last executing test programs: 54m44.821886891s ago: executing program 32 (id=118): syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000040)) syz_emit_vhci(0x0, 0x4) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f00000003c0), 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) 54m41.426128136s ago: executing program 33 (id=124): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x4ae, r1) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000140)={r2, 0x5}, &(0x7f0000000780)=ANY=[], &(0x7f00000007c0)="76303eba1f", 0x0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x492492492492846, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r4, 0x8010aebb, 0x0) sched_setscheduler(0x0, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x4}]}]}, {0x0, [0x61, 0x2e, 0x61, 0x61, 0x3e]}}, &(0x7f00000007c0)=""/225, 0x37, 0xe1, 0x1}, 0x28) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x10) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000040), &(0x7f0000000080)=0x4) 54m21.908491843s ago: executing program 34 (id=161): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x9}, 0x1, 0x2, 0x3, 0x3, 0x2, 0x3}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) pipe(0x0) close(0xffffffffffffffff) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x480, 0x0) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x0, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}, {}, {}, {0xfffc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[], 0x0, 0x1}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') sendmsg$nl_route_sched(r4, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)=@deltaction={0x138, 0x31, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe19}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xde}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbb88}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x185}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2d}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8bdc6132b197f0b6}, 0x40040) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x2, 0xfffffffd, 0x4000, 0x7, 0x5, 0x8, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x23, 0x4, 0x1, 0x6, 0x101, 0xf7fffffe, 0x1ff, 0x2, 0x0, 0x10000008, 0x927, 0xeb96, 0x8401, 0x40f, 0xe69, 0x4, 0x10008, 0x3, 0x1cdc, 0xfbfffff8]}) 54m20.419516262s ago: executing program 35 (id=162): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x7fff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$I2C(&(0x7f0000000080), 0x9, 0x400) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl(r5, 0x8b1a, &(0x7f0000000040)) sendmsg$kcm(r4, 0x0, 0x0) 50m2.33098464s ago: executing program 36 (id=737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa0b00000000000000280000000040069078224e23", @ANYRES32=0x1, @ANYRES32=0x0, @ANYBLOB="5002100090780000"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10, 0x1000}}}}}}, 0x0) sendmsg$netlink(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)={0x30, 0x2e, 0x503, 0x0, 0x0, "", [@typed={0x0, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}], 0x1}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x6, 0x0, 0x700, 0x0, 0x18, {[@eol]}}}}}}, 0x3a) 47m38.88421928s ago: executing program 37 (id=1073): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006800e97802000000000000000a00000000000000080005", @ANYRES32=r3], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x804) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @private}]}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa0b00000000000000280000000040069078224e23", @ANYRES32=0x1, @ANYRES32=0x0, @ANYBLOB="5002100090780000"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x40, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10, 0x1000}}}}}}, 0x0) sendmsg$netlink(r6, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)={0x30, 0x2e, 0x503, 0x0, 0x0, "", [@typed={0x0, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}], 0x1}, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x6, 0x0, 0x700, 0x0, 0x18, {[@eol]}}}}}}, 0x3a) 47m34.685974316s ago: executing program 38 (id=1074): syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0xc114) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x1f, 0x7ffdd000, 0x8000}], 0x320000) kexec_load(0x2, 0x0, 0x0, 0x80000) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1008081, 0x0) 44m23.210361545s ago: executing program 39 (id=1454): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$full(0xffffff9c, 0x0, 0x214000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b802000018007000100637400001400028008000160ee00000000000040000000000900010073797a30"], 0xe4}}, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000001c0)=@req3={0xbdf7, 0x3, 0xa19, 0x0, 0x5ba, 0x0, 0x7580}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) socket(0x1e, 0x4, 0x0) syz_io_uring_setup(0x110, 0x0, &(0x7f0000000040), &(0x7f0000000280), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) creat(&(0x7f0000000200)='./file1\x00', 0x12a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast2, 0x0, "01ceaac82ab7d944e84b6fb4c020d47e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x3, 0x4}, 0x3c) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x891f, &(0x7f0000000240)={'sit0\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r4, 0x8949, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x0, 0xc3) 43m47.764797996s ago: executing program 40 (id=1484): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x30000}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x255fdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x2, 0xb}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e1}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031c3fd3fc141100004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 43m47.707228228s ago: executing program 41 (id=1482): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x30000}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x255fdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x2, 0xb}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e1}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031c3fd3fc141100004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 43m47.364291921s ago: executing program 42 (id=1485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) socket(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x30000}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x255fdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x2, 0xb}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e1}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031c3fd3fc141100004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 42m28.160936674s ago: executing program 43 (id=1516): socketpair(0x1, 0x1, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x20000000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x66) 42m4.725121491s ago: executing program 44 (id=1536): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r1) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0x0) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), 0x0, &(0x7f0000000000)) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100", 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x0, 0x5004) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4}) 34m52.084647087s ago: executing program 46 (id=2471): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') socket$inet6_sctp(0xa, 0x801, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) getpriority(0x0, r0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x8182) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000100)={0xe000000, 0x52424752, 0xf00, 0x870, 0x2, @stepwise={{0x1fb, 0xfffffff7}, {0x100, 0x5}, {0x2, 0x10001}}}) 34m51.51925376s ago: executing program 47 (id=2473): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, r4, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53b2, 0x8, 0x1000000, 0x2033f, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x2000, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d1f, 0x8000, 0x5, 0xdfffffff}}], 0x1, 0x0, 0x0) 34m33.525073715s ago: executing program 48 (id=2480): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001500)={'batadv0\x00', &(0x7f0000000140)=@ethtool_channels={0x3c, 0xfffffffc, 0x0, 0xfffffeff, 0x3, 0x1, 0x2, 0x5, 0x7fff}}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 33m13.642729008s ago: executing program 49 (id=2567): openat$rtc(0xffffff9c, &(0x7f0000000140), 0x101000, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x32, @multicast1, 0x4e22, 0x1, 'nq\x00', 0x21, 0x4, 0x65}, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) openat$comedi(0xffffffffffffff9c, 0x0, 0x8000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) pipe2$9p(0x0, 0x0) write$tun(r4, &(0x7f0000000840)=ANY=[], 0x11b0) 32m46.818447053s ago: executing program 50 (id=2578): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, 0x0, 0x1) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x22020400) r9 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r9, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r10 = dup(r8) write$UHID_INPUT(r10, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) epoll_pwait(r0, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfe, 0x0, 0x0) 32m38.421670763s ago: executing program 51 (id=2581): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$full(0xffffff9c, 0x0, 0x214000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe4}}, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000001c0)=@req3={0xbdf7, 0x3, 0xa19, 0x0, 0x5ba, 0x0, 0x7580}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r4, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) socket(0x1e, 0x4, 0x0) syz_io_uring_setup(0x110, 0x0, &(0x7f0000000040), &(0x7f0000000280), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) creat(&(0x7f0000000200)='./file1\x00', 0x12a) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast2, 0x0, "01ceaac82ab7d944e84b6fb4c020d47e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x3, 0x4}, 0x3c) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x891f, &(0x7f0000000240)={'sit0\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r5, 0x8949, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x0, 0xc3) 32m20.897918304s ago: executing program 52 (id=2587): pipe2$9p(&(0x7f0000000080), 0x84880) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r5 = syz_open_pts(r4, 0x141000) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000080)=0x1) socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000021c0), 0x0, 0x80001) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40010143, 0x0) 21m22.349945306s ago: executing program 0 (id=4807): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4f20, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/100, 0x64}], 0x1}, 0x4000000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) socket(0x2, 0x3, 0xff) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge0\x00'}) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880080354803", 0x1a, 0x0, 0x0, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) setns(0xc9, 0x0) r5 = socket(0x15, 0x5, 0x0) bind$l2tp6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x10000, 0x1}, 0x20) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x84}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r6, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r6, @ANYBLOB="0000000000000000710300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) read(r4, &(0x7f0000000180)=""/145, 0x91) close(0x3) 21m21.718002508s ago: executing program 0 (id=4809): syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x10, &(0x7f00000004c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x80, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r5, &(0x7f0000001180)={0x2020}, 0x2020) write$binfmt_misc(r5, &(0x7f0000000500)="330641858957525c0977cb97904b525989d14e2992e8e0331cd4bd965e317ee7ed7aceb6863d0057e4151b75ec92dd039a5b7c112ccc481736cb7ee3d4d20491cad58f448915df3a96aaffa3ea78d3323bb78da79cd5df4ffafafeb8d41e35a8fdb9a8c1677c74635c8f7d80b0970f8829255a22898af8ce8fbc68db9904cae1ef2551a8374ff6c86d996f7567265f43caf6d66d5db2d8d805ffcf19d95be54c205a4232ba2f8abf55fd80bd6f6590922e1a6a782770c2667ee2f9fc0d1d8cbdc3128e0beef0a34c527e55370e85038d6bf4831269f7ee3701ce63b2fe70c2730d19d0cfb7e507d274e4817a3b92748c9755d2658882d3aa0c", 0xf9) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x200cc000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@empty, @in6=@local}}, {{@in=@empty}, 0x0, @in=@loopback}}, 0x0) r6 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$TCSETS(0xffffffffffffffff, 0x545c, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) timer_create(0x4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x406, r3) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) write$tun(r4, &(0x7f0000000400)=ANY=[], 0xa2) 21m19.813309466s ago: executing program 0 (id=4817): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4f20, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/100, 0x64}], 0x1}, 0x4000000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) socket(0x2, 0x3, 0xff) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge0\x00'}) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880080354803", 0x1a, 0x0, 0x0, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) setns(0xc9, 0x0) r5 = socket(0x15, 0x5, 0x0) bind$l2tp6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x10000, 0x1}, 0x20) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x84}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r6, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r6, @ANYBLOB="0000000000000000710300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) read(r4, &(0x7f0000000180)=""/145, 0x91) close(0x3) 21m4.44823096s ago: executing program 53 (id=4817): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4f20, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/100, 0x64}], 0x1}, 0x4000000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) socket(0x2, 0x3, 0xff) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge0\x00'}) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880080354803", 0x1a, 0x0, 0x0, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) setns(0xc9, 0x0) r5 = socket(0x15, 0x5, 0x0) bind$l2tp6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x10000, 0x1}, 0x20) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x84}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r6, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r6, @ANYBLOB="0000000000000000710300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) read(r4, &(0x7f0000000180)=""/145, 0x91) close(0x3) 4m50.859175346s ago: executing program 2 (id=8516): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r1, 0x29, 0x4b, 0x0, 0x4) r2 = getpgid(0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000640)=""/207, &(0x7f0000000740)=0xcf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) memfd_create(&(0x7f00000003c0)='%\x00\xae\xdb\xb8\x18\xc1\xecWbNO\xde^\xff\x19\x17QE{*X\xe3\xe2\x06\x00\x00\x00\xcc\xf6\xc0H\xa2\x83?\xe7\x89*\xf1\xc5b\v\xec\xe4\xb0\xa2\xc5\xee\x04\x98\xa9\xb9\xe5\x8c\xc3\x97B\xaa+\xf2o\xf6k\xcc\xf7\x057\x8d\xb1\xa0\x86\xe8\xda\x90\xc2\x1e\x15\x11\x92\x9d\xc1M\xe5@\v\x001\xae\x19$\xf8\x96\x81\xcbR\xae`\xd3\xf8_R~7\xf5\x1c\xc8\xf9\xe2z\x00<\xdc\x11\x89\xc9&f\x00\x00\x00\xe2\x83\xf1\x0eg\a\xec\xac\xa5\x94~v\x80P5\xf9/$', 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000804000000020000000000001103000000ffffffff02000000000000080200000000005f00"], 0x0, 0x38}, 0x28) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r10], 0x2c}}, 0x4000000) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4540}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x27b2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000881}, 0x4c004) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x1e, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x95, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x5}, @tail_call, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x3, 0x4c, &(0x7f00000004c0)=""/76, 0x0, 0x70, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r12) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r11, 0x4048587b, &(0x7f0000000c40)={{0xffffffffffffffff, &(0x7f0000000780)='\x00', 0x109e40, &(0x7f0000000880)={@align=0x3, {0x8000, 0x6, 0xfffffffb, 0xa1}}, 0x3, 0x0, &(0x7f0000000900)=0x9}, 0x0, &(0x7f0000000bc0)}) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) 4m43.216911595s ago: executing program 4 (id=8522): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$DVB_DVR_DMX_DQBUF(0xffffffffffffffff, 0xc0186f40, &(0x7f0000000040)={0x1, 0x20000000, 0x9, 0xb, 0x8, 0x6}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="b0010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000002c0)={0x3c, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x4}, @pad1, @ra, @calipso={0x7, 0x10, {0x0, 0x2, 0x7f, 0x9, [0x100000000]}}, @ra={0x5, 0x2, 0x7}]}, 0x30) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket(0x2a, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000001c0)={0x9, r1, 'id1\x00'}) ioctl$HIDIOCGRAWNAME(r6, 0x80404804, &(0x7f0000000240)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x20040011}}], 0x1, 0x80) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 4m41.270283832s ago: executing program 2 (id=8524): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x200003}, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x64, 0x4, 0x31c, 0x100000c, 0x0, 0x1b4, 0xb8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00'}, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@inet=@socket1={{0x24}}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg0\x00', 'lo\x00'}, 0x0, 0x9c, 0xfc, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x5}}}}, {{@uncond, 0x0, 0xb0, 0xd4, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x6, 0x6, 0x4, 0x0, 0x5, 0x1]}}}]}, @common=@inet=@TCPMSS={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x378) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r7, 0xb) pread64(r1, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) pwritev2(r1, &(0x7f0000000200)=[{0x0}, {&(0x7f00000000c0)="3a4002c716d6a76c8c4954a5376cbb6f97620bfe3824433daae61da82f787afff91cf673ef7ebed356e623497f0489", 0x2f}, {0x0}], 0x3, 0x3, 0xffff8000, 0x14) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x0, 0x4, 0x1, 0x25, 0x0, 0x400, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff7, 0x400001, 0x6, 0x5, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x4, 0x4, 0x20001e5b, 0x3, 0xe66, 0x3, 0x6, 0x4006, 0x0, 0x3]}) 4m41.269688618s ago: executing program 7 (id=8525): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x144, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x22, 0x7, 0x4e24, 0x0, 0xa, 0x20, 0x20, 0x1d}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xfffffffffdffffff, 0x4, 0x7f}, {0x0, 0xffffffffffffffff, 0x3}, {0xf6, 0x4, 0xa}, 0x0, 0x34ff, 0x2, 0x1, 0xbe, 0x70}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x80}}, @tfcpad={0x8, 0x16, 0x4000003}]}, 0x144}}, 0x804) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x6b, 0xffffffffffffffff, {0x101}}, '\x00'}) getpid() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000019080)=@req={0x7, 0x50d, 0x0, 0x6}, 0x10) sendmsg$nl_generic(r7, 0x0, 0x4004000) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) r8 = syz_io_uring_setup(0x264a, &(0x7f00000190c0)={0x0, 0x8847, 0x40, 0x2, 0x266, 0x0, r5}, &(0x7f0000019140), &(0x7f0000000180), &(0x7f00000191c0)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r8, 0x12, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) ioctl$sock_ifreq(0xffffffffffffffff, 0x8932, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={0x0}}, 0x2000400c) 4m38.337822513s ago: executing program 4 (id=8527): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001500)={'batadv0\x00', &(0x7f0000000140)=@ethtool_channels={0x3c, 0xfffffffc, 0x0, 0xfffffeff, 0x3, 0x1, 0x2, 0x5, 0x7fff}}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x4000000, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044811}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) close(0x3) close(0x3) 4m35.452327184s ago: executing program 7 (id=8530): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000040)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) 4m35.2460924s ago: executing program 7 (id=8531): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000040)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) shutdown(r3, 0x32ce970513f32900) 4m34.987356089s ago: executing program 4 (id=8533): openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, 0x1e, 0x221, 0x70bd2d, 0x0, {0x7}, [@nested={0x14, 0x144, 0x0, 0x1, [@nested={0x10, 0xf3, 0x0, 0x1, [@nested={0xc, 0x28, 0x0, 0x1, [@nested={0x8, 0xa, 0x0, 0x1, [@nested={0x4, 0x11d}]}]}]}]}]}, 0x28}}, 0x4000080) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000700)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x57e, 0x2019, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf, 0x40, 0x80, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x2, 0x12, {0x9, 0x21, 0x5, 0x8, 0x1, {0x22, 0x4ed}}, {{{0x9, 0x5, 0x81, 0x3, 0x600, 0xb6, 0x8, 0xa}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x7, 0xfc, 0x8}}]}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x140, 0x8, 0x3, 0xc, 0x8}, 0x5, &(0x7f0000000780)={0x5, 0xf, 0x5}, 0x1, [{0x2d, &(0x7f00000007c0)=@string={0x2d, 0x3, "57879d0a96a866c84c4de0fae58fc5162536ea3de6dc7035206cb01cd4182356e1a80ddc7be0cdcebaa897"}}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x134, 0x10, 0x1, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x1, 0x710, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in6=@loopback, 0x4d4, 0x6c}, @in=@local, {0x0, 0x192, 0x2, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0xeb5b}, {0x2, 0xfffffffc, 0xfffffbbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x29}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x4d4, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe4) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000440)={0xc, &(0x7f00000003c0)={0x40, 0x11, 0x28, {0x28, 0x21, "5c76e0d8da177dd90036e5fd170ce021d4be6f3f336e0119959916b28ba297c52f3c82615080"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="0ae411d6000f06000000f0aa4d3cd1aad15c2a056ae47100269e"], &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x8}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x5, 0x2}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000006c0)=0x8, 0x4) syz_usb_control_io(r1, 0x0, 0x0) statx(r2, &(0x7f0000000240)='./dev/ttyUSB0\x00', 0x0, 0x40, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f00000001c0)=@rnullb, r5, &(0x7f0000000380)) 4m34.065637867s ago: executing program 2 (id=8534): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df408fc6441639e75c7470bb11", 0x30, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) accept4(r0, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800) epoll_create(0x4) socket(0x28, 0x801, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x11) 4m33.556368766s ago: executing program 3 (id=8536): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000000c0)={0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r4 = openat$rdma_cm(0xffffff9c, &(0x7f0000000e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000ec0)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_delroute={0x28, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_MULTIPATH={0xc, 0x9, {0x6, 0x1, 0x4}}]}, 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3fc03, 0x25f14}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x14044080}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x703d26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a18}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000200)=0x3) ioctl$TIOCSLCKTRMIOS(r8, 0x80047437, &(0x7f0000000040)) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) r10 = syz_io_uring_setup(0xe3c, &(0x7f0000000140)={0x0, 0xa14e, 0x400, 0x3, 0xfffffffd}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, 0x0}) io_uring_enter(r10, 0x1, 0x1, 0x1, 0x0, 0x0) unshare(0x2020400) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x5, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0x10, 0x0, 0x71, 0xfffffffb, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x4, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0x81, 0xfb, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x1, 0x4, 0x8000, 0x809, 0x400, 0x5, 0x6, 0x7, 0xff, 0x400005, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x801, 0x6, 0x0, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x1, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x8, 0x1ef, 0x5, 0x8, 0x101, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x2be, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0x46a5, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x2, 0x10000, 0x6, 0x8, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0xeda, 0x8, 0xc8, 0xee1, 0xfffff000, 0x1, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x5, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x0, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4m33.446515295s ago: executing program 7 (id=8537): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x1000, 0x3, &(0x7f0000598000/0x1000)=nil) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10119, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=0xffffffffffffffff, @ANYRESHEX=r4, @ANYRES8=r2, @ANYRES32=r0, @ANYRES16=r4], 0x9d) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r6, @ANYRES32=0x0, @ANYRESOCT=r1], 0x50) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$CDROMREADAUDIO(r7, 0x5392, &(0x7f0000000000)={@msf={0x1, 0xc0, 0x2}, 0x1, 0x0, 0x0}) mkdir(&(0x7f0000000100)='./bus\x00', 0x61) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) mbind(&(0x7f0000c9c000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x100000000000002, 0x9, 0x1) socket(0x25, 0x801, 0x7) syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) 4m32.915952961s ago: executing program 2 (id=8538): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="40000000100005ff0000ff09fcdbdf210000004a", @ANYRES32=0x0, @ANYBLOB="7f15000000000000200012800b0001006272696467650000100002800c0022000500000000000000"], 0x40}}, 0x200008d0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28012, r1, 0xfc05000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'macvtap0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "91cee5d1aaab0bda02000000cdb51f81695df41766cb3cafb1fda3fa3e6025f2", "56ec92082cf2860d356454fa90602d519e8f47084b09891636f43dddd16435c0", "d86893728b00009e8036463c0bd152584d6d53000887aa20d2bee1e604a4654a", "1133a33fd4d60bebed50cc1c19d0e83eba095ed99278ccc2c5e88011c3cdfe3d", "1bc3408a3c5ea8292fdf8fb811f5bbbcd52edb4579baf553bf793e47fdbf58cd", "e57f46ce962396e1eb375f67", 0x0, 0x8ef, 0x7ff, 0x3, 0x401}}) io_setup(0x6, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000500)={0x0, 0xfb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd756, 0x3000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x2, 0x3fff, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc650, 0x40, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x1, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x4014, {0x3c9, 0x0, 0xfffffffc, 0x80000000, 0x3, 0xfff}}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfc, 0x8000000}, 0xc) r12 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r13) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r14) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 4m32.450602844s ago: executing program 3 (id=8539): r0 = socket$netlink(0x10, 0x3, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) shutdown(0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xf, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a02fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000000000001d440000000000006b0a04fe000000007203"], 0x0}, 0x94) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto$packet(r1, &(0x7f00000001c0)="4abb09e698", 0x5, 0x40004, &(0x7f00000002c0)={0x11, 0x3, r2, 0x1, 0x5, 0x6, @multicast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000000)=0x11) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x20000003}) close_range(r7, r5, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x4, &(0x7f0000000180)=0x4764, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) 4m30.47593236s ago: executing program 7 (id=8540): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000040)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) 4m29.870595816s ago: executing program 3 (id=8541): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x4800, 0x2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xe, {"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", 0xfffffffffffffd6f}}, 0x1006) io_uring_setup(0x1020, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x1, 0xfefffffd}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000180001eeffffffffffffff850a3f0000000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x40000) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0xfc) fstat(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r4, r8) fchdir(r3) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) openat(r3, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x50) ioctl$OCFS2_IOC_RESVSP(r0, 0x402c5828, 0x0) 4m29.780361816s ago: executing program 4 (id=8542): prctl$PR_GET_KEEPCAPS(0x7) r0 = openat$vim2m(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x14, 0x3b, 0x301, 0xa70bd1d, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) mount$binder(0x0, &(0x7f00000021c0)='.