0x361/0x850 [ 364.606205][T12117] filename_mkdirat+0x48b/0x5e0 [ 364.607908][T12117] __ia32_sys_mkdir+0x6a/0x90 [ 364.609550][T12117] __do_fast_syscall_32+0xe7/0x970 [ 364.611336][T12117] do_fast_syscall_32+0x32/0x70 [ 364.613034][T12117] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.615171][T12117] [ 364.615171][T12117] -> #1 (tpg_instances_lock){+.+.}-{4:4}: [ 364.617646][T12117] lock_acquire+0x1b9/0x370 [ 364.619235][T12117] __mutex_lock+0x1a4/0x1bd0 [ 364.620853][T12117] usbg_make_tpg+0x10b/0x620 [ 364.622466][T12117] target_fabric_make_tpg+0xab/0x8c0 [ 364.624311][T12117] configfs_mkdir+0x51e/0xb70 [ 364.625955][T12117] vfs_mkdir+0x361/0x850 [ 364.627480][T12117] filename_mkdirat+0x48b/0x5e0 [ 364.629170][T12117] __ia32_sys_mkdir+0x6a/0x90 [ 364.630814][T12117] __do_fast_syscall_32+0xe7/0x970 [ 364.632585][T12117] do_fast_syscall_32+0x32/0x70 [ 364.634271][T12117] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.636415][T12117] [ 364.636415][T12117] -> #0 (&subsys->su_mutex){+.+.}-{4:4}: [ 364.638853][T12117] check_prev_add+0xeb/0xe60 [ 364.640494][T12117] __lock_acquire+0x136c/0x1a40 [ 364.642190][T12117] lock_acquire+0x1b9/0x370 [ 364.643799][T12117] __mutex_lock+0x1a4/0x1bd0 [ 364.645413][T12117] configfs_rmdir+0x5ae/0x950 [ 364.647062][T12117] vfs_rmdir+0x328/0x8a0 [ 364.648579][T12117] filename_rmdir+0x31a/0x5c0 [ 364.650218][T12117] __ia32_sys_rmdir+0x45/0x60 [ 364.651867][T12117] __do_fast_syscall_32+0xe7/0x970 [ 364.653619][T12117] do_fast_syscall_32+0x32/0x70 [ 364.655325][T12117] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.657476][T12117] [ 364.657476][T12117] other info that might help us debug this: [ 364.657476][T12117] [ 364.660664][T12117] Chain exists of: [ 364.660664][T12117] &subsys->su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#27 [ 364.660664][T12117] [ 364.665062][T12117] Possible unsafe locking scenario: [ 364.665062][T12117] [ 364.667414][T12117] CPU0 CPU1 [ 364.669103][T12117] ---- ---- [ 364.670791][T12117] lock(&sb->s_type->i_mutex_key#27); [ 364.672534][T12117] lock(&opts->dep_lock); [ 364.674700][T12117] lock(&sb->s_type->i_mutex_key#27); [ 364.677188][T12117] lock(&subsys->su_mutex); [ 364.678653][T12117] [ 364.678653][T12117] *** DEADLOCK *** [ 364.678653][T12117] [ 364.681176][T12117] 3 locks held by syz.0.1155/12117: [ 364.682815][T12117] #0: ffff888021ff2450 (sb_writers#16){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 364.685727][T12117] #1: ffff888012c869c0 (&sb->s_type->i_mutex_key#8/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 364.689060][T12117] #2: ffff8880445c6500 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 364.692210][T12117] [ 364.692210][T12117] stack backtrace: [ 364.694067][T12117] CPU: 3 UID: 0 PID: 12117 Comm: syz.0.1155 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 364.694082][T12117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 364.694089][T12117] Call Trace: [ 364.694094][T12117] [ 364.694099][T12117] dump_stack_lvl+0x100/0x190 [ 364.694113][T12117] print_circular_bug.cold+0x178/0x1c7 [ 364.694133][T12117] check_noncircular+0x146/0x160 [ 364.694152][T12117] check_prev_add+0xeb/0xe60 [ 364.694168][T12117] ? filename_rmdir+0x31a/0x5c0 [ 364.694180][T12117] __lock_acquire+0x136c/0x1a40 [ 364.694200][T12117] lock_acquire+0x1b9/0x370 [ 364.694216][T12117] ? configfs_rmdir+0x5ae/0x950 [ 364.694229][T12117] ? __pfx___might_resched+0x10/0x10 [ 364.694249][T12117] __mutex_lock+0x1a4/0x1bd0 [ 364.694264][T12117] ? configfs_rmdir+0x5ae/0x950 [ 364.694276][T12117] ? configfs_rmdir+0x5ae/0x950 [ 364.694289][T12117] ? __pfx___mutex_lock+0x10/0x10 [ 364.694304][T12117] ? do_raw_spin_lock+0x128/0x260 [ 364.694316][T12117] ? find_held_lock+0x2b/0x80 [ 364.694329][T12117] ? fast_dput+0x2fe/0x6d0 [ 364.694344][T12117] ? do_raw_spin_unlock+0x145/0x1e0 [ 364.694356][T12117] ? _raw_spin_unlock+0x28/0x50 [ 364.694368][T12117] ? fast_dput+0x168/0x6d0 [ 364.694383][T12117] ? configfs_rmdir+0x5ae/0x950 [ 364.694394][T12117] configfs_rmdir+0x5ae/0x950 [ 364.694408][T12117] ? __pfx_configfs_rmdir+0x10/0x10 [ 364.694421][T12117] ? __pfx_down_write+0x10/0x10 [ 364.694438][T12117] vfs_rmdir+0x328/0x8a0 [ 364.694453][T12117] filename_rmdir+0x31a/0x5c0 [ 364.694465][T12117] ? __pfx_filename_rmdir+0x10/0x10 [ 364.694480][T12117] ? do_getname+0x191/0x390 [ 