last executing test programs: 7m18.103757889s ago: executing program 1 (id=531): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f045}) ppoll(&(0x7f00000005c0)=[{r0, 0x9444}], 0x1, 0x0, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) (async) fchdir(0xffffffffffffffff) creat(&(0x7f0000000240)='./bus\x00', 0xc2) (async) r2 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r3, 0x2, &(0x7f0000000200)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x1ca, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r2}]) r4 = io_uring_setup(0x14fa, &(0x7f0000000240)={0x0, 0x772d, 0x2600, 0x2, 0x29}) r5 = syz_io_uring_setup(0x107, &(0x7f0000000140)={0x0, 0xf47f, 0x0, 0x4, 0x1d5, 0x0, r4}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10400}) openat$rdma_cm(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) openat$rdma_cm(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) io_uring_enter(r5, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 7m17.884193612s ago: executing program 1 (id=532): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", "545324f1"}, 0x28) sendto$inet6(r0, &(0x7f0000000700)="bb", 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "0daf7461cfccf6ce"}, 0x28) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), 0x13, 0x0, 0x0, 0x1e}, 0x0) 7m17.88403397s ago: executing program 1 (id=533): socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) 7m17.812737725s ago: executing program 1 (id=534): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x3, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1c, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18200000", @ANYRES32=r2, @ANYBLOB="0003000000000020070000a400000000"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x17}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="cca0cc7ed32eaba8d35b67a6d7fb7dfe6adde6a93fc6f51dc8d5a4f42552e9d853ddc05b4933d03b394881fe4ad1349d94b1f593d66261f8ff452d706d102c220b1e92762c7d558e5140504b11e4f5317d53619edcf6bef1fa6426a633687290000000c7eae9c4090b907f9043f28490831e268c96d6ba7aeefc5c542bc5dbbdf55b92fb99dfc89c71e06a727716dc1392a638bf5b3b834fcf3c5056bb7bfea3fb9ef0a27547fbc86bf1b7ad6b3580c5e0784e4679fc47ab0e41", @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r3, @ANYBLOB="0a00060008021100000000000500190002000000"], 0x30}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0a000000070000000200000004"], 0x50) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x1) ioctl$LOOP_SET_FD(r9, 0x4c00, r8) ioctl$LOOP_SET_FD(r9, 0x4c03, r9) dup2(r8, r6) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r11 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000040), 0x2103, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r11, 0xc008640a, &(0x7f0000000140)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r13 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r13, r12, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 7m17.583909559s ago: executing program 1 (id=535): syz_clone(0x8000, 0x0, 0x4c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg$unix(r1, &(0x7f0000000800)=[{{&(0x7f0000000340), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/220, 0xdc}, {&(0x7f0000000680)=""/238, 0xee}, {&(0x7f0000000100)=""/24, 0x18}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/184, 0xb8}, {&(0x7f0000000040)=""/49, 0x31}, {&(0x7f00000019c0)=""/234, 0xea}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x8, &(0x7f0000002ac0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0xa4}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000002b80)=""/175, 0xaf}, {&(0x7f0000002c40)=""/163, 0xa3}], 0x2, &(0x7f00000007c0)=[@cred={{0x18}}, @rights={{0xc}}], 0x24}}], 0x2, 0x2, &(0x7f0000002d00)) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x5}, 0x18) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000940)=ANY=[@ANYBLOB="1b0000000000000000000000002000000000", @ANYRES32, @ANYBLOB="b231000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$tty20(0xc, 0x4, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket(0x1000000000000010, 0x80802, 0x0) bind$netlink(r5, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x0, &(0x7f0000001100)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3}, 0x8}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) 7m16.733660389s ago: executing program 1 (id=539): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000080)) socket$packet(0x11, 0xa, 0x300) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x9f49) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_emit_ethernet(0x47, &(0x7f0000000d40)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x11, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @gue={{0x2}, 'J'}}}}}}}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) 7m16.602821698s ago: executing program 32 (id=539): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000080)) socket$packet(0x11, 0xa, 