\x00', &(0x7f0000002200), 0x1200850, &(0x7f0000002240)={[{@stats}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRAWPHYS(r7, 0x80404805, &(0x7f0000000040)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000018000000", @ANYRES32=r8, @ANYBLOB="00000000000000f0a91500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) write$P9_RSTATFS(r2, &(0x7f0000005f40)={0x43, 0x9, 0x1, {0x4, 0x8, 0x9107, 0xfffb, 0xc, 0x0, 0x5, 0x9, 0x1000005}}, 0x43) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 4m29.765378793s ago: executing program 7 (id=8543): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x248, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000000}, @TCA_RATE={0x6, 0x5, {0x87}}, @TCA_RATE={0x6, 0x5, {0x7, 0x2}}, @qdisc_kind_options=@q_mqprio={{0xb}, {0x1bc, 0x2, {{0x2, [0x2, 0x2, 0xb, 0x2, 0xc, 0x8, 0x8, 0xd, 0xd, 0x7, 0x8, 0xd, 0x8, 0x8, 0x9, 0xc], 0x1, [0x40, 0x9, 0x101, 0x4, 0x4, 0x2, 0x2, 0x6, 0x5, 0x0, 0xfe09, 0x6d, 0x3, 0x4, 0xf, 0xfe00], [0x6, 0x8, 0x100, 0x6, 0xe0, 0x6, 0x0, 0x2, 0xd37f, 0xd12f, 0x401, 0x9, 0x5, 0x7fff, 0x3, 0x94d]}, [@TCA_MQPRIO_MAX_RATE64={0xc4, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x147}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0x1e}, {0xc, 0x4, 0x6}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0x6}, {0xc, 0x4, 0x53}, {0xc, 0x4, 0x9f}, {0xc, 0x4, 0xfffffffffffffffb}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x6}]}, @TCA_MQPRIO_MAX_RATE64={0xa0, 0x4, 0x0, 0x1, [{0xc, 0x4, 0xffffffffffffff3a}, {0xc, 0x4, 0x5}, {0xc}, {0xc, 0x4, 0x1906}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x75ac}, {0xc}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0xffffffffffffffff}, {0xc}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x9}]}]}}}, @TCA_STAB={0x4}]}, 0x248}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r3, &(0x7f000000cbc0)=[{{&(0x7f0000005d80)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc0}}, {{&(0x7f00000087c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000040}}], 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000043c0)=@delchain={0x230, 0x65, 0x100, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xa, 0xffff}, {0xb, 0xfff1}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x18, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_ACT={0x4}]}}, @filter_kind_options=@f_u32={{0x8}, {0x1dc, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1_to_hsr\x00'}, @TCA_U32_SEL={0x1a4, 0x5, {0xf, 0x0, 0xf8, 0x0, 0x0, 0x3, 0x6, 0xc12, [{0xffff, 0xffffffa6, 0x7fffffff}, {0xa, 0x9, 0x1, 0xffffb245}, {0x7fff, 0x9, 0x1, 0x9}, {0x4, 0x6, 0x4, 0x81}, {0x9, 0x101, 0x5, 0x400}, {0xee5, 0x6, 0x0, 0x1}, {0xf, 0x1, 0x9}, {0x9, 0x7, 0x2, 0x7}, {0x8, 0xffff, 0x8, 0x100}, {0x8, 0xb, 0x2, 0x3}, {0x80000000, 0xf, 0xe, 0x5888}, {0x7d7, 0x1, 0x6, 0x101}, {0x2, 0xfff, 0x8, 0xfffffbff}, {0x480000, 0x8001, 0x101, 0x6}, {0x4, 0x2, 0xe, 0x7}, {0x80000001, 0x6, 0x9, 0x8}, {0xb, 0x68, 0x6, 0x1e2}, {0x5, 0x2, 0x5, 0x4}, {0x0, 0x7, 0x0, 0x8}, {0x2, 0x9, 0x2, 0x1ff}, {0x0, 0x0, 0x1, 0x97}, {0x4, 0x6, 0x1, 0x7}, {0xb, 0x7, 0x6, 0xfffffffe}, {0x81, 0x6, 0x8, 0x2}, {0x2, 0xd, 0x2, 0xffff7fff}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x6, 0x2}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x8b}, @TCA_U32_DIVISOR={0x8, 0x4, 0x89}, @TCA_U32_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x230}}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r7, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1}, 0x4005) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) r10 = userfaultfd(0x80001) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_WRITEPROTECT(r10, 0xc018aa06, &(0x7f0000000200)={{&(0x7f000030b000/0x3000)=nil, 0x3000}, 0x100000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) creat(&(0x7f0000000600)='./tracing/dynamic_events\x00', 0x118) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 4m29.25149676s ago: executing program 3 (id=8544): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x6c, 0x30, 0x51b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x6c}}, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe4) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x4, 0xfffffffd, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='0000:00:02.0\x00', 0xd) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r5, &(0x7f0000000700)='amd5536udc-pci\x00', 0xf) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/amd5536udc-pci/bind\x00', 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) munmap$IORING_OFF_CQ_RING(0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) write(r6, &(0x7f0000000900)='0000:00:02.0\x00', 0xd) close(r6) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r8) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fedbdf25072000000c0099000100000002"], 0x20}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 4m26.497759202s ago: executing program 2 (id=8545): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0)={0x5}, 0x6}, 0x80) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x1ff) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000001500)='pagemap\x00') syz_usb_disconnect(0xffffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x1) syz_open_dev$dri(0x0, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x4e21, 0x3, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r4, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) recvfrom(r4, 0x0, 0x0, 0x140, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 4m26.341443244s ago: executing program 3 (id=8546): socket(0x848000000015, 0x805, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x0, 0x10) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00') bind$inet6(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@cgroup=r4, r4, 0x2e}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x3, 0x8, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r6, 0x4) close(0x3) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r7, r5, 0x0, r5}, 0x5) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_FBUF(r8, 0x402c560b, &(0x7f0000000180)={0x0, 0x22, &(0x7f0000000080)="6ca33155c25900309ef2faa80c2237677ca395a385a1adfa153a2682d5db8b7d5437a4a38603e98edcc71eb2efcf2898c3798b6da2aedc870e5ef87f2fa0ebac0c5e7d1f9a5a8c2d0ca6e707015c4147d29a77a12f00e8b9e37c3bd777ce54186110814d30061e5ea71d7a2d86fc44205eaf13fc46b70446120cfe20c58077e1b3f17ca71568ec92c2bac3bbbfb34d4f6343daad03aad6533b7d5bf0d877d1dbcd7101ab075ee8a943a0bb4c1366f102856ada8e56bc53e231e6bd647131a251ec994eb0", {0x1, 0x76, 0x31363553, 0x5a5243f2629973a6, 0x5f490beb, 0x5, 0x3, 0xffffffff}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r1, 0x0, 0x0, 0xc, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000240)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) socket$inet_tcp(0x2, 0x1, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, 0x0, 0x25, 0x0, @void}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001540)={@ifindex, r4, 0x1d, 0x8, r4, @void, @value=r5, @void, @void, r9}, 0x20) 4m26.228881912s ago: executing program 4 (id=8547): syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xfffffffc, 0xffffffa6, 0x1, 0x7}) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000000c0)='vxfs\x00', 0x0, 0x0) fsopen(&(0x7f0000000180)='ecryptfs\x00', 0x0) ioctl$TIOCSRS485(0xffffffffffffffff, 0x5437, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) r2 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffff9c, &(0x7f0000000200), 0x561080, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa00e7ffffff0086dd600a84351014060000000000000000000000000000000001fe800000a5cb29518249a8cc99fd400000000000000000000000aa0056205a8c502d0e2ada2f957e91e831beb103dc25ed9db0331468a468ed7d3aeb74f48586c10e509f0700163e944ec4ea557cd220a5b668fc07558e1780cae422c514b2e962c447809cb2bf8613ecb381706d41725161ee3f7b76d0df2754590e5d14f9ab97ae3f9ccde7b0447336721b00", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000540)="31c607397ac898386971a88bc05ceac818467a8954073fc17e107f4e971c969bb3a889bfbded4febf7c85a3c8fe20b698ea450e61e6683ad2dfa45719cfc97dc552717d6fb0f133fea6d180245e91faa9a031903760cba8a285b648eb8df96a8d6256bcceeb2a338b7edbe6a8871d1e1648a92fcd89f241cf97b2d79586c5d7d0b2c74323e243fa5369e1d977646ce71d46a840e41ea6194164ca500bb23715d795d2731afa997b88e058062442c388cca2fca8c715d00b897b6c589fd63482d92f2bf89a386d8bb2e8192f6ebc07d3d9a8e2dd5238fd95e1431cc7b1ae3aa", 0xdf) writev(r1, &(0x7f0000000a40)=[{&(0x7f0000000040)="9de24dfccd00", 0x6}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000140)) syz_open_procfs(0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000380)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x2}, 0x1c) sendmmsg$inet(r6, &(0x7f0000000000)=[{{&(0x7f00000003c0)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="100000000000001907000000"], 0x10}}], 0x1, 0x4048850) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) 4m26.175857742s ago: executing program 3 (id=8548): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800"], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)={0x18, 0x44, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}}, 0xc000) socket$igmp6(0xa, 0x3, 0x2) 4m24.217621011s ago: executing program 2 (id=8549): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930000000000000000000004433836e3f12c647b8b3a5389c4d9bc67cf712874ee61df0a3f11f3d1c173ab0062c018ce436b70f7a68f74faa94499fd72c8158071a5c96d3c1f12ba0abe3b795a299c6a3724a72b26b3885a1e918639ed797f87326831f51e299d2fb11f5854ae3"], 0x3c}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x4048011}, 0x40d0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r6 = dup(r5) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x28, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r8, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40046607, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r11, 0x0, 0x485, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r6, 0x7478b000) socket$tipc(0x1e, 0x2, 0x0) madvise(&(0x7f00000a6000/0x2000)=nil, 0x2000, 0x9) 4m23.391367512s ago: executing program 4 (id=8550): r0 = socket$netlink(0x10, 0x3, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) shutdown(0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xf, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a02fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000000000001d440000000000006b0a04fe000000007203"], 0x0}, 0x94) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto$packet(r1, &(0x7f00000001c0)="4abb09e698", 0x5, 0x40004, &(0x7f00000002c0)={0x11, 0x3, r2, 0x1, 0x5, 0x6, @multicast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000000)=0x11) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x20000003}) close_range(r7, r5, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x4, &(0x7f0000000180)=0x4764, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) 4m14.135624907s ago: executing program 54 (id=8543): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x248, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000000}, @TCA_RATE={0x6, 0x5, {0x87}}, @TCA_RATE={0x6, 0x5, {0x7, 0x2}}, @qdisc_kind_options=@q_mqprio={{0xb}, {0x1bc, 0x2, {{0x2, [0x2, 0x2, 0xb, 0x2, 0xc, 0x8, 0x8, 0xd, 0xd, 0x7, 0x8, 0xd, 0x8, 0x8, 0x9, 0xc], 0x1, [0x40, 0x9, 0x101, 0x4, 0x4, 0x2, 0x2, 0x6, 0x5, 0x0, 0xfe09, 0x6d, 0x3, 0x4, 0xf, 0xfe00], [0x6, 0x8, 0x100, 0x6, 0xe0, 0x6, 0x0, 0x2, 0xd37f, 0xd12f, 0x401, 0x9, 0x5, 0x7fff, 0x3, 0x94d]}, [@TCA_MQPRIO_MAX_RATE64={0xc4, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x147}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0x1e}, {0xc, 0x4, 0x6}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0x6}, {0xc, 0x4, 0x53}, {0xc, 0x4, 0x9f}, {0xc, 0x4, 0xfffffffffffffffb}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x6}]}, @TCA_MQPRIO_MAX_RATE64={0xa0, 0x4, 0x0, 0x1, [{0xc, 0x4, 0xffffffffffffff3a}, {0xc, 0x4, 0x5}, {0xc}, {0xc, 0x4, 0x1906}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x75ac}, {0xc}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0xffffffffffffffff}, {0xc}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x9}]}]}}}, @TCA_STAB={0x4}]}, 0x248}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r3, &(0x7f000000cbc0)=[{{&(0x7f0000005d80)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc0}}, {{&(0x7f00000087c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000040}}], 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000043c0)=@delchain={0x230, 0x65, 0x100, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xa, 0xffff}, {0xb, 0xfff1}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x18, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_ACT={0x4}]}}, @filter_kind_options=@f_u32={{0x8}, {0x1dc, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1_to_hsr\x00'}, @TCA_U32_SEL={0x1a4, 0x5, {0xf, 0x0, 0xf8, 0x0, 0x0, 0x3, 0x6, 0xc12, [{0xffff, 0xffffffa6, 0x7fffffff}, {0xa, 0x9, 0x1, 0xffffb245}, {0x7fff, 0x9, 0x1, 0x9}, {0x4, 0x6, 0x4, 0x81}, {0x9, 0x101, 0x5, 0x400}, {0xee5, 0x6, 0x0, 0x1}, {0xf, 0x1, 0x9}, {0x9, 0x7, 0x2, 0x7}, {0x8, 0xffff, 0x8, 0x100}, {0x8, 0xb, 0x2, 0x3}, {0x80000000, 0xf, 0xe, 0x5888}, {0x7d7, 0x1, 0x6, 0x101}, {0x2, 0xfff, 0x8, 0xfffffbff}, {0x480000, 0x8001, 0x101, 0x6}, {0x4, 0x2, 0xe, 0x7}, {0x80000001, 0x6, 0x9, 0x8}, {0xb, 0x68, 0x6, 0x1e2}, {0x5, 0x2, 0x5, 0x4}, {0x0, 0x7, 0x0, 0x8}, {0x2, 0x9, 0x2, 0x1ff}, {0x0, 0x0, 0x1, 0x97}, {0x4, 0x6, 0x1, 0x7}, {0xb, 0x7, 0x6, 0xfffffffe}, {0x81, 0x6, 0x8, 0x2}, {0x2, 0xd, 0x2, 0xffff7fff}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x6, 0x2}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x8b}, @TCA_U32_DIVISOR={0x8, 0x4, 0x89}, @TCA_U32_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x230}}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r7, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1}, 0x4005) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) r10 = userfaultfd(0x80001) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_WRITEPROTECT(r10, 0xc018aa06, &(0x7f0000000200)={{&(0x7f000030b000/0x3000)=nil, 0x3000}, 0x100000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) creat(&(0x7f0000000600)='./tracing/dynamic_events\x00', 0x118) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 4m10.948181449s ago: executing program 55 (id=8548): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800"], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)={0x18, 0x44, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}}, 0xc000) socket$igmp6(0xa, 0x3, 0x2) 4m8.990715331s ago: executing program 56 (id=8549): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930000000000000000000004433836e3f12c647b8b3a5389c4d9bc67cf712874ee61df0a3f11f3d1c173ab0062c018ce436b70f7a68f74faa94499fd72c8158071a5c96d3c1f12ba0abe3b795a299c6a3724a72b26b3885a1e918639ed797f87326831f51e299d2fb11f5854ae3"], 0x3c}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x4048011}, 0x40d0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r6 = dup(r5) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x28, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r8, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40046607, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r11, 0x0, 0x485, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r6, 0x7478b000) socket$tipc(0x1e, 0x2, 0x0) madvise(&(0x7f00000a6000/0x2000)=nil, 0x2000, 0x9) 4m7.75708064s ago: executing program 57 (id=8550): r0 = socket$netlink(0x10, 0x3, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) shutdown(0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xf, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a02fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000000000001d440000000000006b0a04fe000000007203"], 0x0}, 0x94) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto$packet(r1, &(0x7f00000001c0)="4abb09e698", 0x5, 0x40004, &(0x7f00000002c0)={0x11, 0x3, r2, 0x1, 0x5, 0x6, @multicast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000000)=0x11) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x20000003}) close_range(r7, r5, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x4, &(0x7f0000000180)=0x4764, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) 1m34.664166344s ago: executing program 9 (id=8613): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x40000000200, 0x301) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x2008800, &(0x7f0000000640)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000002100)={0x2020}, 0x2020) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xa8f86, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x8840) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) fanotify_mark(0xffffffffffffffff, 0x105, 0x10000839, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3f) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4, 0x30}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x4) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x100000, 0x84, 0x0, 0x0, 0xb7, 0x200, 0x0, 0x3ff, 0x20000, 0x0}) 1m31.081966335s ago: executing program 9 (id=8617): openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0x1, @mcast2, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x101}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)={0x20c, 0x2b, 0x107, 0x70bd2d, 0x0, {0x5, 0x7c}, [@nested={0x1f5, 0x131, 0x0, 0x1, [@nested={0x4, 0xb4}, @generic="5f95beae5bf88a035f1d4140d2a99b845b54ed4855860c074fc05b100e928b0a08cc5254fa0a481673d85f7026745f40c7b88e0566a432b12829152bded9a4f5bf6a52f1b4066c67150b39fb6b8876f2737dac875d317c89ded36353b67f14eb4b7e5df5fbe48297f472855d5a9e20fbbfc71e5c20391d1b8f6736204449c9a94dd753f7f7cfe4968c6c963b", @typed={0x14, 0x14d, 0x0, 0x0, @ipv6=@local}, @generic="126561ce93549f60f6ca8b8026fda9aa12eb681ee5af3e3fcf9746ccdeafaa92a18a853581edf0264611fb435af1c36cbbeb132d9714cd408cd5a288a7014c3142c520b8ac9e1832c8d722db0f8aa6b2a1015b745b86d0b4fe26891ab72b2eb8bd447162c1a939605e4985c6242ee95e535977118bf3101ab67ef593172292b829acc990f7342a114f3434e003cf5ee3baae02e00ce477cc94a4a54fbe48699853f64cfc44d7b523255690", @generic, @generic="5b69d68a307379256253849214cd52aefd296f4ee24b843dcf0750f03058acdee0696b606b11d08847d07e387c4603e27dbc6cc93070568c6f771b013fc230185282a8d8541649b602c052a0456c06bb09fcc470ecf2b718ac6428e409b4404e081c7f3478def50ca6525e056d03f8dd9cb42b7e52238aabc02fafc27ffc311afbf3e7122fea8ed28945948255b69c0d2a640a3231e3632dc9882e14984503c9cd7c"]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x488c4}, 0x20000804) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000200)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) recvmsg(r1, &(0x7f0000000780)={&(0x7f0000000240)=@rc={0x1f, @none}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000400)=""/122, 0x7a}, {&(0x7f0000000480)=""/195, 0xc3}, {&(0x7f0000000580)=""/137, 0x89}], 0x3, &(0x7f00000006c0)=""/191, 0xbf}, 0x141) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec779000) r5 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$comedi(0xffffff9c, &(0x7f00000007c0)='/dev/comedi5\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r6, 0x8b1b, &(0x7f0000000000)={'wlan0\x00', @broadcast}) 1m29.672117161s ago: executing program 9 (id=8621): pidfd_send_signal(0xffffffffffffffff, 0x30, &(0x7f0000000140)={0x11, 0x4, 0x6}, 0x0) syz_open_dev$admmidi(&(0x7f0000000000), 0x80, 0x130c42) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x12, 0x8c, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000019}, 0x8080) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, &(0x7f0000000b80)={{&(0x7f0000000640)=[{0x627a, 0x5, 0x7fffffff, {0xf99, 0x81}, 0x92a, 0x9, 0x9}, {0x8000000000000001, 0x9, 0x7, {0x10001, 0xba1}, 0xb, 0x3ff, 0x5}, {0x6, 0x6, 0x8, {0xa, 0x5}, 0x1, 0x87, 0x101}, {0x77f8, 0x3, 0x80000000, {0x94, 0x4}, 0x370, 0x8, 0x100}, {0x8c1f, 0xfffffffffffffffe, 0x3, {0x7}, 0x44, 0x8, 0x9}], 0x5, 0x40, 0xfb, 0x6}, {&(0x7f00000007c0)=[{0x1cab, 0x3}, {0xd2f0, 0x3afb}], 0x2, 0x10, 0xe, 0xffffffff}, {&(0x7f0000000880)=[0x800, 0xfffffffffffffff7, 0xff, 0x9, 0x7fffffff, 0xe, 0x5, 0xfffffffffffffff9], 0x8, 0x8, 0x4, 0x4}, {0x0, 0x0, 0x28, 0xf}, {0x0, 0x0, 0x8, 0x7, 0x5927}}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r4, 0x9) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r5, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f00000001c0)={{0x3, 0x200, 0x85c2, 0x1, 0x0, 0x4}, 0x348, [0x1, 0x84, 0x1, 0x9, 0x3, 0x9, 0xff, 0x7, 0x7, 0x0, 0x7, 0x5, 0x9c, 0x3, 0x6, 0xb9, 0x4, 0x6, 0x6, 0x7, 0x8, 0x8, 0x9, 0x1, 0x4c1b, 0x3, 0x7, 0x9, 0x4, 0x8295, 0x80000001, 0xb5, 0x8, 0x7, 0x8, 0x6, 0x7fffffff, 0x9, 0x1, 0x2, 0x4, 0x8, 0x2, 0x5, 0x81, 0xcc88, 0x2a6f, 0x10000, 0x6a, 0x0, 0x17, 0x800, 0xfc, 0x8, 0x2, 0x400, 0x0, 0xb22, 0x6, 0xc9a, 0xfff, 0x401, 0x8, 0x9c7d, 0x5, 0x0, 0x6, 0x7fff, 0x1000000, 0x3, 0xffff8382, 0x7fffffff, 0x1ff, 0x6, 0x9, 0x8, 0x0, 0xfffffffa, 0x8, 0x8c, 0x7, 0x400, 0x2, 0x2, 0x10, 0x6, 0x8000, 0xd3, 0x7f, 0x16cf, 0x1, 0x8, 0x2, 0xd7b, 0x9, 0x7fff, 0xffffff5c, 0x1, 0x666, 0x0, 0x8, 0x7, 0x3, 0x3, 0x3, 0x1, 0x4, 0x368, 0x8, 0x3, 0x580, 0x2, 0x6, 0x10, 0x70955bc4, 0x1, 0x2, 0xfffffffb, 0x2, 0x2, 0x3, 0xfffff38f, 0x2, 0xa000000, 0xeb, 0x5b2, 0x4, 0x960, 0x6, 0x79, 0x3, 0x30, 0x3, 0x7, 0x1, 0x7fff, 0xf2, 0x5, 0x7, 0xff, 0x4, 0x3, 0x12e4, 0x3, 0x0, 0x101, 0x200, 0x7, 0x40, 0x0, 0x1, 0x3, 0x2, 0xffffff00, 0x702, 0x7, 0x800, 0x81, 0xfffffff7, 0x7, 0x1, 0xd, 0x40, 0x10000, 0x3, 0xffffffff, 0x23db, 0x6, 0x0, 0x5, 0x7, 0xffffffff, 0x4, 0x7, 0x6, 0x2, 0x200040, 0xb7, 0x6, 0x638, 0x0, 0x800, 0x6, 0x6, 0x0, 0x8, 0x7, 0x2, 0x8, 0x2, 0xfffffffb, 0x2, 0x80, 0xffff7fff, 0x4, 0x200, 0x7f, 0x1, 0x5, 0x9, 0x1, 0xfffffffa, 0xc, 0x50c2, 0xc1ed, 0x401, 0x3, 0x7, 0x101, 0x800, 0x5, 0x5, 0x8, 0x1, 0x1, 0xfffffff8, 0xe9, 0x1, 0x7f, 0x7ff, 0x0, 0x7, 0xac, 0x80000000, 0x81, 0x80000001, 0x2, 0x80, 0x3ff, 0xa639, 0x0, 0x53647e6f, 0x2, 0xd792, 0x14b, 0x4, 0x3, 0xb36, 0xa, 0x1, 0x4, 0x94, 0x5f, 0x1, 0x8, 0xd8, 0x7fff, 0xf, 0x400, 0x7f, 0x80000001, 0xd08, 0x2, 0x1, 0x6, 0x9, 0x7d9, 0x1, 0x3, 0x3, 0x8, 0x6, 0x400, 0x86, 0x2, 0x1000, 0xbdf6, 0x41bf, 0xc, 0x2487005d, 0x2, 0x1, 0xaa1, 0x6, 0x80000001, 0x9, 0xe, 0x2, 0x0, 0x4, 0x401, 0x5, 0x87a0, 0xffffffff, 0x5, 0x3, 0xf, 0x7fffffff, 0x0, 0x8d, 0xe, 0x3, 0xb6, 0x5, 0x9, 0x100, 0xfff, 0x10, 0x1, 0x6, 0xb7, 0x7, 0xfffffffa, 0x4, 0x5, 0x81, 0x6, 0x5, 0xdcdf, 0x7ff, 0x9, 0xffffffe3, 0x1ff, 0x3, 0xf1c, 0x8021, 0xffffffff, 0x70, 0x10000, 0x7, 0x4, 0x1, 0x0, 0x4, 0x7aed, 0x4, 0x8, 0xe, 0xffffffc0, 0x8b7, 0x5, 0x5, 0x200, 0x40, 0x3ff, 0x4, 0x0, 0xa, 0xc, 0x7, 0xe324, 0xf, 0x7, 0x97a, 0x7fff, 0xffffffff, 0x8, 0x7, 0x40000000, 0x7, 0x6, 0x7, 0x6f007526, 0xa, 0x80000000, 0x0, 0x200, 0xaeb, 0x315c, 0x9, 0x1000, 0xd, 0x5, 0x0, 0xf0f, 0x6, 0x20, 0x2, 0x9, 0x2, 0x9, 0x4, 0x6, 0xb37, 0x8, 0x5, 0x8, 0xa6b7, 0x10001, 0x2, 0x1, 0xf, 0x8, 0x8, 0x3ff, 0x1, 0x4, 0xbe, 0x1, 0x10001, 0x7fa, 0xe7ad, 0x4, 0x2, 0x6, 0x81, 0x10000, 0x3, 0xbd7, 0x71e5119d, 0x62, 0xffd, 0x5, 0x6, 0x4, 0xc, 0x3, 0x7, 0x400, 0x4, 0x400277e, 0xe1, 0x3, 0x4, 0x3, 0x4, 0x6, 0xbf, 0x7, 0x6, 0x8, 0x5, 0x3ff, 0x9ad9, 0x8, 0x1, 0x0, 0x3, 0x400, 0x2, 0x9, 0x6, 0x40, 0x1000, 0x82, 0x4, 0x1000, 0x8, 0x3d, 0x2, 0xe, 0x4, 0x3, 0x1, 0x4, 0x8, 0x10, 0x6, 0x9, 0xffffffff, 0x10, 0x0, 0x1, 0x9225, 0x3be, 0xd, 0x401, 0x81, 0x13, 0x5, 0x3b1, 0x1, 0x9f18, 0x2, 0x8f86, 0x417db73f, 0x7, 0x1, 0x7, 0x5, 0x3, 0x6, 0x7, 0x0, 0xd, 0x0, 0x7, 0x7, 0x2, 0x8, 0x5, 0x0, 0xab, 0x5, 0x94, 0xb3ab, 0x5ae, 0x2, 0x40, 0x5, 0x0, 0x8001, 0x8, 0x800, 0xb, 0xa4, 0x50, 0x8, 0x99, 0x10, 0x5, 0x100, 0xfffff800, 0x5, 0xca, 0x3, 0x4, 0x6, 0x7ff, 0x6e15d2ec, 0x7, 0x5, 0x8, 0x7ba, 0x21c0, 0xe64, 0xc, 0x7, 0x6d4, 0x5, 0x3, 0x7fff, 0x121, 0x9, 0xe6d8, 0x1000, 0x1ff, 0x42db5dac, 0xffff, 0x6, 0xfffffff8, 0x3ff, 0xfcf, 0x1000, 0x7, 0x2, 0x2, 0x6, 0x7, 0x2, 0x7, 0x80000001, 0x7, 0x8, 0x7, 0xfffff000, 0xfffffffe, 0x5, 0x5, 0x7, 0x80000001, 0x4, 0x2, 0x53f, 0x8, 0x6, 0x0, 0xffff7ff8, 0x6, 0x8, 0x9, 0x8, 0x6d, 0x48, 0x8001, 0x1, 0x1, 0x2e7a, 0x8, 0x4, 0x10000, 0x5, 0x1ff, 0x1, 0x8, 0xfffffffd, 0xc217, 0x6, 0x59a, 0x2, 0x3, 0xba7a, 0x6d9c7f55, 0x4, 0x9, 0x1000, 0x3, 0x10001, 0x2, 0x2, 0x7, 0x6, 0x2, 0x1, 0x27a, 0x9, 0x2, 0xde26, 0x99, 0xfffffffe, 0x5, 0x1, 0xdba4b27, 0x6, 0x100, 0x0, 0x9, 0x7, 0x1, 0x7ff, 0x0, 0x2, 0xffff9369, 0x4, 0xff, 0x6, 0xed1, 0x6, 0x0, 0x3, 0x80000001, 0xe, 0x9, 0x1, 0xffff, 0x6, 0x9, 0x4, 0xef3, 0x1, 0xfffffffb, 0x7, 0x40, 0x6, 0x4, 0x9, 0x7f, 0x5, 0x1, 0x3, 0x2, 0xc15e, 0x6, 0x0, 0x6, 0x8, 0xffffffff, 0x8, 0x401, 0x0, 0x10, 0x3, 0x2, 0x4, 0x50d, 0x3, 0x4b, 0x7, 0x0, 0x2, 0x75, 0x80, 0x1, 0xdb, 0x401, 0x5, 0x1, 0x3, 0x6, 0xbf0d, 0x18, 0x1, 0x5, 0x95, 0x7fff, 0xe7, 0xa, 0x4, 0x0, 0xffffff16, 0x10, 0xae25, 0x908, 0x78e, 0x6, 0x1, 0xb2b7, 0xc, 0x7, 0x0, 0x5, 0x9, 0x8, 0x73, 0x9, 0xfffffffe, 0x5df, 0x1, 0x7, 0x81, 0xffffffaa, 0x3, 0x6, 0xd, 0xffffc4e6, 0xffff0001, 0x0, 0x5, 0x10001, 0x2, 0x3, 0x0, 0x6, 0x4, 0x3, 0x8, 0x3, 0x8, 0x5, 0x3, 0xc3f, 0x0, 0x2, 0x6, 0x6, 0xaed, 0x4, 0xed4, 0x7, 0x7, 0x8, 0xff, 0x8001, 0x5, 0x9, 0x4, 0xc2, 0x80000000, 0x80000000, 0x4, 0x8, 0xab84, 0xb4, 0xfffffc00, 0x908b, 0x8, 0xc9, 0xfffffffe, 0x1, 0x3, 0x8, 0xfffffffb, 0x0, 0xf8, 0xfffffff0, 0x637, 0x6, 0x4, 0xa, 0x80, 0xfffffff9, 0xfffffb6f, 0x0, 0x120e, 0x7, 0x0, 0x6, 0x2, 0x1000, 0xa, 0x6, 0x2, 0xd, 0x3ff, 0x5e18, 0xf, 0x9ebe, 0x7, 0x2, 0x1, 0x7, 0x7, 0x9e, 0x8, 0xedd3, 0x9, 0x1, 0xffffffff, 0x5, 0x1ff, 0x8, 0x1, 0x5, 0x2, 0x40, 0xe, 0x4, 0xc, 0xc65, 0x40, 0x7, 0xbb7d, 0x10, 0x2, 0x1ff, 0x8, 0x6, 0x80, 0x2, 0xf, 0x7, 0x80000000, 0x6e0, 0x1, 0x5, 0xd1, 0x9, 0x8, 0xfffffe00, 0x0, 0x1, 0x4, 0xe449, 0x4, 0x40, 0x10, 0x1000, 0x0, 0xca, 0xffff, 0x10001, 0xfffff891, 0x2, 0xfe, 0x200, 0xffffff81, 0xfffffff8, 0x4, 0x101, 0x68f0, 0xbfb, 0xdfe2, 0x0, 0x4, 0x9e74, 0x8, 0x7, 0x3ff, 0x80, 0xde7, 0x5, 0x51, 0x0, 0xb, 0x3, 0xad, 0x8, 0x2, 0x1, 0x8000, 0x4, 0x7, 0x8, 0x4, 0x10, 0x80000000, 0x6, 0x1400000, 0xf7, 0x8, 0x81, 0x4, 0x6790, 0x9, 0xfa6, 0x400, 0x7f, 0x3ff, 0x4, 0x2, 0x9, 0x6, 0x9107, 0x1, 0xcac, 0x40, 0x7, 0xc, 0x1, 0x5, 0x7, 0xb923, 0x2, 0xffff3818, 0x3, 0x1, 0x5, 0xe39, 0x4, 0x6, 0x7ff, 0xfff, 0x5, 0x5, 0x1, 0x101, 0xfffffff9, 0x3, 0x1, 0x400, 0xe59, 0x6, 0x8, 0x3ff, 0x6, 0x3ff, 0x9, 0x2, 0x6, 0x12dd, 0x0, 0x10, 0x6, 0x40, 0x0, 0xffffff80, 0x3, 0x0, 0x1, 0x7, 