364.694494][T12117] __ia32_sys_rmdir+0x45/0x60 [ 364.694506][T12117] __do_fast_syscall_32+0xe7/0x970 [ 364.694521][T12117] ? lockdep_hardirqs_on+0x78/0x100 [ 364.694536][T12117] do_fast_syscall_32+0x32/0x70 [ 364.694552][T12117] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.694570][T12117] RIP: 0023:0xf7fe3fec [ 364.694585][T12117] Code: Unable to access opcode bytes at 0xf7fe3fc2. [ 364.694591][T12117] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000028 [ 364.694602][T12117] RAX: ffffffffffffffda RBX: 0000000080000280 RCX: 0000000000000000 [ 364.694609][T12117] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 364.694616][T12117] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 364.694622][T12117] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 364.694628][T12117] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 364.694638][T12117] [ 364.797724][T12121] /dev/sr0: Can't open blockdev [ 365.082805][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.210371][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.281585][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.320655][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.415849][ T13] bridge_slave_1: left allmulticast mode [ 365.417787][ T13] bridge_slave_1: left promiscuous mode [ 365.419709][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.422842][ T13] bridge_slave_0: left allmulticast mode [ 365.424588][ T13] bridge_slave_0: left promiscuous mode [ 365.426451][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.457985][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.461967][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.465383][ T13] bond0 (unregistering): Released all slaves [ 365.469008][ T13] bond1 (unregistering): Released all slaves [ 365.587377][ T5454] 8021q: adding VLAN 0 to HW filter on device eth14 [ 365.680477][ T5454] 8021q: adding VLAN 0 to HW filter on device eth15 [ 365.780430][ T5454] 8021q: adding VLAN 0 to HW filter on device eth16 [ 365.787276][ T13] hsr_slave_0: left promiscuous mode [ 365.789418][ T13] hsr_slave_1: left promiscuous mode [ 365.791545][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.794036][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.796651][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.799613][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.805450][ T13] veth1_to_team: left promiscuous mode [ 365.807509][ T13] veth1_macvtap: left promiscuous mode [ 365.809321][ T13] veth0_macvtap: left promiscuous mode [ 365.811137][ T13] veth1_vlan: left promiscuous mode [ 365.812965][ T13] veth0_vlan: left promiscuous mode [ 365.897708][ T13] team0 (unregistering): Port device team_slave_1 removed [ 365.902344][ T13] team0 (unregistering): Port device team_slave_0 removed [ 366.045031][ T5454] 8021q: adding VLAN 0 to HW filter on device eth17 [ 366.350884][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.390871][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.429630][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.490340][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.555177][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.620407][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.649666][ T5454] 8021q: adding VLAN 0 to HW filter on device eth27 [ 366.700905][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.742804][ T5454] 8021q: adding VLAN 0 to HW filter on device eth28 [ 366.760512][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.840657][ T5454] 8021q: adding VLAN 0 to HW filter on device eth30 [ 366.850906][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.921534][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.952955][ T5454] 8021q: adding VLAN 0 to HW filter on device eth29 [ 366.990348][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.061597][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.066462][ T5454] 8021q: adding VLAN 0 to HW filter on device eth31 [ 367.155586][ T13] bridge_slave_1: left allmulticast mode [ 367.157817][ T13] bridge_slave_1: left promiscuous mode [ 367.159698][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.162665][ T13] bridge_slave_0: left allmulticast mode [ 367.164462][ T13] bridge_slave_0: left promiscuous mode [ 367.166270][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.171916][ T13] bridge_slave_1: left allmulticast mode [ 367.173695][ T13] bridge_slave_1: left promiscuous mode [ 367.175492][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.180862][ T13] bridge_slave_0: left allmulticast mode [ 367.182658][ T13] bridge_slave_0: left promiscuous mode [ 367.184452][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.190128][ T13] bridge_slave_1: left allmulticast mode [ 367.191899][ T13] bridge_slave_1: left promiscuous mode [ 367.193668][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.196607][ T13] bridge_slave_0: left allmulticast mode [ 367.198790][ T13] bridge_slave_0: left promiscuous mode [ 367.201435][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.207555][ T13] dvmrp1: left allmulticast mode [ 367.274122][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.280727][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.284087][ T13] bond0 (unregistering): Released all slaves [ 367.287622][ T13] bond1 (unregistering): Released all slaves [ 367.307497][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.312262][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.316284][ T13] bond0 (unregistering): Released all slaves [ 367.336035][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.342821][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.346427][ T13] bond0 (unregistering): Released all slaves [ 367.350174][ T5454] 8021q: adding VLAN 0 to HW filter on device eth32 [ 367.437871][ T13] tipc: Left network mode [ 367.484727][ T5454] 8021q: adding VLAN 0 to HW filter on device eth33 [ 367.590952][ T5454] 8021q: adding VLAN 0 to HW filter on device eth34 [ 367.693505][ T5454] 8021q: adding VLAN 0 to HW filter on device eth35 [ 367.820053][ T5454] 8021q: adding VLAN 0 to HW filter on device eth36 [ 367.953550][ T5454] 8021q: adding VLAN 0 to HW filter on device eth37 [ 368.069629][ T13] hsr_slave_0: left promiscuous mode [ 368.072401][ T13] hsr_slave_1: left promiscuous mode [ 368.075194][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.078774][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.082673][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.085928][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.092907][ T13] hsr_slave_0: left promiscuous mode [ 368.095698][ T13] hsr_slave_1: left promiscuous mode [ 368.098732][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.101994][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.105789][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.109408][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.116105][ T13] hsr_slave_0: left promiscuous mode [ 368.119181][ T13] hsr_slave_1: left promiscuous mode [ 368.121832][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.124990][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.128934][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.131969][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.142465][ T13] veth1_macvtap: left promiscuous mode [ 368.144844][ T13] veth0_macvtap: left promiscuous mode [ 368.147364][ T13] veth1_vlan: left promiscuous mode [ 368.149660][ T13] veth0_vlan: left promiscuous mode [ 368.152528][ T13] veth1_macvtap: left promiscuous mode [ 368.154919][ T13] veth0_macvtap: left promiscuous mode [ 368.157487][ T13] veth1_vlan: left promiscuous mode [ 368.159796][ T13] veth0_vlan: left promiscuous mode [ 368.162556][ T13] veth1_macvtap: left promiscuous mode [ 368.164933][ T13] veth0_macvtap: left promiscuous mode [ 368.167471][ T13] veth1_vlan: left promiscuous mode [ 368.169202][ T13] veth0_vlan: left promiscuous mode [ 368.295558][ T13] team0 (unregistering): Port device team_slave_1 removed [ 368.384156][ T13] team0 (unregistering): Port device team_slave_1 removed [ 368.395516][ T217] smc: removing ib device syz2 [ 368.403179][ T217] smbdirect: ib_dev[syz2] removed [ 368.431191][ T781] smbdirect: ib_dev[syz0] removed [ 368.493845][ T13] team0 (unregistering): Port device team_slave_1 removed [ 368.501639][ T13] team0 (unregistering): Port device team_slave_0 removed [ 368.536356][ T5454] 8021q: adding VLAN 0 to HW filter on device eth38 [ 368.541559][ T7719] wg2 speed is unknown, defaulting to 1000 [ 368.544060][ T24] lo speed is unknown, defaulting to 1000 [ 368.549423][ T7719] syz2: Port: 1 Link DOWN [ 368.551600][ T24] infiniband syz0: ib_query_port failed (-19)