0x300) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x9f49) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_emit_ethernet(0x47, &(0x7f0000000d40)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x11, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @gue={{0x2}, 'J'}}}}}}}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) 6m40.583464058s ago: executing program 4 (id=713): ioctl$KVM_SET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000340)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x421}}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r1, 0x2, {0x1, 0xf0, 0x3}, 0xff}, 0x18) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0x1, {0x2, 0xf0}, 0x3}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x1, 0x1}}, 0x18) sendmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010004000000fedbdf252100000008000300", @ANYRES32, @ANYBLOB="3ac9b6412ad43011f94b43c4a062b3649ba98464d3012ad4929819c4d967068c0aee7a6b6c6955298b3f0a202f2a78e36da8f33730f67771d85dc7d720c498de5e0fec4cb40d3972b6bd0e5b9c5576ff993b81169513a3d39163674d9271c54774"], 0x24}, 0x1, 0x0, 0x0, 0x4004010}, 0x4004000) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) r5 = gettid() r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r6, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000180)={0x335, @tick=0xe, 0x42, {}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r6, 0xc0bc5310, &(0x7f00000003c0)) tkill(r5, 0x7) r7 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) lseek(0xffffffffffffffff, 0x3, 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000280), 0x0, 0xc0240) 6m39.42307378s ago: executing program 4 (id=718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0xffffffff, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x74}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 6m39.421773693s ago: executing program 4 (id=719): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x3}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000400)={{0x3}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r2, 0x8800000) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r4, &(0x7f0000000300)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) getrlimit(0xf, &(0x7f0000000100)) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ptrace(0x10, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0x0, r2}, 0x94) r6 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f00000001c0)={0x79c, r5, 0x32, {0xb, 0x100000000}, 0x2}, 0x1) sendfile(r3, r2, 0x0, 0x578410ed) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x0, 0x0) 6m38.913465502s ago: executing program 4 (id=722): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {}, {}, {0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) close_range(r1, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/icmp6\x00') pread64(r6, &(0x7f0000000000)=""/81, 0x51, 0xfff) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c) 6m38.71304322s ago: executing program 4 (id=724): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000180)=0x5, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000000906010200000000000000000200ffff180007800c00018002000140e000000208000a40000000020900020073797a31000000000500010007"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 6m38.303515014s ago: executing program 4 (id=726): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x5, 0x84) readv(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x3f00) 6m38.006438322s ago: executing program 33 (id=726): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x5, 0x84) readv(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x3f00) 2m42.36747305s ago: executing program 3 (id=1948): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x6) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x3000000}, 0x0) 2m42.318258839s ago: executing program 3 (id=1949): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="060000000400"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000600)={'broute\x00', 0x0, 0x4, 0x44, [0x49, 0x80000000, 0x9, 0x716, 0x1, 0x2], 0x9, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400)=""/68}, &(0x7f0000000280)=0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x8c, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d", 0x5}], 0x2, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 2m40.657042437s ago: executing program 3 (id=1953): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000000)=""/253, 0xfd}, {&(0x7f0000000100)=""/73, 0x49}, {&(0x7f0000000180)=""/130, 0x82}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/220, 0xdc}, {&(0x7f0000001340)=""/48, 0x30}], 0x6, 0x10, 0x14) 2m39.650054559s ago: executing program 3 (id=1954): r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x1a, 0x0, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x115440) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000240)=0xc) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000280)=r4) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x9, 0x3, 0x2bc, 