0x997, 0x7, 0x7fffffff, 0x81, 0x1, 0xe, 0x7e, 0x9, 0x3, 0x5, 0x7c, 0x4, 0x9, 0x3, 0x0, 0x1ff, 0x4, 0x926a, 0x9, 0x6, 0xea, 0x9, 0x9, 0xc0000, 0xf4d, 0x80000001, 0x1, 0x2, 0x1, 0x3, 0x7fff, 0x3, 0x1, 0x5851, 0x9fc, 0x0, 0x6, 0xcf4, 0x6, 0x1, 0xffb8, 0x0, 0x10001, 0x7, 0x8, 0x7b, 0x6, 0x89, 0xfffc0000, 0x9, 0x1, 0x4, 0xb, 0x9, 0x3, 0x5, 0xc2, 0x5, 0x2, 0x9, 0x3, 0x2c33, 0x5, 0x4, 0x0, 0x5, 0x9, 0x1, 0xa, 0x819, 0x5, 0x4, 0xeaa8, 0xb, 0x5, 0x8000, 0xffff, 0x8, 0x7fff, 0xe, 0x3, 0x6, 0xffffffff, 0x7, 0xba, 0x1, 0x2, 0xc7c, 0x8, 0xdc, 0x3, 0x5, 0x9, 0x1]}) r6 = openat$vicodec0(0xffffff9c, &(0x7f0000000440), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f909, 0x8002, '\x00', @p_u16=&(0x7f00000010c0)=0xa5b}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x66) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000000000), 0xb97a, r7}, 0x38) 1m19.62515721s ago: executing program 9 (id=8635): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat$vmci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="66ee837b6ac1477b0d5a566416626eb08b2d8371625d0f695145c8e69baec57349c1a5ac4a7df2ace236b072fdd124cdb5622b559ec773b14b9388345c22235d6e3f212e3485f61bc94b2d3f01065e662f31dc04ba26792da41dddb443613f52b3c8e160f5e724bf64168cb8b36536aa15ee6c52c0c52623b975770e"], 0x7) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x24, &(0x7f0000000800)=ANY=[@ANYBLOB="00110200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9aaa}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$I2C(&(0x7f00000000c0), 0x3, 0x8200) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x5a) syz_open_dev$loop(&(0x7f0000000500), 0x4, 0x129000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40008) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x14, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r4, &(0x7f0000000040), 0x2) close(r4) write$cgroup_int(r3, &(0x7f0000000000)=0x1, 0x12) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000005f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timerfd_create(0x8, 0x0) 1m18.127045468s ago: executing program 9 (id=8636): socket$netlink(0x10, 0x3, 0x5) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="1b551cf9ffffff00000000000000"], 0x14}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="9f5f2f56d339e31d70bfe9d14877f638465a17c911107da67d90dced5cae6123822d37d143624809b785d5b4190825b9ad50b739e7f5", @ANYRES16=0x0, @ANYBLOB="080027bd7000fedbdf251300000005000300b40000000c0009000200aaaaaaaaaaaa06000800ffff00000c0009000200aaaaaaaaaaaa0c0009000201aaaaaaaaaaaa0c0009000200aaaaaaaaaaaa"], 0x54}, 0x1, 0x0, 0x0, 0x80e4}, 0x8d1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0/dev0/alua/default_tg_pt_gp/alua_access_type\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='invalid\x00', 0x8) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @window={0x3, 0x80, 0x101}, @sack_perm, @mss={0x2, 0x3ff}], 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000340)='scalable', 0xfffd) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f00000000c0)={@host, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9, 0x10000000}) brk(0x55555ede6001) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x6, 0x21, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) 1m14.709574883s ago: executing program 9 (id=8640): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r7, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_usb_disconnect(r6) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000020feffff720af0fff8ffffff71a4f2ff000000001f03000000000000e5000200000000002604fdffff0200007b010000000000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003800000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e0c01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cd93263ff755d611c4cca1684b14708f6a83366aa430ad2d700b186da622d6fba700000000000000000000000002000000000000f2badf9815c5000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xd1, &(0x7f0000000000)=""/209, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x36) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x4e4, 0x0, 0x0, 0x148, 0x0, 0x148, 0x450, 0x240, 0x240, 0x450, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@unspec=@mark={{0x2c}, {0x400, 0x4}}, @common=@inet=@recent0={{0xf4}, {0x20000000, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xff000000, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0xa, 0x2, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xbb02, 0x2b, 0x10, 'syz1\x00', {0x6182}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x540) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0xffffffffffffff2c) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}}, 0x4000) 1m0.92630294s ago: executing program 58 (id=8640): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r7, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_usb_disconnect(r6) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003800000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e0c01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cd93263ff755d611c4cca1684b14708f6a83366aa430ad2d700b186da622d6fba700000000000000000000000002000000000000f2badf9815c5000000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xd1, &(0x7f0000000000)=""/209, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x36) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x4e4, 0x0, 0x0, 0x148, 0x0, 0x148, 0x450, 0x240, 0x240, 0x450, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@unspec=@mark={{0x2c}, {0x400, 0x4}}, @common=@inet=@recent0={{0xf4}, {0x20000000, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xff000000, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0xa, 0x2, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xbb02, 0x2b, 0x10, 'syz1\x00', {0x6182}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x540) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0xffffffffffffff2c) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}}, 0x4000) 22.982138955s ago: executing program 8 (id=8709): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0x2c58, 0x80, 0x20002, 0x16c}, &(0x7f00000000c0)=0x0, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, 0x0, r4, &(0x7f0000000980)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) syz_ublk_add_dev(r2, r3, 0x0, r4, &(0x7f00000031c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003180)=@any_dev={0x1, 0x881, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x14}}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xc8) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x4c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x30}}, 0x0) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) close(r5) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x43, 0x8}, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0xe, 0x2, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x20, 0x20, 0x2, 0x9}}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x1, 0x4, 0x32, 0x1, r9, 0x7, '\x00', r10, r1, 0x3, 0x0, 0x3, 0x2}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 19.23102989s ago: executing program 5 (id=8715): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="000128bd7000fedbdf25090000002800028008000200020056370080080001020000000014000380080002000700000008000100080000008a2c289c75a3418affed036a69c7f3a45d3a563400"/89], 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x24040821) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000001c0)={0x200000, 0x200004, 0x0, 0x0, 0x0, 0x5}) r0 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "4cf90fba85c830e42a3ca4b10f01bbcb15f3806c4853e7c44a6974759d9f643905a56baa4195fb396d9bfa306999f1586e5d1ca49add100a36b751a7d9fe0b182ebf2c8a0e66f72c1c08260030752f07cd4089473e52885a3c85bacf3ccfac5bb9435fe036dcfccd7254bbd8bce90e2284d29e1f17d6652270fd0abcb8729f16ff602b438bd122a9e09984e2799d0dbfef7533d1a930ea4f4b57605ace45f5815450693650ae122d34aa0c5ca5e793516d156e5a5b34d6c17c40d753426a3d8e15e726d0f2622e873e0cbe63751bb62c68594d4cb0a21b92ad2e80f24a9b290a87ee6779022a0b7f5223e4e8c9f53f501ec8c439724078fdc076a51d50760566"}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r3) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000000)) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$F2FS_IOC_GET_FEATURES(r1, 0xff06, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x11, 0x2, 0x0) 19.068177117s ago: executing program 8 (id=8716): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x300, 0xd3, 0xdd, 0x71, 0x10, 0x46d, 0xa0e, 0x61f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x2, 0x0, 0xdc, "", [{{0x9, 0x4, 0x39, 0xd3, 0x0, 0x3, 0x0, 0x0, 0x9}}]}}]}}, 0x0) r1 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2d0e00) r2 = io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x4008272, 0x1, 0x3, 0x288}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000400)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) r3 = io_uring_setup(0x7fd, &(0x7f0000000080)={0x0, 0xed43, 0x10000, 0x3, 0x1f9, 0x0, r2}) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000004c0)={0x0, 0x0, 0x9, 0x7ff, @vifc_lcl_addr=@local, @multicast1}, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r2], 0x1) writev(r1, &(0x7f00000033c0)=[{&(0x7f0000000340)="7911e0b785cfe06b506424e201dd38db098daf8367cf5afae31051c923197d7558f7ecd84ea11cf3dc9a5d53523c1ae332b02fb899e07f0751f692071c7154ba69bbc7b25a35977212f9c0e46bd1f92248426115ba6caf5006b065ef9e8554d8574e828f758951da414b963fd69d4940d2ea4b0d0d2e7981b875cfc26597e9e0a289a52155c7fb0ec94e91fff501362458c59bda5f25f345c5c6f2c734e53c17ca0e6da52ab4a6f58006af0e8c9efc123315f43bb5e8cb039588866803c1a7817baeb2a6f93f", 0xc6}, {&(0x7f00000023c0)="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", 0xf3b}], 0x2) r6 = socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700", 0xd) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r7 = fsopen(&(0x7f00000001c0)='hpfs\x00', 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001dc0), 0x2, 0x0) r9 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r9, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x5) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r11 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, 0x0, {0xd, 0x7}, {0x8, 0x1}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x44080) ioctl$UI_ABS_SETUP(r8, 0x401c5504, &(0x7f0000001e00)={0x1, {0x1, 0x9, 0x200, 0xfff, 0x8001, 0x3}}) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='source', &(0x7f0000000400)='//\xf2/\x06\b\xa30\\\\\xea\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0x0}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) r6 = socket(0x10, 0x4, 0xffff8001) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'macvlan0\x00', @multicast}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newtclass={0x78, 0x28, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff3, 0xfff2}, {0x0, 0xf}, {0xfff1, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x10}}, @TCA_RATE={0x6, 0x5, {0x3, 0xa3}}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @TCA_RATE={0x6, 0x5, {0x7, 0x3}}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @tclass_kind_options=@c_sfq={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r9 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r9, 0x1000006) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r6) fcntl$addseals(r9, 0x409, 0x7) r10 = ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000000)={r9, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f0000000580)=0x1) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) close_range(r11, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x2}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000340)={r12, 0x9}, 0x8) r13 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r13, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r2, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x1}], 0x1}, 0x4004003) 17.240974585s ago: executing program 6 (id=8721): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x288082, 0x52) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000400)={0x0, 0xf20f, 0x40, 0x3, 0x1b}, &(0x7f0000000100), &(0x7f0000000200), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101401, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x9, 0x0, 0x1000004, 0x1, 0x10000, 0xfff7ffa8, 0x7ffffffd, 0x1ef, 0x1, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) unshare(0x26020480) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) fchdir(0xffffffffffffffff) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) 17.100180204s ago: executing program 1 (id=8722): move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) membarrier(0x10, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x24004014) openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r6, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x64}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 14.335345315s ago: executing program 6 (id=8723): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00') fchdir(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(r1, &(0x7f0000000280)='net/ip_vs_stats\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}], 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x19, 0x19, 0x5}}]}}]}, 0x44}}, 0x4008000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@redirect_dir_off, 0x3a}], [], 0x2f}) open_tree(0xffffffffffffff9c, &(0x7f0000001840)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x81100) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x2a694b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) 13.857444023s ago: executing program 5 (id=8724): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0xd, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0x1f, 0x6, 0xca11, 0xffff}}, @TCA_GRED_LIMIT={0x8, 0x5, 0xe6}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000772904202404019957c201020301090210000904430002"], 0x0) syz_usb_ep_read(r4, 0x5, 0xb4, &(0x7f0000000200)=""/180) syz_usb_control_io(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000800000000000000000000000850000000e000000850000000700000095"], &(0x7f0000000680)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r6, 0x0, 0xe, 0x0, &(0x7f0000000d00)="e87b7385eb488997050a35a3e13f", 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a32000000000300078008001240000000000500050002000000050001000600000016000300686173683a6e65742c706f72742c6e6503000000"], 0x5c}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) personality(0xfe47fef9f5ff7379) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r10 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r9, 0x917, 0x70bd28, 0x0, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r10}]}, 0x3c}, 0x1, 0x620b}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x14, r9, 0x400, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1b0bedcfedaa5e5f0f32b07fdb2d0f69fd422a29dd09fbe23bcb00d678633835742bdb8ce4fb4681f8ee21778703f98106c028bb7884de7797249e6b19185dbf68e0d5d9a13ca3e911d9c1394d93caba83465a5f7444ed6c03d1602fb5c02572e80d1c268c9b11c87a93550f3846082ee66d0f1edbb0dbfc772de8e59b8b9aa1a4bee7f50beb9534b8720cbf1790a59123cdd66b861aa4a5a289483327f2b65b8aff792089ddd585ec2a700782e594e56a10415e76eec99bf1b88d2f234db95be6aa", @ANYRES16, @ANYBLOB="000227bd700000dcdf251800000094000280080002000800000024000380080002000c0000000800010006000000080002000600000008000100ff0300001c000380080001006a000000080001000600000008000200080000000400040008000100faffffff3c0003800800010008000000080001000700000008000200470000000800020086100000080001000800000008000200080000000800020000040000200002800800010001050000080002002802000004000400080002000200000024000980080002000700000008000100010000000800010006000000080001000e0000007c0004801400078008000300fdffffff080002000600000014000780080001001100000008000200030000000900010073797a31000000001c000780080001001e00000008000400a2f3000008000400000000001c0007800800030000000000080003000600000008000300070000000900010073797a3100000000"], 0x168}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) r12 = syz_open_dev$evdev(&(0x7f0000000000), 0x641, 0x101001) write$evdev(r12, &(0x7f0000000300)=[{{0x77359400}, 0x2, 0x10, 0xb}, {{}, 0x0, 0x97, 0x10}, {{0x0, 0xea60}, 0x14, 0xa, 0x2eca}], 0xfed1) 12.869212683s ago: executing program 8 (id=8725): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0) syz_emit_vhci(0x0, 0x7) write(r3, &(0x7f0000000240)='0000:00:1d.7', 0xc) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='0000:00:1d.7', 0xc) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000000)='@+]\x00', &(0x7f00000000c0)="86", 0x1) tkill(r6, 0xb) setrlimit(0x0, &(0x7f0000000100)={0xc808, 0xfffffffd}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 12.720133079s ago: executing program 1 (id=8733): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r2, &(0x7f00000004c0)='b', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0xfffffd85, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r4 = fsmount(r0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000980)={'team_slave_0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_null}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000180), 0x394, 0x101000) r5 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000b00)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x8b, @empty, 0x7}, @in6={0xa, 0x4e03, 0xd, @private2, 0x8}], 0x48) dup(r5) 11.586158857s ago: executing program 6 (id=8726): socket$packet(0x11, 0xa, 0x300) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open(0x0, 0x42000, 0x18) ftruncate(r0, 0x2007ffb) bpf$MAP_CREATE(0x0, 0x0, 0x1658356475ec8287) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, &(0x7f00000004c0)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x40000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x271d, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xb3) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0xfffffffdffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}}, 0xb4}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) socket(0x1d, 0x80802, 0x6) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 10.317360482s ago: executing program 5 (id=8727): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES8=r0], 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x14, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=0x0], 0x0}, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x80000001, 0x7) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r6) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000100)={0x0, 0xffffffffffffffd2, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r7, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r7, 0x20, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}}, 0x8081) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r8 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r8, &(0x7f00000002c0), 0x3c, 0x4000880) 8.810590415s ago: executing program 1 (id=8728): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000000)='@+]\x00', &(0x7f00000000c0)="86", 0x1) tkill(r3, 0xb) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70) socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000001c0)=0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x8}}, 0x26) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r6) accept4(0xffffffffffffffff, &(0x7f0000000100)=@isdn, &(0x7f0000000180)=0x80, 0x40000) fgetxattr(r1, &(0x7f0000000240)=@random={'osx.', '-(,&/\x00'}, &(0x7f00000003c0)=""/180, 0xb4) 8.276307741s ago: executing program 6 (id=8729): move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) membarrier(0x10, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x24004014) openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r6, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x64}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x6) pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 7.008102028s ago: executing program 1 (id=8730): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r2, 0x0) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030"]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendfile(r5, r5, 0x0, 0x23) 5.387796612s ago: executing program 6 (id=8731): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./sys/class/udc/usbip-vudc.0/soft_connect\x00', 0x1, 0x0) write(r1, &(0x7f0000001800)='disconnect', 0xa) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r2) getsockname$packet(r2, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000700)={&(0x7f0000000080), 0xc, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="e1cacc1e", @ANYRES16=0x0, @ANYBLOB="000327bd7000fcdbdf250a0000004000038014000600ff020000000000000000000000000001080005006401010108000100010000000800030000000000060007004e24000008000100000000005c00038008000500ac1414aa0800030000000000060004006f000000060007004e200000080001000100000014000600ff020000000000000000000000000001080003000400000014000600fe80000000000000000000000000000e08000500fdffffff040003800800060000020000080005000200000008000500ff0f0000"], 0xd4}, 0x1, 0x0, 0x0, 0x20044001}, 0x8041) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) r4 = syz_io_uring_setup(0x27a3, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_FUTEX_WAKE={0x34, 0x40, 0x0, 0x82, 0xbe7c, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x5}}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40400}, 0x24000000) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x8000) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x5) socket$inet_udp(0x2, 0x2, 0x0) 4.548660605s ago: executing program 5 (id=8732): r0 = openat$fb0(0xffffff9c, &(0x7f0000000380), 0x280a00, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(r0, 0x26, &(0x7f00000003c0)={0x1, 0x3, 0x6, 0x5, r1}) socket$inet(0xa, 0x6, 0x84) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc10c5541, &(0x7f0000000040)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c0000002500090122bd7006f9ffffff0200000008003d80ffffffff0800030047000000080040"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) unshare(0x8000000) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d696e747b726c656176655ff4a36ddb963d"]) semget$private(0x0, 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d3}, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x208010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000825bd7000fbdbdf2536000000009900000001002600000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000884) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') umount2(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000480)=""/87) 4.47656035s ago: executing program 1 (id=8734): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x68, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x20, 0x0, 0x0, 0x62, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5bbf0100000000001c0012800b00010062726964676500000c00028005001900000000009a42f3b657f0a4299f490e974b9e7e543878edb232babb9f5937473e4f7a4b7c7e1d42266532f64fad2541b68da33e4bcba923535940a09e653ba8f2636f6315d09f34ba7b28a5bbfeffc9818a508eb434ebc05f0513ee4fa10e1ba339eb92fba297aa70a72f9f5a9273c6e410ad696db42694367ebf3db9c62a7d138caf26d0e4a37656b29b"], 0x3c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400002ead0ff38f94981d8900", @ANYRES16=r2, @ANYBLOB="0100000000000000000030000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x814) mkdir(&(0x7f00000002c0)='./file0\x00', 0xa0) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0), 0x801040, &(0x7f0000000500)=ANY=[@ANYRES16=r2, @ANYBLOB="868ecfcfd8a511c108b0b6b97840ece06274bc9cadf68a636c7377d9de07bbacad6e914a0a714de2946689331b27954b97253481146b1ab189714c672f4ee82861f9b23f712718aee7bef4853be5fd682355cac3cc0967caa6092e52fb3c4ca0b8bc23d89d8c627044dc565b7bcfc662a5adeb8f789a7fb97f71ee544dd0c25135ca69d1d80c6c3cc3"]) chdir(&(0x7f0000000080)='./file0\x00') r6 = open(&(0x7f00000000c0)='./file0\x00', 0x149442, 0x0) ftruncate(r6, 0x200002) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10) semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f0000000c40)=""/4096) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r10, 0x800455c9, 0x40000000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) connect$pppl2tp(r8, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x804, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(r8, r7, 0x0, 0x80001d00c0d0) socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) 3.069019444s ago: executing program 8 (id=8735): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r2, 0x0) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d39"]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendfile(r5, r5, 0x0, 0x23) 2.753882907s ago: executing program 6 (id=8736): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) request_key(&(0x7f0000000280)='big_key\x00', 0x0, 0x0, 0xffffffffffffffff) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b, 0x40a02}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x44}}, 0x40800) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r5, 0x7ac, &(0x7f0000000100)={0x0, 0x0, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 1.825608781s ago: executing program 1 (id=8737): socket$kcm(0xa, 0x2, 0x73) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x2fffd, 0x900, 0x0, 0x7, 0xfffffffd}, 0x1c) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_crypto(0x10, 0x3, 0x15) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026c170000400000030000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2048050}, 0x880) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x40) sendmsg$NFT_BATCH(r5, 0x0, 0x24008040) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) mount(0x0, 0x0, &(0x7f0000000540)='virtiofs\x00', 0x2818405, &(0x7f0000001980)='dax\x00\x00lwayc') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, 0x0, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x2bf, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed40, 0x2, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x800001, 0x401f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x3, 0x364}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f00000000c0)=0xa, 0x4) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000840)=0x4f2c, 0x4) 421.084587ms ago: executing program 8 (id=8738): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r4 = epoll_create1(0x80000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000040)={0x4, r5, 0x1}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000140)={0xa000201e}) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r2, 0x0, r1, 0x0, 0xfffd, 0x0) r8 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) timer_create(0x2, &(0x7f0000000040)={0x0, 0x21, 0x2}, &(0x7f0000000000)=0x0) timer_settime(r9, 0x1, 0x0, 0x0) shmctl$SHM_LOCK(r8, 0xb) ioprio_set$pid(0x1, 0x0, 0x2004) ioprio_get$pid(0x1, 0x0) shmctl$SHM_LOCK(r8, 0xb) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, 0x0, 0x4010) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt(r10, 0x4000, 0xffffffff, 0x0, &(0x7f0000000100)) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r11}, 0xc) 0s ago: executing program 5 (id=8739): ioperm(0x7, 0x4, 0x7) r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) syz_open_dev$vim2m(0x0, 0x2, 0x2) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$RTC_PLL_SET(r1, 0x401c7012, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB], 0x2c}}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x36, 0x0, &(0x7f0000000380)="3d6ee2e04b91ab10143d9abe86dde5b21365c1ed1785bf79e0f3eb2dba93774cc6b23d0016dd6bd64414ce22c0f77c2158222ff96093", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000104050000000000000000000a0000000500010002"], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004) ptrace(0x10, r0) kernel console output (not intermixed with test programs): parsing attributes in process `syz.5.8594'. [ 3286.597877][T30060] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8594'. [ 3286.648826][T30059] md: md0: recover done. [ 3286.873356][T23461] as10x_usb: error