last executing test programs: 26m32.153902589s ago: executing program 32 (id=595): syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d0009051f72ee"], 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000440)=@framed={{}, [@printk={@llu, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0xc7}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x1, 0x8, 0xff, 0xa, {{0x5, 0x4, 0x0, 0x0, 0x27, 0x65, 0x0, 0x0, 0x0, 0x0, @broadcast, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f5, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000780)={'erspan0\x00', r2, 0x0, 0x0, 0x0, 0x0, {{0x27, 0x4, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2, {[@noop, @rr={0x7, 0x13, 0x26, [@loopback, @empty, @private=0xa010101, @multicast1]}, @timestamp_addr={0x44, 0x14, 0xe, 0x1, 0x3, [{@empty, 0x3}, {@loopback, 0x5b}]}, @ssrr={0x89, 0x3, 0x41}, @ssrr={0x89, 0x3, 0x8d}, @timestamp_prespec={0x44, 0x2c, 0x76, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast1, 0x4}, {@local, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x38}}]}, @rr={0x7, 0x2b, 0x6d, [@empty, @rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0x1e}, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x1, &(0x7f0000000640)=[{0x6, 0x22, 0x3, 0x50000}]}) syz_clone3(&(0x7f0000000680)={0x1810000, 0x0, 0x0, 0x0, {0x20080027}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f5, &(0x7f0000000700)={'syztnl0\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x4bfa, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f4, &(0x7f0000000740)={'syztnl0\x00', 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0xffffffffffffffae, 0xfa00, {0x5, &(0x7f0000000340)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) r8 = syz_open_dev$dvb_dvr(&(0x7f0000000140), 0x0, 0x13f) io_setup(0x8, &(0x7f0000000180)=0x0) r10 = fsopen(&(0x7f0000000280)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x1) fchdir(r11) r12 = inotify_init() inotify_add_watch(r12, &(0x7f00000002c0)='.\x00', 0x400017e) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x68800, 0x1c) io_submit(r9, 0x1, &(0x7f00000001c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100), r7, 0x0, 0x3, 0x1}}, 0x20) syz_open_dev$audion(&(0x7f000000f380), 0x3, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 26m5.73919063s ago: executing program 33 (id=752): socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000e80)={'syz0\x00', {0x0, 0x0, 0x0, 0x3dde}, 0x0, [0x0, 0x0, 0x200, 0x0, 0xfffffe52, 0x802, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0xffffffff, 0x5, 0x1, 0x68498907, 0x0, 0x2, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffff, 0x7, 0x4, 0x0, 0x0, 0x7, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x0, 0x5], [0x3, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0xa, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0xffffffff, 0xfffffffe, 0x9, 0xff, 0xfffffffd, 0xfffffffd, 0x100, 0xfffffffa, 0x0, 0x88000000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x40009148, 0x0, 0x2, 0x0, 0xd, 0xffffffff, 0x0, 0x0, 0x6], [0x80000001, 0x0, 0x4, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x3, 0x8, 0xfffffc00, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x5, 0x2, 0x0, 0x8000000, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x6, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffd, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x8, 0x0, 0xc045, 0x10, 0x4, 0x0, 0x2, 0xffff, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x8, 0x0, 0xac5, 0x8b56, 0x9, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x1, 0x5, 0x2, 0x3, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x80, 0x8000, 0x0, 0x0, 0x3, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x4) bind$vsock_stream(r0, &(0x7f0000000580)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_clone3(&(0x7f00000002c0)={0xa00600, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mknodat$null(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1000, 0x103) acct(&(0x7f0000000440)='./file0\x00') acct(&(0x7f0000000540)='./bus\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000d40)={0x0, {{0xa, 0x0, 0x0, @remote, 0x2}}, {{0xa, 0x0, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x104) 24m28.016378814s ago: executing program 34 (id=1387): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x101041) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='./dev/sda1\x00', &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000300)='./mnt\x00') rename(&(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='./mnt\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/dir\x00', 0x1ff) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='!{+&.P/:+-]*-\xa7\'%\xdb\'@-\'\x00', &(0x7f0000000040)=']\xc0k\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r0, &(0x7f0000000100)=[{0xf, 0x0, 0x0, 0xfd, @tick=0x2000, {}, {0xe}, @raw8}], 0x1c) 24m22.286884959s ago: executing program 35 (id=1420): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./dev\x00', &(0x7f0000001880)='devtmpfs\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000018c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000001900)=@filename='./dev/sda1\x00', &(0x7f0000001940)='./mnt\x00', &(0x7f0000001980)='ext4\x00', 0x8410, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) mmap$IORING_OFF_SQES(0x0, 0xa000, 0x4000000, 0x12, r0, 0x10000000) openat(0xffffffffffffff9c, &(0x7f00000019c0)='./mnt\x00', 0x0, 0x0) 22m39.746641975s ago: executing program 36 (id=2163): socket$packet(0x11, 0x2, 0x300) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000400)="3619b9c685915d93c56dd794cf71166d58d6dc97573433846b5140ba6e68863b04e971a5ba7bfef175203303caa01f65fa972af7f70a7e744016ba16d7b7b8a4252e95baf52cf024580fe29f5bdccdb7e2461c0ad8", 0x55, 0x10, &(0x7f0000000580)={0x2, 0x4e20, @local}, 0x10) getsockname$packet(r1, 0x0, &(0x7f0000000240)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r3, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r3, 0x4008af74, &(0x7f0000000500)={0x2, 0x58, "cc21d352e2ac49681f8e47298e6033bee6e32fb45f75bb37cbcf60ce741150f94a0a0883b389a6241954cfb538992c4325a92554986d1fb55211c7698678858721896a5833e5f3cf5351f9a933736d4050362bc384844561"}) r4 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2c0000, 0xc8200) kcmp(0x0, 0x0, 0x1, r4, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0xb3b54c18e0590239, 0x0, 0x0) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x11c, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x4, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x4000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 21m37.064396869s ago: executing program 7 (id=2471): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000500)=0x6) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x2) prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknodat$md(0xffffffffffffff9c, &(0x7f00000000c0)='./md0\x00', 0x6180, 0x0) openat$md_node(0xffffffffffffff9c, &(0x7f0000000140)='./md0\x00', 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/mdstat\x00', 0x1800, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000a40)=""/198, 0xc6}], 0x1, 0x7, 0x9) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() syz_open_dev$usbfs(0x0, 0x80, 0x113201) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r5, &(0x7f0000000480)='1', 0x1) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='4', 0x1}], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="38000000090301020000000000000000000000000900020073797a3100000000050001000c00018008000140ffffffff0000000000000000c9dd1062f573cfd3592e253b12e4df4be8581b9f5ec7c187a2403f18d0d546970a79a10a581482bfec8395a8853d389eddbc31b202384abb7d85a55223d07b98f63f608dc2c98ccf6ab4e424878025bb8e75c5c55bf58d64e09e38310913d70419c6f52a0af255aa0f62ebb9cf18fd5d03d423b8451edc029a34cf810ea0098d30ceb34adcbc91287ab81e938f0aa97c251f68582f6f7c4efd4f6ef448422476e1bfcd83f027574d6080e0add3eeff272d18801fc0946cbb64cef36bed2b"], 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) syz_open_procfs(0x0, &(0x7f0000000280)='pagemap\x00') 21m36.833459257s ago: executing program 37 (id=2470): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ptys(0xc, 0x3, 0x1) socket$inet6(0xa, 0x80003, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000500)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000680), 0x651, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000000000000a00000010000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000680)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./config/usb_gadget/g1/functions/uac2.0/c_chmask\x00', 0x2, 0x0) write(r3, &(0x7f0000000a80)="aa", 0x1) 21m36.040506996s ago: executing program 7 (id=2474): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='dev/ttyUSB0\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x2, 0xb, 0x0, 0x1}, 0x47, [0xa, 0x2, 0x393ceec7, 0x78b7, 0x1, 0x1, 0xcd6c, 0x5, 0xf, 0x7000, 0x10000, 0x8, 0xf, 0x8, 0x5, 0x0, 0x5, 0x5, 0x0, 0x8, 0x7fffffff, 0xb1c, 0x5, 0xfffffffc, 0x0, 0x6, 0x91, 0x800, 0x80000001, 0x80, 0x401, 0x80, 0x3, 0x3, 0x2, 0x6, 0xcbbd, 0x5, 0x7ff, 0x3, 0x5, 0x3, 0x3, 0x10001, 0xc, 0x7, 0x10000, 0x5, 0x10001, 0x1000, 0x3, 0x401, 0x1, 0xdec, 0x7, 0x3c0, 0xfffffff6, 0x8, 0x7, 0x7, 0xdec, 0x809, 0x1, 0xfff], [0x9, 0x2, 0x1, 0x3, 0x7, 0x8, 0x1, 0x80, 0x2, 0x299, 0xb6f, 0x8, 0x200, 0xedc8, 0x5, 0xac, 0x5, 0x0, 0x100, 0xffffff01, 0x8, 0x5, 0x7, 0xa, 0x1, 0xfb, 0x3, 0x7, 0xd4c, 0x23b, 0x9, 0x2, 0x200, 0x0, 0x7, 0x0, 0x5, 0xc69d, 0x101, 0x80000000, 0x7, 0xf6, 0x4, 0x64d, 0x1, 0x5, 0xfff, 0x9, 0xc2, 0x10001, 0x1032800, 0xff, 0xb, 0x751, 0x3, 0xa, 0x3, 0xe0000000, 0x8, 0x3, 0x6, 0x4, 0x8001, 0x80000001], [0x3, 0xfffffff7, 0x3, 0x53, 0x8, 0x35, 0x3, 0x7, 0x1ff, 0x5, 0x0, 0xfff, 0x9, 0x8, 0x3, 0x0, 0x6, 0x4, 0xfffffffb, 0x7, 0xb, 0x2, 0x3, 0x0, 0x4, 0x8001, 0x80000002, 0x5, 0x1, 0x22bc48d0, 0x3, 0x6, 0x683, 0x6, 0x1, 0x4, 0x7, 0x3, 0x7, 0x6, 0x2, 0x7, 0x40, 0x9, 0x3, 0xffffff81, 0x63, 0x5, 0x7, 0x1, 0x8, 0x2, 0x75, 0x9, 0x6, 0x8001, 0x7fff, 0x8, 0x7, 0x9, 0x18, 0x20000, 0x400, 0x9], [0x5, 0xff, 0x3, 0x0, 0x8001, 0x7, 0x1, 0x7, 0xe, 0x1, 0x81, 0x3, 0x3, 0x9, 0xffff, 0x2, 0x2b57, 0x6, 0xa5, 0x356d, 0x9, 0xb2a3, 0x8, 0x4, 0x4, 0xfffffffb, 0xfffffffc, 0x7, 0x80000000, 0x7fffffff, 0xffff0000, 0x1000, 0x2, 0x2, 0x7, 0xfffffffd, 0x1, 0xffffffff, 0xb1a3, 0x2, 0x8, 0x1, 0x1, 0x1, 0x6, 0x401, 0x34f, 0x33a, 0xe7d, 0x78b6, 0x80000000, 0xe2, 0x4, 0x3, 0x2, 0x8, 0x3, 0xffff, 0xff, 0x200008, 0x1600, 0x6, 0x0, 0xa]}, 0x45c) 21m34.515729075s ago: executing program 38 (id=2479): syz_open_dev$cec(&(0x7f0000000280), 0x0, 0xa00) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00000003c0), 0x4) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000400)={0x0, 0x0, 0x1, r0}, 0xc) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000440)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000480)=0x8, 0x4) pselect6(0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000300)={0x8}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000980)='./proc\x00', &(0x7f00000009c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) openat(0xffffffffffffffff, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x200, 0x23) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000240)="0a000000010001", 0x7) write(r2, &(0x7f0000000140)='\\x01020304 2000000000 0 0 0 krb5 \\x00000000ffffff7f0000000000000000120000000102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f10', 0x8b) 21m32.910104915s ago: executing program 7 (id=2483): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$mtd(&(0x7f0000000300), 0x48a99fbe, 0x10b241) ioctl$MEMERASE(r2, 0x40084d02, &(0x7f0000000480)={0x20000, 0xe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000340)={0xaa, 0x138}) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000380)={&(0x7f0000000000/0x800000)=nil, 0x800000}) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000290001002dbd7000fedbdf250c000000e3b05cea73d7537727d2233e535ee54a8bafa46af56819a9cabacc562c0feb52844c9f11b5fd89ce0810553b150bfd9c921c49c8784a2886ca3b83971198357580aeb105d248cdd034a9c39f4d69d5dd2b5d4080a5d0cf04b2b4e4242f6af215939def703b2f667a2d26df7d0e866aa57fe9a898105d4f349a9f06ad41ea7edafdae5f551e"], 0x14}}, 0x24000004) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000240)={0x81, 0x0, 'client0\x00', 0x80000004, "1d0d2a28c5cf5161", "06376e7827c1361cdbd643715b0b036384c5fa307217d404fac828caf7e31022", 0xa, 0x6}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f00000004c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgctl$IPC_SET(0x0, 0x1, 0x0) waitid(0x0, 0x0, 0x0, 0x80000000, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = openat$vnet(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r5, 0x4008af74, &(0x7f0000000040)={0x6, 0x10, "649e5065be3bb19d0bdf0d9d1f6aacfe"}) 21m32.044327689s ago: executing program 7 (id=2485): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x9801) unshare(0x22020600) move_mount(r0, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount$tmpfs(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x400, 0x0) move_mount(r1, &(0x7f00000002c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0xa) 21m31.994842579s ago: executing program 7 (id=2487): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x64, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x10001}}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc, 0x4}, {0xc}}}]}]}, 0x64}}, 0x0) write(r0, &(0x7f0000000200)='8', 0x1) mmap$IORING_OFF_PBUF_RING(0x0, 0x6a, 0x3000004, 0x110, r0, 0x82b6a2fd) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 21m31.568200712s ago: executing program 7 (id=2490): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000500)=0x6) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x2) prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknodat$md(0xffffffffffffff9c, &(0x7f00000000c0)='./md0\x00', 0x6180, 0x0) openat$md_node(0xffffffffffffff9c, &(0x7f0000000140)='./md0\x00', 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/mdstat\x00', 0x1800, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000a40)=""/198, 0xc6}], 0x1, 0x7, 0x9) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() r4 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x777) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r5, &(0x7f0000000480)='1', 0x1) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='4', 0x1}], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="38000000090301020000000000000000000000000900020073797a3100000000050001000c00018008000140ffffffff0000000000000000c9dd1062f573cfd3592e253b12e4df4be8581b9f5ec7c187a2403f18d0d546970a79a10a581482bfec8395a8853d389eddbc31b202384abb7d85a55223d07b98f63f608dc2c98ccf6ab4e424878025bb8e75c5c55bf58d64e09e38310913d70419c6f52a0af255aa0f62ebb9cf18fd5d03d423b8451edc029a34cf810ea0098d30ceb34adcbc91287ab81e938f0aa97c251f68582f6f7c4efd4f6ef448422476e1bfcd83f027574d6080e0add3eeff272d18801fc0946cbb64cef36bed2b"], 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) syz_open_procfs(0x0, &(0x7f0000000280)='pagemap\x00') 21m31.488461494s ago: executing program 39 (id=2490): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000500)=0x6) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x2) prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknodat$md(0xffffffffffffff9c, &(0x7f00000000c0)='./md0\x00', 0x6180, 0x0) openat$md_node(0xffffffffffffff9c, &(0x7f0000000140)='./md0\x00', 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/mdstat\x00', 0x1800, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000a40)=""/198, 0xc6}], 0x1, 0x7, 0x9) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() r4 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x777) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r5, &(0x7f0000000480)='1', 0x1) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='4', 0x1}], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="38000000090301020000000000000000000000000900020073797a3100000000050001000c00018008000140ffffffff0000000000000000c9dd1062f573cfd3592e253b12e4df4be8581b9f5ec7c187a2403f18d0d546970a79a10a581482bfec8395a8853d389eddbc31b202384abb7d85a55223d07b98f63f608dc2c98ccf6ab4e424878025bb8e75c5c55bf58d64e09e38310913d70419c6f52a0af255aa0f62ebb9cf18fd5d03d423b8451edc029a34cf810ea0098d30ceb34adcbc91287ab81e938f0aa97c251f68582f6f7c4efd4f6ef448422476e1bfcd83f027574d6080e0add3eeff272d18801fc0946cbb64cef36bed2b"], 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) syz_open_procfs(0x0, &(0x7f0000000280)='pagemap\x00') 21m24.088848095s ago: executing program 1 (id=2513): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) r0 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000600)={0x0, 0x30b5, 0x800, 0x1, 0x158}, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0, &(0x7f00000000c0)=0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x3, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x4, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffa, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r9) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f00000003c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) write$FUSE_INIT(r8, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x18) syz_fuse_handle_req(r8, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21m22.847503823s ago: executing program 1 (id=2517): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030209025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_connect(0x4, 0x78c, &(0x7f0000001280)={{0x12, 0x1, 0x110, 0xfa, 0xdc, 0x7b, 0x8, 0x6b9, 0x120, 0x7d3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77a, 0x2, 0x3, 0x33, 0x10, 0x4, "", [{{0x9, 0x4, 0x30, 0x3, 0xd, 0x38, 0xec, 0xfc, 0x9, [@hid_hid={0x9, 0x21, 0xfffd, 0x6, 0x1, {0x22, 0xb1e}}], [{{0x9, 0x5, 0xe, 0x8, 0x3ff, 0x4, 0x6, 0x4, [@generic={0xa4, 0x21, "448c64b034b223082c3f8885df99760b1ae6dff941c5b9cb89e5ebb4fe8db66e8ac904599d970bf2d38af6da4e3b72ceefc3b0199d714647ae5cbb89a7cea120166d6251b90cf9dad114e1eb3c8e62cd4378f0d98e224fbe9de16c72176cc9430538db5352e100de378e70e53f7668885123c008c6720eb5edd2a853b2ff9f856b025f7640ad94ae2fad0bb160bbfaf3ca5503bce8347ccf8101ab4914142211d0a1"}, @generic={0xee, 0xa, "71d0c8f37997673d3b1400020e699ff3d132ee102950d33f71f9cd5dcecb3577f256b580957d68b8a5962053b9140abcd56f89592965b50c2308f1e5f1ea1c88bfecfabfd7eb7b08ec3f0439752a50754e76f4581dd8e02bacf1315761c42186f38a39865f65184cf32c900e9fa517e7959cdada22c7cb40428d5135efa1ce848a5c33f2409a586995f937c526e33d6d21b381177118faf9ddecf5936ea310fdca89abb1aaad6ed4cec45a7b661e8d57383c6f1533a0e229e9a254573745de536a5bb6980634be76af41337246620dd889718cc3111e103ba1fa394ae8e415c574368662476868417c18782b"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x8, 0xe, 0x10, 0x32, [@generic={0x14, 0x4, "186059b734746d9bd716beaa397b0cb5a844"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xc5, 0x6}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x9, 0xb, 0x8}}, {{0x9, 0x5, 0xd, 0x2, 0x20, 0x0, 0xb, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xffff}, @generic={0x4c, 0x4, "ee39d28403777e84935e15dd18d5e6214d87c2222b680e22c12ac90868e96c0790fdc2cf4dd83e641aed03b3d7acff9201e1c0543f6c80929741d14f1b0428825ed6cb9335257206005b"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0x7, 0xaa, 0x0, [@generic={0x8c, 0x1, "d22abb69d2bffe271a64058453b82fa04401a75270606fc4ba21c733978b9808219f376d6416a069f03d1cd8c107be4d9d1e8649922371222354d172de0089605902d5c506287b4a2861d532a7bc9df5c9ffa72416a59785250ff823fe94056e77d0513392d76bfdc2524bcb384a9fb5d673c3d8f78ace86b99c64f771a42d087f6c9637433f0e8cf6b4"}, @generic={0xc1, 0x23, "fbd673ad8367b31f2448d60db1e7cf64a53b2dff141116239b7bf3b1b8f2f7aded8eca4f736157aff145b4253b5a29075ffa93bc0613ff22a2880eb735ee1e178cfabead49d3da24a3950b5afbcdafd5f132a490edb18b91935894dff23b06a51bbca1c4f87e080c1dd70c9930cf11ce588384fb7bc01c2b46c750a2243cc1f03bf60bcdf9480fff7acaf8893e91e8ad69e9ce88d99bf301e45e1cdb2d035760d00106128e204eb10f25f75fd714543afc7a4686ebccd95b1483ab176a2bca"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x6, 0x81, 0x3a, [@generic={0xba, 0x8, "6a7eb8d81031fba99fee0893b7dd8499770837aab28a5906c2358a24f679bc5a0f0fa1a7a19b04c8295f2c6198c5ef04d14a51e686d7085252258676914f5fc700c3816e6a6a1625a9c661a878fecdbc76585e5f04e63d905dd167483ff1c45909c9de484cceffa4d69c08250d6dcaf9599e0fc4b7a7076b351fefa935acb5d85d532ddddecc2d06a1c936e7df75829dd6a2cc1b53d1d3ba2436184a7a274f23cec2d1fc4b4a397adaa6404c1a148e66144683357c04ad4c"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x10, 0x7}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x59, 0x4, 0x9, [@generic={0x5, 0x23, "1ada6b"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x10, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0x8e45}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x4, 0xfb, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x4}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x9, 0x3, 0x0, [@generic={0x13, 0x22, "8ed09be35bee9ead854ae1f72c522d84b6"}, @generic={0x7a, 0x24, "369c60d75ae5d3dcc7bf2701af166e3b5bbc90a9951e149e7d3b4ca715e13d3c057927c56ab539dd354bf067d37eb5d857a6b8b79cabec627ca860e5d1fd7b4006e494b13d5578e04c8f73e73f60872c927b14b44643f14d0b3157e83070d05384c43908cc5de5861044fb0f8bf7ac3c201303a850ab7fee"}]}}, {{0x9, 0x5, 0x83, 0x10, 0x20, 0x7, 0x10, 0x1}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x1c, 0x1, 0x1}}, {{0x9, 0x5, 0x8, 0xc, 0x400, 0xd, 0x3, 0x6, [@generic={0x13, 0x21, "5f12f15b7ea421c326e4afe55f14cb1e0b"}]}}]}}, {{0x9, 0x4, 0x4c, 0x2, 0x7, 0xff, 0xff, 0x30, 0x0, [], [{{0x9, 0x5, 0x8, 0xa, 0x20, 0x7, 0x0, 0x0, [@generic={0xd3, 0x31, "3bdc4bca30cecdd5ea59cddf809c1cacdb0805348584e4a24cb5996388d6686ed31d0d21376685f77aaff8960a9b36632e49fd8ec65eedc01e988e574c6b76978517d6b9403db618ffd8e298253ebdbe33975413b8308ba60a5142727b98f35af776af7d2ea32c9d54f69d580e2fc53ac38d869726c6db54e99cbbd2c2f763e7c87c09e93b49d69c7024b4a752d3cc8d9e21f49b90f4db45e224d737b79bf0eaa8617d3d992dfe12e1011fb235b6eeafdacb239f8a6f007a81cdd201fda4e3a69ef433adf87b0d257082951c511cd88897"}, @generic={0x3f, 0x24, "a935d3075e38f1f0620c80b18653133ae408ea872df128015395a535b4bb48303abd3f74e946b65e25d96c99d9945bfeee9686d5080e0c6d3ab5888dfc"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0xc, 0x4, 0x3, [@generic={0x74, 0x4, "416e2098bab1a59e8a068d375c7c025f9bd4daff614cb4d48a90fe7eabf2f0f63423d3fff9bc73968a3e0cca54db770886faa3584d956f9bfd5a432f6cf8a57da086113f4e904d6755089a4b6c0acda2f4ce13baf368333a4c4043f207a6bb238168afb6deca79cabf35f743e09f5a3307ff"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x0, 0x40, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x7f, 0x1000}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0xf8, 0x6, 0x9, [@generic={0x19, 0x26, "d01b599470f46eef49142af7cb35f11d1f159c591a932f"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x40, 0xe5, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x41, 0x6}]}}, {{0x9, 0x5, 0xf, 0x3, 0x40, 0x3, 0x0, 0x9}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0x4, 0x1, 0x7, [@generic={0x1f, 0x11, "cff9392c2866304b1a7e318bed4a11068181a820a59306198eed749cfe"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x2}]}}]}}]}}]}}, &(0x7f0000000f80)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x200, 0x6, 0x4, 0xc3, 0xff, 0xd}, 0x1e2, &(0x7f0000000ac0)={0x5, 0xf, 0x1e2, 0x5, [@generic={0xc7, 0x10, 0x2, "1af1fe7cd2070938f579e409242198e629b74ae5f1b7bb348907473ca1029547d1a74fbe84015472983bcd77e902c99767bae176040c9b310280627e53b0c26686f0dd3d654d09801be7143c48ba90bdb2b98b6cbd5ba17a61737e40afbcd50f7055adc9bb58c4567f1521f7b625c7e9813c945f498c1425a37edec246a8e2bc5537e5983e734e13abe7d7be6698219d42185006f2265a271fd5cf7347161724f60e39b4c396d04a5e1b50499df21b2c763b8bc43a0a4b7ccbe65f78db0f842c749916da"}, @generic={0xf5, 0x10, 0xa, "4f2b9d4203468f30a618d2c8702395dad67c1c6828e09b71a83c8c52ebc3d63c8c4d6e37bf4187a6a1a683554b1361664192e281a923d0b1d95f41a712da5aca3f6b7b875f7424067c15c8a91dfa0253d7b12f196255453fdb1c68ef587f34d2e18f9b2610077f445d6e7e93c41d80d4b5a395d956b3b5c4ed79a09d9debff00951fef6e83dfebad8f025197bcc48df83b00e53527968b8ff23bf6fae7d2f1e14b868d02dc6207ad21890c5a8402cb76c8d27e5c5a75aa84a95eb60cf0d86ffbe15b443cd6e9675f99605744378422109d9ef7c6eecbccc1203f96a6a30cefe713a2cc24a1850c520430cf2f0d30f90977ae"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "f54c3d4945276cadf43c2202a75ba1d0"}, @ptm_cap={0x3}, @ss_cap={0xfffffffffffffff0, 0x10, 0x3, 0x2, 0x0, 0x2, 0x8, 0x1}]}, 0x5, [{0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x81a}}, {0x56, &(0x7f0000000d40)=@string={0x56, 0x3, "df095f825cbeb5983b4610a1ceb219d3e60eed727c7c46ad6f7f022e0e92e3e1cd5eaa2c218caf75fba5965179b4799169e6173bebaf90448fb98d5356c3aca4c1cb2cb426ccaca2e1732b4cc16aca2d5caa7f79"}}, {0x5f, &(0x7f0000000dc0)=ANY=[@ANYBLOB="5f03f719224c9ea3e8b13d7a4e4ec8aac9864e442f27b02f4c852e185646381e187d433bcc15bd27b058310892e9214d3b6ef51d0301c96769b0ff658a3267577550b169544df8540f8d1de0064ff8a77984471e54f3f82d3b88bde3f0abe2"]}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x41e}}, {0xc3, &(0x7f0000000e80)=ANY=[@ANYBLOB="c3038725b7296eb0e4eef79c779a3ba43a6f97909d3ac6b254c061a039d44cb85c3b0a4ad3a420ad173363a2347a8e3563e5045194687bb990139c711c456162a8b050205738fdc4915dd4dc887234dfb4c33f7e8488d8d37d42594113f4a56349ed496332b15898af9cc8fe3700f0227f08dd652a717efa2d09c0c217262e580e42c099cc00d82830e22da48c53ebe39b1345aa1761b6cffe3a9d37b944fc6baf6383410a092bc412bda1c90b03982431eb8e9f82fb6f51b7230b500fa5f082ad9bf1"]}]}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000001140), 0x10) io_setup(0x9, &(0x7f0000001180)=0x0) io_submit(r2, 0x1, &(0x7f00000011c0)=[&(0x7f0000001200)={0x400000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000001240)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) close(0x3) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000100000d020000000c000000000000000000000000000015"], 0x0, 0x3a, 0x0, 0x9}, 0x28) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0x7fff, r3, 'id0\x00'}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) sendmsg$can_bcm(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000fc0)={0x6, 0x642, 0x8, {r5, r6/1000+60000}, {r7, r8/1000+10000}, {0x3, 0x1}, 0x1, @canfd={{0x1, 0x1, 0x0, 0x1}, 0xc, 0x2, 0x0, 0x0, "49ecf94c5936de44f4d4cf8fb124763451a0d72d04641046a1e5c8020f6173fed2499e1d0ad0c3fae653b74f347845b3247cdba33d39108efb06011ef69d678e"}}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x8050) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, r9, 0x202, &(0x7f00000010c0)={0x0}) sched_setscheduler(r9, 0x6, &(0x7f0000001100)) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) close(r14) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 21m19.039948971s ago: executing program 1 (id=2530): socket$inet6(0xa, 0x80002, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r1 = getpid() r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000300)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r5, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 21m17.989607042s ago: executing program 1 (id=2532): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x9801) unshare(0x22020600) move_mount(r0, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x400, 0x0) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0xa) 21m17.921929072s ago: executing program 1 (id=2533): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="cd3c000000000200000001000000770201"], 0x2a8}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) 21m16.834316078s ago: executing program 1 (id=2538): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) (async, rerun: 64) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) (rerun: 