0x130, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f4, 0xffffffff, 0xffffffff, 0x1f4, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x7, 0x1, 0x3, 'snmp_trap\x00', 'syz0\x00', {0x1000}}}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x318) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000140)=0x2000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="7c490210dc3f261e8e96a45b49e625bd5dfe0596358513ce1936a42bbaed4ba552b4b3e6ec3f997b6b85140c0b9af70b04489d31d57297ce94fda3ae0a873b71e199c02a595fb67ca7331a95dfe6ef1c75ab41ae3b7b1f2766c365fa7385c2c4824456a229541294dc1f0fb1fd1f2ef448b8817c565f74f5664aaf38c04781c76fd089cae549ae36bc038b5235ea5448714f2ddae3b2fd6630f936a2778156a83376c482b009dcf5690d", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fedbdf2511000000700006805b000300fa8607c7d20a4076c27b6c5bb9923aaf54cd4ea8b67eff168857ae1669bc1c8a2c8616da9eaa08f4bc744f893aef5fe17935075fb31822cbfe57e59513d61a159054db10a018a7662a4765b3599cbfb59535317d467f330008000100060000000800010000000000"], 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x8060884) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x80800) r8 = syz_io_uring_setup(0x40000031, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x3, 0x73}, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x40}) io_uring_enter(r8, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) memfd_create(0x0, 0x0) 2m38.463265107s ago: executing program 3 (id=1958): r0 = socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x10) fcntl$setstatus(r1, 0x4, 0x0) r2 = dup(r1) copy_file_range(r1, 0x0, r2, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000340)=""/254, 0xfe) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vcsu(0xffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000a40)={0x8}) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c82028002400010007d3040007c4faff020c04000300"], 0x2d) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a0000000500000003000000"], 0x48) write(r0, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000003000000000005200", 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000005c0)={0x0, 0x6}, &(0x7f0000000600)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000640)=@assoc_value={r4, 0xa}, &(0x7f0000000680)=0x8) r5 = socket(0xa, 0x3, 0x3a) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8, 0x90000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc2c45512, &(0x7f00000002c0)={{0x3, 0x0, 0xa, 0x7, 'syz1\x00', 0x7}, 0x0, [0x0, 0x5, 0x8, 0x4, 0x0, 0xe4, 0x7, 0xcce, 0xffffc0eb, 0x5, 0x0, 0xae, 0xb65f, 0x966, 0x7, 0xc68fb1a, 0x7, 0xfffffffe, 0x3, 0x400, 0x7, 0x7, 0x8cd4, 0x400, 0x2, 0x2, 0x9, 0x9, 0x7, 0x6c, 0x2000080, 0x1, 0x2, 0x0, 0x5, 0x5, 0x8, 0x89ca, 0x0, 0x9, 0x6, 0x8, 0x3, 0x7fffffff, 0x6, 0x4, 0x7, 0x7, 0x8000, 0xaa, 0x9, 0xe, 0x53034bbd, 0x579, 0x100, 0x81, 0x0, 0x4, 0x2, 0x3, 0x3, 0xe53, 0x3, 0x5, 0x12c3, 0x2, 0xe4e, 0x4, 0x1, 0x4, 0x1, 0x4, 0x7, 0xe60, 0x2, 0x401, 0x0, 0x2aca8ba6, 0x4, 0x2, 0x3, 0x6, 0x3, 0x0, 0x1, 0x2, 0x2, 0x9, 0x6, 0x1, 0x200, 0x3, 0x5c7e, 0x8, 0x1, 0xa3, 0x1ff, 0x3, 0x7c188bd0, 0xfff, 0x3, 0xb031, 0xb, 0xfe4c, 0xf1, 0xe, 0x101, 0x4, 0x3f, 0x2, 0xf8e, 0x0, 0x9, 0x9, 0x400, 0x401, 0x6af, 0x3, 0x0, 0x400, 0xff, 0x200, 0x0, 0x8, 0x7, 0x1, 0x1ff, 0x1]}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000240)={0x2, 0x0, [{0x26000, 0x88, &(0x7f0000000080)=""/136}, {0xeeee8000, 0xdb, &(0x7f0000000140)=""/219}]}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x2}, 0xc) 2m33.408553613s ago: executing program 3 (id=1968): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x25, 0x1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_procfs(0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e05411, &(0x7f0000000600)) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x840) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f00000003c0)={'wlan1\x00', {0x2, 0x0, @broadcast}}) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x101000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r5, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100001b, 0x12, r3, 0x100000000) 2m33.205025882s ago: executing program 34 (id=1968): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x25, 0x1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_procfs(0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e05411, &(0x7f0000000600)) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x840) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f00000003c0)={'wlan1\x00', {0x2, 0x0, @broadcast}}) r5 = creat(&(0x7f0000000580)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x101000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r5, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100001b, 0x12, r3, 0x100000000) 1m25.122639318s ago: executing program 6 (id=2344): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='affs\x00', 0xa08410, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xffc4}}, 0x1) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000380)='N', 0x15644}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000500)={0x1, [0x0]}, &(0x7f00000005c0)=0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xf}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=@newsa={0x15c, 0x1a, 0x713, 0x0, 0x0, {{@in=@empty, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2c}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x3502, 0x2, 0x0, 0xd3}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd2d, 0x70bd2d, 0x70bd25, 0x70bd26, 0xde, [0x6, 0x0]}}]}, 0x15c}}, 0x0) 1m24.015145485s ago: executing program 6 (id=2349): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = mq_open(&(0x7f00000000c0)=',/\xbe#,#+\xa6{(}}.!