during firmware upload part1 [ 3286.922964][T23461] Registered device nBox DVB-T Dongle [ 3286.941970][T23461] usb 11-1: USB disconnect, device number 17 [ 3287.014579][T23461] Unregistered device nBox DVB-T Dongle [ 3287.015473][T23461] as10x_usb: device has been disconnected [ 3287.020336][T30068] md: recover of RAID array md0 [ 3287.040053][T30068] md: md0: recover done. [ 3287.299809][T30075] md: recover of RAID array md0 [ 3287.301625][T30075] md: md0: recover done. [ 3287.436354][T30079] md: recover of RAID array md0 [ 3287.440045][T30079] md: md0: recover done. [ 3287.548969][T30083] md: recover of RAID array md0 [ 3287.550857][T30083] md: md0: recover done. [ 3287.589291][T30081] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8596'. [ 3287.846515][T30087] md: recover of RAID array md0 [ 3287.860334][T30087] md: md0: recover done. [ 3288.219719][T30095] md: recover of RAID array md0 [ 3288.238990][T30095] md: md0: recover done. [ 3288.300027][T30073] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3288.384128][T30073] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 3288.666840][T30073] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 3288.868572][T30073] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3288.870857][T30073] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 3288.969936][T30099] md: recover of RAID array md0 [ 3289.148686][T30073] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 3289.168537][T30073] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3289.181531][T30073] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 3289.229487][T30073] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 3289.276099][T30099] md: md0: recover done. [ 3289.388805][T30104] md: recover of RAID array md0 [ 3289.390653][T30104] md: md0: recover done. [ 3289.412740][T30073] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 3289.436155][T30073] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 3289.456523][T30107] md: recover of RAID array md0 [ 3289.458807][T30107] md: md0: recover done. [ 3289.569582][T30110] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8599'. [ 3289.615517][ T5551] Bluetooth: hci0: command 0x0c1a tx timeout [ 3289.648276][T30113] md: recover of RAID array md0 [ 3289.665226][T30113] md: md0: recover done. [ 3290.471223][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 3290.471242][ T42] audit: type=1326 audit(1786559423.222:44919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30106 comm="syz.9.8599" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71474eb code=0x7ffc0000 [ 3290.500611][ T42] audit: type=1326 audit(1786559423.222:44920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30106 comm="syz.9.8599" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf700efec code=0x7ffc0000 [ 3290.507634][ T42] audit: type=1326 audit(1786559423.232:44921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30106 comm="syz.9.8599" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf700efec code=0x7ffc0000 [ 3290.514439][ T42] audit: type=1326 audit(1786559423.232:44922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30106 comm="syz.9.8599" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf700efec code=0x7ffc0000 [ 3290.521606][ T42] audit: type=1326 audit(1786559423.242:44923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30106 comm="syz.9.8599" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf71474eb code=0x7ffc0000 [ 3290.528677][ T42] audit: type=1326 audit(1786559423.242:44924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30106 comm="syz.9.8599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 3290.538263][ T42] audit: type=1326 audit(1786559423.242:44925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30106 comm="syz.9.8599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 3290.545064][ T42] audit: type=1326 audit(1786559423.302:44926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30106 comm="syz.9.8599" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700efec code=0x7ffc0000 [ 3290.552021][ T42] audit: type=1326 audit(1786559423.302:44927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30106 comm="syz.9.8599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 3290.558907][ T42] audit: type=1326 audit(1786559423.302:44928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30106 comm="syz.9.8599" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 3290.627711][T30117] md: recover of RAID array md0 [ 3290.649671][T30117] md: md0: recover done. [ 3290.788778][T30122] md: recover of RAID array md0 [ 3290.805589][T30122] md: md0: recover done. [ 3290.846253][T29483] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 3290.975711][ T5551] Bluetooth: hci1: command 0x0c1a tx timeout [ 3291.216722][ T5551] Bluetooth: hci3: command 0x0c1a tx timeout [ 3291.225389][T29483] usb 11-1: Using ep0 maxpacket: 32 [ 3291.456501][ T5551] Bluetooth: hci4: command 0x0406 tx timeout [ 3291.695665][ T5551] Bluetooth: hci0: command 0x0c1a tx timeout [ 3291.900676][T29483] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 3291.969338][T30126] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8601'. [ 3291.979764][T29483] usb 11-1: config 0 has no interfaces? [ 3291.988152][T30126] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8601'. [ 3291.992869][T29483] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 3292.003110][T29483] usb 11-1: Product: syz [ 3292.010796][T29483] usb 11-1: Manufacturer: syz [ 3292.020179][T29483] usb 11-1: SerialNumber: syz [ 3292.026148][T30130] md: recover of RAID array md0 [ 3292.034794][T30130] md: md0: recover done. [ 3292.041386][T29483] usb 11-1: config 0 descriptor?? [ 3292.226831][T30132] md: recover of RAID array md0 [ 3292.239354][T30132] md: md0: recover done. [ 3292.309493][T12875] usb 11-1: USB disconnect, device number 18 [ 3292.388945][T30133] md: recover of RAID array md0 [ 3292.395423][T30133] md: md0: recover done. [ 3292.580791][T30137] md: recover of RAID array md0 [ 3292.589700][T30125] sctp_transport_update_pmtu: 59 callbacks suppressed [ 3292.589714][T30125] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 3292.595760][T30125] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 3292.599204][T30125] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 3292.602748][T30125] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 3292.607121][T30125] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 3292.610619][T30125] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 3292.614070][T30125] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 3292.617552][T30125] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 3292.620736][T30125] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 3292.624167][T30125] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 3292.645032][T30137] md: md0: recover done. [ 3292.691747][T30142] md: recover of RAID array md0 [ 3292.697214][T30142] md: md0: recover done. [ 3292.803279][T30147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8603'. [ 3292.813163][T30148] md: recover of RAID array md0 [ 3292.814856][T30148] md: md0: recover done. [ 3292.972731][T30152] md: recover of RAID array md0 [ 3292.982396][T30152] md: md0: recover done. [ 3293.065638][ T5551] Bluetooth: hci1: command 0x0c1a tx timeout [ 3293.159729][T30158] md: recover of RAID array md0 [ 3293.193729][T30158] md: md0: recover done. [ 3293.295440][ T5551] Bluetooth: hci3: command 0x0c1a tx timeout [ 3293.565220][ T5551] Bluetooth: hci4: command 0x0406 tx timeout [ 3293.776486][ T5551] Bluetooth: hci0: command 0x0c1a tx timeout [ 3294.096460][T30166] loop5: detected capacity change from 0 to 7 [ 3294.485060][T30169] Invalid ELF header magic: != ELF [ 3294.821684][T30166] Dev loop5: unable to read RDB block 7 [ 3294.823504][T30166] loop5: AHDI p1 p2 p3 [ 3295.173591][T30172] Bluetooth: hci1: command 0x0c1a tx timeout [ 3295.385378][T30172] Bluetooth: hci3: command 0x0c1a tx timeout [ 3295.504213][ T42] kauditd_printk_skb: 49 callbacks suppressed [ 3295.504226][ T42] audit: type=1800 audit(1786559428.252:44978): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 3295.576366][T30166] loop5: partition table partially beyond EOD, truncated [ 3295.639119][ T42] audit: type=1800 audit(1786559428.392:44979): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 3295.665564][T30166] loop5: p1 start 1601398130 is beyond EOD, truncated [ 3295.751972][T30166] loop5: p2 start 1702059890 is beyond EOD, truncated [ 3295.906464][T30180] md: recover of RAID array md0 [ 3295.923933][T30180] md: md0: recover done. [ 3296.056367][T30157] tipc: Started in network mode [ 3296.074829][T30157] tipc: Node identity , cluster identity 4711 [ 3296.081883][T30187] md: recover of RAID array md0 [ 3296.090317][T30187] md: md0: recover done. [ 3296.093399][T30157] tipc: Failed to obtain node identity [ 3296.103394][T30157] tipc: Enabling of bearer rejected, failed to enable media [ 3296.276633][T30191] md: recover of RAID array md0 [ 3296.278616][T30191] md: md0: recover done. [ 3296.413588][T30193] md: recover of RAID array md0 [ 3296.425201][T30193] md: md0: recover done. [ 3296.442840][ T42] audit: type=1800 audit(1786559429.192:44980): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 3296.514213][T30196] md: recover of RAID array md0 [ 3296.517733][T30196] md: md0: recover done. [ 3296.564657][ T42] audit: type=1800 audit(1786559429.312:44981): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=647484 res=0 errno=0 [ 3296.611590][T30199] bridge0: port 1(bridge_slave_0) entered disabled state [ 3296.696905][T30204] md: recover of RAID array md0 [ 3296.705314][T30204] md: md0: recover done. [ 3296.826995][ T42] audit: type=1800 audit(1786559429.572:44982): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 3296.919402][T30207] md: recover of RAID array md0 [ 3296.929320][T30207] md: md0: recover done. [ 3297.022594][ T42] audit: type=1800 audit(1786559429.772:44983): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 3297.095015][T30210] md: recover of RAID array md0 [ 3297.096788][T30210] md: md0: recover done. [ 3297.188935][T30214] md: recover of RAID array md0 [ 3297.203528][ T42] audit: type=1800 audit(1786559429.942:44984): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=647503 res=0 errno=0 [ 3297.804977][T30214] md: md0: recover done. [ 3297.869421][T30216] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 3297.871622][T30216] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3298.085869][T30216] vhci_hcd vhci_hcd.0: Device attached [ 3298.155050][ T42] audit: type=1800 audit(1786559430.122:44985): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=647507 res=0 errno=0 [ 3298.167051][ T42] audit: type=1800 audit(1786559430.562:44986): pid=30216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8610" name="attach" dev="sysfs" ino=36573 res=0 errno=0 [ 3298.185255][ T42] audit: type=1800 audit(1786559430.742:44987): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=647586 res=0 errno=0 [ 3298.474053][T30221] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 3298.594364][ T5749] usb 48-1: SetAddress Request (6) to port 0 [ 3298.597571][T30227] md: recover of RAID array md0 [ 3298.599572][T30227] md: md0: recover done. [ 3298.604917][ T5749] usb 48-1: new SuperSpeed USB device number 6 using vhci_hcd [ 3298.707673][T30244] md: recover of RAID array md0 [ 3298.733361][T30244] md: md0: recover done. [ 3299.002717][T30252] md: recover of RAID array md0 [ 3299.009244][T30252] md: md0: recover done. [ 3299.023553][ T5442] 8021q: adding VLAN 0 to HW filter on device eth11 [ 3299.034276][T30219] vhci_hcd: connection reset by peer [ 3299.037437][T20633] vhci_hcd vhci_hcd.5: stop threads [ 3299.049664][T20633] vhci_hcd vhci_hcd.5: release socket [ 3299.055897][T20633] vhci_hcd vhci_hcd.5: disconnect device [ 3299.151493][T30256] md: recover of RAID array md0 [ 3299.182362][T30256] md: md0: recover done. [ 3299.339920][T30264] md: recover of RAID array md0 [ 3299.351395][T30264] md: md0: recover done. [ 3299.473828][T30266] md: recover of RAID array md0 [ 3299.477582][T30266] md: md0: recover done. [ 3299.547578][T30216] orangefs_mount: mount request failed with -4 [ 3299.628526][T30269] md: recover of RAID array md0 [ 3299.640746][T30269] md: md0: recover done. [ 3299.813090][T30270] md: recover of RAID array md0 [ 3299.821959][T30270] md: md0: recover done. [ 3299.826737][ T5442] 8021q: adding VLAN 0 to HW filter on device eth12 [ 3299.953146][T30272] md: recover of RAID array md0 [ 3299.968514][T30272] md: md0: recover done. [ 3300.108197][T30276] md: recover of RAID array md0 [ 3300.121801][T30276] md: md0: recover done. [ 3300.123439][T30275] qrtr: Invalid version 0 [ 3300.228508][T30278] md: recover of RAID array md0 [ 3300.244339][T30278] md: md0: recover done. [ 3300.270501][T30275] syzkaller1: entered promiscuous mode [ 3300.284361][T30275] syzkaller1: entered allmulticast mode [ 3300.366648][T30281] md: recover of RAID array md0 [ 3300.384461][T30281] md: md0: recover done. [ 3300.573020][T30283] md: recover of RAID array md0 [ 3300.584742][T30283] md: md0: recover done. [ 3300.751609][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 3300.751620][ T42] audit: type=1800 audit(1786559433.502:44993): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 3300.768832][T30285] md: recover of RAID array md0 [ 3300.779093][T30285] md: md0: recover done. [ 3300.955203][T30288] md: recover of RAID array md0 [ 3300.956792][T30288] md: md0: recover done. [ 3302.047250][T30289] md: recover of RAID array md0 [ 3302.062946][T30287] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 3302.065830][T30289] md: md0: recover done. [ 3302.120801][T30287] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 3302.126012][T30287] overlayfs: failed to look up (tracing) for ino (-66) [ 3302.172343][ T5442] 8021q: adding VLAN 0 to HW filter on device eth13 [ 3302.192474][ T42] audit: type=1800 audit(1786559434.942:44994): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=647797 res=0 errno=0 [ 3302.225237][ T42] audit: type=1800 audit(1786559434.962:44995): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=647809 res=0 errno=0 [ 3302.251418][ T42] audit: type=1800 audit(1786559434.992:44996): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=647821 res=0 errno=0 [ 3302.436800][ T42] audit: type=1800 audit(1786559435.182:44997): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 3302.483877][T30294] md: recover of RAID array md0 [ 3302.502041][T30294] md: md0: recover done. [ 3302.517545][ T42] audit: type=1800 audit(1786559435.272:44998): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 3302.660360][ T42] audit: type=1800 audit(1786559435.412:44999): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 3302.837548][T30304] md: recover of RAID array md0 [ 3302.855306][T30304] md: md0: recover done. [ 3302.953946][T30306] Invalid ELF header magic: != ELF [ 3303.318769][T30314] md: recover of RAID array md0 [ 3303.320483][T30314] md: md0: recover done. [ 3303.422411][T30317] md: recover of RAID array md0 [ 3303.431442][T30317] md: md0: recover done. [ 3303.449522][ T42] audit: type=1800 audit(1786559436.202:45000): pid=5442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=619834 res=0 errno=0 [ 3303.648531][ T42] audit: type=1800 audit(1786559436.352:45001): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 3303.681215][T30320] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8620'. [ 3303.715508][ T5749] usb 48-1: device descriptor read/8, error -110 [ 3303.803373][T30320] lo speed is unknown, defaulting to 1000 [ 3303.820929][T30320] wlan0 speed is unknown, defaulting to 1000 [ 3303.897582][T30326] md: recover of RAID array md0 [ 3303.902175][T30326] md: md0: recover done. [ 3303.918775][ T42] audit: type=1800 audit(1786559436.672:45002): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 3303.978103][T30328] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8621'. [ 3304.210236][ T5749] usb usb48-port1: attempt power cycle [ 3304.355728][ T5442] 8021q: adding VLAN 0 to HW filter on device eth6 [ 3304.827531][ T5749] usb usb48-port1: unable to enumerate USB device [ 3305.098229][T30336] md: recover of RAID array md0 [ 3305.101723][T30336] md: md0: recover done. [ 3305.216594][T30338] md: recover of RAID array md0 [ 3305.228758][T30338] md: md0: recover done. [ 3305.346109][T30341] md: recover of RAID array md0 [ 3305.352189][T30341] md: md0: recover done. [ 3305.427283][T30342] md: recover of RAID array md0 [ 3305.429448][T30328] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3305.430735][T30342] md: md0: recover done. [ 3305.566229][T30343] md: recover of RAID array md0 [ 3305.570761][T30343] md: md0: recover done. [ 3305.751106][T30347] md: recover of RAID array md0 [ 3305.756125][T30347] md: md0: recover done. [ 3307.687125][T30348] NILFS (loop1): device size too small [ 3307.990684][T30354] md: recover of RAID array md0 [ 3308.015318][T30354] md: md0: recover done. [ 3308.346122][T30355] md: recover of RAID array md0 [ 3308.365566][T30355] md: md0: recover done. [ 3308.370151][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 3308.370162][ T42] audit: type=1800 audit(1786559441.122:45008): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 3308.466068][T30358] md: recover of RAID array md0 [ 3308.478242][T30358] md: md0: recover done. [ 3308.556129][T30361] md: recover of RAID array md0 [ 3308.562723][T30361] md: md0: recover done. [ 3308.639453][T30328] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3308.740483][T30349] mac80211_hwsim hwsim75 wlan0: entered promiscuous mode [ 3309.003737][T30371] md: recover of RAID array md0 [ 3309.047864][T30371] md: md0: recover done. [ 3309.108166][ T42] audit: type=1800 audit(1786559441.852:45009): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 3309.268143][T30375] md: recover of RAID array md0 [ 3309.308994][T30375] md: md0: recover done. [ 3309.324621][T30373] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8626'. [ 3309.593385][T30381] md: recover of RAID array md0 [ 3309.601065][T30381] md: md0: recover done. [ 3309.704364][T30328] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3309.921043][T30387] md: recover of RAID array md0 [ 3309.925829][T30387] md: md0: recover done. [ 3310.011317][T30389] md: recover of RAID array md0 [ 3310.019463][T30389] md: md0: recover done. [ 3310.076229][ T42] audit: type=1800 audit(1786559442.832:45010): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 3310.188261][T30328] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3310.198416][T30395] md: recover of RAID array md0 [ 3310.200930][T30395] md: md0: recover done. [ 3310.332781][ T42] audit: type=1800 audit(1786559443.082:45011): pid=30393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8628" name="resource0" dev="sysfs" ino=539895 res=0 errno=0 [ 3310.504466][ T42] audit: type=1800 audit(1786559443.242:45012): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 3310.545334][T30393] syzkaller0: entered promiscuous mode [ 3310.556638][T30393] syzkaller0: entered allmulticast mode [ 3310.855245][T30404] md: recover of RAID array md0 [ 3311.015011][T30404] md: md0: recover done. [ 3311.687338][T30412] md: recover of RAID array md0 [ 3311.701670][T30412] md: md0: recover done. [ 3311.769038][T30408] netlink: 'syz.6.8629': attribute type 10 has an invalid length. [ 3311.834902][T30416] netlink: 'syz.6.8629': attribute type 10 has an invalid length. [ 3311.917935][T30418] netlink: 80 bytes leftover after parsing attributes in process `syz.6.8629'. [ 3312.049887][T30420] md: recover of RAID array md0 [ 3312.073081][T30420] md: md0: recover done. [ 3312.101053][T30408] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3312.112855][ T42] audit: type=1800 audit(1786559444.862:45013): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 3312.172194][T30408] team0: Port device netdevsim1 added [ 3312.272865][T30416] team0: Port device netdevsim1 removed [ 3312.308517][T30423] md: recover of RAID array md0 [ 3312.316976][T30423] md: md0: recover done. [ 3312.320627][T30416] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3312.337194][T30416] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 3312.435859][T30424] Bluetooth: MGMT ver 1.23 [ 3312.494833][T30422] team0: No ports can be present during mode change [ 3312.507669][T30426] md: recover of RAID array md0 [ 3312.512954][T30426] md: md0: recover done. [ 3312.628074][T30428] md: recover of RAID array md0 [ 3312.633677][T30428] md: md0: recover done. [ 3312.697728][T18083] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3312.712735][T18083] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3312.734410][T30430] md: recover of RAID array md0 [ 3312.742990][T30430] md: md0: recover done. [ 3312.845312][T30160] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3312.925317][T20633] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3313.145294][ T42] audit: type=1800 audit(1786559445.892:45014): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 3313.185197][T30435] md: recover of RAID array md0 [ 3313.186838][T30435] md: md0: recover done. [ 3313.360815][ T42] audit: type=1800 audit(1786559446.112:45015): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 3313.574154][ T42] audit: type=1800 audit(1786559446.322:45016): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 3313.615322][T29483] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 3313.869804][ T42] audit: type=1800 audit(1786559446.592:45017): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34877 res=0 errno=0 [ 3313.876204][ T42] audit: type=1800 audit(1786559446.592:45018): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34900 res=0 errno=0 [ 3313.935634][T30448] md: recover of RAID array md0 [ 3313.985033][T30448] md: md0: recover done. [ 3314.012262][ T42] audit: type=1800 audit(1786559446.762:45019): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=649299 res=0 errno=0 [ 3314.040107][T30432] lo speed is unknown, defaulting to 1000 [ 3314.058175][T29483] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 3314.078209][T30432] wlan0 speed is unknown, defaulting to 1000 [ 3314.099016][ T42] audit: type=1800 audit(1786559446.762:45020): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35077 res=0 errno=0 [ 3314.108321][T29483] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 3314.123931][T29483] usb 6-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 3314.142872][T29483] usb 6-1: config 0 has no interface number 0 [ 3314.148903][ T42] audit: type=1800 audit(1786559446.782:45021): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=649303 res=0 errno=0 [ 3314.167360][T29483] usb 6-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 3314.194339][T29483] usb 6-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 3314.211157][ T42] audit: type=1800 audit(1786559446.782:45022): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35100 res=0 errno=0 [ 3314.228316][T12878] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 3314.241063][T29483] usb 6-1: config 0 interface 143 has no altsetting 0 [ 3314.259093][T29483] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3314.268308][ T42] audit: type=1800 audit(1786559446.822:45023): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=649462 res=0 errno=0 [ 3314.287007][T29483] usb 6-1: Product: syz [ 3314.299527][T29483] usb 6-1: Manufacturer: syz [ 3314.311080][T29483] usb 6-1: SerialNumber: syz [ 3314.341195][ T42] audit: type=1800 audit(1786559447.092:45024): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=649664 res=0 errno=0 [ 3314.366849][T30451] md: recover of RAID array md0 [ 3314.371368][T29483] usb 6-1: config 0 descriptor?? [ 3314.377004][T30451] md: md0: recover done. [ 3314.381030][ T42] audit: type=1800 audit(1786559447.112:45025): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=649696 res=0 errno=0 [ 3314.396418][T12878] usb 10-1: Using ep0 maxpacket: 8 [ 3314.418734][T12878] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3314.437147][T12878] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 3314.456430][T12878] usb 10-1: config 0 has no interface number 0 [ 3314.470026][T12878] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3314.493096][T12878] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 3314.499995][T30172] Bluetooth: hci0: command 0x0c1a tx timeout [ 3314.508645][ T5551] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 3314.534185][T12878] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3314.548101][T12878] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3314.557967][T12878] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3314.565264][T30455] md: recover of RAID array md0 [ 3314.570560][T12878] usb 10-1: config 0 descriptor?? [ 3314.574916][T30455] md: md0: recover done. [ 3314.589461][T12878] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 3314.624184][T29483] usb 6-1: USB disconnect, device number 7 [ 3314.752337][T30459] md: recover of RAID array md0 [ 3314.757840][T30459] md: md0: recover done. [ 3314.857384][T30461] md: recover of RAID array md0 [ 3314.863359][T30461] md: md0: recover done. [ 3314.959434][T30462] md: recover of RAID array md0 [ 3314.961037][T30462] md: md0: recover done. [ 3315.027057][T30463] md: recover of RAID array md0 [ 3315.030302][T30463] md: md0: recover done. [ 3315.127649][T29483] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 3315.130775][T30467] md: recover of RAID array md0 [ 3315.132837][T30467] md: md0: recover done. [ 3315.263960][T30470] md: recover of RAID array md0 [ 3315.266701][T30470] md: md0: recover done. [ 3315.317239][T29483] usb 6-1: Using ep0 maxpacket: 16 [ 3315.319853][T29483] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 3315.323742][T30473] md: recover of RAID array md0 [ 3315.332828][T29483] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 3315.342673][T29483] usb 6-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 3315.349404][T30473] md: md0: recover done. [ 3315.351008][T29483] usb 6-1: config 0 has no interface number 0 [ 3315.370166][T29483] usb 6-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 3315.386981][T29483] usb 6-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 3315.407508][T29483] usb 6-1: config 0 interface 143 has no altsetting 0 [ 3315.428233][T29483] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3315.450902][T29483] usb 6-1: Product: syz [ 3315.453038][T29483] usb 6-1: Manufacturer: syz [ 3315.489607][T29483] usb 6-1: SerialNumber: syz [ 3315.516476][T29483] usb 6-1: config 0 descriptor?? [ 3315.548034][T30475] md: recover of RAID array md0 [ 3315.553162][T30475] md: md0: recover done. [ 3315.838582][T23461] IPVS: starting estimator thread 0... [ 3315.900560][T30480] md: recover of RAID array md0 [ 3315.917396][T30480] md: md0: recover done. [ 3315.931359][T30439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3315.976256][T30439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3316.000044][T30478] IPVS: using max 32 ests per chain, 76800 per kthread [ 3316.178453][T29483] usb 6-1: USB disconnect, device number 8 [ 3316.188355][T30481] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 3316.243576][T30481] syzkaller0: entered promiscuous mode [ 3316.254403][T30481] syzkaller0: entered allmulticast mode [ 3316.285747][T30488] md: recover of RAID array md0 [ 3316.303009][T30488] md: md0: recover done. [ 3316.563803][T30492] md: recover of RAID array md0 [ 3316.566389][T30492] md: md0: recover done. [ 3316.671090][T11684] usb 10-1: USB disconnect, device number 10 [ 3316.745932][T11684] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 3316.756535][T30494] md: recover of RAID array md0 [ 3316.763396][T30494] md: md0: recover