32) write(r2, &(0x7f00000003c0)='7', 0x1) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, 0x0, 0x0) (async) sendto$inet6(r1, 0x0, 0x0, 0x20000075, &(0x7f0000000400)={0xa, 0x4001, 0xfff8, @loopback, 0x5c2c}, 0x1c) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, 0x0) setfsgid(0xee00) (async) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r3, 0xee01, 0x0) (async) keyctl$setperm(0x5, r3, 0x30925) (async) keyctl$read(0xb, r3, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x6}}}, &(0x7f0000000300)=0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r5) syz_ublk_setup_queues(0xffffffffffffffff, r4, &(0x7f0000000440)={0x0, 0xc1, 0x200, 0xfffffff7, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x400, 0x3, 0x1a1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x747a, 0x2, 0x1, 0x2c1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x3009, 0x1, 0x11d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x1000, 0x1, 0x117}}], 0x1, 0x0, 0x0) 21m16.229752992s ago: executing program 40 (id=2538): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) (async, rerun: 64) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) (rerun: 32) write(r2, &(0x7f00000003c0)='7', 0x1) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, 0x0, 0x0) (async) sendto$inet6(r1, 0x0, 0x0, 0x20000075, &(0x7f0000000400)={0xa, 0x4001, 0xfff8, @loopback, 0x5c2c}, 0x1c) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, 0x0) setfsgid(0xee00) (async) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r3, 0xee01, 0x0) (async) keyctl$setperm(0x5, r3, 0x30925) (async) keyctl$read(0xb, r3, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x6}}}, &(0x7f0000000300)=0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r5) syz_ublk_setup_queues(0xffffffffffffffff, r4, &(0x7f0000000440)={0x0, 0xc1, 0x200, 0xfffffff7, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x400, 0x3, 0x1a1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x747a, 0x2, 0x1, 0x2c1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x3009, 0x1, 0x11d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x1000, 0x1, 0x117}}], 0x1, 0x0, 0x0) 21m3.108611141s ago: executing program 9 (id=2593): syz_open_dev$cec(&(0x7f0000000280), 0x0, 0xa00) r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syz_tun\x00'}) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f00000003c0), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000440)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000480)=0x8, 0x4) pselect6(0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000300)={0x8}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000980)='./proc\x00', &(0x7f00000009c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) openat(0xffffffffffffffff, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x200, 0x23) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r2, &(0x7f0000000140)='\\x01020304 2000000000 0 0 0 krb5 \\x00000000ffffff7f0000000000000000120000000102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f10', 0x8b) 21m2.909576394s ago: executing program 9 (id=2598): socket$packet(0x11, 0x2, 0x300) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000400)="3619b9c685915d93c56dd794cf71166d58d6dc97573433846b5140ba6e68863b04e971a5ba7bfef175203303caa01f65fa972af7f70a7e744016ba16d7b7b8a4252e95baf52cf024580fe29f5bdccdb7e2461c0ad8", 0x55, 0x10, &(0x7f0000000580)={0x2, 0x4e20, @local}, 0x10) getsockname$packet(r1, 0x0, &(0x7f0000000240)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r3, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r3, 0x4008af74, &(0x7f0000000500)={0x2, 0x58, "cc21d352e2ac49681f8e47298e6033bee6e32fb45f75bb37cbcf60ce741150f94a0a0883b389a6241954cfb538992c4325a92554986d1fb55211c7698678858721896a5833e5f3cf5351f9a933736d4050362bc384844561"}) r4 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2c0000, 0xc8200) kcmp(0x0, 0x0, 0x1, r4, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000a80)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x11c, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x4, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x4000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 21m1.340129552s ago: executing program 9 (id=2602): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x34b8, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000300)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x9, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 21m1.147790547s ago: executing program 9 (id=2604): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x9801) unshare(0x22020600) move_mount(r0, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x400, 0x0) move_mount(r1, &(0x7f00000002c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(0x0, 0xa) 21m0.427015452s ago: executing program 9 (id=2608): socket$inet6(0xa, 0x80002, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r1 = getpid() r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000300)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 20m59.91777738s ago: executing program 9 (id=2610): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000500)=0x6) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x2) prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknodat$md(0xffffffffffffff9c, &(0x7f00000000c0)='./md0\x00', 0x6180, 0x0) openat$md_node(0xffffffffffffff9c, &(0x7f0000000140)='./md0\x00', 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/mdstat\x00', 0x1800, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000a40)=""/198, 0xc6}], 0x1, 0x7, 0x9) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpid() syz_open_dev$usbfs(0x0, 0x80, 0x113201) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x777) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r5, &(0x7f0000000480)='1', 0x1) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='4', 0x1}], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="38000000090301020000000000000000000000000900020073797a3100000000050001000c00018008000140ffffffff0000000000000000c9dd1062f573cfd3592e253b12e4df4be8581b9f5ec7c187a2403f18d0d546970a79a10a581482bfec8395a8853d389eddbc31b202384abb7d85a55223d07b98f63f608dc2c98ccf6ab4e424878025bb8e75c5c55bf58d64e09e38310913d70419c6f52a0af255aa0f62ebb9cf18fd5d03d423b8451edc029a34cf810ea0098d30ceb34adcbc91287ab81e938f0aa97c251f68582f6f7c4efd4f6ef448422476e1bfcd83f027574d6080e0add3eeff272d18801fc0946cbb64cef36bed2b"], 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) syz_open_procfs(0x0, &(0x7f0000000280)='pagemap\x00') 20m59.739563963s ago: executing program 41 (id=2610): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000500)=0x6) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x2) prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknodat$md(0xffffffffffffff9c, &(0x7f00000000c0)='./md0\x00', 0x6180, 0x0) openat$md_node(0xffffffffffffff9c, &(0x7f0000000140)='./md0\x00', 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/mdstat\x00', 0x1800, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000a40)=""/198, 0xc6}], 0x1, 0x7, 0x9) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpid() syz_open_dev$usbfs(0x0, 0x80, 0x113201) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x777) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r5, &(0x7f0000000480)='1', 0x1) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='4', 0x1}], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="38000000090301020000000000000000000000000900020073797a3100000000050001000c00018008000140ffffffff0000000000000000c9dd1062f573cfd3592e253b12e4df4be8581b9f5ec7c187a2403f18d0d546970a79a10a581482bfec8395a8853d389eddbc31b202384abb7d85a55223d07b98f63f608dc2c98ccf6ab4e424878025bb8e75c5c55bf58d64e09e38310913d70419c6f52a0af255aa0f62ebb9cf18fd5d03d423b8451edc029a34cf810ea0098d30ceb34adcbc91287ab81e938f0aa97c251f68582f6f7c4efd4f6ef448422476e1bfcd83f027574d6080e0add3eeff272d18801fc0946cbb64cef36bed2b"], 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) syz_open_procfs(0x0, &(0x7f0000000280)='pagemap\x00') 20m59.732211472s ago: executing program 3 (id=2612): socket$netlink(0x10, 0x3, 0x14) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x4140, 0x85) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00', @ANYRES32=r0], 0x2b) sendfile(r2, r0, 0x0, 0x95e2) 20m59.651126092s ago: executing program 3 (id=2613): syz_io_uring_setup(0x5c47, &(0x7f0000000240)={0x0, 0xcf0b, 0x10, 0xfffffffe, 0x11}, 0x0, &(0x7f0000000300), &(0x7f0000000340)) mmap$IORING_OFF_PBUF_RING(0x0, 0x6a, 0x3000004, 0x110, 0xffffffffffffffff, 0x82b6a2fd) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 20m59.545352477s ago: executing program 3 (id=2614): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) r0 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000600)={0x0, 0x30b5, 0x800, 0x1, 0x158}, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0, &(0x7f00000000c0)=0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x3, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x4, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffa, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r9) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r10, &(0x7f00000003c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) write$FUSE_INIT(r8, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x18) syz_fuse_handle_req(r8, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20m58.062177223s ago: executing program 3 (id=2616): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x9801) unshare(0x22020600) move_mount(r0, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x400, 0x0) move_mount(r1, &(0x7f00000002c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(0x0, 0xa) 20m57.981869259s ago: executing program 3 (id=2618): socket$inet6(0xa, 0x80002, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r1 = getpid() r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000300)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 20m57.537874835s ago: executing program 3 (id=2620): socket$netlink(0x10, 0x3, 0x14) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x4140, 0x85) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00', @ANYRES32=r0], 0x2b) sendfile(r2, r0, 0x0, 0x95e2) 20m57.504873097s ago: executing program 42 (id=2620): socket$netlink(0x10, 0x3, 0x14) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x4140, 0x85) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='+\x00\x00', @ANYRES32=r0], 0x2b) sendfile(r2, r0, 0x0, 0x95e2) 20m57.381230822s ago: executing program 2 (id=2622): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0xffb9, 0x4004044) (fail_nth: 5) 20m57.204948048s ago: executing program 2 (id=2623): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000080)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r1, r2, &(0x7f0000000300)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x9, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 20m57.089481671s ago: executing program 2 (id=2624): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) r0 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000600)={0x0, 0x30b5, 0x800, 0x1, 0x158}, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0, &(0x7f00000000c0)=0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x3, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x4, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffa, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r9) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r10, &(0x7f00000003c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) write$FUSE_INIT(r8, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x18) syz_fuse_handle_req(r8, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20m56.086985001s ago: executing program 2 (id=2625): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x9801) unshare(0x22020600) move_mount(r0, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x400, 0x0) move_mount(r1, &(0x7f00000002c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(0x0, 0xa) 20m56.084560378s ago: executing program 2 (id=2629): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140500000000bb0375294559504df5b4ae3fd17810005e48d766eb942afec368aa0cc0c73443cace6cc0605984520001000000"], 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x48030) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff}, 0xe) sendmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004045) 20m55.641284727s ago: executing program 2 (id=2631): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000080)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r1, r2, &(0x7f0000000300)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x9, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 20m55.518747683s ago: executing program 43 (id=2631): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000080)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r1, r2, &(0x7f0000000300)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x9, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 3m46.756387324s ago: executing program 0 (id=5212): socket$inet6(0xa, 0x3, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000440)={0x0, 0x2, 0x3010, 0x2, 0x3}, &(0x7f0000000580)=0x0, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000700)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x21, &(0x7f0000000780), 0x1, 0x40}) syz_io_uring_setup(0xf00, &(0x7f00000007c0)={0x0, 0x0, 0x40000, 0x2, 0x2a, 0x0, r0}, &(0x7f0000000880)=0x0, &(0x7f00000008c0), &(0x7f00000003c0)) syz_ublk_add_dev(r0, r4, r2, r3, &(0x7f0000000940)={0x2e, 0xcb8045a30b577d09, 0x300, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000a00)=@any_dev={0x3, 0xc2f, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x108}}}, &(0x7f0000000a40)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x140) write(r5, &(0x7f0000000200)='6', 0x1) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) socket(0x400000000010, 0x3, 0x0) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, 0x0, 0x190) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80281, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000300)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) 3m41.163978008s ago: executing program 0 (id=5219): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$CDROMREADCOOKED(0xffffffffffffffff, 0x5315, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0) mount(&(0x7f0000000d80)=@filename='mtd0\x00', &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000e40)='./file0\x00') sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000002480)={0x1c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x440c4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000e80)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000ec0)=""/47, 0x2f) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000002580)=ANY=[@ANYBLOB="280000004e000000000000000000000057796a6f0000000001490700080000000000000009000000100000000000000062369866c4f16098ec28dfc8784e34ce670a1c270000008bbb99d464b72d7884191e3521ca31f843e4031966441b88ca1557216750c0510b628dad872acb89e2a809049b97c000688231053deaa0c88ef570e426f42ae2d6336e4aabc6dd8dbfa9090000000000000000e6000000"], &(0x7f0000002240), 0x1600) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYRES16=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x0) 3m40.211681678s ago: executing program 0 (id=5220): io_setup(0x222, &(0x7f0000000040)=0x0) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x5, 0xffffffffffffffff, &(0x7f0000000200)="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", 0x200, 0x200}]) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r3], 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000500)={0x3}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='devices.list\x00', 0x275a, 0x0) write$uinput_user_dev(r8, &(0x7f0000000800)={'syz1\x00', {0x35e5, 0x2, 0xac, 0x7}, 0x33, [0xf2dc4bb, 0x4, 0x9, 0x348, 0x2fb, 0x4, 0x80, 0x2b, 0xfffffff8, 0x1, 0x3, 0xea, 0x5, 0xe, 0xa, 0x80, 0x8, 0xc, 0x401, 0x4, 0xfffffffd, 0x7, 0x0, 0x3, 0x5d00, 0x0, 0x5, 0x7ff, 0x1ff, 0x0, 0x6, 0xffffffff, 0x0, 0x4, 0x400ff, 0x7, 0x3, 0x2ec, 0x5, 0x320b, 0x200007, 0x8, 0x34f42322, 0x10000, 0xf7d3, 0x5, 0x100, 0x9, 0x10000, 0xa, 0x2e70, 0x1, 0xfffffffe, 0x7, 0x8, 0x2, 0x6, 0xa72, 0x3, 0x6, 0x6, 0xb, 0xfffffffe, 0xb], [0x0, 0x0, 0x0, 0x3, 0x9, 0x6c6, 0x9, 0x0, 0xbd, 0x103, 0x1000, 0x8, 0x2, 0x6, 0x9, 0x4, 0x0, 0x1, 0x0, 0xd8, 0x5, 0x1, 0x338a76b2, 0xd9b, 0x3, 0x1000000d, 0x56, 0xfffff609, 0x6, 0x0, 0x9, 0x5, 0x105, 0x5, 0xfffffff2, 0x7, 0x7, 0x1000, 0x10000, 0x8001, 0x612, 0xffffffff, 0x10, 0x401, 0x8000, 0x7fff, 0x3, 0x3, 0x5a83, 0x7, 0x1, 0xffffffff, 0x9, 0x1, 0x9cbb, 0x69, 0xff, 0xfffffffa, 0x3, 0xfffffac3, 0x8e800000, 0x8, 0x3, 0x4], [0x1ff, 0x7, 0x800, 0x3, 0x9, 0x1000, 0xfffffffb, 0xc0000000, 0x2, 0x9, 0x40, 0x5, 0x26, 0xc2e2, 0xfffffffd, 0x101002, 0x275, 0x4000002, 0x5, 0x200, 0x3, 0x10000, 0x4, 0x5287, 0xe, 0x32, 0xdfb2, 0x8, 0x1, 0x80000000, 0x4, 0xb, 0x3, 0x6, 0x1, 0xa, 0x5290, 0x4, 0x4, 0x1ff, 0x8000009a, 0x5, 0x1000, 0x8, 0xc, 0x5, 0x1ae3, 0xb, 0x4, 0xa8, 0x1, 0x9, 0xd5, 0x10000, 0x7, 0x6, 0xd2, 0x4, 0x8000, 0x7, 0xbb, 0x2429, 0x753, 0x5], [0x8, 0x3e, 0x9, 0xffffffff, 0x2, 0x4b, 0x20000, 0x3, 0xfffffffb, 0x6, 0x200000e4, 0x0, 0x1, 0x4, 0x2, 0x1, 0x8000, 0xfffffffc, 0x1, 0x4, 0x10, 0x4, 0x3, 0xffff, 0xc37, 0xfffffffd, 0x2, 0x5, 0x7, 0x8, 0x3, 0x7, 0x4, 0x1, 0x7, 0x3, 0x7, 0x1ff, 0x7, 0x0, 0x10008, 0x1ff, 0xfc, 0x5, 0x9, 0xa, 0x7, 0x20, 0x7fff, 0x8, 0x5, 0x100, 0x8, 0x6, 0x2, 0xfffffff2, 0x6, 0x10, 0x80, 0x7, 0xffff, 0x3, 0x800014f, 0xfffffffb]}, 0x45c) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x54, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x35, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @random=0x3b, 0x4803, @void, @val={0x1, 0x1, [{0x24, 0x1}]}, @val={0x3, 0x1, 0x70}, @void, @val={0x6, 0x2, 0x4}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @void, @void, @void}}]}, 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x0) creat(&(0x7f0000000d80)='./file0\x00', 0xe1) openat$dir(0xffffffffffffff9c, &(0x7f0000000dc0)='.\x00', 0x0, 0x80) 3m36.768305418s ago: executing program 0 (id=5226): socket$inet6(0xa, 0x3, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000440)={0x0, 0x2, 0x3010, 0x2, 0x3}, &(0x7f0000000580)=0x0, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000700)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x21, &(0x7f0000000780), 0x1, 0x40}) syz_io_uring_setup(0xf00, &(0x7f00000007c0)={0x0, 0x0, 0x40000, 0x2, 0x2a, 0x0, r0}, &(0x7f0000000880)=0x0, &(0x7f00000008c0), &(0x7f00000003c0)) syz_ublk_add_dev(r0, r4, r2, r3, &(0x7f0000000940)={0x2e, 0xcb8045a30b577d09, 0x300, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000a00)=@any_dev={0x3, 0xc2f, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x108}}}, &(0x7f0000000a40)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x140) write(r5, &(0x7f0000000200)='6', 0x1) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) socket(0x400000000010, 0x3, 0x0) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, 0x0, 0x190) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80281, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000300)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) 3m34.29270674s ago: executing program 0 (id=5229): r0 = socket$inet6(0xa, 0x3, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000440)={0x0, 0x2, 0x3010, 0x2, 0x3}, &(0x7f0000000580)=0x0, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000700)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x21, &(0x7f0000000780), 0x1, 0x40}) syz_io_uring_setup(0xf00, &(0x7f00000007c0)={0x0, 0x0, 0x40000, 0x2, 0x2a, 0x0, r1}, &(0x7f0000000880)=0x0, &(0x7f00000008c0), &(0x7f00000003c0)) syz_ublk_add_dev(r1, r5, r3, r4, &(0x7f0000000940)={0x2e, 0xcb8045a30b577d09, 0x300, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000a00)=@any_dev={0x3, 0xc2f, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x108}}}, &(0x7f0000000a40)) write(0xffffffffffffffff, &(0x7f0000000200)='6', 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x3, 0xb}, 0x20) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r7 = socket(0x400000000010, 0x3, 0x0) write(r7, &(0x7f00000001c0)="0f03000019002551075c0165ff0ffc02802000030004000500e1000c040007001a000200", 0x33a) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, 0x0, 0x190) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80281, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000300)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) 3m29.331342056s ago: executing program 0 (id=5234): socket$packet(0x11, 0x2, 0x300) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000400)="3619b9c685915d93c56dd794cf71166d58d6dc97573433846b5140ba6e68863b04e971a5ba7bfef175203303caa01f65fa972af7f70a7e744016ba16d7b7b8a4252e95baf52cf024580fe29f5bdccdb7e2461c0ad8", 0x55, 0x10, &(0x7f0000000580)={0x2, 0x4e20, @local}, 0x10) getsockname$packet(r1, 0x0, &(0x7f0000000240)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r3, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r3, 0x4008af74, &(0x7f0000000500)={0x2, 0x57, "cc21d352e2ac49681f8e47298e6033bee6e32fb45f75bb37cbcf60ce741150f94a0a0883b389a6241954cfb538992c4325a92554986d1fb55211c7698678858721896a5833e5f3cf5351f9a933736d4050362bc3848445"}) r4 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2c0000, 0xc8200) kcmp(0x0, 0x0, 0x1, r4, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x11c, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x4, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x4000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 3m14.144869552s ago: executing program 44 (id=5234): socket$packet(0x11, 0x2, 0x300) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000400)="3619b9c685915d93c56dd794cf71166d58d6dc97573433846b5140ba6e68863b04e971a5ba7bfef175203303caa01f65fa972af7f70a7e744016ba16d7b7b8a4252e95baf52cf024580fe29f5bdccdb7e2461c0ad8", 0x55, 0x10, &(0x7f0000000580)={0x2, 0x4e20, @local}, 0x10) getsockname$packet(r1, 0x0, &(0x7f0000000240)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r3, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r3, 0x4008af74, &(0x7f0000000500)={0x2, 0x57, "cc21d352e2ac49681f8e47298e6033bee6e32fb45f75bb37cbcf60ce741150f94a0a0883b389a6241954cfb538992c4325a92554986d1fb55211c7698678858721896a5833e5f3cf5351f9a933736d4050362bc3848445"}) r4 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2c0000, 0xc8200) kcmp(0x0, 0x0, 0x1, r4, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x11c, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x4, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x4000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 23.066803509s ago: executing program 4 (id=5487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$thread_pidfd(0xffffff9c, &(0x7f0000000000), 0x200102, 0x0) process_mrelease(r1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x169802, 0x0) r3 = dup(r2) pselect6(0x0, 0x0, &(0x7f0000000340)={0xe, 0x48000000, 0x8, 0x0, 0xffff, 0x9, 0x1, 0x4}, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect(0x0, 0x32, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000380)=0x1000000010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x10, 0xffffffffffffffff, 0xf154b000) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f00000003c0)) setns(0xc9, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240fffffffe08000140000000030900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c000280080003400000"], 0xdc}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="040129190005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000014) 20.687164201s ago: executing program 8 (id=5490): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x81, 0xaa, 0x6d9, 0x1, 0x9]}, &(0x7f0000000240)=0x78) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x78, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x40, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}, @IFLA_MACVLAN_MACADDR_DATA={0x28, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0x9, 0x4, @local}, {0xa, 0x4, @remote}]}]}}}, @IFLA_LINK={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x8000082) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000100)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x5, 0x0, 0x911f, 0x100000001]}, &(0x7f0000000180)=0x50) 18.960569512s ago: executing program 4 (id=5493): socket$packet(0x11, 0x2, 0x300) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000400)="3619b9c685915d93c56dd794cf71166d58d6dc97573433846b5140ba6e68863b04e971a5ba7bfef175203303caa01f65fa972af7f70a7e744016ba16d7b7b8a4252e95baf52cf024580fe29f5bdccdb7e2461c0ad8", 0x55, 0x10, &(0x7f0000000580)={0x2, 0x4e20, @local}, 0x10) getsockname$packet(r0, 0x0, &(0x7f0000000240)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r2, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r2, 0x4008af74, &(0x7f0000000500)={0x2, 0x57, "cc21d352e2ac49681f8e47298e6033bee6e32fb45f75bb37cbcf60ce741150f94a0a0883b389a6241954cfb538992c4325a92554986d1fb55211c7698678858721896a5833e5f3cf5351f9a933736d4050362bc3848445"}) syz_open_dev$sndmidi(&(0x7f0000000780), 0x2c0000, 0xc8200) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0xb3b54c18e0590239, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x11c, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x4, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x0, 0x0, 0x1f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x4000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 16.660061417s ago: executing program 5 (id=5495): syz_emit_ethernet(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x2000003e}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000001900)) (async) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000001900)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x2710, @local}, 0x10) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x800000}, 0x8) close(0xffffffffffffffff) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x0, 0x48) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000240)) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000240)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x800) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) (async) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) (async) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r4, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) 15.397627098s ago: executing program 4 (id=5497): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x4800) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x10, 0x7) sched_setattr(0x0, &(0x7f00000022c0)={0x38, 0x6, 0x0, 0xffffffff, 0xfff, 0x5, 0x0, 0x80000001, 0x80000001, 0xffffffff}, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) set_mempolicy(0x4005, &(0x7f0000002300)=0x2e8d, 0x6) r7 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x86080, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000002340)=0xd) r8 = open(0x0, 0x143142, 0x80) ftruncate(r6, 0x2007ff7) sendfile(0xffffffffffffffff, r8, 0x0, 0x1000000201002) syz_usb_connect(0x0, 0x2d, &(0x7f0000002380)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009"], 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r9, &(0x7f00000023c0)=""/220, 0xdc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002540)=ANY=[@ANYBLOB="1c00000002030104000000"], 0x1c}}, 0x0) io_submit(0x0, 0x2, &(0x7f0000002580)=[&(0x7f00000025c0)={0x0, 0x0, 0x0, 0x2, 0x10, 0xffffffffffffffff, 