^#\'\\+\x00', 0x40, 0x14, &(0x7f0000000380)={0x3, 0x3, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x810, r1, 0x6caef000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000280)=0x6) sched_setaffinity(r4, 0x0, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffeffffffffff", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000540)=[@in6={0xa, 0x4e21, 0xfe000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, 0xd}, @in6={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e21, 0xc58, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}], 0xcc) get_robust_list(r0, &(0x7f00000004c0)=&(0x7f00000003c0)={&(0x7f0000000280), 0x0, &(0x7f0000000340)={&(0x7f0000000300)}}, &(0x7f0000000500)=0xc) r7 = dup(r6) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r8, &(0x7f0000000100)={0x27, 0x0, 0xffffffff, 0x3, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x58) 1m23.876531585s ago: executing program 6 (id=2350): r0 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x2b96, 0x80}, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f00000000c0)={0x578, 0x80, 0x1e0, 0xcad2296995f3007, 0x10001, 0xacc, 0x37, 0x1, {0x1, 0x6, 0x1}, {0xc00, 0x3ff, 0x1}, {0x80, 0x80000001, 0x1}, {0x80000000, 0x4, 0x1}, 0x2, 0x10, 0x6b812e64, 0x9, 0x0, 0xfffff497, 0x1ff, 0x8, 0xb98, 0x800, 0xe, 0x1, 0x0, 0x2, 0x3, 0x8}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x7, 0x0, 0x2) 1m23.757748561s ago: executing program 6 (id=2352): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) r1 = syz_open_dev$usbfs(&(0x7f00000002c0), 0xc, 0x101b01) fchdir(0xffffffffffffffff) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000006000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0x1, 0xee, 0x4210004) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x303, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x0, 0x8b, {0x9, 0x21, 0x252f, 0x9, 0x1, {0x22, 0x2d2}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x9, 0xe, 0x80}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x2, 0x2, 0x8, 0x20, 0x5}, 0xa5, &(0x7f0000000300)=ANY=[@ANYBLOB="050fa50001a010014cac087e83acfd488b5133d115fb1f1b2047cbe5e04a7e4cedb8884aadd086e506fdd7f1712c422173d18f06f5da8475ec239e07840ac17f6e71541e2310e6f231bbf1d062236a088ebf412b70a3d04d2196a285b7a98efe32c7e5d4888540c77816b61be9b86890569da334c291d0266c867650ac951fade0f9f6670b16537864e7c96690bb57bea7f31e8a49822e08649ea2833da0fcd2a7809cbde6"], 0x3, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x439}}, {0x84, &(0x7f0000000400)=@string={0x84, 0x3, "1e6f68467d0266084ff6b77c5cbaf47a948369671538a8a47698ba0a3c7798ebf3af5c3244124a39610bdf209634e4266a181f255e709430f9f99aca9d2a7ba7e3bba193ed7201f747e6d04a54814d3fc2e323ba166912ade70796a93f464e1dc80884ab4455afb02e34f00d2dce020c00aba4127c06654da07fea909655f0b5d0d6"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x402}}]}) syz_usb_control_io$hid(r6, &(0x7f0000000680)={0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="20231b0000001b04f520a70fe08ab76f433105397fc77f4cdf4e7fac5832d888d42bb8fe18bf4fb5549870704c18c1247636f008dee6ed7c74523190e12edce4533b3e4ff62ed353f4fdab4577e21166634cb88344d69e5100139f3dae87f52cc12945e69c651a74e1ebdac5a30cdd11207f4deec6719922382a7b6ecd54469a2ecd41b9ca1855145cf7826117b7555832a46ea4801ded85bcc57eaea4b98eb51f746b85c9a07734d372279405545f1f7d64802d919473826b5569b9f796821ce159dbc9100b4a0755291e3dd10b63122e5a8d23beed2d9b4578"], &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x418}}, &(0x7f00000005c0)=ANY=[@ANYBLOB="00220100e30080578062bb"], &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x55, 0x1, {0x22, 0x2bb}}}}, &(0x7f0000000900)={0x18, &(0x7f00000006c0)={0x0, 0x14, 0xa3, "5054e0573eb24618f98b7dcd361202180ba4016d8b4469f977231f32e5b7bafe17d89bbb908303f078d16a8c7f1f6199dbe586aa19e43c8740edde0a4e250ea9797df5280bb69ae359d9d249f9a5c1784506daec8c174d1786b59499fe632972b0a36742351863e5bbb8fdacc95aed6150bf344125c0940deebb20ad323d7be4403a3e229a6c6f6707de294d2a22ff523de409f8e04b0357a4b45b9ceb7922ea20c803"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xfe}, &(0x7f0000000800)={0x20, 0x1, 