done. [ 3317.009300][T30499] ip6t_REJECT: ECHOREPLY is not supported [ 3317.021346][T30500] md: recover of RAID array md0 [ 3317.023394][T30500] md: md0: recover done. [ 3318.803361][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 3318.803376][ T42] audit: type=1800 audit(1786559451.552:45052): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 3318.913954][T30506] md: recover of RAID array md0 [ 3318.931495][T30506] md: md0: recover done. [ 3318.936715][T30499] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3318.987184][T30499] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3319.017534][T30499] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 3319.164837][T30512] md: recover of RAID array md0 [ 3319.170174][T30502] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 3319.174039][T30512] md: md0: recover done. [ 3319.388796][T30514] md: recover of RAID array md0 [ 3319.409245][T30514] md: md0: recover done. [ 3319.445994][ T42] audit: type=1800 audit(1786559452.192:45053): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 3319.686943][T30519] md: recover of RAID array md0 [ 3319.708309][T30519] md: md0: recover done. [ 3319.911969][T30499] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 3319.937983][T30523] md: recover of RAID array md0 [ 3319.964682][T30523] md: md0: recover done. [ 3320.218346][T30527] md: recover of RAID array md0 [ 3320.238003][T30527] md: md0: recover done. [ 3320.587588][T30531] md: recover of RAID array md0 [ 3320.600213][T30531] md: md0: recover done. [ 3320.828519][T30532] md: recover of RAID array md0 [ 3320.852414][T30532] md: md0: recover done. [ 3320.975453][ T5551] Bluetooth: hci1: command 0x0c1a tx timeout [ 3321.065685][T30453] Bluetooth: hci3: command 0x0c1a tx timeout [ 3321.065676][ T5551] Bluetooth: hci4: command 0x0406 tx timeout [ 3321.080614][T30536] md: recover of RAID array md0 [ 3321.097879][T30536] md: md0: recover done. [ 3321.250298][ T42] audit: type=1800 audit(1786559454.002:45054): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 3321.439060][T30541] md: recover of RAID array md0 [ 3321.469560][T30541] md: md0: recover done. [ 3321.577157][T30530] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3321.692731][T30543] netlink: 188 bytes leftover after parsing attributes in process `syz.5.8643'. [ 3321.752223][T30545] md: recover of RAID array md0 [ 3321.764850][T30545] md: md0: recover done. [ 3321.822430][T30535] input: syz1 as /devices/virtual/input/input66 [ 3321.875085][ T42] audit: type=1800 audit(1786559454.622:45055): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 3321.962447][ T42] audit: type=1800 audit(1786559454.652:45056): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=650587 res=0 errno=0 [ 3322.013713][T30550] md: recover of RAID array md0 [ 3322.035218][T30550] md: md0: recover done. [ 3322.036892][ T42] audit: type=1800 audit(1786559454.682:45057): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=650602 res=0 errno=0 [ 3322.183088][ T42] audit: type=1800 audit(1786559454.682:45058): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=650605 res=0 errno=0 [ 3322.191932][ T42] audit: type=1800 audit(1786559454.692:45059): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=650604 res=0 errno=0 [ 3322.200906][ T42] audit: type=1800 audit(1786559454.692:45060): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=650603 res=0 errno=0 [ 3322.207138][ T42] audit: type=1800 audit(1786559454.692:45061): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=650594 res=0 errno=0 [ 3322.326811][T30552] md: recover of RAID array md0 [ 3322.337445][T30552] md: md0: recover done. [ 3322.517434][T30553] md: recover of RAID array md0 [ 3322.537261][T30553] md: md0: recover done. [ 3322.563929][T30551] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 3322.586020][T30551] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 3322.622057][T30551] bond1: entered promiscuous mode [ 3322.726628][T30556] md: recover of RAID array md0 [ 3322.752127][T30556] md: md0: recover done. [ 3322.940003][T30557] md: recover of RAID array md0 [ 3322.958388][T30557] md: md0: recover done. [ 3323.158820][T30561] md: recover of RAID array md0 [ 3323.185366][T30561] md: md0: recover done. [ 3323.217383][T30560] oxu210hp-hcd QEMU0002:00: error -ENXIO: IRQ index 0 not found [ 3323.326012][T30564] md: recover of RAID array md0 [ 3323.404207][T30564] md: md0: recover done. [ 3323.641138][T30567] md: recover of RAID array md0 [ 3323.721570][T30567] md: md0: recover done. [ 3323.978980][T30575] md: recover of RAID array md0 [ 3324.011124][T30575] md: md0: recover done. [ 3324.227474][T30578] md: recover of RAID array md0 [ 3324.253749][T30578] md: md0: recover done. [ 3324.507510][T30584] md: recover of RAID array md0 [ 3324.525671][T30584] md: md0: recover done. [ 3324.638381][T30585] md: recover of RAID array md0 [ 3324.648946][T30585] md: md0: recover done. [ 3324.728639][T12875] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 3324.822827][T30586] md: recover of RAID array md0 [ 3324.850566][T30586] md: md0: recover done. [ 3324.895829][T12875] usb 10-1: device descriptor read/64, error -71 [ 3325.096823][T30589] md: recover of RAID array md0 [ 3325.111940][T30589] md: md0: recover done. [ 3325.158999][T12875] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 3325.256022][T30590] md: recover of RAID array md0 [ 3325.272507][T30590] md: md0: recover done. [ 3325.305406][T12875] usb 10-1: device descriptor read/64, error -71 [ 3325.426654][T12875] usb usb10-port1: attempt power cycle [ 3325.431948][T30593] md: recover of RAID array md0 [ 3325.443344][T30593] md: md0: recover done. [ 3325.656264][T30595] md: recover of RAID array md0 [ 3325.671871][T30595] md: md0: recover done. [ 3325.805336][T12875] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 3325.827402][T12875] usb 10-1: device descriptor read/8, error -71 [ 3325.904062][T30596] md: recover of RAID array md0 [ 3325.918019][T30596] md: md0: recover done. [ 3326.085275][T12875] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 3326.099142][T30598] md: recover of RAID array md0 [ 3326.111534][T30598] md: md0: recover done. [ 3326.121423][T12875] usb 10-1: device descriptor read/8, error -71 [ 3326.208239][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 3326.208252][ T42] audit: type=1800 audit(1786559458.962:45073): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 3326.265746][T12875] usb usb10-port1: unable to enumerate USB device [ 3326.296330][T30602] md: recover of RAID array md0 [ 3326.304639][T30602] md: md0: recover done. [ 3326.406093][T30605] md: recover of RAID array md0 [ 3326.410184][ T42] audit: type=1800 audit(1786559459.162:45074): pid=30592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.8647" name="bus" dev="ramfs" ino=200441 res=0 errno=0 [ 3326.418801][T30605] md: md0: recover done. [ 3326.460936][ T42] audit: type=1800 audit(1786559459.212:45075): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 3326.566858][T30609] md: recover of RAID array md0 [ 3326.570982][T30609] md: md0: recover done. [ 3326.615243][ T42] audit: type=1800 audit(1786559459.362:45076): pid=30608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8649" name="blocks" dev="configfs" ino=201381 res=0 errno=0 [ 3326.653229][T30608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3326.671211][T30612] md: recover of RAID array md0 [ 3326.676845][T30612] md: md0: recover done. [ 3326.766227][T30615] md: recover of RAID array md0 [ 3326.772199][T30615] md: md0: recover done. [ 3326.836654][ T42] audit: type=1800 audit(1786559459.582:45077): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 3326.939374][T30619] md: recover of RAID array md0 [ 3326.949301][T30619] md: md0: recover done. [ 3327.097254][T30623] md: recover of RAID array md0 [ 3327.111776][ T42] audit: type=1804 audit(1786559459.852:45078): pid=30624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.8650" name="/newroot/26/file0" dev="tmpfs" ino=157 res=1 errno=0 [ 3327.121884][T30623] md: md0: recover done. [ 3327.718908][ T42] audit: type=1800 audit(1786559460.072:45079): pid=30624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8650" name="file0" dev="tmpfs" ino=157 res=0 errno=0 [ 3328.329230][ T42] audit: type=1804 audit(1786559461.082:45080): pid=30624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.8650" name="/newroot/26/file0" dev="tmpfs" ino=157 res=1 errno=0 [ 3328.554058][T30618] uprobe: syz.5.8650:30618 failed to unregister, leaking uprobe [ 3328.614069][T30635] md: recover of RAID array md0 [ 3328.664472][T30635] md: md0: recover done. [ 3328.696861][ T42] audit: type=1800 audit(1786559461.452:45081): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 3328.790580][ T42] audit: type=1800 audit(1786559461.542:45082): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 3328.869534][T30642] md: recover of RAID array md0 [ 3328.896392][T30642] md: md0: recover done. [ 3329.076797][T30648] md: recover of RAID array md0 [ 3329.092158][T30648] md: md0: recover done. [ 3329.193547][T30650] veth1_vlan: entered allmulticast mode [ 3329.423637][T30654] md: recover of RAID array md0 [ 3329.506151][T30654] md: md0: recover done. [ 3330.213282][T30658] md: recover of RAID array md0 [ 3330.313965][T30658] md: md0: recover done. [ 3330.756194][T30662] md: recover of RAID array md0 [ 3330.781450][T30662] md: md0: recover done. [ 3331.011520][T30666] md: recover of RAID array md0 [ 3331.015511][T30666] md: md0: recover done. [ 3331.150457][T30667] md: recover of RAID array md0 [ 3331.152070][T30667] md: md0: recover done. [ 3331.221230][T30670] md: recover of RAID array md0 [ 3331.227621][T30670] md: md0: recover done. [ 3331.330735][T30673] md: recover of RAID array md0 [ 3331.340574][T30673] md: md0: recover done. [ 3331.389879][T30675] netlink: 'syz.5.8655': attribute type 4 has an invalid length. [ 3331.426823][T30676] md: recover of RAID array md0 [ 3331.433760][T30676] md: md0: recover done. [ 3331.966401][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 3331.966413][ T42] audit: type=1800 audit(1786559464.722:45085): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=650980 res=0 errno=0 [ 3331.966541][T30682] ceph: No mds server is up or the cluster is laggy [ 3332.028950][T26580] libceph: connect (1)[c::]:6789 error -101 [ 3332.349194][T30684] mac80211_hwsim hwsim75 wlan0: left promiscuous mode [ 3332.369944][T30684] geneve2: left allmulticast mode [ 3332.435721][T26580] libceph: mon0 (1)[c::]:6789 connect error [ 3332.444182][T17553] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 3332.467926][T20633] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 3332.488068][T20633] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 3332.490997][ T42] audit: type=1800 audit(1786559465.232:45086): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16970 res=0 errno=0 [ 3332.525289][T30160] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 3332.731888][T26580] libceph: connect (1)[c::]:6789 error -101 [ 3332.735990][T26580] libceph: mon0 (1)[c::]:6789 connect error [ 3333.023579][T30453] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3333.047198][T30453] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3333.052787][T30453] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3333.055823][T30453] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3333.058598][ T42] audit: type=1800 audit(1786559465.812:45087): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=650999 res=0 errno=0 [ 3333.069100][T30453] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3333.073439][ T42] audit: type=1800 audit(1786559465.822:45088): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=651010 res=0 errno=0 [ 3333.267247][T30689] md: recover of RAID array md0 [ 3333.272633][T30689] md: md0: recover done. [ 3333.366190][ T42] audit: type=1800 audit(1786559466.122:45089): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=651029 res=0 errno=0 [ 3333.381173][ T42] audit: type=1800 audit(1786559466.132:45090): pid=29612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=651040 res=0 errno=0 [ 3333.722140][T30698] md: recover of RAID array md0 [ 3333.730570][ T42] audit: type=1800 audit(1786559466.472:45091): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 3333.738411][T30698] md: md0: recover done. [ 3333.847958][T30700] md: recover of RAID array md0 [ 3333.852816][T30700] md: md0: recover done. [ 3333.858994][T30701] NILFS (nbd1): device size too small [ 3333.915985][ T42] audit: type=1800 audit(1786559466.662:45092): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=651051 res=0 errno=0 [ 3333.946102][T30706] md: recover of RAID array md0 [ 3333.949808][ T42] audit: type=1800 audit(1786559466.672:45093): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=651061 res=0 errno=0 [ 3333.967872][T30706] md: md0: recover done. [ 3334.159977][T30709] md: recover of RAID array md0 [ 3334.171612][T30709] md: md0: recover done. [ 3334.383377][T12875] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 3334.398229][T30714] md: recover of RAID array md0 [ 3334.401021][T30714] md: md0: recover done. [ 3334.532936][T30687] lo speed is unknown, defaulting to 1000 [ 3334.538132][T30687] wlan0 speed is unknown, defaulting to 1000 [ 3334.579966][T12875] usb 6-1: Using ep0 maxpacket: 32 [ 3334.583174][T12875] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 3334.589453][T12875] usb 6-1: config index 0 descriptor too short (expected 13339, got 27) [ 3334.599989][T30718] md: recover of RAID array md0 [ 3334.602074][T12875] usb 6-1: config 108 has an invalid descriptor of length 32, skipping remainder of the config [ 3334.609220][T30718] md: md0: recover done. [ 3334.622149][T12875] usb 6-1: config 108 has 0 interfaces, different from the descriptor's value: 32 [ 3334.675930][T12875] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 3334.679319][T12875] usb 6-1: Product: syz [ 3334.701344][T12875] usb 6-1: Manufacturer: syz [ 3334.724382][T12875] usb 6-1: SerialNumber: syz [ 3334.814587][ T42] audit: type=1800 audit(1786559467.562:45094): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 3334.857528][T30720] md: recover of RAID array md0 [ 3334.859260][T30720] md: md0: recover done. [ 3334.977046][T30724] md: recover of RAID array md0 [ 3334.983462][T30721] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 3334.985864][T30724] md: md0: recover done. [ 3335.069364][T30726] md: recover of RAID array md0 [ 3335.085373][T30726] md: md0: recover done. [ 3335.240029][T30730] md: recover of RAID array md0 [ 3335.242813][T12875] usb 6-1: USB disconnect, device number 9 [ 3335.243238][T30730] md: md0: recover done. [ 3335.377880][T30453] Bluetooth: hci2: command tx timeout [ 3335.519368][T30734] md: recover of RAID array md0 [ 3335.532444][T30734] md: md0: recover done. [ 3335.726490][T30740] md: recover of RAID array md0 [ 3335.758773][T30740] md: md0: recover done. [ 3335.789048][T30687] bridge0: port 1(bridge_slave_0) entered blocking state [ 3335.791574][T30687] bridge0: port 1(bridge_slave_0) entered disabled state [ 3335.804534][T30687] bridge_slave_0: entered allmulticast mode [ 3335.808224][T30687] bridge_slave_0: entered promiscuous mode [ 3335.829104][T30742] md: recover of RAID array md0 [ 3335.835675][T30742] md: md0: recover done. [ 3336.066472][T30743] tunl0: entered promiscuous mode [ 3336.190734][T30743] netlink: 'syz.5.8664': attribute type 4 has an invalid length. [ 3336.193170][T30743] netlink: 9 bytes leftover after parsing attributes in process `syz.5.8664'. [ 3336.197460][T30687] bridge0: port 2(bridge_slave_1) entered blocking state [ 3336.226678][T30687] bridge0: port 2(bridge_slave_1) entered disabled state [ 3336.234374][T30732] input: syz0 as /devices/virtual/input/input67 [ 3336.241581][T30744] md: recover of RAID array md0 [ 3336.243588][T30744] md: md0: recover done. [ 3336.253048][T30687] bridge_slave_1: entered allmulticast mode [ 3336.273544][T30687] bridge_slave_1: entered promiscuous mode [ 3336.393212][T30687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3336.464437][T30687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3336.620556][T30749] md: recover of RAID array md0 [ 3336.625632][T30749] md: md0: recover done. [ 3336.682636][T30687] team0: Port device team_slave_0 added [ 3336.701601][T30687] team0: Port device team_slave_1 added [ 3336.808555][T30751] md: recover of RAID array md0 [ 3336.826646][T30751] md: md0: recover done. [ 3336.889999][T30687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3336.917569][T30687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3336.975835][T30453] Bluetooth: hci1: command 0x0c1a tx timeout [ 3336.989190][T30687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3336.995351][ T5551] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 3337.005949][T30754] md: recover of RAID array md0 [ 3337.014940][T30754] md: md0: recover done. [ 3337.111612][T30687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3337.155284][T30687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3337.240379][T30756] md: recover of RAID array md0 [ 3337.242192][T30756] md: md0: recover done. [ 3337.275416][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 3337.275429][ T42] audit: type=1800 audit(1786559470.032:45116): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=655060 res=0 errno=0 [ 3337.425184][T30687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3337.470219][ T5551] Bluetooth: hci2: command tx timeout [ 3337.577871][T30687] hsr_slave_0: entered promiscuous mode [ 3337.582413][T30763] md: recover of RAID array md0 [ 3337.593086][T30763] md: md0: recover done. [ 3337.600003][T30687] hsr_slave_1: entered promiscuous mode [ 3337.606473][ T42] audit: type=1800 audit(1786559470.362:45117): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 3337.622962][T30687] debugfs: 'hsr0' already exists in 'hsr' [ 3337.644619][T30687] Cannot create hsr debugfs directory [ 3337.715382][ T40] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 3338.036939][T30766] md: recover of RAID array md0 [ 3338.038802][T30766] md: md0: recover done. [ 3338.403312][ T42] audit: type=1800 audit(1786559471.092:45118): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 3339.013937][ T42] audit: type=1800 audit(1786559471.442:45119): pid=30767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8667" name="unbind" dev="sysfs" ino=29849 res=0 errno=0 [ 3339.155458][T30771] md: recover of RAID array md0 [ 3339.157111][T30771] md: md0: recover done. [ 3339.536255][ T5551] Bluetooth: hci2: command tx timeout [ 3339.934577][T30775] netlink: 156 bytes leftover after parsing attributes in process `syz.6.8669'. [ 3339.941101][ T42] audit: type=1800 audit(1786559472.702:45120): pid=30687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=27302 res=0 errno=0 [ 3340.700937][T30777] md: recover of RAID array md0 [ 3340.956793][T30777] md: md0: recover done. [ 3341.098792][ T42] audit: type=1800 audit(1786559473.862:45121): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 3341.165940][T30779] md: recover of RAID array md0 [ 3341.171500][T30779] md: md0: recover done. [ 3341.218395][T17553] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3341.281867][ T42] audit: type=1800 audit(1786559474.032:45122): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 3341.363230][T30782] md: recover of RAID array md0 [ 3341.376926][T30782] md: md0: recover done. [ 3341.495407][T30789] md: recover of RAID array md0 [ 3341.509312][T30789] md: md0: recover done. [ 3341.615300][ T5551] Bluetooth: hci2: command tx timeout [ 3341.701299][T30790] md: recover of RAID array md0 [ 3341.738647][T30790] md: md0: recover done. [ 3341.817971][ T42] audit: type=1800 audit(1786559474.562:45123): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=657055 res=0 errno=0 [ 3341.975702][T30795] md: recover of RAID array md0 [ 3341.984584][T30795] md: md0: recover done. [ 3342.408235][ T42] audit: type=1800 audit(1786559474.582:45124): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=657065 res=0 errno=0 [ 3342.518221][T30797] md: recover of RAID array md0 [ 3342.520287][T30797] md: md0: recover done. [ 3342.667467][T30781] netlink: 'syz.5.8670': attribute type 1 has an invalid length. [ 3342.670809][T30781] netlink: 220 bytes leftover after parsing attributes in process `syz.5.8670'. [ 3342.728759][T30799] md: recover of RAID array md0 [ 3342.730983][T30799] md: md0: recover done. [ 3343.339359][T30801] md: recover of RAID array md0 [ 3343.433939][T30801] md: md0: recover done. [ 3343.971735][T30804] md: recover of RAID array md0 [ 3344.075551][T30804] md: md0: recover done. [ 3344.172512][ T42] audit: type=1800 audit(1786559476.882:45125): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 3345.291405][T30810] md: recover of RAID array md0 [ 3345.300602][T30810] md: md0: recover done. [ 3345.344342][ T42] audit: type=1800 audit(1786559478.092:45126): pid=30807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8673" name="hardlockup_count" dev="sysfs" ino=66812 res=0 errno=0 [ 3346.395593][ T42] audit: type=1800 audit(1786559479.112:45127): pid=30813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.8674" name="unbind" dev="sysfs" ino=27583 res=0 errno=0 [ 3346.457047][T30818] md: recover of RAID array md0 [ 3346.463155][ T42] audit: type=1800 audit(1786559479.122:45128): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 3346.473887][T30818] md: md0: recover done. [ 3346.577595][T30812] ehci-pci 0000:00:1d.7: remove, state 4 [ 3346.579447][T30812] usb usb1: USB disconnect, device number 1 [ 3346.592645][T30812] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 3346.671441][ T42] audit: type=1800 audit(1786559479.432:45129): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=3033 res=0 errno=0 [ 3346.696622][T30823] md: recover of RAID array md0 [ 3346.701843][T30823] md: md0: recover done. [ 3346.761389][ T42] audit: type=1800 audit(1786559479.482:45130): pid=30812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.8674" name="bind" dev="sysfs" ino=27584 res=0 errno=0 [ 3346.903536][T30808] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3346.953247][T30824] md: recover of RAID array md0 [ 3346.954962][T30824] md: md0: recover done. [ 3346.969931][T30812] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 3346.973909][T30812] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 3346.979154][T30812] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 3346.991371][ T42] audit: type=1800 audit(1786559479.742:45131): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=657096 res=0 errno=0 [ 3346.997697][T30812] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 3347.000347][T30812] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 3347.003996][T30812] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 3347.006597][T30812] usb usb1: Product: EHCI Host Controller [ 3347.008386][T30812] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 3347.010758][T30812] usb usb1: SerialNumber: 0000:00:1d.7 [ 3347.015875][T30812] hub 1-0:1.0: USB hub found [ 3347.018092][T30812] hub 1-0:1.0: 6 ports detected [ 3347.056624][T30812] hub 3-0:1.0: USB hub found [ 3347.058533][T30812] hub 3-0:1.0: 2 ports detected [ 3347.089170][T30812] hub 4-0:1.0: USB hub found [ 3347.090940][T30812] hub 4-0:1.0: 2 ports detected [ 3347.119285][T30812] hub 2-0:1.0: USB hub found [ 3347.121074][T30812] hub 2-0:1.0: 2 ports detected [ 3347.141064][ T42] audit: type=1800 audit(1786559479.792:45132): pid=29616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=657111 res=0 errno=0 [ 3347.211410][ T42] audit: type=1800 audit(1786559479.822:45133): pid=29616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=657143 res=0 errno=0 [ 3347.250761][T17553] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3347.295310][T12878] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 3347.540080][T30830] md: recover of RAID array md0 [ 3347.546338][T30830] md: md0: recover done. [ 3347.547909][T12878] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 3347.587777][T12878] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 3347.591782][T17553] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3347.604189][T12878] usb 1-1: Product: QEMU USB Tablet [ 3347.632954][T12878] usb 1-1: Manufacturer: QEMU [ 3347.664217][T12878] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 3347.763122][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 3347.763134][ T42] audit: type=1800 audit(1786559480.512:45145): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 3347.958407][T30835] md: recover of RAID array md0 [ 3348.477399][T30835] md: md0: recover done. [ 3348.877048][ T5551] Bluetooth: hci3: unexpected event for opcode 0x201c [ 3348.927064][T30839] x_tables: duplicate underflow at hook 1 [ 3348.942325][T12878] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.000B/input/input69 [ 3349.075924][T30842] md: recover of RAID array md0 [ 3349.140522][T12878] hid-generic 0003:0627:0001.000B: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 3349.216763][T30842] md: md0: recover done. [ 3349.242427][ T42] audit: type=1800 audit(1786559481.982:45146): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=657698 res=0 errno=0 [ 3349.398096][ T42] audit: type=1800 audit(1786559482.152:45147): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=657497 res=0 errno=0 [ 3349.437025][T30847] md: recover of RAID array md0 [ 3349.452906][T30847] md: md0: recover done. [ 3349.463488][ T42] audit: type=1800 audit(1786559482.172:45148): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=657529 res=0 errno=0 [ 3349.541809][ T42] audit: type=1800 audit(1786559482.172:45149): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=657504 res=0 errno=0 [ 3349.586959][ T42] audit: type=1800 audit(1786559482.182:45150): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=657505 res=0 errno=0 [ 3349.628965][ T42] audit: type=1800 audit(1786559482.182:45151): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=657526 res=0 errno=0 [ 3349.646788][T30854] md: recover of RAID array md0 [ 3349.648486][T30854] md: md0: recover done. [ 3349.726108][ T42] audit: type=1800 audit(1786559482.182:45152): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=657527 res=0 errno=0 [ 3349.746559][T30856] md: recover of RAID array md0 [ 3349.752591][T30856] md: md0: recover done. [ 3349.768310][T17553] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3349.773976][ T42] audit: type=1800 audit(1786559482.272:45153): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=657710 res=0 errno=0 [ 3349.821184][ T42] audit: type=1800 audit(1786559482.292:45154): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=657506 res=0 errno=0 [ 3349.909260][T30860] md: recover of RAID array md0 [ 3349.921543][T30860] md: md0: recover done. [ 3350.165070][T30862] md: recover of RAID array md0 [ 3350.217220][T30862] md: md0: recover done. [ 3350.426041][T30866] md: recover of RAID array md0 [ 3350.429928][T30866] md: md0: recover done. [ 3350.607515][T30870] md: recover of RAID array md0 [ 3350.617151][T30870] md: md0: recover done. [ 3350.839849][T30877] md: recover of RAID array md0 [ 3350.852972][T30874] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 3350.855080][T30874] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3350.863353][T30877] md: md0: recover done. [ 3350.922832][T30874] vhci_hcd vhci_hcd.0: Device attached [ 3351.185332][T29483] usb 50-1: SetAddress Request (14) to port 0 [ 3351.285317][T29483] usb 50-1: new SuperSpeed USB device number 14 using vhci_hcd [ 3351.806456][ T5551] Bluetooth: hci1: unexpected event for opcode 0x0403 [ 3352.099296][T30884] md: recover of RAID array md0 [ 3352.100978][T30884] md: md0: recover done. [ 