0x0}, &(0x7f0000002600)={0x0, 0x0, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002780)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf253b000000080003001813fcd781eb1e272858cdf646d04e5f23ba55235d95b2728239fbd634c4daf2aea1e3bfe6cc6560d1ce583473b6d426dae7a003e52ae9240daec85376141323", @ANYRES32=r3, @ANYBLOB="38003300c0100e00ffffffffffff080211000000ffffffffffff730000008c188302726712ea1b02605eddec808ff48238e1840000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) sched_setaffinity(r5, 0x83d3b2bbb5be0056, &(0x7f0000002740)=0x3) write$sndseq(r10, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 15.020869607s ago: executing program 5 (id=5498): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) unshare(0x2c020400) syz_open_dev$loop(&(0x7f0000000180), 0x4, 0xc0981) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, 0x0, 0x2002c094) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000300)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) openat$tun(0xffffffffffffff9c, 0x0, 0xa000, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000003c0), 0x318, 0x0) madvise(&(0x7f000074b000/0x1000)=nil, 0x1000, 0xb) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) setpriority(0x2, 0x0, 0x2) (fail_nth: 1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0xa}, 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x20000010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) shutdown(r0, 0x1) 14.665046885s ago: executing program 8 (id=5499): socket$key(0xf, 0x3, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x4ba581, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x5, &(0x7f0000000f00)=ANY=[], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001240), 0x8, 0x10, &(0x7f0000001280), 0x10}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000ac1414000000000200000000020001000000000000000002fffffffb030005000000000002000000000000000000000000000000ae4f58741d2567c421f48ec91fcdea3c843efaa03dba50f7230ac216287364fe16d6763bee4b29b4a00c8c5865690211e8adeda83c8344d7201fbf05761ab6943534463fe52a552973ca2e3b8dd3eaf130bdecbca04060e991fa467454aa51c7523b8dee6df061a6500ff0277bdd6583a9f1c43bb0bf7ffeec0dc7b53f6a3490ead3e03187c0eba7055518e0c30c"], 0x50}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x840, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}}, 0x4004040) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0x3c4, 0x14, 0x2, 0x9, 0x46, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x0, 0x80000000, 0x400, 0x1, 0x13, 0x100, 0x2, 0x66, 0x34d, 0x5, 0x402, 0x5, 0x200, 0xe2df, 0x8, 0xfffffffe, 0x4, 0x0, 0x7, 0xf56, 0x6]}) r4 = openat$cdrom(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$CDROMVOLCTRL(r4, 0x530a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c000000100001042dbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000280)=0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="7806000041000001feffffff00000000017c00004806428044060f80d000568026001e004295027df7d605e20a450ffde339794d4037917769b132028049ff9105382f8b795c000008000800", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32, @ANYBLOB="2c006000db81007fe7f7118ad0abe4ecf8df31ba468a26be7501800080c9f9eb8015ae664a53af3666e19bbae8002b0037a2215205e7e48013dc2b2e6796b18580aeffa8fd9658313654838d5c2481fe181086c2906f004c3efc5227dcbbc6a39a5118d473441c65e44eb4ce535b41ced3e11a7eea625deee87ee81f968812731b97798b6c030000000bf08f468018794f6737fc6ebd310e776c7b46c60e3939696576731809e3930a9f6383b68d0dcce9770bc4989c9be059b2c3754f440aa5348d39fc5a426bca329bc4a01ddb5d179f0345a19f53dd5fd45181c8327619e65028b0ac1351e7b8cc49b063d0a4d0c59422087fb8d00a372d3897a81ef24170a3c13776624420006f986037fe7848e693e81137c200458008006c0003000000495ea68d69db0470d49646cc5a42e7a86d9f907e2aaaba87891e739717faf4d7ac1d7f38bd5296e16e537d2051c3a6b99575d7e1adc62ca8c2cd8737185106ed1654d0fdccd4aed3a58fe05d1d972dd4ff31cda19ad8a7ffc118adc0e2250243e279b1008d29731961fca02382b6fab84f289e04154b37228439ab8a6f883d98f69607f188b7e44334fa8614e1db14002b00000000000000000000000000000000010c0051007f000000000000000400e1800400538000001800018010000400cab1893a20b8d2a9352198ac04001c8004000280"], 0x678}, 0x1, 0x0, 0x0, 0x48815}, 0xc810) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000780)={0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 13.89016747s ago: executing program 6 (id=5500): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x109480) ioctl$EVIOCGVERSION(r0, 0x8004453f, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x20040000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x1da}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000140)={0x1}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000280)={[{0x5, 0x0, 0xd1, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x20000000, 0x10000000, 0x1, 0x0, 0x0, 0x2004cb, 0x3, 0xfffffffffffffc, 0xffffeffffffffff8, 0x0, 0xfffffffffffff2ab, 0x7, 0x4], 0x2, 0x200306}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb351, 0x400, 0x2100, 0x10000004, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5e8, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 13.889714569s ago: executing program 5 (id=5501): socket$packet(0x11, 0x2, 0x300) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000240)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r2, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r2, 0x4008af74, &(0x7f0000000500)={0x2, 0x57, "cc21d352e2ac49681f8e47298e6033bee6e32fb45f75bb37cbcf60ce741150f94a0a0883b389a6241954cfb538992c4325a92554986d1fb55211c7698678858721896a5833e5f3cf5351f9a933736d4050362bc3848445"}) r3 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2c0000, 0xc8200) kcmp(0x0, 0x0, 0x1, r3, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0xb3b54c18e0590239, 0x0, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x11c, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x4, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x0, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x4000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 12.853538967s ago: executing program 8 (id=5502): r0 = socket$inet6(0xa, 0x3, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000440)={0x0, 0x2, 0x3010, 0x2, 0x3}, &(0x7f0000000580), &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x0) syz_ublk_add_dev(r1, 0x0, r2, r3, &(0x7f0000000940)={0x2e, 0xcb8045a30b577d09, 0x300, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000a00)=@any_dev={0x3, 0xc2f, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x108}}}, &(0x7f0000000a40)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x140) write(r4, &(0x7f0000000200), 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x3, 0xb}, 0x20) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) socket(0x400000000010, 0x3, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, 0x0, 0x190) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80281, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000300)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) 10.625970415s ago: executing program 4 (id=5503): socket$key(0xf, 0x3, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x4ba581, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x5, &(0x7f0000000f00)=ANY=[], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001240), 0x8, 0x10, &(0x7f0000001280), 0x10}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000ac1414000000000200000000020001000000000000000002fffffffb030005000000000002000000000000000000000000000000ae4f58741d2567c421f48ec91fcdea3c843efaa03dba50f7230ac216287364fe16d6763bee4b29b4a00c8c5865690211e8adeda83c8344d7201fbf05761ab6943534463fe52a552973ca2e3b8dd3eaf130bdecbca04060"], 0x50}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x840, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}}, 0x4004040) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0x3c4, 0x14, 0x2, 0x9, 0x46, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x0, 0x80000000, 0x400, 0x1, 0x13, 0x100, 0x2, 0x66, 0x34d, 0x5, 0x402, 0x5, 0x200, 0xe2df, 0x8, 0xfffffffe, 0x4, 0x0, 0x7, 0xf56, 0x6]}) r4 = openat$cdrom(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$CDROMVOLCTRL(r4, 0x530a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c000000100001042dbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1315000000000000140012800a000100767863616e00000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 10.195029811s ago: executing program 6 (id=5504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x4884}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x80000}, &(0x7f0000000080)=0xc) r1 = socket(0x2, 0x80805, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x21041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='mnt\x00', 0x1ff) mount(&(0x7f0000000780)=@loop={'/dev/loop', 0x0}, &(0x7f00000007c0)='mnt\x00', &(0x7f0000000800)='f2fs\x00', 0x0, &(0x7f0000000840)='compress_algorithm=lzo,compress_extension=*\x00') ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x19) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000700)=[@ioring_restriction_register_op={0x0, 0xb}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="16ea", 0x2}], 0x1) r3 = socket(0x2b, 0x80801, 0xfffffffe) connect$inet6(r3, &(0x7f00000006c0)={0xa, 0x4e22, 0x10004, @loopback, 0x1}, 0x1c) listen(r3, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000a00462000000407ff0200000000000000000000000000010100"/140], 0x8c) r5 = socket(0x2, 0x80805, 0xfffffffd) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f00000003c0)={'\x00', 0x2, 0x7, 0x5, 0x7, 0x4, 0x0}) wait4(r6, &(0x7f0000000480), 0x1000000, &(0x7f00000004c0)={{0x0}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r8, 0x3, 0x30}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000880)={'vxcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f00000008c0)={0x1d, r10}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000400)=ANY=[@ANYBLOB="01000000000000000300000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r4, @ANYRESOCT=r7, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48485}, 0x8890) 9.855247445s ago: executing program 8 (id=5505): r0 = fsopen(&(0x7f0000000380)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40042, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1b, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000055a60701000000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000830000008500000086000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010001008500000006000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f0000000300)="b800000500000000", &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000540)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000580)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000600)='X', 0x8030000}], 0x1) shutdown(r4, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc2c45513, &(0x7f0000000640)={{0x7, 0x0, 0xe4, 0x200, '\x00', 0x3ff}, 0x1, [0x4, 0x200, 0x4, 0xb, 0x3, 0xffffff7d, 0xd, 0x5, 0x8, 0xad, 0xd, 0x2, 0x80000000, 0xfffffc00, 0x2, 0x2, 0x0, 0x1, 0x3, 0x4, 0x8, 0x10e00000, 0x7, 0x3, 0x6, 0x374f, 0x19d, 0x1, 0x401, 0x4, 0xf9, 0x4, 0x0, 0x3, 0xffff1dab, 0x7f, 0xfffffffb, 0x6, 0x2, 0xfffffff8, 0x4, 0xd9, 0x7, 0xb7, 0x1, 0x4, 0x1, 0x6, 0x4, 0x0, 0x8, 0x0, 0xffffffff, 0x5, 0xb, 0x231, 0x43, 0x3, 0xffffffff, 0x4, 0x8, 0xffffffff, 0x5, 0x8, 0x1, 0x0, 0x1, 0x8, 0x0, 0x6, 0x5, 0x2, 0x90c, 0xa3ab, 0x9, 0xe, 0x5, 0x67, 0x7, 0x6, 0xfffff88a, 0xed8f, 0x8, 0x1, 0x1, 0xe, 0x0, 0x9, 0x80000001, 0x10000, 0xfffffffa, 0x200, 0x101, 0x7, 0x1, 0x7, 0x9, 0x8, 0x8, 0x800, 0x9, 0x9, 0x1, 0x45c7, 0x5, 0x4, 0x8, 0x3, 0x2, 0x401, 0x81, 0x8, 0x0, 0x8, 0xd, 0x200, 0x4, 0x7, 0x6b, 0x96c, 0x1524, 0x8398, 0x6, 0x20000, 0x95, 0x8, 0x9, 0x9]}) 8.934773685s ago: executing program 5 (id=5506): socket$key(0xf, 0x3, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x4ba581, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x5, &(0x7f0000000f00)=ANY=[], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001240), 0x8, 0x10, &(0x7f0000001280), 0x10}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}}, 0x4004040) openat$cdrom(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c000000100001042dbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1315000000000000140012800a000100767863616e00000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 8.342465179s ago: executing program 4 (id=5507): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$thread_pidfd(0xffffff9c, &(0x7f0000000000), 0x200102, 0x0) process_mrelease(r1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x169802, 0x0) r3 = dup(r2) pselect6(0x0, 0x0, &(0x7f0000000340)={0xe, 0x48000000, 0x8, 0x0, 0xffff, 0x9, 0x1, 0x4}, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect(0x0, 0x32, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000380)=0x1000000010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x10, 0xffffffffffffffff, 0xf154b000) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f00000003c0)) setns(0xc9, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240fffffffe08000140000000030900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000340000000120800024000000003080001"], 0xdc}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="040129190005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000014) 8.128514947s ago: executing program 6 (id=5508): socket$packet(0x11, 0x2, 0x300) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000240)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r2, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r2, 0x4008af74, &(0x7f0000000500)={0x2, 0x57, "cc21d352e2ac49681f8e47298e6033bee6e32fb45f75bb37cbcf60ce741150f94a0a0883b389a6241954cfb538992c4325a92554986d1fb55211c7698678858721896a5833e5f3cf5351f9a933736d4050362bc3848445"}) r3 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2c0000, 0xc8200) kcmp(0x0, 0x0, 0x1, r3, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0xb3b54c18e0590239, 0x0, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x11c, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x4, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x0, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x4000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 6.788871237s ago: executing program 8 (id=5509): socket$key(0xf, 0x3, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x4ba581, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x5, &(0x7f0000000f00)=ANY=[], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001240), 0x8, 0x10, &(0x7f0000001280), 0x10}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000ac1414000000000200000000020001000000000000000002fffffffb030005000000000002000000000000000000000000000000ae4f58741d2567c421f48ec91fcdea3c843efaa03dba50f7230ac216287364fe16d6763bee4b29b4a00c8c5865690211e8adeda83c8344d7201fbf05761ab6943534463fe52a552973ca2e3b8dd3eaf130bdecbca04060e991fa467454aa51c7523b8dee6df061a6500ff0277bdd6583a9f1c43bb0bf7ffeec0dc7b53f6a3490ead3e03187c0eba7055518e0c30c"], 0x50}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x840, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}}, 0x4004040) openat$cdrom(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c000000100001042dbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1315000000000000140012800a000100767863616e00000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 5.42300857s ago: executing program 6 (id=5510): socket$key(0xf, 0x3, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x4ba581, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x5, &(0x7f0000000f00)=ANY=[], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001240), 0x8, 0x10, &(0x7f0000001280), 0x10}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000ac1414000000000200000000020001000000000000000002fffffffb030005000000000002000000000000000000000000000000ae4f58741d2567c421f48ec91fcdea3c843efaa03dba50f7230ac216287364fe16d6763bee4b29b4a00c8c5865690211e8adeda83c8344d7201fbf05761ab6943534463fe52a552973ca2e3b8dd3eaf130bdecbca04060e991fa467454aa51c7523b8dee6df061a6500ff0277bdd6583a9f1c43bb0bf7ffeec0dc7b53f6a3490ead3e03187c0eba7055518e0c30c"], 0x50}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x840, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}}, 0x4004040) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0x3c4, 0x14, 0x2, 0x9, 0x46, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x0, 0x80000000, 0x400, 0x1, 0x13, 0x100, 0x2, 0x66, 0x34d, 0x5, 0x402, 0x5, 0x200, 0xe2df, 0x8, 0xfffffffe, 0x4, 0x0, 0x7, 0xf56, 0x6]}) r4 = openat$cdrom(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$CDROMVOLCTRL(r4, 0x530a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c000000100001042dbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000280)=0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="7806000041000001feffffff00000000017c00004806428044060f80d000568026001e004295027df7d605e20a450ffde339794d4037917769b132028049ff9105382f8b795c000008000800", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x678}, 0x1, 0x0, 0x0, 0x48815}, 0xc810) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000780)={0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 4.915477131s ago: executing program 5 (id=5511): socket$packet(0x11, 0x2, 0x300) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0x4e20, @local}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r2, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$VHOST_VDPA_SET_CONFIG(r2, 0x4008af74, &(0x7f0000000500)={0x2, 0x57, "cc21d352e2ac49681f8e47298e6033bee6e32fb45f75bb37cbcf60ce741150f94a0a0883b389a6241954cfb538992c4325a92554986d1fb55211c7698678858721896a5833e5f3cf5351f9a933736d4050362bc3848445"}) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0xb3b54c18e0590239, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000a80)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x11c, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x4, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x0, 0x0, 0x1f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x4000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 2.275787294s ago: executing program 4 (id=5512): r0 = socket$inet_icmp(0x2, 0x2, 0x1) signalfd4(r0, &(0x7f0000000080)={[0x2, 0xfffffbff]}, 0x8, 0x80800) r1 = gettid() timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000000180)=[{0x3, &(0x7f00000001c0)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) syz_open_dev$MSR(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c050}, 0x44004000) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a34000000060a010400000000000000000a0000010900020073797a32000000000900010073797a31000100000800094000000003140000001100010000000000000000000100000a"], 0x5c}, 0x1, 0x0, 0x0, 0x855}, 0x24000840) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r3, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r4, 0x20, &(0x7f0000001600)="8cfb122c51442482efe52032399f13ff0dfabe01927692df", 0x0, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e00)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd22, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffd, 0x3, 0xffff0099, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c2}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000f40)="d7faf398bd72a4f61ce84ee2ae9d", 0xe, 0x20040014, &(0x7f0000000f80)={0x11, 0x7, r6, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x14) r8 = fsopen(&(0x7f0000001640)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x1, 0x0) openat$cgroup_subtree(r9, &(0x7f0000001680), 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000001100)=[{{&(0x7f0000000380)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000940)=[{&(0x7f00000003c0)="998a99b3d924af7854e5d726b04d8b110fc8950c090c5d0d4656b1ebcaf0442365db14d69be25f20572ac9631ba472f03b949cf01b442be2f71e5ef98f73bb9c9eac98eba5463e80d141420f21947caff5b9fa4742ec7669193718e8f17d2b403ddca1350897fbda7f0ab0cf24256acbf6bfd084fbf571b1f8cbeef136bffd0f", 0x80}, {&(0x7f0000000440)="fa631bfbffd05b4abbcf77d5595b0c54f9f05fe00dd0ae844db3909bdc2aa13e8c779fda63327891a24795b0f47fefcd23d06472fcf5009e354c44be6ef5ab7f44e41dab8aab9345086bfce53ca50e3dc4b7e132bd5f1f188ad04e6874608371ef4a5d1251829e53c35fa89163f9ac0ab3df0779ebd7121f888107f1d947a72cabcf80d1e669242ffacb64796bf3c4ffd143ecd2a0560d64325e6a7afa481ce0e9cffbe0b9f841dca60efbd748f51e48ec75a46321eb67aeab8331a1d1516389c764ae27535231095d0e34802e0b37656943df11943b23f79d04d9e42936aa61abf9cfd76bcc82b2e6f69ee03535e3351b8d9b4527", 0xf5}, {&(0x7f0000000540)="1b3260542386579769d06f50c4eab6293b73e928e1aca45c2744adefb1f4107408fc899d6b8a08fe9849acab2cc5eb8498466f44dbbaed74027ef0aa9ea5ebe409025e729529db6c92ba31968ca3ca792b9631ae0bfe12b863206793338f1b943ffabb0603a9e67587f861237052913994ea277a972b5b673d2dc653a176c448fdc64aac8c21bd4f9a94eae006d3ed6bbb29289d32fd3db8d5c953", 0x9b}, {&(0x7f0000000600)="329771e6124febc89cb3d1a5ab76cd1d5396a72cdb3053e62e7e9fb381aebfa9ccad0e554c4322285516601a1256230bf5849db26591d3084f9b780c5b1ee6f261fdb64b44b519b9a4ea3e8ef25765791349a8eb8febf3f1ccb76ab757dc1ec17e6e7cd73ac145104ab9d0fdedbb9d526456b6c0a5518fb72248b3aefb5147e248b0b8af2e86c68d448f026e832dc0f2", 0x90}, {&(0x7f00000006c0)="9d7839922484504084c015c564ded3761571af82b85c227d9979cb2aa955bb082f6d296855fa6067872ce28f5892bbb0ea9440ad81f30d1b7e1b66648fdad764b7cf14620ffedf66e7d86ef41ed7deec248603a5396ae8dedd072a851908669093773e2c7befe01ffe07e7d6077223b700e89693dd7d819cf274dd38f9d53b036dcb4ef4f906606ab3d769d5ec35de66f6945091d7", 0x95}, {&(0x7f0000000780)="fcc6d2315dfd8f0cb6e6b03dce3208f56794fd2d352a7e05a5a33fd87a34fb6af8dd41880b215cc81ac5afa8ddb8752e2a6093ae72de45a8136689330fd2b586669810d5609d247d77ae83b76358372e75610fa704000fd9e86176a2f341eaad62d54fa479eba5bfed2f5d91fdf3aed3e17f1869e4ead3246f81a26f3d862f4a0f5c2ce24816c4ca14f5a6e566ee77b018dfa1651c4471ee698391afc0ec6430d6d8f0cc4682cd2e9a1275ed51de1b52c96dcc5b7403e3d3ed543b9f6b0e962912920534e0a36f255c", 0xc9}, {&(0x7f0000000880)="92ae6c66cf87a6cf71fe1268ef050d6808e8819b5194948ba0809ebae9aff395a695e0a20486a86c548d1535be74cef8db6e8d59cbd648bc6625c9c88d702c7ced3f964a8f506849f5a6fa56566373d2fa1ecd9de0489bd01ba1e6a72e42d53d153309c4bd8642d2baa29342db6ab07845908a1adaa12db0010885718443ba6f628e7269081457b9a10dac7ac9bbd0ab0c7ab85141cb851a9d889ec13e79357ef28ebaf60880bc410576a2f103a2481635e8313cc638e4927c2d93bfb3", 0xbd}], 0x7}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000980)="a1ec7bed60b7939b04d63bb7301fbf759ed47cf3c972fa3194ba1348d209a0122c281fd215f63b7c5d20d90332e0e089d5f72ebf919498804c26e76024bb4e1bea28586a13b41985960cec1a1ab52c05df9bb14f252c0741d6186e6262684f09c73324ed1d5c30884e2a5c7488b3b15ebe6beb37472bf2cd04d3d7def6bad574313acb66934512ee4f911565e6d51e7352bad582515c378ecd9590efc1da3ecba4c81ea2433f59e790c4d5b3ba97d0fc399bbf3ba8f5a5010e295ea97ea5fb3df243771ae6df6f7b06d4d491c880576f2fda46b4b7311a62607af89fdd156f20e63ff9bb441b8e", 0xe7}, {&(0x7f0000000a80)="52b0b3edf9b3d34a09c763613fbcb7b34b25cfab175c9d59e75770c1d6a6263c8e8567f17c5780b2c1db8b85340b4a878e9f10674e34d7ad7c81f3d94be3930a5d068abdb602e87bcc99bebbb528abbbb1d6f6e0b4c109ee6012a965b80702ee9624e654055e77160aa081d77e2e7b3df15208916645e58000ce93961a", 0x7d}, {&(0x7f0000000b00)="c82f4ec69826e1b8006a6feb8bcb9bc317ae52a4067acc8ac65f3b2afedf213f7242ec8de4e707376fab0a026a6e58b14fa814523cedfaf989468063c52694dafd98d743768f603954bf23e1f94296835a7b489a39d483e10713c9bd2b6375dd2239180bfec614", 0x67}, {&(0x7f0000000b80)="40afa8fdec3250c1d05ecbe7bf97233b5ab28771c6d44cf3beabb250698110155c2bc3bc863aba68e3bdb1b639161dc369f6a41a26672c90b659c6f1fecb0ae860f5335aeae0acf013d95a846cd76b63e837fffdc71a329b19c9b990005cc71909929a8a5dc8894f9544b3be83a4bdd20f60adb9cbf4d1e7bf281d7afaee80dd403d246c627782d21ad73ba74af3046a5714738205b6f52172c70704196174ca418ec7ae2ad8b09b38efd9c44e018b1560aa67e9eb74c6498f322edc71fb4a57f4d4aa4b0609a096fd3ba8ce105fa1825f2388017a44cb695e40581c88ac", 0xde}, {&(0x7f0000000c80)="87a49b3f023c6000274d3ec28426711c546a486df3f8e32ffaf9f7406e194f3fbb8b30364cbc19f4ed803001dfa19223539ef88e02983797eed11da1941974979140550656c30ecefc77571987235354b61253815ced75ffb3b9ea51f852c5b90ff8b3448510ab36b196b83575e6f0c8cf71", 0x72}, {&(0x7f0000000d00)="7174706b488a5eb28c2394039a6078c0ba10b189e99fcff9170c3498d5ff08af793d3c8ef787098c6c21344f1d646d1619a092d684bad3e145f09f16e34aa8f0fce9c4962ebc590cce8ff08b20bd0a94550588c0fcdfb195e267a38d715ab987df3a58eef2c1401b9b49d116d313a49c4bbd2943f437cad20df4bcaddbad399c2e86ea039920e51b00225add52033f6c97d4fbc4853d9d897adc448df7690207318b27984d2ff6c3ef965ca81f060c84a24a873674c68206cd55793e9bac6f", 0xbf}], 0x6, &(0x7f00000016c0)=ANY=[@ANYBLOB="100000000000000002000000040000000d00000000000000010000007e0000001000000000000000010000000600000010000000000000000200000000800000840000000000000007000000940401008313f7e00000020a010100e0000002ac14144344244bd10a01010100000cf60a01010100008001e000000200000040ac14141e00000007440c89000000d2c000000009862700000001060dafecfa3e18ce2343d7747e0002000f0ae546bdee264baf4e31e1193d0203e49409b9348e099b02c8000d000000000000000100000008000000180000000000000008000000", @ANYRES32=r6, @ANYBLOB="ac1414bbac1e01011000000000000000010000000180000010000000000000000700000001000000ec16c7"], 0x10c}}], 0x2, 0x8884) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f00000011c0)=@nat={'nat\x00', 0x1b, 0x5, 0x390, 0xa4, 0x0, 0xffffffff, 0x0, 0x16c, 0x2fc, 0x2fc, 0xffffffff, 0x2fc, 0x2fc, 0x5, &(0x7f0000001140), {[{{@uncond, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0xc, @loopback, @broadcast, @port=0x4e20, @icmp_id=0x65}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1b}, @multicast2, 0xffffffff, 0xff, 'erspan0\x00', 'veth0\x00', {0xff}, {0xff}, 0x2e, 0x2, 0x42}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@icmp={{0x24}, {0x4, "cf83", 0x1}}]}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x2, @rand_addr=0x64010101, @multicast2, @port=0x4e20, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x1a, @multicast1, @dev={0xac, 0x14, 0x14, 0x26}, @icmp_id=0x65, @port=0x4e24}}}}, {{@ip={@multicast1, @local, 0xffffffff, 0xffffffff, 'team0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x4, 0x0, 0x10}, 0x0, 0xb8, 0xec, 0x0, {}, [@common=@icmp={{0x24}, {0xd, "3d84", 0x1}}, @common=@icmp={{0x24}, {0x5, "ed5a", 0x1}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x18, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e21}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3ec) 2.068652624s ago: executing program 8 (id=5513): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x79}) keyctl$join(0x1, &(0x7f00000002c0)={'syz', 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_TARGET={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x4000010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) read(r0, &(0x7f0000000080)=""/145, 0x91) memfd_secret(0x0) listen(0xffffffffffffffff, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], &(0x7f0000000480), 0x0, 0x1, 0x0, 0x0, r4}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3aee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d320f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c16af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf700"/1664], &(0x7f0000000c00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000c40), 0x8, 0x10, &(0x7f0000000c80), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={r5, 0x702, 0x64, 0x0, &(0x7f0000000d40)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000d80)={@multicast1, @private, 0x0}, &(0x7f0000000dc0)=0xc) sendmsg$nl_route(r7, &(0x7f0000000e00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="880000001500000227bd7000fedbdf250a1000fd", @ANYRES32=r8, @ANYBLOB="14000200fc000000000000000000000000000000f2ff08000000000014000200fc00000000000000000000000000000108000900ff7f00001400020000000000000000070000ffffffffffff14000200ff0200000000000000000000000000010800080000060000080009006b010000"], 