3352.102631][T30879] rdma_rxe: rxe_newlink: failed to add wg2 [ 3352.154644][T30885] netlink: 'syz.5.8681': attribute type 1 has an invalid length. [ 3352.192928][T30887] md: recover of RAID array md0 [ 3352.210911][T30887] md: md0: recover done. [ 3352.256474][T30882] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8681'. [ 3352.265714][T30882] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8681'. [ 3352.274180][T30885] bond2: entered promiscuous mode [ 3352.281375][T30885] 8021q: adding VLAN 0 to HW filter on device bond2 [ 3352.496700][T30891] md: recover of RAID array md0 [ 3352.509447][T30891] md: md0: recover done. [ 3352.530673][T30875] vhci_hcd: connection reset by peer [ 3352.544265][T20633] vhci_hcd vhci_hcd.6: stop threads [ 3352.546355][T20633] vhci_hcd vhci_hcd.6: release socket [ 3352.562458][T20633] vhci_hcd vhci_hcd.6: disconnect device [ 3352.676656][T30894] md: recover of RAID array md0 [ 3352.698821][T30894] md: md0: recover done. [ 3352.796419][T30897] md: recover of RAID array md0 [ 3352.800307][T30897] md: md0: recover done. [ 3352.850799][ T42] kauditd_printk_skb: 41 callbacks suppressed [ 3352.850844][ T42] audit: type=1800 audit(1786559485.602:45196): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=658353 res=0 errno=0 [ 3352.872051][ T42] audit: type=1800 audit(1786559485.612:45197): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=658358 res=0 errno=0 [ 3352.885207][ T42] audit: type=1800 audit(1786559485.612:45198): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=658362 res=0 errno=0 [ 3352.919132][T30882] bond2: (slave bridge1): making interface the new active one [ 3352.937279][T30903] md: recover of RAID array md0 [ 3352.937847][T30882] bridge1: entered promiscuous mode [ 3352.941493][ T42] audit: type=1800 audit(1786559485.612:45199): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=658361 res=0 errno=0 [ 3352.947766][T30903] md: md0: recover done. [ 3352.950091][T30882] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 3352.965342][ T42] audit: type=1800 audit(1786559485.612:45200): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=658364 res=0 errno=0 [ 3353.051168][ T42] audit: type=1800 audit(1786559485.802:45201): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=658573 res=0 errno=0 [ 3353.087012][T30907] md: recover of RAID array md0 [ 3353.103252][T30907] md: md0: recover done. [ 3353.105906][ T42] audit: type=1800 audit(1786559485.832:45202): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=658578 res=0 errno=0 [ 3353.139640][T17553] bridge_slave_1: left allmulticast mode [ 3353.142127][T17553] bridge_slave_1: left promiscuous mode [ 3353.155402][ T42] audit: type=1800 audit(1786559485.832:45203): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=658582 res=0 errno=0 [ 3353.163232][T17553] bridge0: port 2(bridge_slave_1) entered disabled state [ 3353.178013][ T42] audit: type=1800 audit(1786559485.832:45204): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=658581 res=0 errno=0 [ 3353.200316][ T42] audit: type=1800 audit(1786559485.832:45205): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=658584 res=0 errno=0 [ 3353.203352][T17553] bridge_slave_0: left allmulticast mode [ 3353.210109][T30909] md: recover of RAID array md0 [ 3353.213484][T30909] md: md0: recover done. [ 3353.226386][T17553] bridge_slave_0: left promiscuous mode [ 3353.231841][T17553] bridge0: port 1(bridge_slave_0) entered disabled state [ 3353.279420][T30911] md: recover of RAID array md0 [ 3353.281137][T30911] md: md0: recover done. [ 3353.388890][T30913] md: recover of RAID array md0 [ 3353.393880][T30913] md: md0: recover done. [ 3353.525966][T30917] md: recover of RAID array md0 [ 3353.529380][T30917] md: md0: recover done. [ 3353.686110][T30922] md: recover of RAID array md0 [ 3353.687775][T30922] md: md0: recover done. [ 3354.038039][T30926] md: recover of RAID array md0 [ 3354.045891][T30926] md: md0: recover done. [ 3354.232372][T30931] md: recover of RAID array md0 [ 3354.234760][T30931] md: md0: recover done. [ 3354.316452][T30932] md: recover of RAID array md0 [ 3354.320008][T30932] md: md0: recover done. [ 3354.416984][T30933] md: recover of RAID array md0 [ 3354.420842][T30933] md: md0: recover done. [ 3354.460531][T17553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3354.518270][T17553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3354.521500][T30935] md: recover of RAID array md0 [ 3354.523166][T30935] md: md0: recover done. [ 3354.535407][T17553] bond0 (unregistering): Released all slaves [ 3354.574219][T30934] CIFS: Attempting to mount //127.0.0.1/share [ 3354.661642][T30936] md: recover of RAID array md0 [ 3354.679931][T30936] md: md0: recover done. [ 3354.796629][T30939] md: recover of RAID array md0 [ 3354.810058][T30939] md: md0: recover done. [ 3355.023828][T30934] CIFS: VFS: Error connecting to socket. Aborting operation. [ 3355.026350][T30934] CIFS: VFS: cifs_mount failed w/return code = -4 [ 3355.825940][T30947] md: recover of RAID array md0 [ 3355.857324][T30943] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3355.866835][T30947] md: md0: recover done. [ 3357.059743][T29483] usb 50-1: device descriptor read/8, error -110 [ 3357.178260][T30953] md: recover of RAID array md0 [ 3357.196023][T30953] md: md0: recover done. [ 3357.342507][T30956] md: recover of RAID array md0 [ 3357.364247][T30956] md: md0: recover done. [ 3357.454183][T30961] md: recover of RAID array md0 [ 3357.456929][T29483] usb usb50-port1: attempt power cycle [ 3357.473086][T30961] md: md0: recover done. [ 3357.654704][T30687] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 3358.134921][T29483] usb usb50-port1: unable to enumerate USB device [ 3358.470425][T30962] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8690'. [ 3358.613340][T30687] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3358.644776][T30968] md: recover of RAID array md0 [ 3358.654720][T30968] md: md0: recover done. [ 3358.786823][T30972] md: recover of RAID array md0 [ 3358.795042][T30972] md: md0: recover done. [ 3358.923236][T30957] ceph: No mds server is up or the cluster is laggy [ 3358.924079][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 3358.924097][ T42] audit: type=1800 audit(1786559491.672:45211): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=659004 res=0 errno=0 [ 3358.925946][ T40] libceph: connect (1)[c::]:6789 error -101 [ 3358.940250][T30977] md: recover of RAID array md0 [ 3358.949807][T30977] md: md0: recover done. [ 3359.007756][T30687] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 3359.019318][T30981] md: recover of RAID array md0 [ 3359.026699][ T40] libceph: mon0 (1)[c::]:6789 connect error [ 3359.036034][T30981] md: md0: recover done. [ 3359.130548][ T42] audit: type=1800 audit(1786559491.842:45212): pid=30973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.8691" name="hibernate_compression_threads" dev="sysfs" ino=608 res=0 errno=0 [ 3359.146362][T30983] md: recover of RAID array md0 [ 3359.149513][T30983] md: md0: recover done. [ 3359.165313][ T42] audit: type=1800 audit(1786559491.912:45213): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 3359.184587][T30687] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3359.196534][T30687] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 3359.234995][T30687] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3359.278311][T30987] md: recover of RAID array md0 [ 3359.284724][T30987] md: md0: recover done. [ 3359.427088][T30989] md: recover of RAID array md0 [ 3359.429185][T30989] md: md0: recover done. [ 3359.547732][T30991] md: recover of RAID array md0 [ 3359.743674][T30991] md: md0: recover done. [ 3360.730633][T30687] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 3360.748156][T30995] md: recover of RAID array md0 [ 3360.750664][ T42] audit: type=1800 audit(1786559493.502:45214): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=645351 res=0 errno=0 [ 3360.755397][T30995] md: md0: recover done. [ 3360.853580][T30997] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8693'. [ 3360.964349][T30999] md: recover of RAID array md0 [ 3360.988459][T30999] md: md0: recover done. [ 3361.043653][T30687] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3361.056980][ T42] audit: type=1800 audit(1786559493.812:45215): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 3361.190739][T17553] hsr_slave_0: left promiscuous mode [ 3361.207136][T31001] md: recover of RAID array md0 [ 3361.208768][T31001] md: md0: recover done. [ 3361.210564][T17553] hsr_slave_1: left promiscuous mode [ 3361.218548][T17553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3361.227252][T17553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3361.244634][T17553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3361.256767][T17553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3361.306747][T31010] md: recover of RAID array md0 [ 3361.318065][T31010] md: md0: recover done. [ 3361.493520][T31013] md: recover of RAID array md0 [ 3361.497044][T31013] md: md0: recover done. [ 3361.558795][T17553] veth1_macvtap: left promiscuous mode [ 3361.561653][T17553] veth0_macvtap: left promiscuous mode [ 3361.570999][T17553] veth1_vlan: left promiscuous mode [ 3361.579133][T17553] veth0_vlan: left promiscuous mode [ 3361.586597][T31015] md: recover of RAID array md0 [ 3361.588298][T31015] md: md0: recover done. [ 3361.657237][T31017] md: recover of RAID array md0 [ 3361.658952][T31017] md: md0: recover done. [ 3361.729675][T31012] netlink: 14 bytes leftover after parsing attributes in process `syz.5.8694'. [ 3361.759140][T31018] md: recover of RAID array md0 [ 3361.762528][T31018] md: md0: recover done. [ 3361.857640][T31020] md: recover of RAID array md0 [ 3361.859491][T31020] md: md0: recover done. [ 3361.935854][T31023] md: recover of RAID array md0 [ 3361.942089][T31023] md: md0: recover done. [ 3362.000644][T17553] team0 (unregistering): Port device team_slave_1 removed [ 3362.015890][T31024] md: recover of RAID array md0 [ 3362.018675][T31024] md: md0: recover done. [ 3362.019708][T17553] team0 (unregistering): Port device team_slave_0 removed [ 3362.125810][T31025] md: recover of RAID array md0 [ 3362.127779][T31025] md: md0: recover done. [ 3362.227643][T31030] md: recover of RAID array md0 [ 3362.233803][T31030] md: md0: recover done. [ 3362.331490][ T42] audit: type=1800 audit(1786559495.082:45216): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 3362.466618][T31034] md: recover of RAID array md0 [ 3362.485383][T31034] md: md0: recover done. [ 3362.628769][ T42] audit: type=1800 audit(1786559495.382:45217): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 3362.710117][ T42] audit: type=1800 audit(1786559495.402:45218): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=659024 res=0 errno=0 [ 3362.742802][ T42] audit: type=1800 audit(1786559495.422:45219): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=659039 res=0 errno=0 [ 3362.782323][ T42] audit: type=1800 audit(1786559495.442:45220): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=659054 res=0 errno=0 [ 3363.125532][T30687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3363.411646][T31047] md: recover of RAID array md0 [ 3363.425848][T30687] 8021q: adding VLAN 0 to HW filter on device team0 [ 3363.427729][T31047] md: md0: recover done. [ 3363.463020][T30242] bridge0: port 1(bridge_slave_0) entered blocking state [ 3363.466182][T30242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3363.526013][T30242] bridge0: port 2(bridge_slave_1) entered blocking state [ 3363.528684][T30242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3363.631029][T31040] block nbd5: shutting down sockets [ 3363.653047][T31051] md: recover of RAID array md0 [ 3363.667144][T31051] md: md0: recover done. [ 3363.712222][T30687] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3363.718420][T30687] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3363.806936][T31056] md: recover of RAID array md0 [ 3363.810535][T31056] md: md0: recover done. [ 3364.055949][ T5748] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 3364.104167][T31063] md: recover of RAID array md0 [ 3364.109664][T31063] md: md0: recover done. [ 3364.126883][T23461] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 3364.158733][T24606] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 3364.238429][T31066] md: recover of RAID array md0 [ 3364.240203][T31066] md: md0: recover done. [ 3364.245562][ T5748] usb 11-1: Using ep0 maxpacket: 32 [ 3364.288985][T31049] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8698'. [ 3364.301733][T23461] usb 10-1: Using ep0 maxpacket: 16 [ 3364.315724][T23461] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3364.322394][T23461] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3364.327399][T31069] md: recover of RAID array md0 [ 3364.329026][T23461] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3364.336550][T31069] md: md0: recover done. [ 3364.348529][T23461] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3364.362188][T24606] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 3364.369722][T24606] usb 6-1: config 0 has no interfaces? [ 3364.372077][T23461] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 3364.380851][T24606] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3364.389330][T23461] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3364.403468][T23461] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3364.413009][T23461] usb 10-1: Manufacturer: syz [ 3364.421700][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 3364.421710][ T42] audit: type=1800 audit(1786559497.172:45227): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=659277 res=0 errno=0 [ 3364.430556][T23461] usb 10-1: config 0 descriptor?? [ 3364.436435][T24606] usb 6-1: config 0 descriptor?? [ 3364.450950][ T42] audit: type=1800 audit(1786559497.172:45228): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=659306 res=0 errno=0 [ 3364.484231][ T42] audit: type=1800 audit(1786559497.172:45229): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=659284 res=0 errno=0 [ 3364.498703][T31075] md: recover of RAID array md0 [ 3364.503451][T31075] md: md0: recover done. [ 3364.524958][ T42] audit: type=1800 audit(1786559497.172:45230): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=659285 res=0 errno=0 [ 3364.555024][ T42] audit: type=1800 audit(1786559497.192:45231): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=659286 res=0 errno=0 [ 3364.576028][ T42] audit: type=1800 audit(1786559497.202:45232): pid=29612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=659324 res=0 errno=0 [ 3364.582310][ T42] audit: type=1800 audit(1786559497.202:45233): pid=29612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=659354 res=0 errno=0 [ 3364.588598][ T42] audit: type=1800 audit(1786559497.202:45234): pid=29612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=659331 res=0 errno=0 [ 3364.594839][ T42] audit: type=1800 audit(1786559497.202:45235): pid=29612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=659332 res=0 errno=0 [ 3364.610530][ T5748] usb 11-1: unable to get BOS descriptor or descriptor too short [ 3364.613231][ T5748] usb 11-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 3364.617535][T31077] md: recover of RAID array md0 [ 3364.627141][T31077] md: md0: recover done. [ 3364.627856][ T5748] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 3364.639252][ T5748] usb 11-1: can't read configurations, error -71 [ 3364.728420][T31082] md: recover of RAID array md0 [ 3364.730162][T31082] md: md0: recover done. [ 3364.787962][T23461] rc_core: IR keymap rc-hauppauge not found [ 3364.791462][T23461] Registered IR keymap rc-empty [ 3364.799870][T24606] usb 6-1: USB disconnect, device number 10 [ 3364.801022][T31086] md: recover of RAID array md0 [ 3364.807028][T31086] md: md0: recover done. [ 3364.839992][T23461] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3364.865952][T23461] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3364.888487][T23461] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 3364.897831][T31088] md: recover of RAID array md0 [ 3364.901497][T31088] md: md0: recover done. [ 3364.913327][T23461] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input70 [ 3364.935684][T30687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3364.951190][T31058] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8700'. [ 3365.000218][T23461] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3365.026229][T31058] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 3365.029720][T23461] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3365.036289][T31094] md: recover of RAID array md0 [ 3365.039583][T31058] bond3 (unregistering): Released all slaves [ 3365.040217][T31094] md: md0: recover done. [ 3365.055984][T23461] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3365.089768][T23461] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3365.108208][T31095] md: recover of RAID array md0 [ 3365.114659][T31095] md: md0: recover done. [ 3365.117042][T23461] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3365.185654][T23461] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3365.205470][T23461] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3365.218624][T31098] md: recover of RAID array md0 [ 3365.220307][T31098] md: md0: recover done. [ 3365.225428][T23461] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3365.245735][T23461] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3365.265728][T23461] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3365.300349][T23461] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 3365.328693][T23461] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3365.358684][T23461] usb 10-1: USB disconnect, device number 15 [ 3365.365757][T31102] md: recover of RAID array md0 [ 3365.371139][T31102] md: md0: recover done. [ 3365.462334][ T42] audit: type=1800 audit(1786559498.212:45236): pid=29612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=659353 res=0 errno=0 [ 3365.508069][T31109] md: recover of RAID array md0 [ 3365.511475][T31109] md: md0: recover done. [ 3365.605906][T31112] md: recover of RAID array md0 [ 3365.607747][T31112] md: md0: recover done. [ 3365.666187][T31114] md: recover of RAID array md0 [ 3365.667786][T31114] md: md0: recover done. [ 3365.726952][T31115] md: recover of RAID array md0 [ 3365.728877][T31115] md: md0: recover done. [ 3365.795995][T12878] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 3365.798959][T31117] md: recover of RAID array md0 [ 3365.802328][T31117] md: md0: recover done. [ 3365.868786][ T5442] 8021q: adding VLAN 0 to HW filter on device eth2 [ 3365.887025][T31118] md: recover of RAID array md0 [ 3365.890235][T31118] md: md0: recover done. [ 3365.902396][T30687] veth0_vlan: entered promiscuous mode [ 3365.975846][T31119] md: recover of RAID array md0 [ 3365.982859][T30687] veth1_vlan: entered promiscuous mode [ 3365.984852][T31119] md: md0: recover done. [ 3367.177186][T31127] md: recover of RAID array md0 [ 3367.195758][T31127] md: md0: recover done. [ 3367.206510][T30687] veth0_macvtap: entered promiscuous mode [ 3367.239197][T30687] veth1_macvtap: entered promiscuous mode [ 3367.284755][T30687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3367.296372][T31129] md: recover of RAID array md0 [ 3367.304309][T31129] md: md0: recover done. [ 3367.329565][T30687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3367.439845][T31133] md: recover of RAID array md0 [ 3367.460272][T31133] md: md0: recover done. [ 3367.466201][T30944] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3367.488932][T30944] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3367.526571][T17553] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3367.574829][T30944] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3367.690216][T31136] md: recover of RAID array md0 [ 3367.710322][T31136] md: md0: recover done. [ 3367.724136][T30242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3367.766615][T30242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3367.862951][T31138] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 3367.865043][T31138] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3367.884831][T31138] vhci_hcd vhci_hcd.0: Device attached [ 3367.895957][T31141] md: recover of RAID array md0 [ 3367.899856][T31141] md: md0: recover done. [ 3367.902583][ T8583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3367.920943][ T8583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3368.429868][ T5442] 8021q: adding VLAN 0 to HW filter on device eth3 [ 3368.455848][T12878] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 3368.542752][T31148] md: recover of RAID array md0 [ 3368.547885][T31148] md: md0: recover done. [ 3368.677738][T31155] md: recover of RAID array md0 [ 3368.681055][T31155] md: md0: recover done. [ 3368.717378][T31152] ntfs3(nullb0): Primary boot signature is not NTFS. [ 3368.733887][T31152] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 3368.780937][T31159] md: recover of RAID array md0 [ 3368.786190][T31159] md: md0: recover done. [ 3368.827945][T31139] vhci_hcd: connection reset by peer [ 3368.839927][T17553] vhci_hcd vhci_hcd.1: stop threads [ 3368.842875][T17553] vhci_hcd vhci_hcd.1: release socket [ 3368.858775][T17553] vhci_hcd vhci_hcd.1: disconnect device [ 3368.944916][T31164] netlink: 'syz.6.8705': attribute type 1 has an invalid length. [ 3368.953006][T31165] md: recover of RAID array md0 [ 3368.962094][T31165] md: md0: recover done. [ 3368.963587][T31164] netlink: 756 bytes leftover after parsing attributes in process `syz.6.8705'. [ 3369.116827][T31169] md: recover of RAID array md0 [ 3369.139882][T31169] md: md0: recover done. [ 3369.337403][T31172] md: recover of RAID array md0 [ 3369.355449][T31172] md: md0: recover done. [ 3369.559626][ T5442] 8021q: adding VLAN 0 to HW filter on device eth8 [ 3369.606616][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 3369.606628][ T42] audit: type=1800 audit(1786559502.362:45248): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 3369.678653][T31173] md: recover of RAID array md0 [ 3369.702635][T31173] md: md0: recover done. [ 3369.837571][T31177] md: recover of RAID array md0 [ 3369.849225][T31177] md: md0: recover done. [ 3369.990365][T31179] md: recover of RAID array md0 [ 3370.003048][T31179] md: md0: recover done. [ 3370.135736][T31182] md: recover of RAID array md0 [ 3370.142704][T31182] md: md0: recover done. [ 3370.289164][T31184] md: recover of RAID array md0 [ 3370.325301][T31184] md: md0: recover done. [ 3370.425688][T31189] md: recover of RAID array md0 [ 3370.429568][T31189] md: md0: recover done. [ 3370.488041][T31158] syz.5.8706: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 3370.512720][T31158] CPU: 0 UID: 0 PID: 31158 Comm: syz.5.8706 Tainted: G L syzkaller #0 PREEMPT(full) [ 3370.512743][T31158] Tainted: [L]=SOFTLOCKUP [ 3370.512748][T31158] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 3370.512769][T31158] Call Trace: [ 3370.512781][T31158] [ 3370.512788][T31158] dump_stack_lvl+0x100/0x190 [ 3370.512861][T31158] warn_alloc.cold+0x94/0xa8 [ 3370.512911][T31158] ? __pfx_warn_alloc+0x10/0x10 [ 3370.512965][T31158] ? kasan_save_stack+0x3f/0x50 [ 3370.513005][T31158] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 3370.513018][T31158] ? xskq_create+0x52/0x1d0 [ 3370.513090][T31158] ? xsk_setsockopt+0x743/0xab0 [ 3370.513103][T31158] ? do_sock_setsockopt+0xf3/0x1d0 [ 3370.513127][T31158] ? __sys_setsockopt+0x119/0x190 [ 3370.513142][T31158] ? __ia32_sys_setsockopt+0xbc/0x160 [ 3370.513157][T31158] ? __do_fast_syscall_32+0xe7/0x970 [ 3370.513190][T31158] ? do_fast_syscall_32+0x32/0x70 [ 3370.513210][T31158] ? xskq_create+0xfb/0x1d0 [ 3370.513223][T31158] __vmalloc_node_range_noprof+0x136c/0x1630 [ 3370.513247][T31158] ? xskq_create+0xfb/0x1d0 [ 3370.513265][T31158] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 3370.513285][T31158] ? kasan_save_track+0x14/0x30 [ 3370.513302][T31158] ? __kasan_kmalloc+0xaa/0xb0 [ 3370.513340][T31158] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 3370.513355][T31158] ? xskq_create+0xfb/0x1d0 [ 3370.513371][T31158] vmalloc_user_noprof+0x9e/0xe0 [ 3370.513390][T31158] ? xskq_create+0xfb/0x1d0 [ 3370.513406][T31158] xskq_create+0xfb/0x1d0 [ 3370.513424][T31158] xsk_setsockopt+0x743/0xab0 [ 3370.513439][T31158] ? __pfx_aa_sk_perm+0x10/0x10 [ 3370.513531][T31158] ? __pfx_xsk_setsockopt+0x10/0x10 [ 3370.513546][T31158] ? find_held_lock+0x2b/0x80 [ 3370.513565][T31158] ? aa_sock_opt_perm+0xfe/0x1b0 [ 3370.513580][T31158] ? __pfx_xsk_setsockopt+0x10/0x10 [ 3370.513596][T31158] do_sock_setsockopt+0xf3/0x1d0 [ 3370.513620][T31158] __sys_setsockopt+0x119/0x190 [ 3370.513646][T31158] __ia32_sys_setsockopt+0xbc/0x160 [ 3370.513663][T31158] ? __do_fast_syscall_32+0x98/0x970 [ 3370.513682][T31158] ? lockdep_hardirqs_on+0x78/0x100 [ 3370.513701][T31158] __do_fast_syscall_32+0xe7/0x970 [ 3370.513722][T31158] do_fast_syscall_32+0x32/0x70 [ 3370.513741][T31158] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3370.513757][T31158] RIP: 0023:0xf7f73fec [ 3370.513773][T31158] Code: Unable to access opcode bytes at 0xf7f73fc2. [ 3370.513808][T31158] RSP: 002b:00000000f541550c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 3370.513823][T31158] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 000000000000011b [ 3370.513831][T31158] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000029 [ 3370.513840][T31158] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3370.513848][T31158] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 3370.513857][T31158] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3370.513874][T31158] [ 3370.514135][T31158] Mem-Info: [ 3370.568645][ T5442] 8021q: adding VLAN 0 to HW filter on device eth9 [ 3370.621113][T31191] md: recover of RAID array md0 [ 3370.623566][T31191] md: md0: recover done. [ 3370.662308][ T42] audit: type=1800 audit(1786559503.412:45249): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 3370.749229][ T42] audit: type=1800 audit(1786559503.502:45250): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35227 res=0 errno=0 [ 3370.766357][T31195] md: recover of RAID array md0 [ 3370.788807][T31195] md: md0: recover done. [ 3370.819627][ T42] audit: type=1800 audit(1786559503.522:45251): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35250 res=0 errno=0 [ 3370.958377][T31197] md: recover of RAID array md0 [ 3370.971107][T31197] md: md0: recover done. [ 3370.977140][T29482] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 3371.150185][T31201] md: recover of RAID array md0 [ 3371.156226][T29482] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3371.159769][T31201] md: md0: recover done. [ 3371.163124][T29482] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3371.165234][T31158] active_anon:9731 inactive_anon:1924 isolated_anon:0 [ 3371.165234][T31158] active_file:2487 inactive_file:15328 isolated_file:0 [ 3371.165234][T31158] unevictable:1000 dirty:577 writeback:0 [ 3371.165234][T31158] slab_reclaimable:7200 slab_unreclaimable:69511 [ 3371.165234][T31158] mapped:27403 shmem:6797 pagetables:1468 [ 3371.165234][T31158] sec_pagetables:359 bounce:0 [ 3371.165234][T31158] kernel_misc_reclaimable:0 [ 3371.165234][T31158] free:47554 free_pcp:3109 free_cma:0 [ 3371.167677][T29482] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3371.195200][T31158] Node 0 active_anon:208kB inactive_anon:108kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6080kB pagetables:1132kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 3371.215181][T31158] Node 1 active_anon:38716kB inactive_anon:7588kB active_file:9948kB inactive_file:61312kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:106524kB dirty:2308kB writeback:0kB shmem:27188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8908kB pagetables:4740kB sec_pagetables:296kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 3371.243622][T29482] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3371.245209][T31158] Node 0 DMA free:3244kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3371.265186][T31158] lowmem_reserve[]: 0 280 280 280 280 [ 3371.266200][T31194] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 3371.269086][T31158] Node 0 DMA32 free:41356kB boost:28740kB min:41516kB low:44708kB high:47900kB reserved_highatomic:0KB free_highatomic:0KB active_anon:208kB inactive_anon:108kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:748kB present:1032196kB managed:287068kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3371.270141][T31202] md: recover of RAID array md0 [ 3371.313698][T31158] lowmem_reserve[]: 0 0 0 0 0 [ 3371.314797][T29482] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 3371.316013][T31158] Node 1 DMA32 free:145616kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33956kB inactive_anon:7588kB active_file:9948kB inactive_file:61312kB unevictable:4000kB writepending:2308kB zspages:4812kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:18144kB local_pcp:1748kB free_cma:0kB [ 3371.316055][T31158] lowmem_reserve[]: 0 0 0 [ 3371.323169][ T42] audit: type=1800 audit(1786559504.062:45252): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=660054 res=0 errno=0 [ 3371.361093][T31202] md: md0: recover done. [ 3371.362581][T31158] 0 0 [ 3371.364136][T31158] Node 0 DMA: 217*4kB (U) 23*8kB (U) 7*16kB (U) 15*32kB (U) 7*64kB (U) 3*128kB (U) 1*256kB (U) [ 3371.419023][ T42] audit: type=1800 audit(1786559504.062:45253): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=660083 res=0 errno=0 [ 3371.443129][T31158] 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 3244kB [ 3371.446434][T31158] Node 0 DMA32: 1715*4kB (UME) 570*8kB (UME) 279*16kB (UME) 252*32kB (UME) 92*64kB (UME) 32*128kB (UME) 9*256kB (UME) 8*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 41356kB [ 3371.471881][T31158] Node 1 DMA32: 0*4kB 1759*8kB (U) 1830*16kB (UE) 1016*32kB (UE) 516*64kB (U) 75*128kB (U) 36*256kB (U) 34*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 145112kB [ 3371.480564][ T42] audit: type=1800 audit(1786559504.062:45254): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=660061 res=0 errno=0 [ 3371.544823][ T42] audit: type=1800 audit(1786559504.062:45255): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=660062 res=0 errno=0 [ 3371.591636][T31206] md: recover of RAID array md0 [ 3371.593647][T31206] md: md0: recover done. [ 3371.721736][T31205] x_tables: duplicate underflow at hook 1 [ 3371.778148][T31158] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3371.907190][ T42] audit: type=1800 audit(1786559504.112:45256): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=660063 res=0 errno=0 [ 3371.909518][ T5551] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 3371.930169][ T42] audit: type=1800 audit(1786559504.112:45257): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=660103 res=0 errno=0 [ 3371.943544][T31158] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3371.955375][T31158] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3371.961711][T31158] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 3371.968702][T31158] 21762 total pagecache pages [ 3371.972002][T31158] 975 pages in swap cache [ 3371.973469][T31158] Free swap = 107884kB [ 3371.985230][T31158] Total swap = 124996kB [ 3371.986690][T31158] 524155 pages RAM [ 3371.987969][T31158] 0 pages HighMem/MovableOnly [ 3371.991238][T31158] 211495 pages reserved [ 3371.992682][T31158] 0 pages cma reserved [ 3372.595377][T31224] md: recover of RAID array md0 [ 3372.599296][T31224] md: md0: recover done. [ 3372.618675][T31221] UDC core: g1: couldn't find an available UDC or it's busy [ 3372.726842][T31225] md: recover of RAID array md0 [ 3372.730071][T31225] md: md0: recover done. [ 3372.780986][T29482] usb 13-1: USB disconnect, device number 9 [ 3372.937263][T31227] md: recover of RAID array md0 [ 3372.942553][T31227] md: md0: recover done. [ 3373.049874][T31228] md: recover of RAID array md0 [ 3373.051588][T31228] md: md0: recover done. [ 3373.145953][T31231] md: recover of RAID array md0 [ 3373.147892][T31231] md: md0: recover done. [ 3373.796481][T12878] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 3373.839285][T31237] md: recover of RAID array md0 [ 3373.850274][T31235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8713'. [ 3373.855423][T31237] md: md0: recover done. [ 3373.876834][T31235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8713'. [ 3374.376142][T31235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8713'. [ 3374.410379][T31235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8713'. [ 3374.413791][T31235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8713'. [ 3374.436432][T31246] md: recover of RAID array md0 [ 3374.457440][T31246] md: md0: recover done. [ 3374.595644][T31249] md: recover of RAID array md0 [ 3374.600908][T31249] md: md0: recover done. [ 3374.629657][T31241] usb 1-1: USB disconnect, device number 2 [ 3374.698630][T31251] md: recover of RAID array md0 [ 3374.708901][T31251] md: md0: recover done. [ 3374.757670][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 3374.757682][ T42] audit: type=1800 audit(1786559507.512:45278): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 3374.815736][T29483] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 3374.855850][T31255] md: recover of RAID array md0 [ 3374.859109][T31255] md: md0: recover done. [ 3374.956416][T31256] md: recover of RAID array md0 [ 3374.961180][T31256] md: md0: recover done. [ 3374.975252][T29483] usb 13-1: Using ep0 maxpacket: 16 [ 3375.079760][T31248] syz_tun: entered allmulticast mode [ 3375.119411][T31257] md: recover of RAID array md0 [ 3375.125590][T31257] md: md0: recover done. [ 3375.138555][T29482] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 3375.157751][T31248] dvmrp8: entered allmulticast mode [ 3375.231456][T29483] usb 13-1: unable to get BOS descriptor or descriptor too short [ 3375.298047][T29482] usb 6-1: Using ep0 maxpacket: 32 [ 3375.317323][T31261] md: recover of RAID array md0 [ 3375.322290][T29483] usb 13-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 3375.325188][T31261] md: md0: recover done. [ 3375.329668][T29482] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 3375.356254][T29482] usb 6-1: config 0 has no interfaces? [ 3375.358141][T29483] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 3375.370193][T29482] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3375.377560][T29483] usb 13-1: can't read configurations, error -71 [ 3375.395083][T29482] usb 6-1: config 0 descriptor?? [ 3375.404199][T31262] md: recover of RAID array md0 [ 3375.407413][ T42] audit: type=1800 audit(1786559508.162:45279): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=660388 res=0 errno=0 [ 3375.408227][T31262] md: md0: recover done. [ 3375.440599][ T42] audit: type=1800 audit(1786559508.162:45280): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=660417 res=0 errno=0 [ 3375.466124][ T42] audit: type=1800 audit(1786559508.172:45281): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=660395 res=0 errno=0 [ 3375.485737][ T42] audit: type=1800 audit(1786559508.172:45282): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=660396 res=0 errno=0 [ 3375.508317][ T42] audit: type=1800 audit(1786559508.182:45283): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=660397 res=0 errno=0 [ 3375.798591][T29482] usb 6-1: USB disconnect, device number 11 [ 3375.843640][ T42] audit: type=1800 audit(1786559508.592:45284): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 3375.892904][T31265] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8718'. [ 3375.914996][T31265] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8718'. [ 3375.940981][T31265] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8718'. [ 3375.948221][T31269] md: recover of RAID array md0 [ 3375.962658][T31269] md: md0: recover done. [ 3375.997228][ T42] audit: type=1800 audit(1786559508.752:45285): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 3376.042239][T31265] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8718'. [ 3376.071481][T31265] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8718'. [ 3376.126209][T31275] md: recover of RAID array md0 [ 3376.130443][T31275] md: md0: recover done. [ 3376.205819][T31276] md: recover of RAID array md0 [ 3376.207560][T31276] md: md0: recover done. [ 3376.215253][T29483] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 3376.339724][T31278] md: recover of RAID array md0 [ 3376.353465][T31278] md: md0: recover done. [ 3376.388383][T29483] usb 13-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 3376.422410][T29483] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3376.426549][ T42] audit: type=1800 audit(1786559509.172:45286): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 3376.446814][T29482] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 3376.457600][T29483] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 3376.509781][T29483] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3376.515633][T29483] usb 13-1: Product: syz [ 3376.524097][T29483] usb 13-1: Manufacturer: syz [ 3376.532788][T29483] usb 13-1: SerialNumber: syz [ 3376.545670][ T42] audit: type=1800 audit(1786559509.302:45287): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=660548 res=0 errno=0 [ 3376.596315][T31283] md: recover of RAID array md0 [ 3376.601941][T31283] md: md0: recover done. [ 3376.636075][T29482] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 3377.401095][T29482] usb 10-1: config 0 has no interfaces? [ 3377.937513][T29482] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3377.955090][T29482] usb 10-1: config 0 descriptor?? [ 3377.991876][T31288] md: recover of RAID array md0 [ 3378.000344][T31288] md: md0: recover done. [ 3378.307412][T31289] md: recover of RAID array md0 [ 3378.318908][T31289] md: md0: recover done. [ 3378.623207][ T40] usb 10-1: USB disconnect, device number 16 [ 3379.231897][T31293] md: recover of RAID array md0 [ 3379.267791][T31293] md: md0: recover done. [ 3379.531445][T31280] team0: No ports can be present during mode change [ 3379.565349][T29483] usblp 13-1:1.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 3379.601551][T31296] md: recover of RAID array md0 [ 3379.623193][T29483] usb 13-1: USB disconnect, device number 11 [ 3379.628227][T31296] md: md0: recover done. [ 3379.660780][T29483] usblp0: removed [ 3380.465418][T31303] Invalid ELF header magic: != ELF [ 3380.598547][T29482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3380.602686][T29482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3380.604408][T31305] md: recover of RAID array md0 [ 3380.608004][T31305] md: md0: recover done. [ 3380.687573][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 3380.687586][ T42] audit: type=1800 audit(1786559513.442:45301): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16841 res=0 errno=0 [ 3380.742304][ T42] audit: type=1800 audit(1786559513.472:45302): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 3380.826145][T31309] md: recover of RAID array md0 [ 3380.831009][T31309] md: md0: recover done. [ 3380.875350][ T40] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 3381.370286][ T40] usb 10-1: Using ep0 maxpacket: 32 [ 3381.448502][T31314] md: recover of RAID array md0 [ 3381.643873][ T42] audit: type=1800 audit(1786559514.362:45303): pid=31312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.8725" name="unbind" dev="sysfs" ino=27583 res=0 errno=0 [ 3381.899486][T29482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3381.904911][T26580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3381.948213][ T40] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 3381.989247][T31314] md: md0: recover done. [ 3382.022641][T31312] ehci-pci 0000:00:1d.7: remove, state 4 [ 3382.030339][ T40] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 3382.039615][T31312] usb usb1: USB disconnect, device number 1 [ 3382.050530][ T42] audit: type=1800 audit(1786559514.772:45304): pid=31316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8733" name="scheduler" dev="sysfs" ino=22363 res=0 errno=0 [ 3382.071225][ T40] usb 10-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 3382.113560][ T40] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3382.124678][ T42] audit: type=1800 audit(1786559514.862:45305): pid=31319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.8725" name="bind" dev="sysfs" ino=27584 res=0 errno=0 [ 3382.145589][ T40] usb 10-1: Product: syz [ 3382.146851][ T40] usb 10-1: Manufacturer: syz [ 3382.678732][T31312] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 3382.810462][ T40] usb 10-1: SerialNumber: syz [ 3382.981834][T26580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3383.215287][ T42] audit: type=1800 audit(1786559515.962:45306): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=660756 res=0 errno=0 [ 3383.237419][T31316] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 3383.252307][ T40] usb 10-1: can't set config #4, error -71 [ 3383.275310][ T5748] usb 2-1: new full-speed USB device number 2 using uhci_hcd [ 3383.286848][ T42] audit: type=1800 audit(1786559515.982:45307): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=660788 res=0 errno=0 [ 3383.325633][ T40] usb 10-1: USB disconnect, device number 17 [ 3383.349066][T31316] overlayfs: failed to set xattr on upper [ 3383.367558][ T42] audit: type=1800 audit(1786559515.982:45308): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=660763 res=0 errno=0 [ 3383.379207][T31316] overlayfs: ...falling back to redirect_dir=nofollow. [ 3383.400697][T31316] overlayfs: ...falling back to index=off. [ 3383.414638][T31316] overlayfs: conflicting lowerdir path [ 3383.432755][ T42] audit: type=1800 audit(1786559515.982:45309): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=660764 res=0 errno=0 [ 3383.466796][ T42] audit: type=1800 audit(1786559516.062:45310): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 3383.619084][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3383.755869][ T40] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 3383.923844][ T40] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3383.934410][ T40] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3383.950234][ T40] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3383.974573][ T40] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3383.999460][ T40] usb 10-1: config 0 descriptor?? [ 3384.018692][T11684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3384.021027][ T40] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 3384.065198][ T5748] usb 2-1: not running at top speed; connect to a high speed hub [ 3384.068313][ T5748] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 3384.331432][ T5748] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 3384.334676][ T5748] usb 2-1: Product: QEMU USB Tablet [ 3384.336525][ T5748] usb 2-1: Manufacturer: QEMU [ 3384.338057][ T5748] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 3384.450192][T31330] md: recover of RAID array md0 [ 3384.462455][T31330] md: md0: recover done. [ 3385.028725][T12878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3385.154833][T31339] md: recover of RAID array md0 [ 3385.208833][T12125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3385.268555][T31339] md: md0: recover done. [ 3385.375888][T31342] md: recover of RAID array md0 [ 3385.386238][T31342] md: md0: recover done. [ 3385.728710][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 3385.728723][ T42] audit: type=1800 audit(1786559518.482:45326): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=661038 res=0 errno=0 [ 3385.737565][T23461] libceph: connect (1)[c::]:6789 error -101 [ 3385.893990][T23461] libceph: mon0 (1)[c::]:6789 connect error [ 3385.919247][ T5748] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.000C/input/input72 [ 3386.037368][T31349] md: recover of RAID array md0 [ 3386.047005][T31349] md: md0: recover done. [ 3386.165552][T23461] libceph: connect (1)[c::]:6789 error -101 [ 3386.170210][T23461] libceph: mon0 (1)[c::]:6789 connect error [ 3386.326503][T31340] ceph: No mds server is up or the cluster is laggy [ 3386.382908][T12125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3386.505484][ T42] audit: type=1800 audit(1786559519.252:45327): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 3386.789517][ T5748] hid-generic 0003:0627:0001.000C: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 3387.088408][T31334] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8727'. [ 3387.119563][ T42] audit: type=1800 audit(1786559519.872:45328): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=660974 res=0 errno=0 [ 3387.128183][T31356] md: recover of RAID array md0 [ 3387.337848][T31356] md: md0: recover done. [ 3387.510578][T12125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3387.645353][ T42] audit: type=1800 audit(1786559519.872:45329): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=660975 res=0 errno=0 [ 3387.778628][ T42] audit: type=1800 audit(1786559519.872:45330): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=660954 res=0 errno=0 [ 3387.839759][ T42] audit: type=1800 audit(1786559519.932:45331): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=660976 res=0 errno=0 [ 3387.851939][T31319] usb 2-1: USB disconnect, device number 2 [ 3388.100314][T29483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3388.163399][ T42] audit: type=1800 audit(1786559520.912:45332): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=483408 res=0 errno=0 [ 3388.238528][T31363] md: recover of RAID array md0 [ 3388.250273][T31363] md: md0: recover done. [ 3388.497518][T31354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8730'. [ 3388.506952][T31354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8730'. [ 3388.510311][T31354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8730'. [ 3388.513507][T31354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8730'. [ 3388.516660][T31354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8730'. [ 3388.626139][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3388.634114][T29483] usb 10-1: USB disconnect, device number 18 [ 3388.727749][T31319] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 3388.729935][ T42] audit: type=1800 audit(1786559521.482:45333): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 3388.782888][T31319] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 3388.841409][T31319] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 3388.871426][ T42] audit: type=1800 audit(1786559521.612:45334): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=661167 res=0 errno=0 [ 3388.910581][T31319] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 3388.932656][T31319] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 3388.951254][T31370] md: recover of RAID array md0 [ 3388.961000][T31370] md: md0: recover done. [ 3388.965608][T31319] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 3388.985827][T31319] usb usb1: Product: EHCI Host Controller [ 3389.001051][ T42] audit: type=1800 audit(1786559521.752:45335): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 3389.014772][T31319] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 3389.029659][T31319] usb usb1: SerialNumber: 0000:00:1d.7 [ 3389.216797][T31319] hub 1-0:1.0: USB hub found [ 3389.228428][T31378] md: recover of RAID array md0 [ 3389.231957][T31319] hub 1-0:1.0: 6 ports detected [ 3389.247061][T31378] md: md0: recover done. [ 3389.380499][T31319] hub 3-0:1.0: USB hub found [ 3389.419107][T31319] hub 3-0:1.0: 2 ports detected [ 3389.625473][T12878] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 3389.669259][T31319] hub 4-0:1.0: USB hub found [ 3389.704742][T31319] hub 4-0:1.0: 2 ports detected [ 3389.757344][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3389.766759][T31385] md: recover of RAID array md0 [ 3389.785487][T31385] md: md0: recover done. [ 3389.966439][T31386] tmpfs: Bad value for 'mpol' [ 3389.980153][T12878] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 3390.027840][T12875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3390.082499][T12878] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 3390.087062][T31319] hub 2-0:1.0: USB hub found [ 3390.119139][T31319] hub 2-0:1.0: 2 ports detected [ 3390.120733][T12878] usb 1-1: Product: QEMU USB Tablet [ 3390.154066][T31362] fido_id[31362]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/report_descriptor': No such file or directory [ 3390.163426][T12878] usb 1-1: Manufacturer: QEMU [ 3390.199563][T12878] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 3390.330113][T12878] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.000D/input/input73 [ 3390.388393][T31390] md: recover of RAID array md0 [ 3390.406059][T31390] md: md0: recover done. [ 3390.729765][T12878] hid-generic 0003:0627:0001.000D: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 3390.881656][T31394] md: recover of RAID array md0 [ 3390.896866][ T42] kauditd_printk_skb: 45 callbacks suppressed [ 3390.896878][ T42] audit: type=1326 audit(1786559523.652:45381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31368 comm="syz.5.8732" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 3390.908950][T31394] md: md0: recover done. [ 3390.981856][ T42] audit: type=1326 audit(1786559523.672:45382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31368 comm="syz.5.8732" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 3390.987426][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3391.135907][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3391.140790][ T42] audit: type=1326 audit(1786559523.672:45383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31368 comm="syz.5.8732" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 3391.152342][T31376] bridge1: entered promiscuous mode [ 3391.173041][T31376] bridge1: entered allmulticast mode [ 3391.177559][T31398] md: recover of RAID array md0 [ 3391.208261][T31398] md: md0: recover done. [ 3391.223129][ T42] audit: type=1326 audit(1786559523.702:45384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31368 comm="syz.5.8732" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 3391.259464][T31399] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8735'. [ 3391.313989][T31399] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8735'. [ 3391.329318][ T42] audit: type=1326 audit(1786559523.702:45385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31368 comm="syz.5.8732" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 3391.371136][T31399] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8735'. [ 3391.410593][T31400] 9p: Bad value for 'version' [ 3391.437680][ T42] audit: type=1326 audit(1786559523.972:45386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31368 comm="syz.5.8732" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 3391.480854][T31399] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8735'. [ 3391.495025][T31402] md: recover of RAID array md0 [ 3391.524902][T31402] md: md0: recover done. [ 3391.581984][ T42] audit: type=1326 audit(1786559523.972:45387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31368 comm="syz.5.8732" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 3391.726939][ T42] audit: type=1326 audit(1786559523.972:45388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31368 comm="syz.5.8732" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 3391.873684][ T42] audit: type=1326 audit(1786559523.972:45389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31368 comm="syz.5.8732" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 3391.903653][T31409] md: recover of RAID array md0 [ 3391.932149][T31409] md: md0: recover done. [ 3391.995377][ T42] audit: type=1326 audit(1786559523.972:45390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31368 comm="syz.5.8732" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73fec code=0x7ffc0000 [ 3392.035274][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3392.051351][T31405] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 3392.051371][T31405] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3392.051425][T31405] vhci_hcd vhci_hcd.0: Device attached [ 3392.735533][ T40] usb 50-1: SetAddress Request (18) to port 0 [ 3393.058813][ T5748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3393.129055][ T40] usb 50-1: new SuperSpeed USB device number 18 using vhci_hcd [ 3393.264273][T31419] md: recover of RAID array md0 [ 3393.299034][T31419] md: md0: recover done. [ 3393.650447][T31418] [ 3393.651508][T31418] ====================================================== [ 3393.654342][T31418] WARNING: possible circular locking dependency detected [ 3393.657034][T31418] syzkaller #0 Tainted: G L [ 3393.659034][T31418] ------------------------------------------------------ [ 3393.661170][T31418] syz.8.8738/31418 is trying to acquire lock: [ 3393.663036][T31418] ffffffff90b4a8c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 3393.665459][T31418] [ 3393.665459][T31418] but task is already holding lock: [ 3393.667690][T31418] ffff88805e8b8c60 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 3393.670289][T31418] [ 3393.670289][T31418] which lock already depends on the new lock. [ 3393.670289][T31418] [ 3393.673480][T31418] [ 3393.673480][T31418] the existing dependency chain (in reverse order) is: [ 3393.676323][T31418] [ 3393.676323][T31418] -> #5 (&pipe->mutex){+.+.}-{4:4}: [ 3393.678623][T31418] lock_acquire+0x1b9/0x370 [ 3393.680220][T31418] __mutex_lock+0x1a4/0x1bd0 [ 3393.681939][T31418] anon_pipe_write+0x25e/0x1d90 [ 3393.683595][T31418] __kernel_write_iter+0x6bb/0x930 [ 3393.685351][T31418] __kernel_write+0xf6/0x140 [ 3393.686903][T31418] autofs_notify_daemon+0x50d/0xd90 [ 3393.688682][T31418] autofs_wait+0x10fd/0x1b50 [ 3393.690280][T31418] autofs_mount_wait+0x132/0x3b0 [ 3393.691930][T31418] autofs_d_automount+0x490/0x950 [ 3393.693616][T31418] __traverse_mounts+0x1b9/0x8a0 [ 3393.695651][T31418] step_into_slowpath+0xb7e/0xf90 [ 3393.697421][T31418] path_lookupat+0x58b/0xc40 [ 3393.699045][T31418] filename_lookup+0x202/0x590 [ 3393.700660][T31418] user_path_at+0x3c/0x60 [ 3393.702141][T31418] __ia32_sys_mount+0x1fb/0x310 [ 3393.703782][T31418] __do_fast_syscall_32+0xe7/0x970 [ 3393.705528][T31418] do_fast_syscall_32+0x32/0x70 [ 3393.707178][T31418] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3393.709266][T31418] [ 3393.709266][T31418] -> #4 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 3393.711689][T31418] lock_acquire+0x1b9/0x370 [ 3393.713255][T31418] __mutex_lock+0x1a4/0x1bd0 [ 3393.714861][T31418] autofs_notify_daemon+0x4f8/0xd90 [ 3393.716632][T31418] autofs_wait+0x10fd/0x1b50 [ 3393.718223][T31418] autofs_mount_wait+0x132/0x3b0 [ 3393.719927][T31418] autofs_d_automount+0x490/0x950 [ 3393.721648][T31418] __traverse_mounts+0x1b9/0x8a0 [ 3393.723345][T31418] step_into_slowpath+0xb7e/0xf90 [ 3393.725102][T31418] path_lookupat+0x58b/0xc40 [ 3393.726713][T31418] filename_lookup+0x202/0x590 [ 3393.728355][T31418] kern_path+0x37/0x50 [ 3393.729829][T31418] lookup_bdev+0xd8/0x280 [ 3393.731397][T31418] resume_store+0x1d6/0x460 [ 3393.732962][T31418] kobj_attr_store+0x58/0x80 [ 3393.734640][T31418] sysfs_kf_write+0xf2/0x150 [ 3393.736306][T31418] kernfs_fop_write_iter+0x3e0/0x5f0 [ 3393.738126][T31418] vfs_write+0x6ac/0x1050 [ 3393.739675][T31418] ksys_write+0x12a/0x250 [ 3393.741195][T31418] __do_fast_syscall_32+0xe7/0x970 [ 3393.742965][T31418] do_fast_syscall_32+0x32/0x70 [ 3393.744665][T31418] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3393.746773][T31418] [ 3393.746773][T31418] -> #3 (&of->mutex){+.