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x40005) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000f80)={'wlan0\x00'}) sendmsg$NFT_BATCH(r6, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x24040891}, 0x4048055) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080), r9) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000010c0)={'wpan0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000001100)={0x3, &(0x7f0000001140)=[{0x31a, 0x1, 0x9, 0x80000001}, {0xdb5, 0x8, 0x2, 0x5}, {0x7, 0xa, 0x5, 0xffff7fff}]}) r10 = syz_open_dev$loop(&(0x7f0000001180), 0x234, 0x2) ioctl$BLKPG(r10, 0x1269, &(0x7f00000011c0)={0x1, 0x0, 0x98, &(0x7f0000001200)={0xdae, 0x0, 0x12}}) syz_genetlink_get_family_id$ieee802154(&(0x7f00000012c0), r9) 1.432644455s ago: executing program 6 (id=5514): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0xfffffffe, 0x12c}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000500)={0x0, 0x1fffd, 0x81f, 0x3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10, 0x2, 0xe3, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x800000, 0x0, {}, 0x1f, r4, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004503005c00000000002f907800000000e000000124806558000000"], 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x3d}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000300)=""/54, &(0x7f0000000340)=0x36) 1.124597001s ago: executing program 5 (id=5515): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x29, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000008000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x2, 0xba, &(0x7f0000000540)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000006c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000007c0), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000800)=0x2) recvmmsg(r2, &(0x7f0000000840), 0x10106, 0x2, 0x0) getrlimit(0x2, &(0x7f0000000880)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000200)="0600000003", 0x5) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r5 = openat$nvram(0xffffff9c, 0x0, 0x4441, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000008c0), &(0x7f0000000900)=0x4) socket$nl_generic(0x10, 0x3, 0x10) r6 = add_key(&(0x7f0000000940)='asymmetric\x00', 0x0, &(0x7f0000000980)="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", 0x559, 0x0) r7 = syz_open_dev$ndb(&(0x7f0000000f00), 0x0, 0x40801) ioctl$BLKTRACESETUP(r7, 0xc0401273, &(0x7f0000000f40)={'\x00', 0x8, 0x6f14, 0x6, 0x2, 0x11c3adec}) ioctl$BLKTRACESTART(r7, 0x1276, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000f80)={r6}, &(0x7f0000000fc0)=ANY=[@ANYBLOB="656e633d706b637331ed686173683d736861332d333400"/78], 0x0, 0x0) 0s ago: executing program 6 (id=5516): socket$key(0xf, 0x3, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x4ba581, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x5, &(0x7f0000000f00)=ANY=[], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001240), 0x8, 0x10, &(0x7f0000001280), 0x10}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000ac1414000000000200000000020001000000000000000002fffffffb030005000000000002000000000000000000000000000000ae4f58741d2567c421f48ec91fcdea3c843efaa03dba50f7230ac216287364fe16d6763bee4b29b4a00c8c5865690211e8adeda83c8344d7201fbf05761ab6943534463fe52a552973ca2e3b8dd3eaf130bdecbca04060"], 0x50}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x840, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}}, 0x4004040) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0x3c4, 0x14, 0x2, 0x9, 0x46, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x0, 0x80000000, 0x400, 0x1, 0x13, 0x100, 0x2, 0x66, 0x34d, 0x5, 0x402, 0x5, 0x200, 0xe2df, 0x8, 0xfffffffe, 0x4, 0x0, 0x7, 0xf56, 0x6]}) r4 = openat$cdrom(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$CDROMVOLCTRL(r4, 0x530a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c000000100001042dbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1315000000000000140012800a000100767863616e00000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) kernel console output (not intermixed with test programs): security_file_alloc+0x34/0x2c0 [ 1525.577429][T26603] security_file_alloc+0x34/0x2c0 [ 1525.577461][T26603] init_file+0x95/0x480 [ 1525.577486][T26603] alloc_empty_file+0x79/0x1c0 [ 1525.577513][T26603] path_openat+0xd6/0x23f0 [ 1525.577588][T26603] ? __pfx_path_openat+0x10/0x10 [ 1525.577618][T26603] do_file_open+0x20e/0x430 [ 1525.577643][T26603] ? __pfx_do_file_open+0x10/0x10 [ 1525.577682][T26603] ? _raw_spin_unlock+0x28/0x50 [ 1525.577706][T26603] ? alloc_fd+0x471/0x7a0 [ 1525.577737][T26603] do_sys_openat2+0x163/0x1d0 [ 1525.577765][T26603] ? __lock_acquire+0x5c0/0x1f40 [ 1525.577787][T26603] ? __pfx_do_sys_openat2+0x10/0x10 [ 1525.577818][T26603] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1525.577856][T26603] __ia32_compat_sys_openat+0x12d/0x210 [ 1525.577888][T26603] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1525.577926][T26603] __do_fast_syscall_32+0x14d/0x8e0 [ 1525.577958][T26603] do_fast_syscall_32+0x32/0x70 [ 1525.577988][T26603] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1525.578012][T26603] RIP: 0023:0xf7f87fbc [ 1525.578031][T26603] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1525.578052][T26603] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 1525.578074][T26603] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000080000380 [ 1525.578088][T26603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1525.578100][T26603] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1525.578112][T26603] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1525.578125][T26603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1525.578160][T26603] [ 1527.430287][T26609] jffs2: notice: (26609) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1528.524813][T26618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5242'. [ 1528.547377][T26618] vxcan29: entered promiscuous mode [ 1528.605174][T26612] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5239'. [ 1528.680047][T26612] vxcan53: entered promiscuous mode [ 1530.246231][T26627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5245'. [ 1530.294006][T26627] vxcan31: entered promiscuous mode [ 1531.099403][T26632] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5244'. [ 1531.228287][T26632] vxcan55: entered promiscuous mode [ 1531.295882][T26633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5243'. [ 1532.855603][T26633] vxcan23: entered promiscuous mode [ 1534.561363][T26640] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5248'. [ 1534.586511][T26640] vxcan33: entered promiscuous mode [ 1535.692331][T26646] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5249'. [ 1537.096869][T26651] FAULT_INJECTION: forcing a failure. [ 1537.096869][T26651] name failslab, interval 1, probability 0, space 0, times 0 [ 1537.096906][T26651] CPU: 0 UID: 0 PID: 26651 Comm: syz.6.5251 Tainted: G L syzkaller #0 PREEMPT(full) [ 1537.096936][T26651] Tainted: [L]=SOFTLOCKUP [ 1537.096944][T26651] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1537.096958][T26651] Call Trace: [ 1537.096966][T26651] [ 1537.096975][T26651] dump_stack_lvl+0x100/0x190 [ 1537.097013][T26651] should_fail_ex.cold+0x5/0xa [ 1537.097044][T26651] should_failslab+0xc2/0x120 [ 1537.097077][T26651] __kmalloc_cache_noprof+0x91/0x6d0 [ 1537.097109][T26651] ? ipv6_flowlabel_opt+0x593/0x3330 [ 1537.097138][T26651] ipv6_flowlabel_opt+0x593/0x3330 [ 1537.097166][T26651] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1537.097187][T26651] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1537.097219][T26651] ? __local_bh_enable_ip+0xa5/0x120 [ 1537.097242][T26651] ? do_ipv6_setsockopt+0x2b80/0x3a00 [ 1537.097269][T26651] do_ipv6_setsockopt+0x2b80/0x3a00 [ 1537.097301][T26651] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1537.097333][T26651] ? aa_inet_opt_perm+0x307/0x8e0 [ 1537.097356][T26651] ? __pfx_futex_wake_mark+0x10/0x10 [ 1537.097382][T26651] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1537.097409][T26651] ? find_held_lock+0x2b/0x80 [ 1537.097437][T26651] ? futex_wake+0x4ea/0x5e0 [ 1537.097510][T26651] ? futex_wait+0x11e/0x370 [ 1537.097537][T26651] ? __lock_acquire+0x5c0/0x1f40 [ 1537.097566][T26651] ? ipv6_setsockopt+0xcb/0x170 [ 1537.097594][T26651] ipv6_setsockopt+0xcb/0x170 [ 1537.097624][T26651] rawv6_setsockopt+0xee/0x5a0 [ 1537.097649][T26651] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1537.097673][T26651] ? aa_sock_opt_perm+0x114/0x1e0 [ 1537.097700][T26651] ? sock_common_setsockopt+0x2e/0xf0 [ 1537.097723][T26651] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1537.097749][T26651] do_sock_setsockopt+0xf3/0x1d0 [ 1537.097775][T26651] __sys_setsockopt+0x119/0x190 [ 1537.097811][T26651] __ia32_sys_setsockopt+0xbc/0x160 [ 1537.097841][T26651] ? __might_fault+0x111/0x140 [ 1537.097869][T26651] __do_fast_syscall_32+0x14d/0x8e0 [ 1537.097905][T26651] do_fast_syscall_32+0x32/0x70 [ 1537.097935][T26651] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1537.097960][T26651] RIP: 0023:0xf73cefbc [ 1537.097979][T26651] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1537.097997][T26651] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1537.098018][T26651] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1537.098031][T26651] RDX: 0000000000000020 RSI: 0000000080000240 RDI: 0000000000000020 [ 1537.098042][T26651] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1537.098054][T26651] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1537.098075][T26651] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1537.098100][T26651] [ 1537.386596][T26651] netlink: 'syz.6.5251': attribute type 2 has an invalid length. [ 1537.386620][T26651] netlink: 723 bytes leftover after parsing attributes in process `syz.6.5251'. [ 1537.598607][T26653] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5252'. [ 1537.750933][T26514] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1537.785681][T26514] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1537.789663][T26514] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1537.825696][T26514] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1537.826569][T26514] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1537.910548][T26658] FAULT_INJECTION: forcing a failure. [ 1537.910548][T26658] name failslab, interval 1, probability 0, space 0, times 0 [ 1537.910584][T26658] CPU: 3 UID: 0 PID: 26658 Comm: syz.5.5253 Tainted: G L syzkaller #0 PREEMPT(full) [ 1537.910613][T26658] Tainted: [L]=SOFTLOCKUP [ 1537.910622][T26658] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1537.910635][T26658] Call Trace: [ 1537.910643][T26658] [ 1537.910652][T26658] dump_stack_lvl+0x100/0x190 [ 1537.910696][T26658] should_fail_ex.cold+0x5/0xa [ 1537.910725][T26658] should_failslab+0xc2/0x120 [ 1537.910753][T26658] __kmalloc_cache_noprof+0x91/0x6d0 [ 1537.910784][T26658] ? ipv6_flowlabel_opt+0x593/0x3330 [ 1537.910812][T26658] ipv6_flowlabel_opt+0x593/0x3330 [ 1537.910878][T26658] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1537.910900][T26658] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1537.911191][T26658] ? __local_bh_enable_ip+0xa5/0x120 [ 1537.911218][T26658] ? do_ipv6_setsockopt+0x2b80/0x3a00 [ 1537.911246][T26658] do_ipv6_setsockopt+0x2b80/0x3a00 [ 1537.911277][T26658] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1537.911306][T26658] ? aa_inet_opt_perm+0x307/0x8e0 [ 1537.911330][T26658] ? __pfx_futex_wake_mark+0x10/0x10 [ 1537.911352][T26658] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1537.911373][T26658] ? find_held_lock+0x2b/0x80 [ 1537.911400][T26658] ? futex_wake+0x4ea/0x5e0 [ 1537.911426][T26658] ? futex_wait+0x11e/0x370 [ 1537.911448][T26658] ? __lock_acquire+0x5c0/0x1f40 [ 1537.911477][T26658] ? ipv6_setsockopt+0xcb/0x170 [ 1537.911503][T26658] ipv6_setsockopt+0xcb/0x170 [ 1537.911533][T26658] rawv6_setsockopt+0xee/0x5a0 [ 1537.911557][T26658] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1537.911580][T26658] ? aa_sock_opt_perm+0x114/0x1e0 [ 1537.911604][T26658] ? sock_common_setsockopt+0x2e/0xf0 [ 1537.911626][T26658] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1537.911650][T26658] do_sock_setsockopt+0xf3/0x1d0 [ 1537.911687][T26658] __sys_setsockopt+0x119/0x190 [ 1537.911723][T26658] __ia32_sys_setsockopt+0xbc/0x160 [ 1537.911753][T26658] ? __might_fault+0x111/0x140 [ 1537.911778][T26658] __do_fast_syscall_32+0x14d/0x8e0 [ 1537.911812][T26658] do_fast_syscall_32+0x32/0x70 [ 1537.911842][T26658] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1537.911868][T26658] RIP: 0023:0xf7f87fbc [ 1537.911886][T26658] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1537.911906][T26658] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1537.911927][T26658] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1537.911941][T26658] RDX: 0000000000000020 RSI: 0000000080000240 RDI: 0000000000000020 [ 1537.911954][T26658] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1537.911965][T26658] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1537.911977][T26658] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1537.912003][T26658] [ 1538.148224][T26653] vxcan57: entered promiscuous mode [ 1538.198518][T26658] netlink: 'syz.5.5253': attribute type 2 has an invalid length. [ 1538.198540][T26658] netlink: 723 bytes leftover after parsing attributes in process `syz.5.5253'. [ 1539.651650][T26675] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5255'. [ 1539.995128][T26514] Bluetooth: hci3: command tx timeout [ 1540.764068][T26681] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5258'. [ 1541.233855][T23864] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.391000][T26675] vxcan59: entered promiscuous mode [ 1541.616625][T26681] vxcan35: entered promiscuous mode [ 1541.920916][T23864] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.976480][T26688] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5259'. [ 1541.986056][T26688] vxcan61: entered promiscuous mode [ 1542.006745][T26656] rxe_eth0 speed is unknown, defaulting to 1000 [ 1542.108919][T26514] Bluetooth: hci3: command tx timeout [ 1542.617779][T26695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5261'. [ 1543.241528][T23864] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.768401][T26697] FAULT_INJECTION: forcing a failure. [ 1543.768401][T26697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1543.768440][T26697] CPU: 2 UID: 0 PID: 26697 Comm: syz.6.5262 Tainted: G L syzkaller #0 PREEMPT(full) [ 1543.768472][T26697] Tainted: [L]=SOFTLOCKUP [ 1543.768480][T26697] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1543.768494][T26697] Call Trace: [ 1543.768503][T26697] [ 1543.768512][T26697] dump_stack_lvl+0x100/0x190 [ 1543.768553][T26697] should_fail_ex.cold+0x5/0xa [ 1543.768587][T26697] _copy_to_user+0x32/0xd0 [ 1543.768627][T26697] ipv6_flowlabel_opt+0x2e82/0x3330 [ 1543.768667][T26697] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1543.768692][T26697] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1543.768729][T26697] ? __local_bh_enable_ip+0xa5/0x120 [ 1543.768780][T26697] ? do_ipv6_setsockopt+0x2b80/0x3a00 [ 1543.768812][T26697] do_ipv6_setsockopt+0x2b80/0x3a00 [ 1543.768851][T26697] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1543.768885][T26697] ? aa_inet_opt_perm+0x307/0x8e0 [ 1543.768916][T26697] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1543.768938][T26697] ? plist_check_list+0x1b8/0x280 [ 1543.768989][T26697] ? plist_del+0x308/0x510 [ 1543.769015][T26697] ? find_held_lock+0x2b/0x80 [ 1543.769045][T26697] ? futex_wake+0x4ea/0x5e0 [ 1543.769073][T26697] ? futex_private_hash_put.part.0+0xdc/0x180 [ 1543.769104][T26697] ? futex_private_hash_put+0x24/0x30 [ 1543.769132][T26697] ? futex_wake+0x220/0x5e0 [ 1543.769155][T26697] ? __lock_acquire+0x5c0/0x1f40 [ 1543.769187][T26697] ? ipv6_setsockopt+0xcb/0x170 [ 1543.769214][T26697] ipv6_setsockopt+0xcb/0x170 [ 1543.769245][T26697] rawv6_setsockopt+0xee/0x5a0 [ 1543.769270][T26697] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1543.769295][T26697] ? aa_sock_opt_perm+0x114/0x1e0 [ 1543.769319][T26697] ? sock_common_setsockopt+0x2e/0xf0 [ 1543.769342][T26697] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1543.769367][T26697] do_sock_setsockopt+0xf3/0x1d0 [ 1543.769395][T26697] __sys_setsockopt+0x119/0x190 [ 1543.769464][T26697] __ia32_sys_setsockopt+0xbc/0x160 [ 1543.769497][T26697] ? __might_fault+0x111/0x140 [ 1543.769525][T26697] __do_fast_syscall_32+0x14d/0x8e0 [ 1543.769564][T26697] do_fast_syscall_32+0x32/0x70 [ 1543.769598][T26697] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1543.769628][T26697] RIP: 0023:0xf73cefbc [ 1543.769649][T26697] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1543.769681][T26697] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1543.769707][T26697] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1543.769720][T26697] RDX: 0000000000000020 RSI: 0000000080000240 RDI: 0000000000000020 [ 1543.769733][T26697] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1543.769745][T26697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1543.769757][T26697] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1543.769788][T26697] [ 1543.901287][T26695] vxcan37: entered promiscuous mode [ 1543.973464][T26697] netlink: 'syz.6.5262': attribute type 2 has an invalid length. [ 1543.973487][T26697] netlink: 723 bytes leftover after parsing attributes in process `syz.6.5262'. [ 1544.221513][T26514] Bluetooth: hci3: command tx timeout [ 1544.693837][T23864] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.551289][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.551344][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.964962][T23864] bridge_slave_1: left allmulticast mode [ 1545.964991][T23864] bridge_slave_1: left promiscuous mode [ 1545.965187][T23864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.041157][T23864] bridge_slave_0: left allmulticast mode [ 1546.041279][T23864] bridge_slave_0: left promiscuous mode [ 1546.059659][T23864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.238152][T26514] Bluetooth: hci3: command tx timeout [ 1546.253320][T26708] jffs2: notice: (26708) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1546.496705][T26710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5266'. [ 1547.387363][T23864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1547.453384][T26722] FAULT_INJECTION: forcing a failure. [ 1547.453384][T26722] name failslab, interval 1, probability 0, space 0, times 0 [ 1547.453523][T26722] CPU: 1 UID: 0 PID: 26722 Comm: syz.6.5268 Tainted: G L syzkaller #0 PREEMPT(full) [ 1547.453554][T26722] Tainted: [L]=SOFTLOCKUP [ 1547.453562][T26722] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1547.453574][T26722] Call Trace: [ 1547.453581][T26722] [ 1547.453590][T26722] dump_stack_lvl+0x100/0x190 [ 1547.453625][T26722] should_fail_ex.cold+0x5/0xa [ 1547.453659][T26722] should_failslab+0xc2/0x120 [ 1547.453687][T26722] __kmalloc_cache_noprof+0x91/0x6d0 [ 1547.453716][T26722] ? ipv6_flowlabel_opt+0x593/0x3330 [ 1547.453742][T26722] ipv6_flowlabel_opt+0x593/0x3330 [ 1547.453768][T26722] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1547.453788][T26722] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1547.453820][T26722] ? __local_bh_enable_ip+0xa5/0x120 [ 1547.453844][T26722] ? do_ipv6_setsockopt+0x2b80/0x3a00 [ 1547.453873][T26722] do_ipv6_setsockopt+0x2b80/0x3a00 [ 1547.453906][T26722] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1547.453935][T26722] ? aa_inet_opt_perm+0x307/0x8e0 [ 1547.453960][T26722] ? __pfx_futex_wake_mark+0x10/0x10 [ 1547.453981][T26722] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1547.454003][T26722] ? find_held_lock+0x2b/0x80 [ 1547.454029][T26722] ? futex_wake+0x4ea/0x5e0 [ 1547.454056][T26722] ? futex_wait+0x11e/0x370 [ 1547.454084][T26722] ? __lock_acquire+0x5c0/0x1f40 [ 1547.454112][T26722] ? ipv6_setsockopt+0xcb/0x170 [ 1547.454139][T26722] ipv6_setsockopt+0xcb/0x170 [ 1547.454168][T26722] rawv6_setsockopt+0xee/0x5a0 [ 1547.454195][T26722] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1547.454220][T26722] ? aa_sock_opt_perm+0x114/0x1e0 [ 1547.454246][T26722] ? sock_common_setsockopt+0x2e/0xf0 [ 1547.454272][T26722] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1547.454296][T26722] do_sock_setsockopt+0xf3/0x1d0 [ 1547.454320][T26722] __sys_setsockopt+0x119/0x190 [ 1547.454353][T26722] __ia32_sys_setsockopt+0xbc/0x160 [ 1547.454381][T26722] ? __might_fault+0x111/0x140 [ 1547.454407][T26722] __do_fast_syscall_32+0x14d/0x8e0 [ 1547.454441][T26722] do_fast_syscall_32+0x32/0x70 [ 1547.454471][T26722] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1547.454496][T26722] RIP: 0023:0xf73cefbc [ 1547.454513][T26722] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1547.454532][T26722] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1547.454552][T26722] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1547.454566][T26722] RDX: 0000000000000020 RSI: 0000000080000240 RDI: 0000000000000020 [ 1547.454580][T26722] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1547.454592][T26722] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1547.454698][T26722] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1547.454744][T26722] [ 1547.519592][T26722] netlink: 'syz.6.5268': attribute type 2 has an invalid length. [ 1547.519615][T26722] netlink: 723 bytes leftover after parsing attributes in process `syz.6.5268'. [ 1547.719756][T23864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1547.737273][T23864] bond0 (unregistering): Released all slaves [ 1547.895531][T26710] vxcan39: entered promiscuous mode [ 1548.042689][T23864] IPVS: stopping master sync thread 25242 ... [ 1548.458502][T26730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5269'. [ 1548.737150][T26656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1548.737299][T26656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.737466][T26656] bridge_slave_0: entered allmulticast mode [ 1548.760247][T26656] bridge_slave_0: entered promiscuous mode [ 1549.245540][T26734] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5270'. [ 1550.152650][T26730] vxcan41: entered promiscuous mode [ 1550.189080][T26656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1550.189163][T26656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.189304][T26656] bridge_slave_1: entered allmulticast mode [ 1550.190609][T26656] bridge_slave_1: entered promiscuous mode [ 1550.542424][T26734] vxcan63: entered promiscuous mode [ 1550.675257][T26656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1550.702243][T26656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1550.815353][T26656] team0: Port device team_slave_0 added [ 1550.826799][T26656] team0: Port device team_slave_1 added [ 1551.710878][T26743] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5272'. [ 1551.898694][T26752] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5273'. [ 1555.122831][T26656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1555.122850][T26656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1555.122873][T26656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1555.197160][T26656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1555.197179][T26656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1555.197202][T26656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1555.591620][T26743] vxcan65: entered promiscuous mode [ 1555.596552][ T5507] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1556.318218][T26766] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5276'. [ 1556.485631][T26656] hsr_slave_0: entered promiscuous mode [ 1556.486486][T26656] hsr_slave_1: entered promiscuous mode [ 1556.487197][T26656] debugfs: 'hsr0' already exists in 'hsr' [ 1556.487214][T26656] Cannot create hsr debugfs directory [ 1556.524689][T26766] vxcan67: entered promiscuous mode [ 1557.338774][T26777] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5278'. [ 1557.997788][T23683] Bluetooth: hci1: command 0x0406 tx timeout [ 1558.007122][T23864] hsr_slave_0: left promiscuous mode [ 1558.242284][T23864] hsr_slave_1: left promiscuous mode [ 1558.355864][T23864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1558.355891][T23864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1558.543905][T23864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1558.543928][T23864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1558.559752][T23864] veth1_macvtap: left promiscuous mode [ 1558.559807][T23864] veth0_macvtap: left promiscuous mode [ 1558.559913][T23864] veth1_vlan: left promiscuous mode [ 1558.559989][T23864] veth0_vlan: left promiscuous mode [ 1559.474847][T23864] team0 (unregistering): Port device team_slave_1 removed [ 1559.515107][T23864] team0 (unregistering): Port device team_slave_0 removed [ 1559.914902][T26777] vxcan69: entered promiscuous mode [ 1560.103397][ T5507] 8021q: adding VLAN 0 to HW filter on device eth26 [ 1560.449678][T26791] FAULT_INJECTION: forcing a failure. [ 1560.449678][T26791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1560.449717][T26791] CPU: 2 UID: 0 PID: 26791 Comm: syz.8.5279 Tainted: G L syzkaller #0 PREEMPT(full) [ 1560.449751][T26791] Tainted: [L]=SOFTLOCKUP [ 1560.449760][T26791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1560.449773][T26791] Call Trace: [ 1560.449782][T26791] [ 1560.449816][T26791] dump_stack_lvl+0x100/0x190 [ 1560.449860][T26791] should_fail_ex.cold+0x5/0xa [ 1560.449893][T26791] _copy_to_user+0x32/0xd0 [ 1560.449936][T26791] ipv6_flowlabel_opt+0x2e82/0x3330 [ 1560.449970][T26791] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1560.449997][T26791] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1560.450036][T26791] ? __local_bh_enable_ip+0xa5/0x120 [ 1560.450063][T26791] ? do_ipv6_setsockopt+0x2b80/0x3a00 [ 1560.450095][T26791] do_ipv6_setsockopt+0x2b80/0x3a00 [ 1560.450134][T26791] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1560.450169][T26791] ? aa_inet_opt_perm+0x307/0x8e0 [ 1560.450201][T26791] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1560.450225][T26791] ? plist_check_list+0x1b8/0x280 [ 1560.450254][T26791] ? plist_del+0x308/0x510 [ 1560.450281][T26791] ? find_held_lock+0x2b/0x80 [ 1560.450313][T26791] ? futex_wake+0x4ea/0x5e0 [ 1560.450339][T26791] ? futex_private_hash_put.part.0+0xdc/0x180 [ 1560.450372][T26791] ? futex_private_hash_put+0x24/0x30 [ 1560.450401][T26791] ? futex_wake+0x220/0x5e0 [ 1560.450431][T26791] ? __lock_acquire+0x5c0/0x1f40 [ 1560.450468][T26791] ? ipv6_setsockopt+0xcb/0x170 [ 1560.450502][T26791] ipv6_setsockopt+0xcb/0x170 [ 1560.450549][T26791] rawv6_setsockopt+0xee/0x5a0 [ 1560.450581][T26791] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1560.450610][T26791] ? aa_sock_opt_perm+0x114/0x1e0 [ 1560.450640][T26791] ? sock_common_setsockopt+0x2e/0xf0 [ 1560.450672][T26791] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1560.450702][T26791] do_sock_setsockopt+0xf3/0x1d0 [ 1560.450735][T26791] __sys_setsockopt+0x119/0x190 [ 1560.450778][T26791] __ia32_sys_setsockopt+0xbc/0x160 [ 1560.450815][T26791] ? __might_fault+0x111/0x140 [ 1560.450847][T26791] __do_fast_syscall_32+0x14d/0x8e0 [ 1560.450888][T26791] do_fast_syscall_32+0x32/0x70 [ 1560.450925][T26791] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1560.450959][T26791] RIP: 0023:0xf7f88fbc [ 1560.450981][T26791] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1560.451005][T26791] RSP: 002b:00000000f53f450c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1560.451031][T26791] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1560.451048][T26791] RDX: 0000000000000020 RSI: 0000000080000240 RDI: 0000000000000020 [ 1560.451063][T26791] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1560.451078][T26791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1560.451096][T26791] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1560.451127][T26791] [ 1560.583718][T26792] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5281'. [ 1561.252139][T26792] vxcan43: entered promiscuous mode [ 1561.355090][T26785] netlink: 'syz.8.5279': attribute type 2 has an invalid length. [ 1561.355117][T26785] netlink: 723 bytes leftover after parsing attributes in process `syz.8.5279'. [ 1563.781569][T26808] FAULT_INJECTION: forcing a failure. [ 1563.781569][T26808] name failslab, interval 1, probability 0, space 0, times 0 [ 1563.781605][T26808] CPU: 0 UID: 0 PID: 26808 Comm: syz.5.5282 Tainted: G L syzkaller #0 PREEMPT(full) [ 1563.781631][T26808] Tainted: [L]=SOFTLOCKUP [ 1563.781638][T26808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1563.781649][T26808] Call Trace: [ 1563.781654][T26808] [ 1563.781661][T26808] dump_stack_lvl+0x100/0x190 [ 1563.781686][T26808] should_fail_ex.cold+0x5/0xa [ 1563.781705][T26808] should_failslab+0xc2/0x120 [ 1563.781722][T26808] __kmalloc_cache_noprof+0x91/0x6d0 [ 1563.781741][T26808] ? ipv6_flowlabel_opt+0x593/0x3330 [ 1563.781759][T26808] ipv6_flowlabel_opt+0x593/0x3330 [ 1563.781776][T26808] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1563.781789][T26808] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1563.781809][T26808] ? __local_bh_enable_ip+0xa5/0x120 [ 1563.781844][T26808] ? do_ipv6_setsockopt+0x2b80/0x3a00 [ 1563.781862][T26808] do_ipv6_setsockopt+0x2b80/0x3a00 [ 1563.781883][T26808] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1563.781903][T26808] ? aa_inet_opt_perm+0x307/0x8e0 [ 1563.781918][T26808] ? __pfx_futex_wake_mark+0x10/0x10 [ 1563.781932][T26808] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1563.781946][T26808] ? __pfx_futex_hash+0x10/0x10 [ 1563.781962][T26808] ? __pfx_get_futex_key+0x10/0x10 [ 1563.781978][T26808] ? get_pid_task+0xfc/0x250 [ 1563.781994][T26808] ? get_pid_task+0xfc/0x250 [ 1563.782014][T26808] ? futex_wait+0x11e/0x370 [ 1563.782028][T26808] ? __lock_acquire+0x5c0/0x1f40 [ 1563.782046][T26808] ? ipv6_setsockopt+0xcb/0x170 [ 1563.782062][T26808] ipv6_setsockopt+0xcb/0x170 [ 1563.782081][T26808] rawv6_setsockopt+0xee/0x5a0 [ 1563.782104][T26808] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1563.782125][T26808] ? aa_sock_opt_perm+0x114/0x1e0 [ 1563.782148][T26808] ? sock_common_setsockopt+0x2e/0xf0 [ 1563.782171][T26808] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1563.782190][T26808] do_sock_setsockopt+0xf3/0x1d0 [ 1563.782205][T26808] __sys_setsockopt+0x119/0x190 [ 1563.782227][T26808] __ia32_sys_setsockopt+0xbc/0x160 [ 1563.782244][T26808] ? __might_fault+0x111/0x140 [ 1563.782263][T26808] __do_fast_syscall_32+0x14d/0x8e0 [ 1563.782285][T26808] do_fast_syscall_32+0x32/0x70 [ 1563.782304][T26808] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1563.782320][T26808] RIP: 0023:0xf7f87fbc [ 1563.782331][T26808] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1563.782343][T26808] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1563.782355][T26808] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1563.782363][T26808] RDX: 0000000000000020 RSI: 0000000080000240 RDI: 0000000000000020 [ 1563.782371][T26808] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1563.782378][T26808] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1563.782385][T26808] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1563.782401][T26808] [ 1563.919007][T26808] netlink: 'syz.5.5282': attribute type 2 has an invalid length. [ 1563.919030][T26808] netlink: 723 bytes leftover after parsing attributes in process `syz.5.5282'. [ 1564.235049][ T5507] 8021q: adding VLAN 0 to HW filter on device eth27 [ 1564.288907][T26807] bridge_slave_1: left allmulticast mode [ 1564.288940][T26807] bridge_slave_1: left promiscuous mode [ 1564.289256][T26807] bridge0: port 2(bridge_slave_1) entered disabled state [ 1564.560911][T26807] bridge_slave_0: left allmulticast mode [ 1564.561831][T26807] bridge_slave_0: left promiscuous mode [ 1564.565555][T26807] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.709228][T26816] FAULT_INJECTION: forcing a failure. [ 1566.709228][T26816] name failslab, interval 1, probability 0, space 0, times 0 [ 1566.709266][T26816] CPU: 0 UID: 0 PID: 26816 Comm: syz.5.5285 Tainted: G L syzkaller #0 PREEMPT(full) [ 1566.709300][T26816] Tainted: [L]=SOFTLOCKUP [ 1566.709309][T26816] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1566.709349][T26816] Call Trace: [ 1566.709361][T26816] [ 1566.709371][T26816] dump_stack_lvl+0x100/0x190 [ 1566.709414][T26816] should_fail_ex.cold+0x5/0xa [ 1566.709447][T26816] should_failslab+0xc2/0x120 [ 1566.709480][T26816] __kmalloc_cache_noprof+0x91/0x6d0 [ 1566.709516][T26816] ? ipv6_flowlabel_opt+0x593/0x3330 [ 1566.709547][T26816] ipv6_flowlabel_opt+0x593/0x3330 [ 1566.709589][T26816] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1566.709616][T26816] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1566.709657][T26816] ? __local_bh_enable_ip+0xa5/0x120 [ 1566.709689][T26816] ? do_ipv6_setsockopt+0x2b80/0x3a00 [ 1566.709724][T26816] do_ipv6_setsockopt+0x2b80/0x3a00 [ 1566.709784][T26816] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1566.709821][T26816] ? aa_inet_opt_perm+0x307/0x8e0 [ 1566.709852][T26816] ? __pfx_futex_wake_mark+0x10/0x10 [ 1566.709881][T26816] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1566.709911][T26816] ? find_held_lock+0x2b/0x80 [ 1566.709947][T26816] ? futex_wake+0x4ea/0x5e0 [ 1566.709982][T26816] ? futex_wait+0x11e/0x370 [ 1566.710011][T26816] ? __lock_acquire+0x5c0/0x1f40 [ 1566.710045][T26816] ? ipv6_setsockopt+0xcb/0x170 [ 1566.710074][T26816] ipv6_setsockopt+0xcb/0x170 [ 1566.710109][T26816] rawv6_setsockopt+0xee/0x5a0 [ 1566.710137][T26816] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1566.710164][T26816] ? aa_sock_opt_perm+0x114/0x1e0 [ 1566.710190][T26816] ? sock_common_setsockopt+0x2e/0xf0 [ 1566.710216][T26816] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1566.710243][T26816] do_sock_setsockopt+0xf3/0x1d0 [ 1566.710272][T26816] __sys_setsockopt+0x119/0x190 [ 1566.710311][T26816] __ia32_sys_setsockopt+0xbc/0x160 [ 1566.710344][T26816] ? __might_fault+0x111/0x140 [ 1566.710373][T26816] __do_fast_syscall_32+0x14d/0x8e0 [ 1566.710515][T26816] do_fast_syscall_32+0x32/0x70 [ 1566.710557][T26816] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1566.710588][T26816] RIP: 0023:0xf7f87fbc [ 1566.710609][T26816] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1566.710634][T26816] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1566.710659][T26816] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1566.710674][T26816] RDX: 0000000000000020 RSI: 0000000080000240 RDI: 0000000000000020 [ 1566.710689][T26816] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1566.710705][T26816] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1566.710719][T26816] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1566.710752][T26816] [ 1566.800774][T26816] netlink: 'syz.5.5285': attribute type 2 has an invalid length. [ 1566.800804][T26816] netlink: 723 bytes leftover after parsing attributes in process `syz.5.5285'. [ 1569.604949][T26829] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5287'. [ 1569.745628][ T5507] 8021q: adding VLAN 0 to HW filter on device eth28 [ 1569.775519][T26829] vxcan71: entered promiscuous mode [ 1573.744031][T26860] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5291'. [ 1573.953451][T26860] vxcan73: entered promiscuous mode [ 1575.722620][T26881] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5294'. [ 1575.957218][T26881] vxcan75: entered promiscuous mode [ 1576.253512][T26656] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1576.411983][T26656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1576.413382][T26656] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1576.505126][T26885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5295'. [ 1576.510572][T26656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1576.511414][T26656] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1576.563352][T26656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1576.599218][T26885] vxcan25: entered promiscuous mode [ 1576.603519][T26656] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1576.631494][T26656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1576.987189][T26894] netlink: 'syz.8.5296': attribute type 2 has an invalid length. [ 1576.987214][T26894] netlink: 723 bytes leftover after parsing attributes in process `syz.8.5296'. [ 1577.396135][T26656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1577.482343][T26656] 8021q: adding VLAN 0 to HW filter on device team0 [ 1578.201335][T19904] bridge0: port 1(bridge_slave_0) entered blocking state [ 1578.201425][T19904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1578.333206][T19904] bridge0: port 2(bridge_slave_1) entered blocking state [ 1578.333343][T19904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1578.411668][T26656] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1578.411690][T26656] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1579.452667][T26919] FAULT_INJECTION: forcing a failure. [ 1579.452667][T26919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1579.452711][T26919] CPU: 0 UID: 0 PID: 26919 Comm: syz.5.5299 Tainted: G L syzkaller #0 PREEMPT(full) [ 1579.452746][T26919] Tainted: [L]=SOFTLOCKUP [ 1579.452755][T26919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1579.452771][T26919] Call Trace: [ 1579.452780][T26919] [ 1579.452790][T26919] dump_stack_lvl+0x100/0x190 [ 1579.452832][T26919] should_fail_ex.cold+0x5/0xa [ 1579.452865][T26919] _copy_to_user+0x32/0xd0 [ 1579.452904][T26919] ipv6_flowlabel_opt+0x2e82/0x3330 [ 1579.452936][T26919] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1579.452960][T26919] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1579.453008][T26919] ? __local_bh_enable_ip+0xa5/0x120 [ 1579.453038][T26919] ? do_ipv6_setsockopt+0x2b80/0x3a00 [ 1579.453071][T26919] do_ipv6_setsockopt+0x2b80/0x3a00 [ 1579.453109][T26919] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1579.453145][T26919] ? aa_inet_opt_perm+0x307/0x8e0 [ 1579.453177][T26919] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1579.453199][T26919] ? plist_check_list+0x1b8/0x280 [ 1579.453227][T26919] ? plist_del+0x308/0x510 [ 1579.453254][T26919] ? find_held_lock+0x2b/0x80 [ 1579.453331][T26919] ? futex_wake+0x4ea/0x5e0 [ 1579.453359][T26919] ? futex_private_hash_put.part.0+0xdc/0x180 [ 1579.453391][T26919] ? futex_private_hash_put+0x24/0x30 [ 1579.453418][T26919] ? futex_wake+0x220/0x5e0 [ 1579.453440][T26919] ? __lock_acquire+0x5c0/0x1f40 [ 1579.456726][T26919] ? ipv6_setsockopt+0xcb/0x170 [ 1579.456770][T26919] ipv6_setsockopt+0xcb/0x170 [ 1579.456796][T26919] rawv6_setsockopt+0xee/0x5a0 [ 1579.456817][T26919] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1579.456837][T26919] ? aa_sock_opt_perm+0x114/0x1e0 [ 1579.456857][T26919] ? sock_common_setsockopt+0x2e/0xf0 [ 1579.456877][T26919] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1579.456901][T26919] do_sock_setsockopt+0xf3/0x1d0 [ 1579.456922][T26919] __sys_setsockopt+0x119/0x190 [ 1579.456951][T26919] __ia32_sys_setsockopt+0xbc/0x160 [ 1579.456975][T26919] ? __might_fault+0x111/0x140 [ 1579.457007][T26919] __do_fast_syscall_32+0x14d/0x8e0 [ 1579.457043][T26919] do_fast_syscall_32+0x32/0x70 [ 1579.457070][T26919] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1579.457093][T26919] RIP: 0023:0xf7f87fbc [ 1579.457110][T26919] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1579.457130][T26919] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1579.457151][T26919] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1579.457164][T26919] RDX: 0000000000000020 RSI: 0000000080000240 RDI: 0000000000000020 [ 1579.457178][T26919] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1579.457189][T26919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1579.457201][T26919] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1579.457227][T26919] [ 1579.490946][T26919] netlink: 'syz.5.5299': attribute type 2 has an invalid length. [ 1579.490967][T26919] netlink: 723 bytes leftover after parsing attributes in process `syz.5.5299'. [ 1580.424589][T26932] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5301'. [ 1580.466891][T26932] vxcan77: entered promiscuous mode [ 1581.484056][T26656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1581.954821][T26941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5302'. [ 1581.995597][T26951] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5304'. [ 1582.068118][T26941] vxcan45: entered promiscuous mode [ 1582.191686][T26940] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5303'. [ 1582.376108][T26951] vxcan27: entered promiscuous mode [ 1582.440257][T26940] vxcan79: entered promiscuous mode [ 1583.879599][T26656] veth0_vlan: entered promiscuous mode [ 1583.902522][T26656] veth1_vlan: entered promiscuous mode [ 1584.029507][T26656] veth0_macvtap: entered promiscuous mode [ 1584.035286][T26656] veth1_macvtap: entered promiscuous mode [ 1584.051218][T26656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1584.065556][T26656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1584.511228][T26749] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.511493][T26749] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.511712][T26749] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.511747][T26749] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.691854][T26982] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5307'. [ 1584.843195][T26982] vxcan29: entered promiscuous mode [ 1585.927747][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1585.927771][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1585.982801][T22447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1585.982824][T22447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1586.027272][T26990] FAULT_INJECTION: forcing a failure. [ 1586.027272][T26990] name failslab, interval 1, probability 0, space 0, times 0 [ 1586.027307][T26990] CPU: 2 UID: 0 PID: 26990 Comm: syz.6.5309 Tainted: G L syzkaller #0 PREEMPT(full) [ 1586.027337][T26990] Tainted: [L]=SOFTLOCKUP [ 1586.027346][T26990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1586.027358][T26990] Call Trace: [ 1586.027365][T26990] [ 1586.027373][T26990] dump_stack_lvl+0x100/0x190 [ 1586.027410][T26990] should_fail_ex.cold+0x5/0xa [ 1586.027437][T26990] should_failslab+0xc2/0x120 [ 1586.027462][T26990] __kmalloc_cache_noprof+0x91/0x6d0 [ 1586.027491][T26990] ? ipv6_flowlabel_opt+0x593/0x3330 [ 1586.027517][T26990] ipv6_flowlabel_opt+0x593/0x3330 [ 1586.027573][T26990] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1586.027595][T26990] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1586.027632][T26990] ? __local_bh_enable_ip+0xa5/0x120 [ 1586.027654][T26990] ? do_ipv6_setsockopt+0x2b80/0x3a00 [ 1586.027678][T26990] do_ipv6_setsockopt+0x2b80/0x3a00 [ 1586.027706][T26990] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1586.027733][T26990] ? aa_inet_opt_perm+0x307/0x8e0 [ 1586.027757][T26990] ? __pfx_futex_wake_mark+0x10/0x10 [ 1586.027778][T26990] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1586.027825][T26990] ? find_held_lock+0x2b/0x80 [ 1586.027852][T26990] ? futex_wake+0x4ea/0x5e0 [ 1586.027878][T26990] ? futex_wait+0x11e/0x370 [ 1586.027898][T26990] ? __lock_acquire+0x5c0/0x1f40 [ 1586.027925][T26990] ? ipv6_setsockopt+0xcb/0x170 [ 1586.027951][T26990] ipv6_setsockopt+0xcb/0x170 [ 1586.027989][T26990] rawv6_setsockopt+0xee/0x5a0 [ 1586.028014][T26990] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1586.028037][T26990] ? aa_sock_opt_perm+0x114/0x1e0 [ 1586.028060][T26990] ? sock_common_setsockopt+0x2e/0xf0 [ 1586.028081][T26990] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1586.028106][T26990] do_sock_setsockopt+0xf3/0x1d0 [ 1586.028133][T26990] __sys_setsockopt+0x119/0x190 [ 1586.028166][T26990] __ia32_sys_setsockopt+0xbc/0x160 [ 1586.028192][T26990] ? __might_fault+0x111/0x140 [ 1586.028218][T26990] __do_fast_syscall_32+0x14d/0x8e0 [ 1586.028250][T26990] do_fast_syscall_32+0x32/0x70 [ 1586.028279][T26990] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1586.028303][T26990] RIP: 0023:0xf73cefbc [ 1586.028320][T26990] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1586.028338][T26990] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1586.028359][T26990] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1586.028371][T26990] RDX: 0000000000000020 RSI: 0000000080000240 RDI: 0000000000000020 [ 1586.028384][T26990] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1586.028396][T26990] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1586.028407][T26990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1586.028432][T26990] [ 1586.126140][T26993] netlink: 'syz.6.5309': attribute type 2 has an invalid length. [ 1586.126162][T26993] netlink: 723 bytes leftover after parsing attributes in process `syz.6.5309'. [ 1586.849940][T27000] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5316'. [ 1586.907654][T27000] vxcan81: entered promiscuous mode [ 1590.052569][T27022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5312'. [ 1590.157064][T27022] vxcan47: entered promiscuous mode [ 1590.506865][T27031] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5313'. [ 1590.601615][T27031] vxcan83: entered promiscuous mode [ 1591.416923][T27033] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5311'. [ 1591.459420][T27033] vxcan31: entered promiscuous mode [ 1592.685274][T27046] netlink: 'syz.8.5314': attribute type 2 has an invalid length. [ 1592.685298][T27046] netlink: 723 bytes leftover after parsing attributes in process `syz.8.5314'. [ 1592.839540][T27050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5317'. [ 1592.866988][T27042] FAULT_INJECTION: forcing a failure. [ 1592.866988][T27042] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.867024][T27042] CPU: 0 UID: 0 PID: 27042 Comm: syz.8.5314 Tainted: G L syzkaller #0 PREEMPT(full) [ 1592.867053][T27042] Tainted: [L]=SOFTLOCKUP [ 1592.867061][T27042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1592.867073][T27042] Call Trace: [ 1592.867082][T27042] [ 1592.867090][T27042] dump_stack_lvl+0x100/0x190 [ 1592.867152][T27042] should_fail_ex.cold+0x5/0xa [ 1592.867186][T27042] should_failslab+0xc2/0x120 [ 1592.867214][T27042] __kmalloc_cache_noprof+0x91/0x6d0 [ 1592.867246][T27042] ? ipv6_flowlabel_opt+0x593/0x3330 [ 1592.867273][T27042] ipv6_flowlabel_opt+0x593/0x3330 [ 1592.867302][T27042] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1592.867329][T27042] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1592.867363][T27042] ? __local_bh_enable_ip+0xa5/0x120 [ 1592.867386][T27042] ? do_ipv6_setsockopt+0x2b80/0x3a00 [ 1592.867411][T27042] do_ipv6_setsockopt+0x2b80/0x3a00 [ 1592.867442][T27042] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1592.867471][T27042] ? aa_inet_opt_perm+0x307/0x8e0 [ 1592.867495][T27042] ? __pfx_futex_wake_mark+0x10/0x10 [ 1592.867546][T27042] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1592.867574][T27042] ? find_held_lock+0x2b/0x80 [ 1592.867603][T27042] ? futex_wake+0x4ea/0x5e0 [ 1592.867632][T27042] ? futex_wait+0x11e/0x370 [ 1592.867657][T27042] ? __lock_acquire+0x5c0/0x1f40 [ 1592.867688][T27042] ? ipv6_setsockopt+0xcb/0x170 [ 1592.867713][T27042] ipv6_setsockopt+0xcb/0x170 [ 1592.867744][T27042] rawv6_setsockopt+0xee/0x5a0 [ 1592.867770][T27042] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1592.867794][T27042] ? aa_sock_opt_perm+0x114/0x1e0 [ 1592.867818][T27042] ? sock_common_setsockopt+0x2e/0xf0 [ 1592.867848][T27042] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1592.867875][T27042] do_sock_setsockopt+0xf3/0x1d0 [ 1592.867902][T27042] __sys_setsockopt+0x119/0x190 [ 1592.867939][T27042] __ia32_sys_setsockopt+0xbc/0x160 [ 1592.867970][T27042] ? __might_fault+0x111/0x140 [ 1592.867999][T27042] __do_fast_syscall_32+0x14d/0x8e0 [ 1592.868037][T27042] do_fast_syscall_32+0x32/0x70 [ 1592.868068][T27042] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1592.868095][T27042] RIP: 0023:0xf7f88fbc [ 1592.868112][T27042] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1592.868132][T27042] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1592.868152][T27042] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1592.868165][T27042] RDX: 0000000000000020 RSI: 0000000080000240 RDI: 0000000000000020 [ 1592.868177][T27042] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1592.868190][T27042] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1592.868202][T27042] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1592.868229][T27042] [ 1592.916791][T27050] vxcan49: entered promiscuous mode [ 1593.179897][T27044] FAULT_INJECTION: forcing a failure. [ 1593.179897][T27044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1593.179928][T27044] CPU: 1 UID: 0 PID: 27044 Comm: syz.6.5315 Tainted: G L syzkaller #0 PREEMPT(full) [ 1593.179957][T27044] Tainted: [L]=SOFTLOCKUP [ 1593.179964][T27044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1593.179974][T27044] Call Trace: [ 1593.179982][T27044] [ 1593.179990][T27044] dump_stack_lvl+0x100/0x190 [ 1593.180028][T27044] should_fail_ex.cold+0x5/0xa [ 1593.180060][T27044] _copy_to_user+0x32/0xd0 [ 1593.180095][T27044] ipv6_flowlabel_opt+0x2e82/0x3330 [ 1593.180122][T27044] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1593.180143][T27044] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1593.180173][T27044] ? __local_bh_enable_ip+0xa5/0x120 [ 1593.180195][T27044] ? do_ipv6_setsockopt+0x2b80/0x3a00 [ 1593.180220][T27044] do_ipv6_setsockopt+0x2b80/0x3a00 [ 1593.180251][T27044] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1593.180279][T27044] ? aa_inet_opt_perm+0x307/0x8e0 [ 1593.180302][T27044] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1593.180321][T27044] ? plist_check_list+0x1b8/0x280 [ 1593.180344][T27044] ? plist_del+0x308/0x510 [ 1593.180373][T27044] ? find_held_lock+0x2b/0x80 [ 1593.180399][T27044] ? futex_wake+0x4ea/0x5e0 [ 1593.180420][T27044] ? futex_private_hash_put.part.0+0xdc/0x180 [ 1593.180443][T27044] ? futex_private_hash_put+0x24/0x30 [ 1593.180466][T27044] ? futex_wake+0x220/0x5e0 [ 1593.180485][T27044] ? __lock_acquire+0x5c0/0x1f40 [ 1593.180511][T27044] ? ipv6_setsockopt+0xcb/0x170 [ 1593.180533][T27044] ipv6_setsockopt+0xcb/0x170 [ 1593.180560][T27044] rawv6_setsockopt+0xee/0x5a0 [ 1593.180582][T27044] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1593.180603][T27044] ? aa_sock_opt_perm+0x114/0x1e0 [ 1593.180624][T27044] ? sock_common_setsockopt+0x2e/0xf0 [ 1593.180646][T27044] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1593.180667][T27044] do_sock_setsockopt+0xf3/0x1d0 [ 1593.180689][T27044] __sys_setsockopt+0x119/0x190 [ 1593.180717][T27044] __ia32_sys_setsockopt+0xbc/0x160 [ 1593.180742][T27044] ? __might_fault+0x111/0x140 [ 1593.180793][T27044] __do_fast_syscall_32+0x14d/0x8e0 [ 1593.180827][T27044] do_fast_syscall_32+0x32/0x70 [ 1593.180854][T27044] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1593.180878][T27044] RIP: 0023:0xf73cefbc [ 1593.180894][T27044] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1593.180912][T27044] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1593.180931][T27044] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1593.180943][T27044] RDX: 0000000000000020 RSI: 0000000080000240 RDI: 0000000000000020 [ 1593.180953][T27044] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1593.180963][T27044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1593.180974][T27044] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1593.180995][T27044] [ 1593.283401][T27044] netlink: 'syz.6.5315': attribute type 2 has an invalid length. [ 1593.283424][T27044] netlink: 723 bytes leftover after parsing attributes in process `syz.6.5315'. [ 1596.375842][T27059] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1596.459290][T27060] nvmet: failed to open block device /dev/nul: (-2) [ 1596.642536][T27061] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5319'. [ 1596.651683][T27061] vxcan33: entered promiscuous mode [ 1597.226013][T27063] FAULT_INJECTION: forcing a failure. [ 1597.226013][T27063] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.226052][T27063] CPU: 0 UID: 0 PID: 27063 Comm: syz.5.5321 Tainted: G L syzkaller #0 PREEMPT(full) [ 1597.226083][T27063] Tainted: [L]=SOFTLOCKUP [ 1597.226092][T27063] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1597.226107][T27063] Call Trace: [ 1597.226115][T27063] [ 1597.226125][T27063] dump_stack_lvl+0x100/0x190 [ 1597.226168][T27063] should_fail_ex.cold+0x5/0xa [ 1597.226202][T27063] should_failslab+0xc2/0x120 [ 1597.226231][T27063] __kmalloc_cache_noprof+0x91/0x6d0 [ 1597.226266][T27063] ? ipv6_flowlabel_opt+0x593/0x3330 [ 1597.226297][T27063] ipv6_flowlabel_opt+0x593/0x3330 [ 1597.226341][T27063] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1597.226366][T27063] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1597.226403][T27063] ? __local_bh_enable_ip+0xa5/0x120 [ 1597.226461][T27063] ? do_ipv6_setsockopt+0x2b80/0x3a00 [ 1597.226493][T27063] do_ipv6_setsockopt+0x2b80/0x3a00 [ 1597.226531][T27063] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1597.226565][T27063] ? aa_inet_opt_perm+0x307/0x8e0 [ 1597.226593][T27063] ? __pfx_futex_wake_mark+0x10/0x10 [ 1597.226619][T27063] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1597.226644][T27063] ? find_held_lock+0x2b/0x80 [ 1597.226676][T27063] ? futex_wake+0x4ea/0x5e0 [ 1597.226707][T27063] ? futex_wait+0x11e/0x370 [ 1597.226734][T27063] ? __lock_acquire+0x5c0/0x1f40 [ 1597.226768][T27063] ? ipv6_setsockopt+0xcb/0x170 [ 1597.226798][T27063] ipv6_setsockopt+0xcb/0x170 [ 1597.226830][T27063] rawv6_setsockopt+0xee/0x5a0 [ 1597.226859][T27063] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1597.226886][T27063] ? aa_sock_opt_perm+0x114/0x1e0 [ 1597.226913][T27063] ? sock_common_setsockopt+0x2e/0xf0 [ 1597.226941][T27063] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1597.226971][T27063] do_sock_setsockopt+0xf3/0x1d0 [ 1597.226995][T27063] __sys_setsockopt+0x119/0x190 [ 1597.227033][T27063] __ia32_sys_setsockopt+0xbc/0x160 [ 1597.227065][T27063] ? __might_fault+0x111/0x140 [ 1597.227093][T27063] __do_fast_syscall_32+0x14d/0x8e0 [ 1597.227131][T27063] do_fast_syscall_32+0x32/0x70 [ 1597.227163][T27063] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1597.227190][T27063] RIP: 0023:0xf7f87fbc [ 