+.}-{4:4}: [ 3393.749009][T31418] lock_acquire+0x1b9/0x370 [ 3393.750620][T31418] __mutex_lock+0x1a4/0x1bd0 [ 3393.752235][T31418] kernfs_seq_start+0x4f/0x2a0 [ 3393.753894][T31418] seq_read_iter+0x2c1/0x1270 [ 3393.756050][T31418] kernfs_fop_read_iter+0x46c/0x610 [ 3393.758362][T31418] copy_splice_read+0x4ba/0xbb0 [ 3393.760577][T31418] do_splice_read+0x285/0x370 [ 3393.762677][T31418] splice_direct_to_actor+0x2a1/0xa30 [ 3393.765089][T31418] do_splice_direct+0x174/0x240 [ 3393.767042][T31418] do_sendfile+0xadc/0xe20 [ 3393.768673][T31418] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 3393.770644][T31418] __do_fast_syscall_32+0xe7/0x970 [ 3393.772392][T31418] do_fast_syscall_32+0x32/0x70 [ 3393.774130][T31418] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3393.776230][T31418] [ 3393.776230][T31418] -> #2 (&p->lock){+.+.}-{4:4}: [ 3393.778446][T31418] lock_acquire+0x1b9/0x370 [ 3393.780029][T31418] __mutex_lock+0x1a4/0x1bd0 [ 3393.781606][T31418] seq_read_iter+0xe1/0x1270 [ 3393.783243][T31418] kernfs_fop_read_iter+0x46c/0x610 [ 3393.785147][T31418] __kernel_read+0x397/0xad0 [ 3393.787207][T31418] integrity_kernel_read+0x7e/0xb0 [ 3393.789445][T31418] ima_calc_file_hash_tfm+0x25e/0x350 [ 3393.791555][T31418] ima_calc_file_hash+0x1e3/0x380 [ 3393.793288][T31418] ima_collect_measurement+0x94f/0xb30 [ 3393.795204][T31418] process_measurement+0xdfe/0x2350 [ 3393.796909][T31418] ima_file_check+0xcc/0x120 [ 3393.798512][T31418] security_file_post_open+0xc4/0x210 [ 3393.800318][T31418] path_openat+0x985/0x4280 [ 3393.802062][T31418] do_file_open+0x20e/0x430 [ 3393.803734][T31418] do_sys_openat2+0x10f/0x1e0 [ 3393.805431][T31418] __x64_sys_openat+0x12d/0x210 [ 3393.807123][T31418] do_syscall_64+0x115/0x840 [ 3393.809043][T31418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3393.811656][T31418] [ 3393.811656][T31418] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 3393.814991][T31418] lock_acquire+0x1b9/0x370 [ 3393.816589][T31418] __mutex_lock+0x1a4/0x1bd0 [ 3393.818293][T31418] process_measurement+0x5ab/0x2350 [ 3393.820657][T31418] ima_file_check+0xcc/0x120 [ 3393.822768][T31418] security_file_post_open+0xc4/0x210 [ 3393.825176][T31418] path_openat+0x985/0x4280 [ 3393.827274][T31418] do_file_open_root+0x2f6/0x5a0 [ 3393.829507][T31418] file_open_root+0x1c6/0x3f0 [ 3393.831630][T31418] kernel_read_file_from_path_initns+0x189/0x260 [ 3393.834472][T31418] _request_firmware+0x733/0x13c0 [ 3393.836737][T31418] request_firmware+0x35/0x50 [ 3393.838850][T31418] reg_reload_regdb+0x85/0x460 [ 3393.841055][T31418] genl_family_rcv_msg_doit+0x214/0x300 [ 3393.843536][T31418] genl_rcv_msg+0x560/0x800 [ 3393.845542][T31418] netlink_rcv_skb+0x159/0x420 [ 3393.847612][T31418] genl_rcv+0x28/0x40 [ 3393.849419][T31418] netlink_unicast+0x585/0x850 [ 3393.851544][T31418] netlink_sendmsg+0x8b0/0xda0 [ 3393.853597][T31418] ____sys_sendmsg+0xa4d/0xbe0 [ 3393.855637][T31418] ___sys_sendmsg+0x190/0x1e0 [ 3393.857485][T31418] __sys_sendmsg+0x160/0x210 [ 3393.859092][T31418] __do_fast_syscall_32+0xe7/0x970 [ 3393.860860][T31418] do_fast_syscall_32+0x32/0x70 [ 3393.862588][T31418] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3393.864916][T31418] [ 3393.864916][T31418] -> #0 (cb_lock){++++}-{4:4}: [ 3393.867636][T31418] check_prev_add+0xeb/0xe60 [ 3393.869623][T31418] __lock_acquire+0x136c/0x1a40 [ 3393.871326][T31418] lock_acquire+0x1b9/0x370 [ 3393.873387][T31418] down_read+0x99/0x4c0 [ 3393.875319][T31418] genl_rcv+0x19/0x40 [ 3393.877157][T31418] netlink_unicast+0x585/0x850 [ 3393.879357][T31418] netlink_sendmsg+0x8b0/0xda0 [ 3393.881323][T31418] sock_sendmsg+0x394/0x410 [ 3393.883122][T31418] splice_to_socket+0xb3c/0x11a0 [ 3393.884874][T31418] do_splice+0x109c/0x1f90 [ 3393.886507][T31418] __do_splice+0x33b/0x370 [ 3393.888087][T31418] __ia32_sys_splice+0x189/0x250 [ 3393.889882][T31418] do_int80_emulation+0x14b/0x720 [ 3393.891680][T31418] asm_int80_emulation+0x1a/0x20 [ 3393.893495][T31418] [ 3393.893495][T31418] other info that might help us debug this: [ 3393.893495][T31418] [ 3393.896703][T31418] Chain exists of: [ 3393.896703][T31418] cb_lock --> &sbi->pipe_mutex --> &pipe->mutex [ 3393.896703][T31418] [ 3393.900574][T31418] Possible unsafe locking scenario: [ 3393.900574][T31418] [ 3393.903007][T31418] CPU0 CPU1 [ 3393.905162][T31418] ---- ---- [ 3393.907362][T31418] lock(&pipe->mutex); [ 3393.909004][T31418] lock(&sbi->pipe_mutex); [ 3393.911818][T31418] lock(&pipe->mutex); [ 3393.914506][T31418] rlock(cb_lock); [ 3393.916049][T31418] [ 3393.916049][T31418] *** DEADLOCK *** [ 3393.916049][T31418] [ 3393.918872][T31418] 1 lock held by syz.8.8738/31418: [ 3393.920940][T31418] #0: ffff88805e8b8c60 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 3393.924503][T31418] [ 3393.924503][T31418] stack backtrace: [ 3393.926563][T31418] CPU: 2 UID: 0 PID: 31418 Comm: syz.8.8738 Tainted: G L syzkaller #0 PREEMPT(full) [ 3393.926583][T31418] Tainted: [L]=SOFTLOCKUP [ 3393.926587][T31418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 3393.926596][T31418] Call Trace: [ 3393.926602][T31418] [ 3393.926608][T31418] dump_stack_lvl+0x100/0x190 [ 3393.926626][T31418] print_circular_bug.cold+0x178/0x1c7 [ 3393.926646][T31418] check_noncircular+0x146/0x160 [ 3393.926667][T31418] check_prev_add+0xeb/0xe60 [ 3393.926685][T31418] __lock_acquire+0x136c/0x1a40 [ 3393.926697][T31418] lock_acquire+0x1b9/0x370 [ 3393.926706][T31418] ? genl_rcv+0x19/0x40 [ 3393.926720][T31418] ? __pfx___might_resched+0x10/0x10 [ 3393.926738][T31418] down_read+0x99/0x4c0 [ 3393.926755][T31418] ? genl_rcv+0x19/0x40 [ 3393.926768][T31418] ? __pfx_down_read+0x10/0x10 [ 3393.926785][T31418] ? netlink_deliver_tap+0x1ae/0xcc0 [ 3393.926798][T31418] genl_rcv+0x19/0x40 [ 3393.926810][T31418] netlink_unicast+0x585/0x850 [ 3393.926824][T31418] ? __pfx_netlink_unicast+0x10/0x10 [ 3393.926835][T31418] ? __build_skb_around+0x278/0x390 [ 3393.926850][T31418] ? is_vmalloc_addr+0x86/0xa0 [ 3393.926863][T31418] netlink_sendmsg+0x8b0/0xda0 [ 3393.926876][T31418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3393.926889][T31418] ? apparmor_socket_sendmsg+0x15b/0x270 [ 3393.926907][T31418] sock_sendmsg+0x394/0x410 [ 3393.926926][T31418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3393.926949][T31418] ? __pfx_sock_sendmsg+0x10/0x10 [ 3393.926984][T31418] splice_to_socket+0xb3c/0x11a0 [ 3393.927014][T31418] ? __pfx_splice_to_socket+0x10/0x10 [ 3393.927048][T31418] ? apparmor_file_permission+0x13f/0x1c0 [ 3393.927070][T31418] ? bpf_lsm_file_permission+0x9/0x10 [ 3393.927102][T31418] ? security_file_permission+0x76/0x210 [ 3393.927120][T31418] ? __pfx_splice_to_socket+0x10/0x10 [ 3393.927135][T31418] do_splice+0x109c/0x1f90 [ 3393.927149][T31418] ? __lock_acquire+0x49f/0x1a40 [ 3393.927164][T31418] ? __pfx_do_splice+0x10/0x10 [ 3393.927176][T31418] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 3393.927189][T31418] ? find_held_lock+0x2b/0x80 [ 3393.927207][T31418] __do_splice+0x33b/0x370 [ 3393.927221][T31418] ? __pfx___do_splice+0x10/0x10 [ 3393.927235][T31418] __ia32_sys_splice+0x189/0x250 [ 3393.927247][T31418] do_int80_emulation+0x14b/0x720 [ 3393.927264][T31418] asm_int80_emulation+0x1a/0x20 [ 3393.927277][T31418] RIP: 0023:0xf7f32fec [ 3393.927288][T31418] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 3393.927299][T31418] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000139 [ 3393.927310][T31418] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 3393.927317][T31418] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 000000000000fffd [ 3393.927323][T31418] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3393.927329][T31418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3393.927335][T31418] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3393.927345][T31418] [ 3394.027547][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3394.032523][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3394.159252][ T8583] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3394.282434][T29355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3394.295548][T29355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3394.553131][T11684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3394.561257][T29355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3394.685526][T31433] md: recover of RAID array md0 [ 3394.692878][T31433] md: md0: recover done. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3394.775961][T31412] vhci_hcd: connection reset by peer [ 3394.815790][T31429] binder: 31423:31429 ioctl 401c7012 0 returned -22 [ 3394.866509][T30944] vhci_hcd vhci_hcd.6: stop threads [ 3394.872178][T30944] vhci_hcd vhci_hcd.6: release socket [ 3394.877117][T30944] vhci_hcd vhci_hcd.6: disconnect device [ 3395.046347][T31435] md: recover of RAID array md0 [ 3395.053402][T31435] md: md0: recover done. [ 3395.271615][T31436] md: recover of RAID array md0 [ 3395.278132][T31436] md: md0: recover done. [ 3395.405750][T31437] md: recover of RAID array md0 [ 3395.415094][T31437] md: md0: recover done. [ 3395.529107][T31438] md: recover of RAID array md0 [ 3395.532551][T31438] md: md0: recover done. [ 3395.550367][T17553] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3395.637147][T12125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3395.650753][T31439] md: recover of RAID array md0 [ 3395.652302][T31439] md: md0: recover done. [ 3395.794185][T17553] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3395.815993][T31440] md: recover of RAID array md0 [ 3395.820100][T31440] md: md0: recover done. [ 3395.824008][T31418] syz_tun (unregistering): left allmulticast mode [ 3395.927496][T31441] md: recover of RAID array md0 [ 3395.929346][T31441] md: md0: recover done. [ 3395.934573][T17553] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3395.986912][T31442] md: recover of RAID array md0 [ 3395.989097][T31442] md: md0: recover done. [ 3396.009949][T17553] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3396.045524][T31443] md: recover of RAID array md0 [ 3396.047190][T31443] md: md0: recover done. [ 3396.080399][ T42] kauditd_printk_skb: 96 callbacks suppressed [ 3396.080410][ T42] audit: type=1800 audit(1786559528.832:45487): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=661942 res=0 errno=0 [ 3396.090274][ T42] audit: type=1800 audit(1786559528.832:45488): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=661947 res=0 errno=0 [ 3396.096950][ T42] audit: type=1800 audit(1786559528.832:45489): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=661951 res=0 errno=0 [ 3396.111589][ T42] audit: type=1800 audit(1786559528.832:45490): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=661950 res=0 errno=0 [ 3396.121432][T17553] bridge_slave_1: left allmulticast mode [ 3396.124697][T17553] bridge_slave_1: left promiscuous mode [ 3396.128628][T17553] bridge0: port 2(bridge_slave_1) entered disabled state [ 3396.132757][ T42] audit: type=1800 audit(1786559528.852:45491): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=661953 res=0 errno=0 [ 3396.142510][T17553] bridge_slave_0: left allmulticast mode [ 3396.145800][T17553] bridge_slave_0: left promiscuous mode [ 3396.155907][T17553] bridge0: port 1(bridge_slave_0) entered disabled state [ 3396.200486][ T42] audit: type=1800 audit(1786559528.942:45492): pid=5140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=662028 res=0 errno=0 [ 3396.231165][ T42] audit: type=1800 audit(1786559528.952:45493): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=662033 res=0 errno=0 [ 3396.277438][ T42] audit: type=1800 audit(1786559528.952:45494): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=662037 res=0 errno=0 [ 3396.289432][ T42] audit: type=1800 audit(1786559528.952:45495): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=662036 res=0 errno=0 [ 3396.297721][ T42] audit: type=1800 audit(1786559528.952:45496): pid=29614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=662039 res=0 errno=0 [ 3396.328907][T17553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3396.332868][T17553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3396.337452][T17553] bond0 (unregistering): Released all slaves [ 3396.340868][T17553] bond1 (unregistering): Released all slaves [ 3396.448285][ T5442] 8021q: adding VLAN 0 to HW filter on device eth14 [ 3396.614113][ T5442] 8021q: adding VLAN 0 to HW filter on device eth15 [ 3396.719956][ T5442] 8021q: adding VLAN 0 to HW filter on device eth17 [ 3396.814294][ T5442] 8021q: adding VLAN 0 to HW filter on device eth16 [ 3396.903867][T17553] hsr_slave_0: left promiscuous mode [ 3396.906844][T17553] hsr_slave_1: left promiscuous mode [ 3396.908755][T17553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3396.911119][T17553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3396.913614][T17553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3396.918321][T31454] md: recover of RAID array md0 [ 3396.919938][T17553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3396.922148][T31454] md: md0: recover done. [ 3396.942159][T17553] veth1_macvtap: left promiscuous mode [ 3396.948331][T17553] veth0_macvtap: left promiscuous mode [ 3396.950328][T17553] veth1_vlan: left promiscuous mode [ 3396.953461][T17553] veth0_vlan: left promiscuous mode [ 3397.035395][T31473] md: recover of RAID array md0 [ 3397.037031][T31473] md: md0: recover done. [ 3397.057702][T17553] team0 (unregistering): Port device team_slave_1 removed [ 3397.062547][T17553] team0 (unregistering): Port device team_slave_0 removed [ 3397.118464][T31474] md: recover of RAID array md0 [ 3397.120043][T31474] md: md0: recover done. [ 3397.189936][T31476] md: recover of RAID array md0 [ 3397.191591][T31476] md: md0: recover done. [ 3397.274978][T31477] md: recover of RAID array md0 [ 3397.276699][T31477] md: md0: recover done. [ 3397.394941][T31479] md: recover of RAID array md0 [ 3397.396803][T31479] md: md0: recover done. [ 3397.457012][T31480] md: recover of RAID array md0 [ 3397.459033][T31480] md: md0: recover done. [ 3397.498817][T17553] IPVS: stop unused estimator thread 0... [ 3397.516667][T31481] md: recover of RAID array md0 [ 3397.518312][T31481] md: md0: recover done. [ 3397.542662][T17553] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3397.576455][T31482] md: recover of RAID array md0 [ 3397.578166][T31482] md: md0: recover done. [ 3397.599820][T17553] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3397.616172][T12875] net_ratelimit: 1 callbacks suppressed [ 3397.616185][T12875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3397.637317][T31483] md: recover of RAID array md0 [ 3397.638993][T31483] md: md0: recover done. [ 3397.644261][T17553] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3397.697127][T31485] md: recover of RAID array md0 [ 3397.698816][T31485] md: md0: recover done. [ 3397.706381][T17553] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3397.756939][T31486] md: recover of RAID array md0 [ 3397.758624][T31486] md: md0: recover done. [ 3397.818714][T17553] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3397.821941][T17553] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 3397.825683][T31488] md: recover of RAID array md0 [ 3397.827254][T31488] md: md0: recover done. [ 3397.866898][T11684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3397.874265][T31491] md: recover of RAID array md0 [ 3397.876770][T31491] md: md0: recover done. [ 3397.880653][T17553] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3397.887519][T17553] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 3397.930406][ T5442] 8021q: adding VLAN 0 to HW filter on device eth18 [ 3397.972050][T17553] bond0: (slave netdevsim1): Releasing backup interface [ 3397.979368][T31495] md: recover of RAID array md0 [ 3397.980124][T17553] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3397.983313][T31495] md: md0: recover done. [ 3397.984702][T17553] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 3398.027170][T31498] md: recover of RAID array md0 [ 3398.030200][T31498] md: md0: recover done. [ 3398.044115][T17553] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3398.049442][T17553] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 3398.067607][T31499] md: recover of RAID array md0 [ 3398.071945][T31499] md: md0: recover done. [ 3398.151736][T31503] md: recover of RAID array md0 [ 3398.153396][T31503] md: md0: recover done. [ 3398.154957][T17553] bridge_slave_1: left allmulticast mode [ 3398.160466][T17553] bridge_slave_1: left promiscuous mode [ 3398.164783][T17553] bridge0: port 2(bridge_slave_1) entered disabled state [ 3398.174563][T17553] bridge_slave_0: left allmulticast mode [ 3398.177259][ T40] usb 50-1: device descriptor read/8, error -110 [ 3398.185456][T17553] bridge_slave_0: left promiscuous mode [ 3398.187795][T17553] bridge0: port 1(bridge_slave_0) entered disabled state [ 3398.196184][T17553] dvmrp8: left allmulticast mode [ 3398.208482][T17553] bridge_slave_1: left allmulticast mode [ 3398.211870][T17553] bridge_slave_1: left promiscuous mode [ 3398.217086][T31505] md: recover of RAID array md0 [ 3398.218890][T17553] bridge0: port 2(bridge_slave_1) entered disabled state [ 3398.222221][T17553] bridge_slave_0: left allmulticast mode [ 3398.225205][T31505] md: md0: recover done. [ 3398.228892][T17553] bridge_slave_0: left promiscuous mode [ 3398.234476][T17553] bridge0: port 1(bridge_slave_0) entered disabled state [ 3398.278673][T31506] md: recover of RAID array md0 [ 3398.282241][T31506] md: md0: recover done. [ 3398.374498][T31507] md: recover of RAID array md0 [ 3398.385867][T17553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3398.387165][T31507] md: md0: recover done. [ 3398.395029][T17553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3398.399706][T17553] bond0 (unregistering): Released all slaves [ 3398.494537][T17553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3398.503328][T31508] md: recover of RAID array md0 [ 3398.505069][T31508] md: md0: recover done. [ 3398.507313][T17553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3398.511829][T17553] bond0 (unregistering): Released all slaves [ 3398.524299][ T5442] 8021q: adding VLAN 0 to HW filter on device eth19 [ 3398.566666][ T40] usb usb50-port1: attempt power cycle [ 3398.665767][T31512] md: recover of RAID array md0 [ 3398.667398][T31512] md: md0: recover done. [ 3398.717423][T31515] md: recover of RAID array md0 [ 3398.719062][T31515] md: md0: recover done. [ 3398.770195][ T5442] 8021q: adding VLAN 0 to HW filter on device eth21 [ 3398.778004][T31518] md: recover of RAID array md0 [ 3398.779606][T31518] md: md0: recover done. [ 3398.845475][T31522] md: recover of RAID array md0 [ 3398.849331][T31522] md: md0: recover done. [ 3398.888240][T17553] hsr_slave_0: left promiscuous mode [ 3398.890356][T17553] hsr_slave_1: left promiscuous mode [ 3398.892337][T17553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3398.894643][T17553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3398.898625][T17553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3398.900963][T17553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3398.912306][T24606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3398.918390][T17553] hsr_slave_0: left promiscuous mode [ 3398.922042][T17553] hsr_slave_1: left promiscuous mode [ 3398.926594][T31526] md: recover of RAID array md0 [ 3398.927964][T17553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3398.932079][T17553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3398.935175][T31526] md: md0: recover done. [ 3398.937027][T17553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3398.939306][T17553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3398.946314][T17553] veth1_macvtap: left promiscuous mode [ 3398.948101][T17553] veth0_macvtap: left promiscuous mode [ 3398.949902][T17553] veth1_vlan: left promiscuous mode [ 3398.951584][T17553] veth0_vlan: left promiscuous mode [ 3398.953933][T17553] veth1_macvtap: left promiscuous mode [ 3398.957156][T17553] veth0_macvtap: left promiscuous mode [ 3398.959061][T17553] veth1_vlan: left promiscuous mode [ 3398.960762][T17553] veth0_vlan: left promiscuous mode [ 3398.979180][T31527] md: recover of RAID array md0 [ 3398.982300][T31527] md: md0: recover done. [ 3399.050288][T31528] md: recover of RAID array md0 [ 3399.055195][T31528] md: md0: recover done. [ 3399.083825][T17553] team0 (unregistering): Port device team_slave_1 removed [ 3399.088554][T17553] team0 (unregistering): Port device team_slave_0 removed [ 3399.121072][T31529] md: recover of RAID array md0 [ 3399.124036][T31529] md: md0: recover done. [ 3399.125854][ T40] usb usb50-port1: unable to enumerate USB device [ 3399.210322][T17553] team0 (unregistering): Port device team_slave_1 removed [ 3399.214863][T17553] team0 (unregistering): Port device team_slave_0 removed [ 3399.231908][T31530] md: recover of RAID array md0 [ 3399.234952][T31530] md: md0: recover done. [ 3399.286654][ T5442] 8021q: adding VLAN 0 to HW filter on device eth20 [ 3399.298541][T31532] md: recover of RAID array md0 [ 3399.305198][T31532] md: md0: recover done. [ 3399.398255][T31537] md: recover of RAID array md0 [ 3399.399909][T31537] md: md0: recover done. [ 3399.453088][ T5442] 8021q: adding VLAN 0 to HW filter on device eth23 [ 3399.540051][ T5442] 8021q: adding VLAN 0 to HW filter on device eth22 [ 3399.647742][ T5442] 8021q: adding VLAN 0 to HW filter on device eth24 [ 3399.661393][T31552] md: recover of RAID array md0 [ 3399.664048][T31552] md: md0: recover done. [ 3399.762956][ T5442] 8021q: adding VLAN 0 to HW filter on device eth25 [ 3399.786480][T31561] md: recover of RAID array md0 [ 3399.788153][T31561] md: md0: recover done. [ 3399.836508][T31564] md: recover of RAID array md0 [ 3399.838147][T31564] md: md0: recover done. [ 3399.891845][T31567] md: recover of RAID array md0 [ 3399.893482][T31567] md: md0: recover done. [ 3400.023983][T24606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3400.028107][T31571] md: recover of RAID array md0 [ 3400.029743][T31571] md: md0: recover done. [ 3400.108710][T31572] md: recover of RAID array md0 [ 3400.110561][T31572] md: md0: recover done. [ 3400.230477][T31574] md: recover of RAID array md0 [ 3400.235207][T31574] md: md0: recover done. [ 3400.345579][T31576] md: recover of RAID array md0 [ 3400.355205][T31576] md: md0: recover done. [ 3400.435585][T31578] md: recover of RAID array md0 [ 3400.437243][T31578] md: md0: recover done. [ 3400.596234][T31579] md: recover of RAID array md0 [ 3400.598200][T31579] md: md0: recover done. [ 3400.655798][ T6054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3400.805979][T31581] md: recover of RAID array md0 [ 3400.807883][T31581] md: md0: recover done. [ 3400.866041][T31582] md: recover of RAID array md0 [ 3400.867897][T31582] md: md0: recover done. [ 3400.955990][T31583] md: recover of RAID array md0 [ 3400.957543][T31583] md: md0: recover done. [ 3401.015950][T31585] md: recover of RAID array md0 [ 3401.017761][T31585] md: md0: recover done. [ 3401.085689][T31586] md: recover of RAID array md0 [ 3401.087402][T31586] md: md0: recover done. [ 3401.135732][T31587] md: recover of RAID array md0 [ 3401.137404][T31587] md: md0: recover done. [ 3401.216321][T31588] md: recover of RAID array md0 [ 3401.218515][T31588] md: md0: recover done. [ 3401.276029][T31589] md: recover of RAID array md0 [ 3401.278168][T31589] md: md0: recover done. [ 3401.335864][T31590] md: recover of RAID array md0 [ 3401.338047][T31590] md: md0: recover done. [ 3401.395873][T31591] md: recover of RAID array md0 [ 3401.398076][T31591] md: md0: recover done. [ 3401.475991][T31592] md: recover of RAID array md0 [ 3401.481395][T31592] md: md0: recover done. [ 3401.525830][T31594] md: recover of RAID array md0 [ 3401.527903][T31594] md: md0: recover done. [ 3401.569242][T11684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3401.588084][T31595] md: recover of RAID array md0 [ 3401.593480][T31595] md: md0: recover done. [ 3401.666344][T31596] md: recover of RAID array md0 [ 3401.668541][T31596] md: md0: recover done. [ 3401.726120][T31597] md: recover of RAID array md0 [ 3401.728191][T31597] md: md0: recover done. [ 3401.785682][T31598] md: recover of RAID array md0 [ 3401.787339][T31598] md: md0: recover done. [ 3401.826229][T31599] md: recover of RAID array md0 [ 3401.829980][T31599] md: md0: recover done. [ 3401.885896][T31600] md: recover of RAID array md0 [ 3401.888026][T31600] md: md0: recover done. [ 3401.945976][T31601] md: recover of RAID array md0 [ 3401.947929][T31601] md: md0: recover done. [ 3402.006489][T31602] md: recover of RAID array md0 [ 3402.008712][T31602] md: md0: recover done. [ 3402.066070][T31603] md: recover of RAID array md0 [ 3402.067731][T31603] md: md0: recover done. [ 3402.105690][T31604] md: recover of RAID array md0 [ 3402.107754][T31604] md: md0: recover done. [ 3402.167713][T31605] md: recover of RAID array md0 [ 3402.172182][T31605] md: md0: recover done. [ 3402.225656][T31607] md: recover of RAID array md0 [ 3402.227536][T31607] md: md0: recover done. [ 3402.273698][T31608] md: recover of RAID array md0 [ 3402.276874][T31608] md: md0: recover done. [ 3402.326510][T31609] md: recover of RAID array md0 [ 3402.328574][T31609] md: md0: recover done. [ 3402.385663][T31611] md: recover of RAID array md0 [ 3402.387659][T31611] md: md0: recover done. [ 3402.445646][T31612] md: recover of RAID array md0 [ 3402.447608][T31612] md: md0: recover done. [ 3402.506295][T31613] md: recover of RAID array md0 [ 3402.508590][T31613] md: md0: recover done. [ 3402.565919][T31614] md: recover of RAID array md0 [ 3402.568105][T31614] md: md0: recover done. [ 3402.576946][T11684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3402.626366][T31615] md: recover of RAID array md0 [ 3402.628527][T31615] md: md0: recover done. [ 3402.685973][T31617] md: recover of RAID array md0 [ 3402.688142][T31617] md: md0: recover done. [ 3402.746124][T31618] md: recover of RAID array md0 [ 3402.748283][T31618] md: md0: recover done. [ 3402.806357][T31619] md: recover of RAID array md0 [ 3402.808574][T31619] md: md0: recover done. [ 3402.865819][T31620] md: recover of RAID array md0 [ 3402.868136][T31620] md: md0: recover done. [ 3402.926169][T31621] md: recover of RAID array md0 [ 3402.930225][T31621] md: md0: recover done. [ 3402.985882][T31622] md: recover of RAID array md0 [ 3402.987682][T31622] md: md0: recover done. [ 3403.046137][T31623] md: recover of RAID array md0 [ 3403.048341][T31623] md: md0: recover done. [ 3403.105947][T31624] md: recover of RAID array md0 [ 3403.107562][T31624] md: md0: recover done. [ 3403.166026][T31625] md: recover of RAID array md0 [ 3403.168023][T31625] md: md0: recover done. [ 3403.225637][T31626] md: recover of RAID array md0 [ 3403.227462][T31626] md: md0: recover done. [ 3403.286141][T31627] md: recover of RAID array md0 [ 3403.288124][T31627] md: md0: recover done. [ 3403.345798][T31628] md: recover of RAID array md0 [ 3403.347791][T31628] md: md0: recover done. [ 3403.405858][T31629] md: recover of RAID array md0 [ 3403.407883][T31629] md: md0: recover done. [ 3403.455528][T29482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3403.466198][T31630] md: recover of RAID array md0 [ 3403.468467][T31630] md: md0: recover done. [ 3403.525622][T31631] md: recover of RAID array md0 [ 3403.527816][T31631] md: md0: recover done. [ 3403.586186][T31633] md: recover of RAID array md0 [ 3403.588207][T31633] md: md0: recover done. [ 3403.627611][T24606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3403.645722][T31634] md: recover of RAID array md0 [ 3403.647584][T31634] md: md0: recover done.