1597.227209][T27063] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1597.227230][T27063] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1597.227253][T27063] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1597.227267][T27063] RDX: 0000000000000020 RSI: 0000000080000240 RDI: 0000000000000020 [ 1597.227280][T27063] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1597.227294][T27063] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1597.227308][T27063] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1597.227347][T27063] [ 1597.290821][T27066] bridge_slave_1: left allmulticast mode [ 1597.290848][T27066] bridge_slave_1: left promiscuous mode [ 1597.291050][T27066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1597.340549][T27063] netlink: 'syz.5.5321': attribute type 2 has an invalid length. [ 1597.340571][T27063] netlink: 723 bytes leftover after parsing attributes in process `syz.5.5321'. [ 1597.934764][T27070] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5322'. [ 1598.218475][T27066] bridge_slave_0: left allmulticast mode [ 1598.218509][T27066] bridge_slave_0: left promiscuous mode [ 1598.233515][T27066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1598.383168][T27070] vxcan85: entered promiscuous mode [ 1599.071968][T27077] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5324'. [ 1600.160283][T27082] FAULT_INJECTION: forcing a failure. [ 1600.160283][T27082] name failslab, interval 1, probability 0, space 0, times 0 [ 1600.160318][T27082] CPU: 0 UID: 0 PID: 27082 Comm: syz.4.5326 Tainted: G L syzkaller #0 PREEMPT(full) [ 1600.160344][T27082] Tainted: [L]=SOFTLOCKUP [ 1600.160352][T27082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1600.160363][T27082] Call Trace: [ 1600.160370][T27082] [ 1600.160379][T27082] dump_stack_lvl+0x100/0x190 [ 1600.160413][T27082] should_fail_ex.cold+0x5/0xa [ 1600.160441][T27082] should_failslab+0xc2/0x120 [ 1600.160466][T27082] __kmalloc_cache_noprof+0x91/0x6d0 [ 1600.160494][T27082] ? ipv6_flowlabel_opt+0x593/0x3330 [ 1600.160520][T27082] ipv6_flowlabel_opt+0x593/0x3330 [ 1600.160547][T27082] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1600.160569][T27082] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1600.160600][T27082] ? __local_bh_enable_ip+0xa5/0x120 [ 1600.160624][T27082] ? do_ipv6_setsockopt+0x2b80/0x3a00 [ 1600.160651][T27082] do_ipv6_setsockopt+0x2b80/0x3a00 [ 1600.160683][T27082] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1600.160712][T27082] ? aa_inet_opt_perm+0x307/0x8e0 [ 1600.160735][T27082] ? __pfx_futex_wake_mark+0x10/0x10 [ 1600.160757][T27082] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1600.160782][T27082] ? find_held_lock+0x2b/0x80 [ 1600.160808][T27082] ? futex_wake+0x4ea/0x5e0 [ 1600.160833][T27082] ? futex_wait+0x11e/0x370 [ 1600.160857][T27082] ? __lock_acquire+0x5c0/0x1f40 [ 1600.160886][T27082] ? ipv6_setsockopt+0xcb/0x170 [ 1600.160911][T27082] ipv6_setsockopt+0xcb/0x170 [ 1600.160940][T27082] rawv6_setsockopt+0xee/0x5a0 [ 1600.160964][T27082] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1600.160987][T27082] ? aa_sock_opt_perm+0x114/0x1e0 [ 1600.161011][T27082] ? sock_common_setsockopt+0x2e/0xf0 [ 1600.161034][T27082] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1600.161058][T27082] do_sock_setsockopt+0xf3/0x1d0 [ 1600.161083][T27082] __sys_setsockopt+0x119/0x190 [ 1600.161115][T27082] __ia32_sys_setsockopt+0xbc/0x160 [ 1600.161144][T27082] ? __might_fault+0x111/0x140 [ 1600.161216][T27082] __do_fast_syscall_32+0x14d/0x8e0 [ 1600.161255][T27082] do_fast_syscall_32+0x32/0x70 [ 1600.161284][T27082] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1600.161310][T27082] RIP: 0023:0xf7f95fbc [ 1600.161329][T27082] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1600.161348][T27082] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1600.161369][T27082] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1600.161381][T27082] RDX: 0000000000000020 RSI: 0000000080000240 RDI: 0000000000000020 [ 1600.161393][T27082] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1600.161405][T27082] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1600.161417][T27082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1600.161443][T27082] [ 1600.636185][T27082] netlink: 'syz.4.5326': attribute type 2 has an invalid length. [ 1600.636208][T27082] netlink: 723 bytes leftover after parsing attributes in process `syz.4.5326'. [ 1601.529907][T27096] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5327'. [ 1601.870576][T27101] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5328'. [ 1602.178054][T27101] vxcan35: entered promiscuous mode [ 1604.754400][T27106] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5330'. [ 1605.803764][T27110] nvmet: failed to open block device /dev/nul: (-2) [ 1605.893349][T27113] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5332'. [ 1605.901892][T27113] vxcan37: entered promiscuous mode [ 1606.203380][T27119] FAULT_INJECTION: forcing a failure. [ 1606.203380][T27119] name failslab, interval 1, probability 0, space 0, times 0 [ 1606.203412][T27119] CPU: 1 UID: 0 PID: 27119 Comm: syz.4.5334 Tainted: G L syzkaller #0 PREEMPT(full) [ 1606.203438][T27119] Tainted: [L]=SOFTLOCKUP [ 1606.203445][T27119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1606.203457][T27119] Call Trace: [ 1606.203464][T27119] [ 1606.203473][T27119] dump_stack_lvl+0x100/0x190 [ 1606.203508][T27119] should_fail_ex.cold+0x5/0xa [ 1606.203535][T27119] should_failslab+0xc2/0x120 [ 1606.203672][T27119] __kmalloc_cache_noprof+0x91/0x6d0 [ 1606.204646][T27119] ? ipv6_flowlabel_opt+0x593/0x3330 [ 1606.204673][T27119] ipv6_flowlabel_opt+0x593/0x3330 [ 1606.204699][T27119] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1606.204718][T27119] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1606.204748][T27119] ? __local_bh_enable_ip+0xa5/0x120 [ 1606.204772][T27119] ? do_ipv6_setsockopt+0x2b80/0x3a00 [ 1606.204800][T27119] do_ipv6_setsockopt+0x2b80/0x3a00 [ 1606.204835][T27119] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1606.205062][T27119] ? aa_inet_opt_perm+0x307/0x8e0 [ 1606.205085][T27119] ? __pfx_futex_wake_mark+0x10/0x10 [ 1606.205107][T27119] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1606.205130][T27119] ? find_held_lock+0x2b/0x80 [ 1606.205183][T27119] ? futex_wake+0x4ea/0x5e0 [ 1606.205211][T27119] ? futex_wait+0x11e/0x370 [ 1606.205236][T27119] ? __lock_acquire+0x5c0/0x1f40 [ 1606.205272][T27119] ? ipv6_setsockopt+0xcb/0x170 [ 1606.205300][T27119] ipv6_setsockopt+0xcb/0x170 [ 1606.205334][T27119] rawv6_setsockopt+0xee/0x5a0 [ 1606.205364][T27119] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1606.205390][T27119] ? aa_sock_opt_perm+0x114/0x1e0 [ 1606.205416][T27119] ? sock_common_setsockopt+0x2e/0xf0 [ 1606.205439][T27119] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1606.205462][T27119] do_sock_setsockopt+0xf3/0x1d0 [ 1606.205485][T27119] __sys_setsockopt+0x119/0x190 [ 1606.205519][T27119] __ia32_sys_setsockopt+0xbc/0x160 [ 1606.205547][T27119] ? __might_fault+0x111/0x140 [ 1606.205574][T27119] __do_fast_syscall_32+0x14d/0x8e0 [ 1606.205700][T27119] do_fast_syscall_32+0x32/0x70 [ 1606.205735][T27119] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1606.205761][T27119] RIP: 0023:0xf7f95fbc [ 1606.205779][T27119] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1606.205798][T27119] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1606.205819][T27119] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1606.205831][T27119] RDX: 0000000000000020 RSI: 0000000080000240 RDI: 0000000000000020 [ 1606.205843][T27119] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1606.205854][T27119] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1606.205865][T27119] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1606.205890][T27119] [ 1606.927800][T27128] jffs2: notice: (27128) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1607.000226][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.000284][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.854922][T27137] netlink: 'syz.6.5337': attribute type 2 has an invalid length. [ 1607.854948][T27137] netlink: 723 bytes leftover after parsing attributes in process `syz.6.5337'. [ 1608.673930][T27140] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5338'. [ 1609.110596][T27140] vxcan87: entered promiscuous mode [ 1610.578799][T27146] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5339'. [ 1612.095332][T27152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5341'. [ 1612.158606][T27152] vxcan3: entered promiscuous mode [ 1612.741068][T27159] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5340'. [ 1612.841134][T27159] vxcan89: entered promiscuous mode [ 1613.406372][T27158] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5342'. [ 1613.450487][T27161] FAULT_INJECTION: forcing a failure. [ 1613.450487][T27161] name failslab, interval 1, probability 0, space 0, times 0 [ 1613.450525][T27161] CPU: 0 UID: 0 PID: 27161 Comm: syz.5.5343 Tainted: G L syzkaller #0 PREEMPT(full) [ 1613.450553][T27161] Tainted: [L]=SOFTLOCKUP [ 1613.450560][T27161] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1613.450572][T27161] Call Trace: [ 1613.450580][T27161] [ 1613.450589][T27161] dump_stack_lvl+0x100/0x190 [ 1613.450631][T27161] should_fail_ex.cold+0x5/0xa [ 1613.450666][T27161] should_failslab+0xc2/0x120 [ 1613.450696][T27161] __kmalloc_cache_noprof+0x91/0x6d0 [ 1613.450732][T27161] ? ipv6_flowlabel_opt+0x593/0x3330 [ 1613.450761][T27161] ipv6_flowlabel_opt+0x593/0x3330 [ 1613.450793][T27161] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1613.450816][T27161] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1613.450867][T27161] ? __local_bh_enable_ip+0xa5/0x120 [ 1613.450898][T27161] ? do_ipv6_setsockopt+0x2b80/0x3a00 [ 1613.450932][T27161] do_ipv6_setsockopt+0x2b80/0x3a00 [ 1613.450972][T27161] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1613.451007][T27161] ? aa_inet_opt_perm+0x307/0x8e0 [ 1613.451035][T27161] ? __pfx_futex_wake_mark+0x10/0x10 [ 1613.451060][T27161] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1613.451087][T27161] ? find_held_lock+0x2b/0x80 [ 1613.451118][T27161] ? futex_wake+0x4ea/0x5e0 [ 1613.451148][T27161] ? futex_wait+0x11e/0x370 [ 1613.451177][T27161] ? __lock_acquire+0x5c0/0x1f40 [ 1613.451209][T27161] ? ipv6_setsockopt+0xcb/0x170 [ 1613.451234][T27161] ipv6_setsockopt+0xcb/0x170 [ 1613.451263][T27161] rawv6_setsockopt+0xee/0x5a0 [ 1613.451288][T27161] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1613.451312][T27161] ? aa_sock_opt_perm+0x114/0x1e0 [ 1613.451336][T27161] ? sock_common_setsockopt+0x2e/0xf0 [ 1613.451359][T27161] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1613.451383][T27161] do_sock_setsockopt+0xf3/0x1d0 [ 1613.451407][T27161] __sys_setsockopt+0x119/0x190 [ 1613.451441][T27161] __ia32_sys_setsockopt+0xbc/0x160 [ 1613.451468][T27161] ? __might_fault+0x111/0x140 [ 1613.451495][T27161] __do_fast_syscall_32+0x14d/0x8e0 [ 1613.451528][T27161] do_fast_syscall_32+0x32/0x70 [ 1613.451557][T27161] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1613.451582][T27161] RIP: 0023:0xf7f87fbc [ 1613.451601][T27161] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1613.451621][T27161] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1613.451644][T27161] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1613.451657][T27161] RDX: 0000000000000020 RSI: 0000000080000240 RDI: 0000000000000020 [ 1613.451669][T27161] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1613.451681][T27161] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1613.451693][T27161] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1613.451719][T27161] [ 1615.335233][T27166] nvmet: failed to open block device /dev/nul: (-2) [ 1616.114444][T27176] nvmet: failed to open block device /dev/nul: (-2) [ 1616.686080][T27179] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5349'. [ 1616.836330][T27179] vxcan91: entered promiscuous mode [ 1617.448133][T27184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5347'. [ 1617.747606][T27182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5348'. [ 1617.821071][T27184] vxcan5: entered promiscuous mode [ 1617.915223][T27182] vxcan51: entered promiscuous mode [ 1618.238021][T27187] FAULT_INJECTION: forcing a failure. [ 1618.238021][T27187] name failslab, interval 1, probability 0, space 0, times 0 [ 1618.238057][T27187] CPU: 2 UID: 0 PID: 27187 Comm: syz.6.5350 Tainted: G L syzkaller #0 PREEMPT(full) [ 1618.238088][T27187] Tainted: [L]=SOFTLOCKUP [ 1618.238096][T27187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1618.238110][T27187] Call Trace: [ 1618.238117][T27187] [ 1618.238125][T27187] dump_stack_lvl+0x100/0x190 [ 1618.238161][T27187] should_fail_ex.cold+0x5/0xa [ 1618.238190][T27187] should_failslab+0xc2/0x120 [ 1618.238214][T27187] __kmalloc_cache_noprof+0x91/0x6d0 [ 1618.238241][T27187] ? ipv6_flowlabel_opt+0x593/0x3330 [ 1618.238267][T27187] ipv6_flowlabel_opt+0x593/0x3330 [ 1618.238294][T27187] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1618.238315][T27187] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1618.238349][T27187] ? __local_bh_enable_ip+0xa5/0x120 [ 1618.238374][T27187] ? do_ipv6_setsockopt+0x2b80/0x3a00 [ 1618.238400][T27187] do_ipv6_setsockopt+0x2b80/0x3a00 [ 1618.238431][T27187] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1618.238461][T27187] ? aa_inet_opt_perm+0x307/0x8e0 [ 1618.238486][T27187] ? __pfx_futex_wake_mark+0x10/0x10 [ 1618.238507][T27187] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1618.238531][T27187] ? __pfx_futex_hash+0x10/0x10 [ 1618.238555][T27187] ? __pfx_get_futex_key+0x10/0x10 [ 1618.238580][T27187] ? get_pid_task+0xfc/0x250 [ 1618.238605][T27187] ? get_pid_task+0xfc/0x250 [ 1618.238668][T27187] ? futex_wait+0x11e/0x370 [ 1618.238693][T27187] ? __lock_acquire+0x5c0/0x1f40 [ 1618.238724][T27187] ? ipv6_setsockopt+0xcb/0x170 [ 1618.238750][T27187] ipv6_setsockopt+0xcb/0x170 [ 1618.238778][T27187] rawv6_setsockopt+0xee/0x5a0 [ 1618.238803][T27187] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1618.238828][T27187] ? aa_sock_opt_perm+0x114/0x1e0 [ 1618.238852][T27187] ? sock_common_setsockopt+0x2e/0xf0 [ 1618.238875][T27187] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1618.238901][T27187] do_sock_setsockopt+0xf3/0x1d0 [ 1618.238926][T27187] __sys_setsockopt+0x119/0x190 [ 1618.238960][T27187] __ia32_sys_setsockopt+0xbc/0x160 [ 1618.238994][T27187] ? __might_fault+0x111/0x140 [ 1618.239022][T27187] __do_fast_syscall_32+0x14d/0x8e0 [ 1618.239056][T27187] do_fast_syscall_32+0x32/0x70 [ 1618.239084][T27187] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1618.239106][T27187] RIP: 0023:0xf73cefbc [ 1618.239125][T27187] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1618.239145][T27187] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1618.239167][T27187] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1618.239178][T27187] RDX: 0000000000000020 RSI: 0000000080000240 RDI: 0000000000000020 [ 1618.239191][T27187] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1618.239201][T27187] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1618.239213][T27187] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1618.239238][T27187] [ 1618.571315][T27189] jffs2: notice: (27189) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1621.156372][T27214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5356'. [ 1621.239722][T27216] FAULT_INJECTION: forcing a failure. [ 1621.239722][T27216] name failslab, interval 1, probability 0, space 0, times 0 [ 1621.239761][T27216] CPU: 1 UID: 0 PID: 27216 Comm: syz.6.5358 Tainted: G L syzkaller #0 PREEMPT(full) [ 1621.239794][T27216] Tainted: [L]=SOFTLOCKUP [ 1621.239802][T27216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1621.239816][T27216] Call Trace: [ 1621.240015][T27216] [ 1621.240028][T27216] dump_stack_lvl+0x100/0x190 [ 1621.240067][T27216] should_fail_ex.cold+0x5/0xa [ 1621.240100][T27216] should_failslab+0xc2/0x120 [ 1621.240129][T27216] __kmalloc_cache_noprof+0x91/0x6d0 [ 1621.240169][T27216] ? ipv6_flowlabel_opt+0x593/0x3330 [ 1621.240200][T27216] ipv6_flowlabel_opt+0x593/0x3330 [ 1621.240231][T27216] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1621.240255][T27216] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1621.240289][T27216] ? __local_bh_enable_ip+0xa5/0x120 [ 1621.240318][T27216] ? do_ipv6_setsockopt+0x2b80/0x3a00 [ 1621.240349][T27216] do_ipv6_setsockopt+0x2b80/0x3a00 [ 1621.240387][T27216] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1621.240419][T27216] ? aa_inet_opt_perm+0x307/0x8e0 [ 1621.240446][T27216] ? __pfx_futex_wake_mark+0x10/0x10 [ 1621.240471][T27216] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1621.240496][T27216] ? find_held_lock+0x2b/0x80 [ 1621.240525][T27216] ? futex_wake+0x4ea/0x5e0 [ 1621.240554][T27216] ? futex_wait+0x11e/0x370 [ 1621.240580][T27216] ? __lock_acquire+0x5c0/0x1f40 [ 1621.240612][T27216] ? ipv6_setsockopt+0xcb/0x170 [ 1621.240641][T27216] ipv6_setsockopt+0xcb/0x170 [ 1621.240673][T27216] rawv6_setsockopt+0xee/0x5a0 [ 1621.240701][T27216] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1621.240728][T27216] ? aa_sock_opt_perm+0x114/0x1e0 [ 1621.240753][T27216] ? sock_common_setsockopt+0x2e/0xf0 [ 1621.240780][T27216] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1621.240807][T27216] do_sock_setsockopt+0xf3/0x1d0 [ 1621.240835][T27216] __sys_setsockopt+0x119/0x190 [ 1621.240873][T27216] __ia32_sys_setsockopt+0xbc/0x160 [ 1621.240903][T27216] ? __might_fault+0x111/0x140 [ 1621.240932][T27216] __do_fast_syscall_32+0x14d/0x8e0 [ 1621.240970][T27216] do_fast_syscall_32+0x32/0x70 [ 1621.241003][T27216] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1621.241031][T27216] RIP: 0023:0xf73cefbc [ 1621.241050][T27216] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1621.241093][T27216] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1621.241117][T27216] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1621.241133][T27216] RDX: 0000000000000020 RSI: 0000000080000240 RDI: 0000000000000020 [ 1621.241154][T27216] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1621.241166][T27216] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1621.241181][T27216] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1621.241208][T27216] [ 1621.365500][T27214] vxcan53: entered promiscuous mode [ 1621.621207][T27216] netlink: 'syz.6.5358': attribute type 2 has an invalid length. [ 1621.621231][T27216] netlink: 723 bytes leftover after parsing attributes in process `syz.6.5358'. [ 1621.786468][T27218] netlink: 'syz.8.5359': attribute type 2 has an invalid length. [ 1621.786492][T27218] netlink: 723 bytes leftover after parsing attributes in process `syz.8.5359'. [ 1625.676816][T27227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5360'. [ 1625.723387][T27227] vxcan55: entered promiscuous mode [ 1626.041751][T27229] FAULT_INJECTION: forcing a failure. [ 1626.041751][T27229] name failslab, interval 1, probability 0, space 0, times 0 [ 1626.041785][T27229] CPU: 0 UID: 0 PID: 27229 Comm: syz.4.5361 Tainted: G L syzkaller #0 PREEMPT(full) [ 1626.041812][T27229] Tainted: [L]=SOFTLOCKUP [ 1626.041820][T27229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1626.041832][T27229] Call Trace: [ 1626.041839][T27229] [ 1626.041847][T27229] dump_stack_lvl+0x100/0x190 [ 1626.041885][T27229] should_fail_ex.cold+0x5/0xa [ 1626.041914][T27229] should_failslab+0xc2/0x120 [ 1626.041938][T27229] __kmalloc_cache_noprof+0x91/0x6d0 [ 1626.041967][T27229] ? ipv6_flowlabel_opt+0x593/0x3330 [ 1626.041994][T27229] ipv6_flowlabel_opt+0x593/0x3330 [ 1626.042020][T27229] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1626.042041][T27229] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1626.042071][T27229] ? __local_bh_enable_ip+0xa5/0x120 [ 1626.042095][T27229] ? do_ipv6_setsockopt+0x2b80/0x3a00 [ 1626.042121][T27229] do_ipv6_setsockopt+0x2b80/0x3a00 [ 1626.042165][T27229] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1626.042196][T27229] ? aa_inet_opt_perm+0x307/0x8e0 [ 1626.042220][T27229] ? __pfx_futex_wake_mark+0x10/0x10 [ 1626.042239][T27229] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1626.042260][T27229] ? find_held_lock+0x2b/0x80 [ 1626.042286][T27229] ? futex_wake+0x4ea/0x5e0 [ 1626.042312][T27229] ? futex_wait+0x11e/0x370 [ 1626.042335][T27229] ? __lock_acquire+0x5c0/0x1f40 [ 1626.042362][T27229] ? ipv6_setsockopt+0xcb/0x170 [ 1626.042387][T27229] ipv6_setsockopt+0xcb/0x170 [ 1626.042416][T27229] rawv6_setsockopt+0xee/0x5a0 [ 1626.042440][T27229] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1626.042462][T27229] ? aa_sock_opt_perm+0x114/0x1e0 [ 1626.042485][T27229] ? sock_common_setsockopt+0x2e/0xf0 [ 1626.042507][T27229] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1626.042532][T27229] do_sock_setsockopt+0xf3/0x1d0 [ 1626.042556][T27229] __sys_setsockopt+0x119/0x190 [ 1626.042589][T27229] __ia32_sys_setsockopt+0xbc/0x160 [ 1626.042616][T27229] ? __might_fault+0x111/0x140 [ 1626.042642][T27229] __do_fast_syscall_32+0x14d/0x8e0 [ 1626.042703][T27229] do_fast_syscall_32+0x32/0x70 [ 1626.042734][T27229] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1626.042760][T27229] RIP: 0023:0xf7f95fbc [ 1626.042777][T27229] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1626.042797][T27229] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1626.042815][T27229] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1626.042828][T27229] RDX: 0000000000000020 RSI: 0000000080000240 RDI: 0000000000000020 [ 1626.042840][T27229] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1626.042852][T27229] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1626.042865][T27229] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1626.042890][T27229] [ 1627.345994][T27236] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5363'. [ 1627.609155][T27236] vxcan93: entered promiscuous mode [ 1627.765392][T27240] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5362'. [ 1627.884308][T27240] vxcan39: entered promiscuous mode [ 1628.109343][T27245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5364'. [ 1628.146549][T27245] vxcan57: entered promiscuous mode [ 1628.586237][T27251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5368'. [ 1628.619746][T27251] vxcan7: entered promiscuous mode [ 1629.148372][T27259] FAULT_INJECTION: forcing a failure. [ 1629.148372][T27259] name failslab, interval 1, probability 0, space 0, times 0 [ 1629.148407][T27259] CPU: 2 UID: 0 PID: 27259 Comm: syz.6.5372 Tainted: G L syzkaller #0 PREEMPT(full) [ 1629.148437][T27259] Tainted: [L]=SOFTLOCKUP [ 1629.148445][T27259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1629.148459][T27259] Call Trace: [ 1629.148467][T27259] [ 1629.148476][T27259] dump_stack_lvl+0x100/0x190 [ 1629.148515][T27259] should_fail_ex.cold+0x5/0xa [ 1629.148547][T27259] should_failslab+0xc2/0x120 [ 1629.148602][T27259] __kmalloc_cache_noprof+0x91/0x6d0 [ 1629.148638][T27259] ? ipv6_flowlabel_opt+0x593/0x3330 [ 1629.148669][T27259] ipv6_flowlabel_opt+0x593/0x3330 [ 1629.148699][T27259] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1629.148721][T27259] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1629.148757][T27259] ? __local_bh_enable_ip+0xa5/0x120 [ 1629.148783][T27259] ? do_ipv6_setsockopt+0x2b80/0x3a00 [ 1629.148812][T27259] do_ipv6_setsockopt+0x2b80/0x3a00 [ 1629.148847][T27259] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1629.148880][T27259] ? aa_inet_opt_perm+0x307/0x8e0 [ 1629.148906][T27259] ? __pfx_futex_wake_mark+0x10/0x10 [ 1629.148930][T27259] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1629.148955][T27259] ? find_held_lock+0x2b/0x80 [ 1629.148985][T27259] ? futex_wake+0x4ea/0x5e0 [ 1629.149016][T27259] ? futex_wait+0x11e/0x370 [ 1629.149076][T27259] ? __lock_acquire+0x5c0/0x1f40 [ 1629.149127][T27259] ? ipv6_setsockopt+0xcb/0x170 [ 1629.149161][T27259] ipv6_setsockopt+0xcb/0x170 [ 1629.149196][T27259] rawv6_setsockopt+0xee/0x5a0 [ 1629.149225][T27259] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1629.149252][T27259] ? aa_sock_opt_perm+0x114/0x1e0 [ 1629.149279][T27259] ? sock_common_setsockopt+0x2e/0xf0 [ 1629.149306][T27259] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1629.149333][T27259] do_sock_setsockopt+0xf3/0x1d0 [ 1629.149362][T27259] __sys_setsockopt+0x119/0x190 [ 1629.149401][T27259] __ia32_sys_setsockopt+0xbc/0x160 [ 1629.149433][T27259] ? __might_fault+0x111/0x140 [ 1629.149463][T27259] __do_fast_syscall_32+0x14d/0x8e0 [ 1629.149503][T27259] do_fast_syscall_32+0x32/0x70 [ 1629.149537][T27259] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1629.149566][T27259] RIP: 0023:0xf73cefbc [ 1629.149586][T27259] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1629.149614][T27259] RSP: 002b:00000000f53c550c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1629.149639][T27259] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1629.149654][T27259] RDX: 0000000000000020 RSI: 0000000080000240 RDI: 0000000000000020 [ 1629.149669][T27259] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1629.149683][T27259] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1629.149697][T27259] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1629.149728][T27259] [ 1632.438000][T27275] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5375'. [ 1632.448688][T27275] vxcan41: entered promiscuous mode [ 1633.190938][T27277] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5377'. [ 1633.252948][T27277] vxcan95: entered promiscuous mode [ 1635.574727][T27291] jffs2: notice: (27291) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1635.810829][T27295] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5378'. [ 1635.862216][T27296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5380'. [ 1635.915603][T27295] vxcan43: entered promiscuous mode [ 1635.996426][T27296] vxcan9: entered promiscuous mode [ 1636.419665][T27301] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5383'. [ 1636.483264][T27301] vxcan97: entered promiscuous mode [ 1637.002259][T27308] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5385'. [ 1637.066887][T27308] vxcan45: entered promiscuous mode [ 1638.323039][T27317] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5386'. [ 1638.620044][T27317] vxcan99: entered promiscuous mode [ 1638.688374][T27321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5387'. [ 1639.086218][T27327] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5388'. [ 1639.114229][T27321] vxcan11: entered promiscuous mode [ 1640.185635][T27332] jffs2: notice: (27332) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1640.425060][T27335] FAULT_INJECTION: forcing a failure. [ 1640.425060][T27335] name failslab, interval 1, probability 0, space 0, times 0 [ 1640.425095][T27335] CPU: 1 UID: 0 PID: 27335 Comm: syz.4.5392 Tainted: G L syzkaller #0 PREEMPT(full) [ 1640.425124][T27335] Tainted: [L]=SOFTLOCKUP [ 1640.425132][T27335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1640.425161][T27335] Call Trace: [ 1640.425170][T27335] [ 1640.425178][T27335] dump_stack_lvl+0x100/0x190 [ 1640.425218][T27335] should_fail_ex.cold+0x5/0xa [ 1640.425248][T27335] should_failslab+0xc2/0x120 [ 1640.425275][T27335] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1640.425297][T27335] ? security_file_alloc+0x34/0x2c0 [ 1640.425334][T27335] security_file_alloc+0x34/0x2c0 [ 1640.425364][T27335] init_file+0x95/0x480 [ 1640.425391][T27335] alloc_empty_file+0x79/0x1c0 [ 1640.425420][T27335] path_openat+0xd6/0x23f0 [ 1640.425449][T27335] ? __pfx_path_openat+0x10/0x10 [ 1640.425474][T27335] ? find_held_lock+0x2b/0x80 [ 1640.425502][T27335] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 1640.425524][T27335] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 1640.425549][T27335] do_file_open+0x20e/0x430 [ 1640.425576][T27335] ? __pfx_do_file_open+0x10/0x10 [ 1640.425601][T27335] ? irqentry_exit+0x202/0xab0 [ 1640.425645][T27335] ? _raw_spin_unlock+0x28/0x50 [ 1640.425671][T27335] ? alloc_fd+0x471/0x7a0 [ 1640.425713][T27335] do_sys_openat2+0x163/0x1d0 [ 1640.425744][T27335] ? __lock_acquire+0x5c0/0x1f40 [ 1640.425767][T27335] ? __pfx_do_sys_openat2+0x10/0x10 [ 1640.425809][T27335] __ia32_compat_sys_openat+0x12d/0x210 [ 1640.425844][T27335] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1640.425885][T27335] __do_fast_syscall_32+0x14d/0x8e0 [ 1640.425919][T27335] do_fast_syscall_32+0x32/0x70 [ 1640.425950][T27335] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1640.425976][T27335] RIP: 0023:0xf7f95fbc [ 1640.425995][T27335] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1640.426014][T27335] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 1640.426035][T27335] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000080000380 [ 1640.426049][T27335] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1640.426063][T27335] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1640.426076][T27335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1640.426090][T27335] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1640.426118][T27335] [ 1640.598469][T27335] netlink: 'syz.4.5392': attribute type 2 has an invalid length. [ 1640.598494][T27335] netlink: 723 bytes leftover after parsing attributes in process `syz.4.5392'. [ 1640.798817][T27336] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5390'. [ 1640.853218][T27336] vxcan101: entered promiscuous mode [ 1642.803983][T27348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5394'. [ 1642.847887][T27348] vxcan13: entered promiscuous mode [ 1643.491007][T27350] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5395'. [ 1644.114210][T27350] vxcan103: entered promiscuous mode [ 1644.662312][T27358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5397'. [ 1644.695322][T27358] vxcan15: entered promiscuous mode [ 1645.061864][T27363] FAULT_INJECTION: forcing a failure. [ 1645.061864][T27363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1645.061896][T27363] CPU: 0 UID: 0 PID: 27363 Comm: syz.8.5398 Tainted: G L syzkaller #0 PREEMPT(full) [ 1645.061918][T27363] Tainted: [L]=SOFTLOCKUP [ 1645.061925][T27363] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1645.061935][T27363] Call Trace: [ 1645.061941][T27363] [ 1645.061948][T27363] dump_stack_lvl+0x100/0x190 [ 1645.061979][T27363] should_fail_ex.cold+0x5/0xa [ 1645.062004][T27363] strncpy_from_user+0x3b/0x2d0 [ 1645.062028][T27363] do_getname+0x78/0x390 [ 1645.062055][T27363] do_sys_openat2+0xc3/0x1d0 [ 1645.062077][T27363] ? __lock_acquire+0x5c0/0x1f40 [ 1645.062095][T27363] ? __pfx_do_sys_openat2+0x10/0x10 [ 1645.062127][T27363] __ia32_compat_sys_openat+0x12d/0x210 [ 1645.062152][T27363] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1645.062185][T27363] __do_fast_syscall_32+0x14d/0x8e0 [ 1645.062215][T27363] do_fast_syscall_32+0x32/0x70 [ 1645.062241][T27363] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1645.062261][T27363] RIP: 0023:0xf7f88fbc [ 1645.062276][T27363] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1645.062292][T27363] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 1645.062311][T27363] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000080000380 [ 1645.062322][T27363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1645.062331][T27363] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1645.062341][T27363] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1645.062351][T27363] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1645.062370][T27363] [ 1645.225310][T27363] netlink: 'syz.8.5398': attribute type 2 has an invalid length. [ 1645.225332][T27363] netlink: 723 bytes leftover after parsing attributes in process `syz.8.5398'. [ 1648.611710][T27380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5402'. [ 1648.689601][T27380] vxcan59: entered promiscuous mode [ 1650.056405][T27388] jffs2: notice: (27388) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1650.429223][T27391] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5407'. [ 1651.543452][T27400] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5409'. [ 1656.065995][T27424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5415'. [ 1656.100163][T27424] vxcan61: entered promiscuous mode [ 1656.127252][T27413] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5412'. [ 1656.501444][T27413] vxcan47: entered promiscuous mode [ 1656.832363][T27428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5416'. [ 1656.852983][T27428] vxcan17: entered promiscuous mode [ 1657.414378][T27436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5418'. [ 1657.437039][T27436] vxcan19: entered promiscuous mode [ 1657.595039][T27437] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5419'. [ 1659.136113][T27446] jffs2: notice: (27446) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1659.900627][ T1132] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 1659.900655][ T1132] ata1.00: irq_stat 0x40000000 [ 1659.900670][ T1132] ata1.00: failed command: READ DMA EXT [ 1659.900681][ T1132] ata1.00: cmd 25/00:e0:b6:12:08/00:10:00:00:00/e0 tag 14 dma 2211840 in [ 1659.900681][ T1132] res 41/04:e0:b6:12:08/00:10:00:00:00/e0 Emask 0x1 (device error) [ 1659.900731][ T1132] ata1.00: status: { DRDY ERR } [ 1659.900743][ T1132] ata1.00: error: { ABRT } [ 1659.913169][ T1132] ata1.00: configured for UDMA/33 [ 1659.913350][ T1132] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1659.913392][ T1132] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 1659.913425][ T1132] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 1659.913458][ T1132] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 08 12 b6 00 10 e0 00 [ 1659.913483][ T1132] I/O error, dev sda, sector 529078 op 0x0:(READ) flags 0x80700 phys_seg 145 prio class 2 [ 1659.913781][ T1132] ata1: EH complete [ 1660.389695][T26514] Bluetooth: hci3: command 0x0406 tx timeout [ 1660.610043][T27452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5423'. [ 1660.669939][T27452] vxcan21: entered promiscuous mode [ 1660.795198][T27458] nvmet: failed to open block device /dev/nul: (-2) [ 1661.113191][T27461] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5426'. [ 1661.152100][T27461] vxcan105: entered promiscuous mode [ 1661.835635][T27466] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5428'. [ 1661.879297][T27463] FAULT_INJECTION: forcing a failure. [ 1661.879297][T27463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1661.879338][T27463] CPU: 1 UID: 0 PID: 27463 Comm: syz.4.5427 Tainted: G L syzkaller #0 PREEMPT(full) [ 1661.879369][T27463] Tainted: [L]=SOFTLOCKUP [ 1661.879378][T27463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1661.879390][T27463] Call Trace: [ 1661.879399][T27463] [ 1661.879407][T27463] dump_stack_lvl+0x100/0x190 [ 1661.879446][T27463] should_fail_ex.cold+0x5/0xa [ 1661.879477][T27463] _copy_to_user+0x32/0xd0 [ 1661.879513][T27463] ipv6_flowlabel_opt+0x2e82/0x3330 [ 1661.879543][T27463] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1661.879564][T27463] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1661.879608][T27463] ? __local_bh_enable_ip+0xa5/0x120 [ 1661.879636][T27463] ? do_ipv6_setsockopt+0x2b80/0x3a00 [ 1661.879665][T27463] do_ipv6_setsockopt+0x2b80/0x3a00 [ 1661.879698][T27463] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1661.879727][T27463] ? aa_inet_opt_perm+0x307/0x8e0 [ 1661.879755][T27463] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1661.879774][T27463] ? plist_check_list+0x1b8/0x280 [ 1661.879798][T27463] ? plist_del+0x308/0x510 [ 1661.879819][T27463] ? find_held_lock+0x2b/0x80 [ 1661.879845][T27463] ? futex_wake+0x4ea/0x5e0 [ 1661.879869][T27463] ? futex_private_hash_put.part.0+0xdc/0x180 [ 1661.879896][T27463] ? futex_private_hash_put+0x24/0x30 [ 1661.879920][T27463] ? futex_wake+0x220/0x5e0 [ 1661.879942][T27463] ? __lock_acquire+0x5c0/0x1f40 [ 1661.879970][T27463] ? ipv6_setsockopt+0xcb/0x170 [ 1661.879995][T27463] ipv6_setsockopt+0xcb/0x170 [ 1661.880026][T27463] rawv6_setsockopt+0xee/0x5a0 [ 1661.880050][T27463] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1661.880073][T27463] ? aa_sock_opt_perm+0x114/0x1e0 [ 1661.880096][T27463] ? sock_common_setsockopt+0x2e/0xf0 [ 1661.880119][T27463] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1661.880147][T27463] do_sock_setsockopt+0xf3/0x1d0 [ 1661.880174][T27463] __sys_setsockopt+0x119/0x190 [ 1661.880770][T27463] __ia32_sys_setsockopt+0xbc/0x160 [ 1661.880803][T27463] ? __might_fault+0x111/0x140 [ 1661.880834][T27463] __do_fast_syscall_32+0x14d/0x8e0 [ 1661.880870][T27463] do_fast_syscall_32+0x32/0x70 [ 1661.880928][T27463] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1661.880952][T27463] RIP: 0023:0xf7f95fbc [ 1661.880968][T27463] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1661.880987][T27463] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1661.881008][T27463] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1661.881021][T27463] RDX: 0000000000000020 RSI: 0000000080000240 RDI: 0000000000000020 [ 1661.881032][T27463] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1661.881042][T27463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1661.881053][T27463] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1661.881076][T27463] [ 1661.935769][T27466] vxcan107: entered promiscuous mode [ 1662.110380][T27463] netlink: 'syz.4.5427': attribute type 2 has an invalid length. [ 1662.110409][T27463] netlink: 723 bytes leftover after parsing attributes in process `syz.4.5427'. [ 1663.995912][T27483] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5432'. [ 1664.174750][T27476] FAULT_INJECTION: forcing a failure. [ 1664.174750][T27476] name failslab, interval 1, probability 0, space 0, times 0 [ 1664.174786][T27476] CPU: 3 UID: 0 PID: 27476 Comm: syz.8.5430 Tainted: G L syzkaller #0 PREEMPT(full) [ 1664.174815][T27476] Tainted: [L]=SOFTLOCKUP [ 1664.174823][T27476] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1664.174835][T27476] Call Trace: [ 1664.174843][T27476] [ 1664.174852][T27476] dump_stack_lvl+0x100/0x190 [ 1664.174890][T27476] should_fail_ex.cold+0x5/0xa [ 1664.174920][T27476] should_failslab+0xc2/0x120 [ 1664.174946][T27476] __kmalloc_cache_noprof+0x91/0x6d0 [ 1664.174983][T27476] ? ipv6_flowlabel_opt+0x593/0x3330 [ 1664.175010][T27476] ipv6_flowlabel_opt+0x593/0x3330 [ 1664.175032][T27476] ? __pfx___schedule+0x10/0x10 [ 1664.175061][T27476] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1664.175082][T27476] ? preempt_schedule_thunk+0x16/0x40 [ 1664.175114][T27476] ? preempt_schedule_thunk+0x16/0x40 [ 1664.175148][T27476] ? do_ipv6_setsockopt+0x2b80/0x3a00 [ 1664.175175][T27476] do_ipv6_setsockopt+0x2b80/0x3a00 [ 1664.175207][T27476] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1664.175235][T27476] ? aa_inet_opt_perm+0x307/0x8e0 [ 1664.175259][T27476] ? __pfx_futex_wake_mark+0x10/0x10 [ 1664.175281][T27476] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1664.175302][T27476] ? find_held_lock+0x2b/0x80 [ 1664.175328][T27476] ? futex_wake+0x4ea/0x5e0 [ 1664.175356][T27476] ? futex_wait+0x11e/0x370 [ 1664.175380][T27476] ? __lock_acquire+0x5c0/0x1f40 [ 1664.175409][T27476] ? ipv6_setsockopt+0xcb/0x170 [ 1664.175434][T27476] ipv6_setsockopt+0xcb/0x170 [ 1664.175464][T27476] rawv6_setsockopt+0xee/0x5a0 [ 1664.175489][T27476] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1664.175513][T27476] ? aa_sock_opt_perm+0x114/0x1e0 [ 1664.175537][T27476] ? sock_common_setsockopt+0x2e/0xf0 [ 1664.175560][T27476] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1664.175586][T27476] do_sock_setsockopt+0xf3/0x1d0 [ 1664.175612][T27476] __sys_setsockopt+0x119/0x190 [ 1664.175647][T27476] __ia32_sys_setsockopt+0xbc/0x160 [ 1664.175676][T27476] ? __might_fault+0x111/0x140 [ 1664.175702][T27476] __do_fast_syscall_32+0x14d/0x8e0 [ 1664.175735][T27476] do_fast_syscall_32+0x32/0x70 [ 1664.175765][T27476] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1664.175790][T27476] RIP: 0023:0xf7f88fbc [ 1664.175808][T27476] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1664.175829][T27476] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1664.175851][T27476] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1664.175865][T27476] RDX: 0000000000000020 RSI: 0000000080000240 RDI: 0000000000000020 [ 1664.175878][T27476] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1664.175889][T27476] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1664.175902][T27476] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1664.175928][T27476] [ 1664.534771][T27487] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5433'. [ 1664.591415][T27487] vxcan49: entered promiscuous mode [ 1664.760789][T27476] netlink: 'syz.8.5430': attribute type 2 has an invalid length. [ 1664.760814][T27476] netlink: 723 bytes leftover after parsing attributes in process `syz.8.5430'. [ 1666.586858][T27498] FAULT_INJECTION: forcing a failure. [ 1666.586858][T27498] name failslab, interval 1, probability 0, space 0, times 0 [ 1666.586896][T27498] CPU: 2 UID: 0 PID: 27498 Comm: syz.8.5436 Tainted: G L syzkaller #0 PREEMPT(full) [ 1666.586924][T27498] Tainted: [L]=SOFTLOCKUP [ 1666.586932][T27498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1666.586945][T27498] Call Trace: [ 1666.586953][T27498] [ 1666.586961][T27498] dump_stack_lvl+0x100/0x190 [ 1666.587000][T27498] should_fail_ex.cold+0x5/0xa [ 1666.587036][T27498] should_failslab+0xc2/0x120 [ 1666.587064][T27498] __kmalloc_cache_noprof+0x91/0x6d0 [ 1666.587098][T27498] ? ipv6_flowlabel_opt+0x593/0x3330 [ 1666.587126][T27498] ipv6_flowlabel_opt+0x593/0x3330 [ 1666.587156][T27498] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1666.587177][T27498] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1666.587213][T27498] ? __local_bh_enable_ip+0xa5/0x120 [ 1666.587241][T27498] ? do_ipv6_setsockopt+0x2b80/0x3a00 [ 1666.587272][T27498] do_ipv6_setsockopt+0x2b80/0x3a00 [ 1666.587309][T27498] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1666.587344][T27498] ? aa_inet_opt_perm+0x307/0x8e0 [ 1666.587373][T27498] ? __pfx_futex_wake_mark+0x10/0x10 [ 1666.587398][T27498] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1666.587425][T27498] ? __pfx_futex_hash+0x10/0x10 [ 1666.587453][T27498] ? __pfx_get_futex_key+0x10/0x10 [ 1666.587493][T27498] ? get_pid_task+0xfc/0x250 [ 1666.587540][T27498] ? get_pid_task+0xfc/0x250 [ 1666.587573][T27498] ? futex_wait+0x11e/0x370 [ 1666.587600][T27498] ? __lock_acquire+0x5c0/0x1f40 [ 1666.587633][T27498] ? ipv6_setsockopt+0xcb/0x170 [ 1666.587661][T27498] ipv6_setsockopt+0xcb/0x170 [ 1666.587695][T27498] rawv6_setsockopt+0xee/0x5a0 [ 1666.587724][T27498] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1666.587751][T27498] ? aa_sock_opt_perm+0x114/0x1e0 [ 1666.587779][T27498] ? sock_common_setsockopt+0x2e/0xf0 [ 1666.587803][T27498] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1666.587829][T27498] do_sock_setsockopt+0xf3/0x1d0 [ 1666.587856][T27498] __sys_setsockopt+0x119/0x190 [ 1666.587891][T27498] __ia32_sys_setsockopt+0xbc/0x160 [ 1666.587919][T27498] ? __might_fault+0x111/0x140 [ 1666.587942][T27498] __do_fast_syscall_32+0x14d/0x8e0 [ 1666.587974][T27498] do_fast_syscall_32+0x32/0x70 [ 1666.588006][T27498] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1666.588035][T27498] RIP: 0023:0xf7f88fbc [ 1666.588053][T27498] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1666.588075][T27498] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1666.588101][T27498] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1666.588118][T27498] RDX: 0000000000000020 RSI: 0000000080000240 RDI: 0000000000000020 [ 1666.588134][T27498] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1666.588149][T27498] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1666.588164][T27498] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1666.588196][T27498] [ 1666.644368][T27499] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1666.695394][T27496] nvmet: failed to open block device /dev/nul: (-2) [ 1666.897144][T27498] netlink: 'syz.8.5436': attribute type 2 has an invalid length. [ 1666.897170][T27498] netlink: 723 bytes leftover after parsing attributes in process `syz.8.5436'. [ 1668.190063][T27503] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5437'. [ 1668.209988][T27503] vxcan51: entered promiscuous mode [ 1668.465850][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.465904][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.586720][T27509] FAULT_INJECTION: forcing a failure. [ 1668.586720][T27509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1668.586750][T27509] CPU: 1 UID: 0 PID: 27509 Comm: syz.5.5439 Tainted: G L syzkaller #0 PREEMPT(full) [ 1668.586772][T27509] Tainted: [L]=SOFTLOCKUP [ 1668.586778][T27509] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1668.586787][T27509] Call Trace: [ 1668.586793][T27509] [ 1668.586800][T27509] dump_stack_lvl+0x100/0x190 [ 1668.586830][T27509] should_fail_ex.cold+0x5/0xa [ 1668.586856][T27509] _copy_to_user+0x32/0xd0 [ 1668.586887][T27509] ipv6_flowlabel_opt+0x2e82/0x3330 [ 1668.586910][T27509] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1668.586927][T27509] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1668.586955][T27509] ? __local_bh_enable_ip+0xa5/0x120 [ 1668.586986][T27509] ? do_ipv6_setsockopt+0x2b80/0x3a00 [ 1668.587011][T27509] do_ipv6_setsockopt+0x2b80/0x3a00 [ 1668.587040][T27509] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1668.587068][T27509] ? aa_inet_opt_perm+0x307/0x8e0 [ 1668.587093][T27509] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1668.587110][T27509] ? plist_check_list+0x1b8/0x280 [ 1668.587133][T27509] ? plist_del+0x308/0x510 [ 1668.587153][T27509] ? find_held_lock+0x2b/0x80 [ 1668.587176][T27509] ? futex_wake+0x4ea/0x5e0 [ 1668.587196][T27509] ? futex_private_hash_put.part.0+0xdc/0x180 [ 1668.587219][T27509] ? futex_private_hash_put+0x24/0x30 [ 1668.587240][T27509] ? futex_wake+0x220/0x5e0 [ 1668.587259][T27509] ? __lock_acquire+0x5c0/0x1f40 [ 1668.587283][T27509] ? ipv6_setsockopt+0xcb/0x170 [ 1668.587305][T27509] ipv6_setsockopt+0xcb/0x170 [ 1668.587329][T27509] rawv6_setsockopt+0xee/0x5a0 [ 1668.587350][T27509] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1668.587370][T27509] ? aa_sock_opt_perm+0x114/0x1e0 [ 1668.587390][T27509] ? sock_common_setsockopt+0x2e/0xf0 [ 1668.587411][T27509] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1668.587431][T27509] do_sock_setsockopt+0xf3/0x1d0 [ 1668.587452][T27509] __sys_setsockopt+0x119/0x190 [ 1668.587481][T27509] __ia32_sys_setsockopt+0xbc/0x160 [ 1668.587506][T27509] ? __might_fault+0x111/0x140 [ 1668.587554][T27509] __do_fast_syscall_32+0x14d/0x8e0 [ 1668.587586][T27509] do_fast_syscall_32+0x32/0x70 [ 1668.587613][T27509] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1668.587637][T27509] RIP: 0023:0xf7f87fbc [ 1668.587652][T27509] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1668.587669][T27509] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1668.587687][T27509] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1668.587697][T27509] RDX: 0000000000000020 RSI: 0000000080000240 RDI: 0000000000000020 [ 1668.587708][T27509] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1668.587717][T27509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1668.587727][T27509] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1668.587749][T27509] [ 1668.745133][T27509] netlink: 'syz.5.5439': attribute type 2 has an invalid length. [ 1668.745156][T27509] netlink: 723 bytes leftover after parsing attributes in process `syz.5.5439'. [ 1671.224107][T27523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5442'. [ 1671.246723][T27523] vxcan63: entered promiscuous mode [ 1671.313781][T27525] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5443'. [ 1671.443115][T27525] vxcan53: entered promiscuous mode [ 1674.196675][T27528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5444'. [ 1674.204368][T27528] vxcan23: entered promiscuous mode [ 1675.517382][T27531] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5446'. [ 1677.320695][T27546] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5448'. [ 1677.329603][T27539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5447'. [ 1677.381597][T27539] vxcan25: entered promiscuous mode [ 1678.539106][T27548] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5449'. [ 1680.119965][T27548] vxcan65: entered promiscuous mode [ 1680.693840][T27552] FAULT_INJECTION: forcing a failure. [ 1680.693840][T27552] name failslab, interval 1, probability 0, space 0, times 0 [ 1680.693878][T27552] CPU: 1 UID: 0 PID: 27552 Comm: syz.5.5451 Tainted: G L syzkaller #0 PREEMPT(full) [ 1680.693914][T27552] Tainted: [L]=SOFTLOCKUP [ 1680.693924][T27552] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1680.693935][T27552] Call Trace: [ 1680.693943][T27552] [ 1680.693952][T27552] dump_stack_lvl+0x100/0x190 [ 1680.693988][T27552] should_fail_ex.cold+0x5/0xa [ 1680.694018][T27552] should_failslab+0xc2/0x120 [ 1680.694042][T27552] __kmalloc_cache_noprof+0x91/0x6d0 [ 1680.694073][T27552] ? ipv6_flowlabel_opt+0x593/0x3330 [ 1680.694101][T27552] ipv6_flowlabel_opt+0x593/0x3330 [ 1680.694128][T27552] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1680.694149][T27552] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1680.694183][T27552] ? __local_bh_enable_ip+0xa5/0x120 [ 1680.694209][T27552] ? do_ipv6_setsockopt+0x2b80/0x3a00 [ 1680.694254][T27552] do_ipv6_setsockopt+0x2b80/0x3a00 [ 1680.694287][T27552] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1680.694318][T27552] ? aa_inet_opt_perm+0x307/0x8e0 [ 1680.694341][T27552] ? __pfx_futex_wake_mark+0x10/0x10 [ 1680.694365][T27552] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1680.694389][T27552] ? find_held_lock+0x2b/0x80 [ 1680.694418][T27552] ? futex_wake+0x4ea/0x5e0 [ 1680.694444][T27552] ? futex_wait+0x11e/0x370 [ 1680.694470][T27552] ? __lock_acquire+0x5c0/0x1f40 [ 1680.694502][T27552] ? ipv6_setsockopt+0xcb/0x170 [ 1680.694529][T27552] ipv6_setsockopt+0xcb/0x170 [ 1680.694560][T27552] rawv6_setsockopt+0xee/0x5a0 [ 1680.694587][T27552] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1680.694610][T27552] ? aa_sock_opt_perm+0x114/0x1e0 [ 1680.694636][T27552] ? sock_common_setsockopt+0x2e/0xf0 [ 1680.694661][T27552] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1680.694688][T27552] do_sock_setsockopt+0xf3/0x1d0 [ 1680.694715][T27552] __sys_setsockopt+0x119/0x190 [ 1680.694748][T27552] __ia32_sys_setsockopt+0xbc/0x160 [ 1680.694777][T27552] ? __might_fault+0x111/0x140 [ 1680.694805][T27552] __do_fast_syscall_32+0x14d/0x8e0 [ 1680.694841][T27552] do_fast_syscall_32+0x32/0x70 [ 1680.694872][T27552] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1680.694898][T27552] RIP: 0023:0xf7f87fbc [ 1680.694919][T27552] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1680.694936][T27552] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1680.694958][T27552] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1680.694970][T27552] RDX: 0000000000000020 RSI: 0000000080000240 RDI: 0000000000000020 [ 1680.694983][T27552] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1680.694996][T27552] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1680.695007][T27552] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1680.695031][T27552] [ 1681.082564][T27552] netlink: 'syz.5.5451': attribute type 2 has an invalid length. [ 1681.082589][T27552] netlink: 723 bytes leftover after parsing attributes in process `syz.5.5451'. [ 1681.134763][T27553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5450'. [ 1681.451877][T27553] vxcan27: entered promiscuous mode [ 1683.106074][T27559] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5452'. [ 1683.116590][T27559] vxcan55: entered promiscuous mode [ 1684.365585][T27561] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5453'. [ 1685.385385][T27574] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5455'. [ 1685.447325][T27574] vxcan57: entered promiscuous mode [ 1687.354332][T27583] netlink: 'syz.5.5457': attribute type 2 has an invalid length. [ 1687.354356][T27583] netlink: 723 bytes leftover after parsing attributes in process `syz.5.5457'. [ 1689.854232][T27596] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5458'. [ 1689.876989][T27596] vxcan59: entered promiscuous mode [ 1690.870101][T27603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5461'. [ 1691.041796][T27603] vxcan67: entered promiscuous mode [ 1692.032976][T27607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5463'. [ 1692.216298][T27607] vxcan69: entered promiscuous mode [ 1693.488123][T27612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5464'. [ 1693.619864][T27612] vxcan29: entered promiscuous mode [ 1694.857029][T27617] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5466'. [ 1695.399878][T27629] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5468'. [ 1695.601144][T27630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5469'. [ 1695.696623][T27629] vxcan61: entered promiscuous mode [ 1695.819969][T27630] vxcan71: entered promiscuous mode [ 1697.983642][T27640] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5472'. [ 1698.246810][T27643] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5471'. [ 1698.528513][T27645] nvmet: failed to open block device /dev/nul: (-2) [ 1700.921516][T27659] FAULT_INJECTION: forcing a failure. [ 1700.921516][T27659] name failslab, interval 1, probability 0, space 0, times 0 [ 1700.921561][T27659] CPU: 2 UID: 0 PID: 27659 Comm: syz.6.5477 Tainted: G L syzkaller #0 PREEMPT(full) [ 1700.921599][T27659] Tainted: [L]=SOFTLOCKUP [ 1700.921609][T27659] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1700.921625][T27659] Call Trace: [ 1700.921635][T27659] [ 1700.921647][T27659] dump_stack_lvl+0x100/0x190 [ 1700.921695][T27659] should_fail_ex.cold+0x5/0xa [ 1700.921734][T27659] should_failslab+0xc2/0x120 [ 1700.921768][T27659] __kmalloc_cache_noprof+0x91/0x6d0 [ 1700.921811][T27659] ? ipv6_flowlabel_opt+0x593/0x3330 [ 1700.921846][T27659] ipv6_flowlabel_opt+0x593/0x3330 [ 1700.921882][T27659] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1700.921917][T27659] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1700.921960][T27659] ? __local_bh_enable_ip+0xa5/0x120 [ 1700.921992][T27659] ? do_ipv6_setsockopt+0x2b80/0x3a00 [ 1700.922029][T27659] do_ipv6_setsockopt+0x2b80/0x3a00 [ 1700.922073][T27659] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1700.922114][T27659] ? aa_inet_opt_perm+0x307/0x8e0 [ 1700.922146][T27659] ? __pfx_futex_wake_mark+0x10/0x10 [ 1700.922173][T27659] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1700.922202][T27659] ? find_held_lock+0x2b/0x80 [ 1700.922235][T27659] ? futex_wake+0x4ea/0x5e0 [ 1700.922268][T27659] ? futex_wait+0x11e/0x370 [ 1700.922296][T27659] ? __lock_acquire+0x5c0/0x1f40 [ 1700.922331][T27659] ? ipv6_setsockopt+0xcb/0x170 [ 1700.922364][T27659] ipv6_setsockopt+0xcb/0x170 [ 1700.922400][T27659] rawv6_setsockopt+0xee/0x5a0 [ 1700.922432][T27659] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1700.922461][T27659] ? aa_sock_opt_perm+0x114/0x1e0 [ 1700.922492][T27659] ? sock_common_setsockopt+0x2e/0xf0 [ 1700.922520][T27659] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1700.922551][T27659] do_sock_setsockopt+0xf3/0x1d0 [ 1700.922582][T27659] __sys_setsockopt+0x119/0x190 [ 1700.922626][T27659] __ia32_sys_setsockopt+0xbc/0x160 [ 1700.922662][T27659] ? __might_fault+0x111/0x140 [ 1700.922695][T27659] __do_fast_syscall_32+0x14d/0x8e0 [ 1700.922737][T27659] do_fast_syscall_32+0x32/0x70 [ 1700.922774][T27659] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1700.922805][T27659] RIP: 0023:0xf73cefbc [ 1700.922827][T27659] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1700.922850][T27659] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1700.922873][T27659] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1700.922888][T27659] RDX: 0000000000000020 RSI: 0000000080000240 RDI: 0000000000000020 [ 1700.922909][T27659] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1700.922923][T27659] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1700.922937][T27659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1700.922968][T27659] [ 1701.699828][T27662] netlink: 'syz.6.5477': attribute type 2 has an invalid length. [ 1701.699854][T27662] netlink: 723 bytes leftover after parsing attributes in process `syz.6.5477'. [ 1701.971145][T27663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5478'. [ 1701.981550][T27663] vxcan31: entered promiscuous mode [ 1704.124929][T27679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5481'. [ 1704.137240][T27679] vxcan73: entered promiscuous mode [ 1706.278929][T27698] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5485'. [ 1706.794851][T27701] FAULT_INJECTION: forcing a failure. [ 1706.794851][T27701] name failslab, interval 1, probability 0, space 0, times 0 [ 1706.794888][T27701] CPU: 1 UID: 0 PID: 27701 Comm: syz.6.5486 Tainted: G L syzkaller #0 PREEMPT(full) [ 1706.794925][T27701] Tainted: [L]=SOFTLOCKUP [ 1706.794932][T27701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1706.794945][T27701] Call Trace: [ 1706.794953][T27701] [ 1706.794963][T27701] dump_stack_lvl+0x100/0x190 [ 1706.795003][T27701] should_fail_ex.cold+0x5/0xa [ 1706.795036][T27701] should_failslab+0xc2/0x120 [ 1706.795065][T27701] __kmalloc_cache_noprof+0x91/0x6d0 [ 1706.795100][T27701] ? ipv6_flowlabel_opt+0x593/0x3330 [ 1706.795130][T27701] ipv6_flowlabel_opt+0x593/0x3330 [ 1706.795159][T27701] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1706.795183][T27701] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1706.795219][T27701] ? __local_bh_enable_ip+0xa5/0x120 [ 1706.795247][T27701] ? do_ipv6_setsockopt+0x2b80/0x3a00 [ 1706.795278][T27701] do_ipv6_setsockopt+0x2b80/0x3a00 [ 1706.795315][T27701] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1706.795349][T27701] ? aa_inet_opt_perm+0x307/0x8e0 [ 1706.795377][T27701] ? __pfx_futex_wake_mark+0x10/0x10 [ 1706.795403][T27701] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 1706.795428][T27701] ? find_held_lock+0x2b/0x80 [ 1706.795459][T27701] ? futex_wake+0x4ea/0x5e0 [ 1706.795489][T27701] ? futex_wait+0x11e/0x370 [ 1706.795515][T27701] ? __lock_acquire+0x5c0/0x1f40 [ 1706.795548][T27701] ? ipv6_setsockopt+0xcb/0x170 [ 1706.795578][T27701] ipv6_setsockopt+0xcb/0x170 [ 1706.795612][T27701] rawv6_setsockopt+0xee/0x5a0 [ 1706.795641][T27701] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1706.795668][T27701] ? aa_sock_opt_perm+0x114/0x1e0 [ 1706.795694][T27701] ? sock_common_setsockopt+0x2e/0xf0 [ 1706.795720][T27701] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1706.795747][T27701] do_sock_setsockopt+0xf3/0x1d0 [ 1706.795775][T27701] __sys_setsockopt+0x119/0x190 [ 1706.795812][T27701] __ia32_sys_setsockopt+0xbc/0x160 [ 1706.795843][T27701] ? __might_fault+0x111/0x140 [ 1706.795872][T27701] __do_fast_syscall_32+0x14d/0x8e0 [ 1706.795909][T27701] do_fast_syscall_32+0x32/0x70 [ 1706.795982][T27701] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1706.796013][T27701] RIP: 0023:0xf73cefbc [ 1706.796031][T27701] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1706.796055][T27701] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 1706.796077][T27701] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1706.796092][T27701] RDX: 0000000000000020 RSI: 0000000080000240 RDI: 0000000000000020 [ 1706.796107][T27701] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1706.796122][T27701] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1706.796136][T27701] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1706.796165][T27701] [ 1707.197501][T27693] netlink: 'syz.5.5484': attribute type 2 has an invalid length. [ 1707.198057][T27693] netlink: 723 bytes leftover after parsing attributes in process `syz.5.5484'. [ 1707.367138][T27703] netlink: 'syz.6.5486': attribute type 2 has an invalid length. [ 1707.367162][T27703] netlink: 723 bytes leftover after parsing attributes in process `syz.6.5486'. [ 1708.523954][T27709] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5488'. [ 1709.533128][T27715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5489'. [ 1709.546500][T27715] vxcan75: entered promiscuous mode [ 1710.453439][T27718] rxe_eth0 speed is unknown, defaulting to 1000 [ 1715.153478][ T43] kauditd_printk_skb: 69 callbacks suppressed [ 1715.153497][ T43] audit: type=1326 audit(1715.011:6659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27747 comm="syz.5.5498" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fbc code=0x7ffc0000 [ 1715.153545][ T43] audit: type=1326 audit(1715.011:6660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27747 comm="syz.5.5498" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fbc code=0x7ffc0000 [ 1715.153584][ T43] audit: type=1326 audit(1715.011:6661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27747 comm="syz.5.5498" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fbc code=0x7ffc0000 [ 1715.153672][ T43] audit: type=1326 audit(1715.011:6662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27747 comm="syz.5.5498" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fbc code=0x7ffc0000 [ 1715.154427][ T43] audit: type=1326 audit(1715.011:6663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27747 comm="syz.5.5498" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f87fbc code=0x7ffc0000 [ 1715.154469][ T43] audit: type=1326 audit(1715.011:6664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27747 comm="syz.5.5498" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fbc code=0x7ffc0000 [ 1715.154506][ T43] audit: type=1326 audit(1715.011:6665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27747 comm="syz.5.5498" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fbc code=0x7ffc0000 [ 1715.154545][ T43] audit: type=1326 audit(1715.011:6666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27747 comm="syz.5.5498" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fbc code=0x7ffc0000 [ 1715.154581][ T43] audit: type=1326 audit(1715.011:6667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27747 comm="syz.5.5498" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fbc code=0x7ffc0000 [ 1715.155443][ T43] audit: type=1326 audit(1715.011:6668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27747 comm="syz.5.5498" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f87fbc code=0x7ffc0000 [ 1715.491996][T26060] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1715.515177][T27748] FAULT_INJECTION: forcing a failure. [ 1715.515177][T27748] name failslab, interval 1, probability 0, space 0, times 0 [ 1715.515209][T27748] CPU: 0 UID: 0 PID: 27748 Comm: syz.5.5498 Tainted: G L syzkaller #0 PREEMPT(full) [ 1715.515235][T27748] Tainted: [L]=SOFTLOCKUP [ 1715.515243][T27748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1715.515254][T27748] Call Trace: [ 1715.515262][T27748] [ 1715.515271][T27748] dump_stack_lvl+0x100/0x190 [ 1715.515305][T27748] should_fail_ex.cold+0x5/0xa [ 1715.515333][T27748] should_failslab+0xc2/0x120 [ 1715.515358][T27748] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1715.515379][T27748] ? audit_log_start+0x29d/0x930 [ 1715.515403][T27748] audit_log_start+0x29d/0x930 [ 1715.515425][T27748] ? __pfx_audit_log_start+0x10/0x10 [ 1715.515449][T27748] ? rcu_read_lock_any_held+0x6a/0x90 [ 1715.515480][T27748] ? vfs_write+0x15d/0x1040 [ 1715.515503][T27748] audit_seccomp+0x60/0x190 [ 1715.515558][T27748] __seccomp_filter+0x88c/0x1130 [ 1715.515593][T27748] ? __pfx___seccomp_filter+0x10/0x10 [ 1715.515626][T27748] ? find_held_lock+0x2b/0x80 [ 1715.515654][T27748] ? __might_fault+0xc5/0x140 [ 1715.515683][T27748] ? __might_fault+0xc5/0x140 [ 1715.515709][T27748] __seccomp_permit_syscall+0x207/0x2d0 [ 1715.515742][T27748] __do_fast_syscall_32+0x433/0x8e0 [ 1715.515770][T27748] ? lockdep_hardirqs_on+0x7d/0x110 [ 1715.515799][T27748] do_fast_syscall_32+0x32/0x70 [ 1715.515828][T27748] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1715.515852][T27748] RIP: 0023:0xf7f87fbc [ 1715.515870][T27748] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1715.515888][T27748] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000061 [ 1715.515908][T27748] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000000000 [ 1715.515920][T27748] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1715.515930][T27748] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1715.515941][T27748] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1715.515952][T27748] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1715.515975][T27748] [ 1715.717212][T26060] usb 9-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1715.717259][T26060] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 1715.719385][T26060] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1715.719412][T26060] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 1715.720778][T26060] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1715.720805][T26060] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 1715.722712][T26060] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1715.722736][T26060] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 1715.723668][T26060] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1715.723691][T26060] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 1715.724619][T26060] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1715.724668][T26060] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 1715.804052][T26060] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1715.804079][T26060] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 1715.822998][T26060] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1715.823026][T26060] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 1715.845502][T26060] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1715.845532][T26060] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 1715.878884][T26060] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1715.878912][T26060] usb 9-1: Product: syz [ 1715.878925][T26060] usb 9-1: Manufacturer: syz [ 1715.878938][T26060] usb 9-1: SerialNumber: syz [ 1715.885038][T26060] usb 9-1: config 0 descriptor?? [ 1716.604416][T27745] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5497'. [ 1716.628415][T27755] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5499'. [ 1716.804971][T27012] usb 9-1: USB disconnect, device number 20 [ 1716.879087][T27762] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1719.983383][T27773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5503'. [ 1720.101268][T27773] vxcan33: entered promiscuous mode [ 1726.182912][T27796] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5510'. [ 1729.851274][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.851328][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.101141][T27812] ------------[ cut here ]------------ [ 1731.101157][T27812] current->flags & PF_MEMALLOC [ 1731.101163][T27812] WARNING: mm/page_alloc.c:4817 at __alloc_frozen_pages_noprof+0x1d7e/0x31e0, CPU#1: syz.5.5515/27812 [ 1731.148119][T27812] Modules linked in: [ 1731.149669][T27812] CPU: 1 UID: 0 PID: 27812 Comm: syz.5.5515 Tainted: G L syzkaller #0 PREEMPT(full) [ 1731.154930][T27812] Tainted: [L]=SOFTLOCKUP [ 1731.157139][T27812] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1731.184894][T27812] RIP: 0010:__alloc_frozen_pages_noprof+0x1d7e/0x31e0 [ 1731.218497][T27812] Code: 38 d0 7c 08 84 d2 0f 85 02 14 00 00 65 48 8b 05 70 7a 41 13 c7 84 24 90 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 6a e7 ff ff 90 <0f> 0b 90 e9 61 e7 ff ff 8b bc 24 90 00 00 00 85 ff 0f 85 90 07 00 [ 1731.235617][T27812] RSP: 0000:ffffc9000707e878 EFLAGS: 00010202 [ 1731.243395][T27812] RAX: ffff88804ebf2580 RBX: 0000000000000000 RCX: 1ffff1100fffad69 [ 1731.258356][T27812] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 1731.266609][T27812] RBP: 0000000000000000 R08: 0000000000008000 R09: 0000000000002f33 [ 1731.270045][T27812] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88804ebf25ac [ 1731.287703][T27812] R13: 1ffff92000e0fd29 R14: 0000000000048c40 R15: 0000000000000000 [ 1731.299473][T27812] FS: 0000000000000000(0000) GS:ffff888095379000(0063) knlGS:0000000056649480 [ 1731.324146][T27812] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1731.327004][T27812] CR2: 00000000f4fd1da4 CR3: 00000000522d5000 CR4: 0000000000352ef0 [ 1731.358320][T27812] Call Trace: [ 1731.360582][T27812] [ 1731.361964][T27812] ? lock_acquire+0x1d1/0x380 [ 1731.364967][T27812] ? unwind_next_frame+0xbd/0x2090 [ 1731.367467][T27812] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1731.371522][T27812] ? __lock_acquire+0x5c0/0x1f40 [ 1731.391714][T27812] ? lock_acquire+0x1d1/0x380 [ 1731.395205][T27812] ? unwind_next_frame+0xbd/0x2090 [ 1731.397967][T27812] ? __lock_acquire+0x5c0/0x1f40 [ 1731.400293][T27812] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1731.413913][T27812] ? policy_nodemask+0xed/0x5e0 [ 1731.416720][T27812] alloc_pages_mpol+0x201/0x560 [ 1731.419437][T27812] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1731.442253][T27812] ? filemap_get_entry+0x22d/0x450 [ 1731.444264][T27812] ? filemap_get_entry+0x22d/0x450 [ 1731.446178][T27812] folio_alloc_noprof+0x22/0x250 [ 1731.448142][T27812] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 1731.452110][T27812] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1731.462061][T27812] ? lock_acquire+0x1d1/0x380 [ 1731.465518][T27812] ? ext4_get_group_info+0x177/0x4b0 [ 1731.472447][T27812] ? find_held_lock+0x2b/0x80 [ 1731.481967][T27812] __filemap_get_folio_mpol+0x64e/0x11d0 [ 1731.485155][T27812] ext4_mb_load_buddy_gfp+0x708/0x1b20 [ 1731.488234][T27812] ext4_discard_preallocations+0x584/0x10c0 [ 1731.498816][T27812] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 1731.504377][T27812] ? __pfx_xa_destroy+0x10/0x10 [ 1731.512554][T27812] ? inode_wait_for_writeback+0x171/0x390 [ 1731.519720][T27812] ? inode_lru_isolate+0x30/0x11d0 [ 1731.534583][T27812] ext4_clear_inode+0x6e/0x280 [ 1731.537162][T27812] ext4_evict_inode+0x1de/0x1890 [ 1731.539834][T27812] ? evict+0x37e/0xad0 [ 1731.542126][T27812] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1731.544443][T27812] evict+0x3c2/0xad0 [ 1731.546201][T27812] ? _raw_spin_unlock+0x28/0x50 [ 1731.548403][T27812] ? __list_lru_walk_one+0x26d/0x550 [ 1731.552345][T27812] ? __pfx_evict+0x10/0x10 [ 1731.554307][T27812] ? xa_load+0x149/0x2c0 [ 1731.556226][T27812] ? xa_load+0x149/0x2c0 [ 1731.559180][T27812] dispose_list+0x117/0x1e0 [ 1731.562034][T27812] prune_icache_sb+0xea/0x150 [ 1731.565095][T27812] ? list_lru_count_one+0x147/0x320 [ 1731.568323][T27812] ? __pfx_prune_icache_sb+0x10/0x10 [ 1731.571582][T27812] super_cache_scan+0x37c/0x560 [ 1731.574632][T27812] do_shrink_slab+0x411/0x1200 [ 1731.578016][T27812] shrink_slab+0xa78/0x12d0 [ 1731.581145][T27812] ? shrink_slab+0x68b/0x12d0 [ 1731.584175][T27812] ? __pfx_shrink_slab+0x10/0x10 [ 1731.586891][T27812] ? page_counter_calculate_protection+0x348/0x730 [ 1731.590510][T27812] shrink_node+0x7c1/0x4410 [ 1731.593032][T27812] ? __pfx_shrink_node+0x10/0x10 [ 1731.595711][T27812] ? queue_work_on+0x11b/0x1e0 [ 1731.598997][T27812] ? lockdep_hardirqs_on+0x7d/0x110 [ 1731.602033][T27812] ? queue_work_on+0x141/0x1e0 [ 1731.604319][T27812] ? do_try_to_free_pages+0x2da/0x1500 [ 1731.607710][T27812] do_try_to_free_pages+0x2da/0x1500 [ 1731.611219][T27812] try_to_free_pages+0x2a0/0x740 [ 1731.613744][T27812] ? __pfx_try_to_free_pages+0x10/0x10 [ 1731.616586][T27812] ? find_held_lock+0x2b/0x80 [ 1731.620467][T27812] ? fs_reclaim_acquire+0x70/0x100 [ 1731.623704][T27812] ? fs_reclaim_acquire+0x70/0x100 [ 1731.627643][T27812] __alloc_frozen_pages_noprof+0x11b6/0x31e0 [ 1731.631682][T27812] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1731.636169][T27812] ? __lock_acquire+0x5c0/0x1f40 [ 1731.639562][T27812] ? __lock_acquire+0x5c0/0x1f40 [ 1731.653965][T27812] ? find_held_lock+0x2b/0x80 [ 1731.656093][T27812] ? rcu_read_unlock+0x17/0x60 [ 1731.658227][T27812] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1731.660474][T27812] ? policy_nodemask+0xed/0x5e0 [ 1731.662371][T27812] alloc_pages_mpol+0x201/0x560 [ 1731.664205][T27812] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1731.666232][T27812] ? find_held_lock+0x2b/0x80 [ 1731.668153][T27812] ? __anon_vma_prepare+0x35a/0x870 [ 1731.670102][T27812] ? __anon_vma_prepare+0x35a/0x870 [ 1731.672111][T27812] folio_alloc_mpol_noprof+0x36/0x260 [ 1731.674107][T27812] vma_alloc_folio_noprof+0xed/0x1d0 [ 1731.675762][T27812] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1731.678156][T27812] do_anonymous_page+0xac9/0x2050 [ 1731.680248][T27812] ? __pfx_do_anonymous_page+0x10/0x10 [ 1731.683005][T27812] ? rcu_read_unlock+0x2d/0xb0 [ 1731.684759][T27812] ? rcu_read_unlock+0x2d/0xb0 [ 1731.686481][T27812] __handle_mm_fault+0x1eeb/0x2f40 [ 1731.688624][T27812] ? lock_vma_under_rcu+0x11d/0x590 [ 1731.690988][T27812] ? __pfx___handle_mm_fault+0x10/0x10 [ 1731.693537][T27812] ? lock_vma_under_rcu+0x17c/0x590 [ 1731.696356][T27812] handle_mm_fault+0x363/0xa30 [ 1731.698667][T27812] do_user_addr_fault+0x59c/0x12f0 [ 1731.700886][T27812] exc_page_fault+0x6f/0xd0 [ 1731.702948][T27812] asm_exc_page_fault+0x26/0x30 [ 1731.705682][T27812] RIP: 0023:0xf7174791 [ 1731.708157][T27812] Code: 85 f6 74 22 83 ec 04 01 f0 ff 74 24 3c ff 74 24 30 50 8b 5c 24 10 e8 6e 5a 03 00 83 c4 10 85 c0 0f 85 fc 00 00 00 8b 44 24 30 <89> bd 64 02 00 00 c7 45 0c 01 00 00 00 89 85 60 02 00 00 8b 44 24 [ 1731.719676][T27812] RSP: 002b:00000000ffb43a80 EFLAGS: 00010246 [ 1731.724679][T27812] RAX: 00000000f4fb1000 RBX: 00000000f740eff4 RCX: 0000000000020000 [ 1731.729092][T27812] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000000000021000 [ 1731.733229][T27812] RBP: 00000000f4fd1b40 R08: 0000000000000000 R09: 0000000000000000 [ 1731.739272][T27812] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 1731.743326][T27812] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1731.748628][T27812] [ 1731.751358][T27812] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1731.755812][T27812] CPU: 1 UID: 0 PID: 27812 Comm: syz.5.5515 Tainted: G L syzkaller #0 PREEMPT(full) [ 1731.761923][T27812] Tainted: [L]=SOFTLOCKUP [ 1731.763587][T27812] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1731.768110][T27812] Call Trace: [ 1731.769522][T27812] [ 1731.770683][T27812] dump_stack_lvl+0x100/0x190 [ 1731.775009][T27812] vpanic+0x2dc/0x6f8 [ 1731.783376][T27812] panic+0xd1/0xe0 [ 1731.793782][T27812] ? __pfx_panic+0x10/0x10 [ 1731.799466][T27812] check_panic_on_warn.cold+0x19/0x34 [ 1731.805152][T27812] ? __alloc_frozen_pages_noprof+0x1d7e/0x31e0 [ 1731.807684][T27812] __warn.cold+0x191/0x321 [ 1731.809510][T27812] __report_bug+0x30f/0x440 [ 1731.814600][T27812] ? __alloc_frozen_pages_noprof+0x1d7e/0x31e0 [ 1731.816610][T27812] ? __pfx___report_bug+0x10/0x10 [ 1731.831735][T27812] ? __zone_watermark_ok+0x281/0x500 [ 1731.835569][T27812] ? __next_zones_zonelist+0x63/0x160 [ 1731.843883][T27812] ? get_page_from_freelist+0x1d83/0x3640 [ 1731.847483][T27812] ? zswap_store+0x103c/0x2f90 [ 1731.852022][T27812] ? swap_writeout+0xdcf/0x1b30 [ 1731.855399][T27812] ? __alloc_frozen_pages_noprof+0x1d7e/0x31e0 [ 1731.859279][T27812] report_bug+0xb3/0x220 [ 1731.870803][T27812] ? __alloc_frozen_pages_noprof+0x1d7e/0x31e0 [ 1731.877494][T27812] handle_bug+0x16a/0x2a0 [ 1731.883069][T27812] exc_invalid_op+0x17/0x50 [ 1731.895410][T27812] asm_exc_invalid_op+0x1a/0x20 [ 1731.897610][T27812] RIP: 0010:__alloc_frozen_pages_noprof+0x1d7e/0x31e0 [ 1731.900455][T27812] Code: 38 d0 7c 08 84 d2 0f 85 02 14 00 00 65 48 8b 05 70 7a 41 13 c7 84 24 90 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 6a e7 ff ff 90 <0f> 0b 90 e9 61 e7 ff ff 8b bc 24 90 00 00 00 85 ff 0f 85 90 07 00 [ 1731.910763][T27812] RSP: 0000:ffffc9000707e878 EFLAGS: 00010202 [ 1731.913410][T27812] RAX: ffff88804ebf2580 RBX: 0000000000000000 RCX: 1ffff1100fffad69 [ 1731.916891][T27812] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938 [ 1731.920980][T27812] RBP: 0000000000000000 R08: 0000000000008000 R09: 0000000000002f33 [ 1731.925333][T27812] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88804ebf25ac [ 1731.930529][T27812] R13: 1ffff92000e0fd29 R14: 0000000000048c40 R15: 0000000000000000 [ 1731.944466][T27812] ? __alloc_frozen_pages_noprof+0x2ad/0x31e0 [ 1731.958078][T27812] ? lock_acquire+0x1d1/0x380 [ 1731.960197][T27812] ? unwind_next_frame+0xbd/0x2090 [ 1731.962655][T27812] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1731.966061][T27812] ? __lock_acquire+0x5c0/0x1f40 [ 1731.971799][T27812] ? lock_acquire+0x1d1/0x380 [ 1731.980064][T27812] ? unwind_next_frame+0xbd/0x2090 [ 1731.985591][T27812] ? __lock_acquire+0x5c0/0x1f40 [ 1731.987757][T27812] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1731.996244][T27812] ? policy_nodemask+0xed/0x5e0 [ 1731.999534][T27812] alloc_pages_mpol+0x201/0x560 [ 1732.008269][T27812] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1732.011711][T27812] ? filemap_get_entry+0x22d/0x450 [ 1732.022942][T27812] ? filemap_get_entry+0x22d/0x450 [ 1732.025434][T27812] folio_alloc_noprof+0x22/0x250 [ 1732.028328][T27812] filemap_alloc_folio_noprof.part.0+0x3db/0x440 [ 1732.042073][T27812] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 1732.045632][T27812] ? lock_acquire+0x1d1/0x380 [ 1732.048649][T27812] ? ext4_get_group_info+0x177/0x4b0 [ 1732.051866][T27812] ? find_held_lock+0x2b/0x80 [ 1732.054711][T27812] __filemap_get_folio_mpol+0x64e/0x11d0 [ 1732.058753][T27812] ext4_mb_load_buddy_gfp+0x708/0x1b20 [ 1732.062158][T27812] ext4_discard_preallocations+0x584/0x10c0 [ 1732.065144][T27812] ? __pfx_ext4_discard_preallocations+0x10/0x10 [ 1732.067947][T27812] ? __pfx_xa_destroy+0x10/0x10 [ 1732.070516][T27812] ? inode_wait_for_writeback+0x171/0x390 [ 1732.074159][T27812] ? inode_lru_isolate+0x30/0x11d0 [ 1732.077193][T27812] ext4_clear_inode+0x6e/0x280 [ 1732.079823][T27812] ext4_evict_inode+0x1de/0x1890 [ 1732.082847][T27812] ? evict+0x37e/0xad0 [ 1732.085478][T27812] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1732.088171][T27812] evict+0x3c2/0xad0 [ 1732.089665][T27812] ? _raw_spin_unlock+0x28/0x50 [ 1732.091729][T27812] ? __list_lru_walk_one+0x26d/0x550 [ 1732.094110][T27812] ? __pfx_evict+0x10/0x10 [ 1732.095924][T27812] ? xa_load+0x149/0x2c0 [ 1732.097781][T27812] ? xa_load+0x149/0x2c0 [ 1732.100744][T27812] dispose_list+0x117/0x1e0 [ 1732.102615][T27812] prune_icache_sb+0xea/0x150 [ 1732.104676][T27812] ? list_lru_count_one+0x147/0x320 [ 1732.106781][T27812] ? __pfx_prune_icache_sb+0x10/0x10 [ 1732.108827][T27812] super_cache_scan+0x37c/0x560 [ 1732.111004][T27812] do_shrink_slab+0x411/0x1200 [ 1732.113138][T27812] shrink_slab+0xa78/0x12d0 [ 1732.115079][T27812] ? shrink_slab+0x68b/0x12d0 [ 1732.117477][T27812] ? __pfx_shrink_slab+0x10/0x10 [ 1732.119829][T27812] ? page_counter_calculate_protection+0x348/0x730 [ 1732.122544][T27812] shrink_node+0x7c1/0x4410 [ 1732.124595][T27812] ? __pfx_shrink_node+0x10/0x10 [ 1732.126983][T27812] ? queue_work_on+0x11b/0x1e0 [ 1732.129398][T27812] ? lockdep_hardirqs_on+0x7d/0x110 [ 1732.131612][T27812] ? queue_work_on+0x141/0x1e0 [ 1732.133882][T27812] ? do_try_to_free_pages+0x2da/0x1500 [ 1732.136162][T27812] do_try_to_free_pages+0x2da/0x1500 [ 1732.138964][T27812] try_to_free_pages+0x2a0/0x740 [ 1732.141140][T27812] ? __pfx_try_to_free_pages+0x10/0x10 [ 1732.143318][T27812] ? find_held_lock+0x2b/0x80 [ 1732.146083][T27812] ? fs_reclaim_acquire+0x70/0x100 [ 1732.148820][T27812] ? fs_reclaim_acquire+0x70/0x100 [ 1732.151674][T27812] __alloc_frozen_pages_noprof+0x11b6/0x31e0 [ 1732.156947][T27812] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1732.163172][T27812] ? __lock_acquire+0x5c0/0x1f40 [ 1732.169016][T27812] ? __lock_acquire+0x5c0/0x1f40 [ 1732.171359][T27812] ? find_held_lock+0x2b/0x80 [ 1732.173395][T27812] ? rcu_read_unlock+0x17/0x60 [ 1732.175659][T27812] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1732.179362][T27812] ? policy_nodemask+0xed/0x5e0 [ 1732.181962][T27812] alloc_pages_mpol+0x201/0x560 [ 1732.185451][T27812] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1732.189024][T27812] ? find_held_lock+0x2b/0x80 [ 1732.192485][T27812] ? __anon_vma_prepare+0x35a/0x870 [ 1732.195637][T27812] ? __anon_vma_prepare+0x35a/0x870 [ 1732.198061][T27812] folio_alloc_mpol_noprof+0x36/0x260 [ 1732.200839][T27812] vma_alloc_folio_noprof+0xed/0x1d0 [ 1732.203867][T27812] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1732.207575][T27812] do_anonymous_page+0xac9/0x2050 [ 1732.211204][T27812] ? __pfx_do_anonymous_page+0x10/0x10 [ 1732.213889][T27812] ? rcu_read_unlock+0x2d/0xb0 [ 1732.216066][T27812] ? rcu_read_unlock+0x2d/0xb0 [ 1732.219016][T27812] __handle_mm_fault+0x1eeb/0x2f40 [ 1732.222301][T27812] ? lock_vma_under_rcu+0x11d/0x590 [ 1732.225021][T27812] ? __pfx___handle_mm_fault+0x10/0x10 [ 1732.227728][T27812] ? lock_vma_under_rcu+0x17c/0x590 [ 1732.232620][T27812] handle_mm_fault+0x363/0xa30 [ 1732.236396][T27812] do_user_addr_fault+0x59c/0x12f0 [ 1732.240097][T27812] exc_page_fault+0x6f/0xd0 [ 1732.243211][T27812] asm_exc_page_fault+0x26/0x30 [ 1732.246725][T27812] RIP: 0023:0xf7174791 [ 1732.249636][T27812] Code: 85 f6 74 22 83 ec 04 01 f0 ff 74 24 3c ff 74 24 30 50 8b 5c 24 10 e8 6e 5a 03 00 83 c4 10 85 c0 0f 85 fc 00 00 00 8b 44 24 30 <89> bd 64 02 00 00 c7 45 0c 01 00 00 00 89 85 60 02 00 00 8b 44 24 [ 1732.260997][T27812] RSP: 002b:00000000ffb43a80 EFLAGS: 00010246 [ 1732.264593][T27812] RAX: 00000000f4fb1000 RBX: 00000000f740eff4 RCX: 0000000000020000 [ 1732.269373][T27812] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000000000021000 [ 1732.274651][T27812] RBP: 00000000f4fd1b40 R08: 0000000000000000 R09: 0000000000000000 [ 1732.279488][T27812] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 1732.283839][T27812] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1732.287421][T27812] [ 1732.297578][T27812] Kernel Offset: disabled [ 1732.300367][T27812] Rebooting in 86400 seconds..