0xb7, "69022bbb63291d34b47c86e7e57c33e12bafaaf0d87ca59950a273ccf9e8cd0258557a63d908de6b9d4d81eb7fbbb85f70a886d34a8b24cf84f5a09b8fdc0233fe9f9c1277ba5beeb4ab09f81840d5cae0002d1a1388a5afb7a32990674124427aa9bbd4d83bb7ee71066023afad29b91719429cc05cf7a8b7267e3315cdf38574f9135a8e1b052d1d5044ce1f4436333f38921d813654e920a19d729042e485e4637442d778641ccb28ae2617e789178d88e9f4982372"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x9}}) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d50f510d5025785d1fe63d39302828140000001000010000000000000000010000000100000000000a010200000000000000000100fffe0900010073797a300000000038000000160a0146af000000000400000100000009000073797a3000000000040003800900020073797a30000000000c00074000000007140000000400"], 0x80}}, 0x24000012) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r7, &(0x7f0000000480), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) bind$can_raw(r7, &(0x7f0000000b40), 0x2) getsockopt$sock_timeval(r3, 0x1, 0x43, 0x0, &(0x7f0000000fc0)) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000600)={0x28, 0x2e, 0x8, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @typed={0x4, 0xf}]}]}, 0x28}], 0x1}, 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000540)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x79, 0x20, 0x10, [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x7, 0x1, 0x2, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x1, 0xff, 0xd7}}}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x201, 0x8, 0x3, 0xfd, 0x48, 0x8}, 0x5, &(0x7f0000000a80)={0x5, 0xf, 0x5}, 0x1, [{0x35, &(0x7f0000000ac0)=@string={0x35, 0x3, "cbf3ff53a98443b8a18ef1f067f4d26d2e9f9443bd0f600c7eb1d7847174a2617fd0200dc9aae6ac0564428ac900d3b66d658f"}}]}) 1m22.06695289s ago: executing program 6 (id=2359): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000440)=0x18, 0x4) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000006c0)) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r3) r4 = fcntl$dupfd(r2, 0x0, r2) read$snapshot(r4, 0x0, 0xffffffbf) r5 = inotify_init1(0x80800) r6 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r6, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40044146, &(0x7f0000000040)=0xaac) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0x1ff}}, './file0\x00'}) r9 = socket(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r10, 0x40089413, &(0x7f0000000000)=0x5) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xc}, {0xffff, 0xffff}, {0x8, 0xd}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xca72}, @TCA_FQ_PIE_ECN={0x8}]}}]}, 0x44}}, 0x68000) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x98, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/11, 0xb, 0x2, 0x1f}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/19, 0x13, 0x1, 0x32}}, &(0x7f0000000140)={0x0, 0x28, 0x40}}, 0x1000}, @release={0x40046306, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r12}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/178, 0xb2, 0x1, 0xc}, @fda={0x66646185, 0x3, 0x2, 0x1}}, &(0x7f0000000300)={0x0, 0x18, 0x40}}}], 0x1000, 0x0, &(0x7f0000000780)="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"}) 1m20.947221857s ago: executing program 6 (id=2365): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x0, 0x8000}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x14) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4000805) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@getqdisc={0x2c, 0x26, 0x100, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1, 0x6}, {0xffe0}, {0x8, 0x10}}, [{0x4}, {0x4}]}, 0x2c}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfd99) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0003"], 0xfdef) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xfefffffa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x110, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1m20.868506988s ago: executing program 35 (id=2365): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x0, 0x8000}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x14) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4000805) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@getqdisc={0x2c, 0x26, 0x100, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1, 0x6}, {0xffe0}, {0x8, 0x10}}, [{0x4}, {0x4}]}, 0x2c}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfd99) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0003"], 0xfdef) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xfefffffa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x110, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 51.57909917s ago: executing program 0 (id=2510): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@broadcast, @initdev, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x7, 0xa}, {0xffff, 0xc}, {0x8, 0x10}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000699000/0x3000)=nil, 0x3000, 0x2000002, 0x80010, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001200000000000500150004000000050005000000000005000400000000000d"], 0x5c}}, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r3, 0x0, 0x5004) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x2052, r7, 0x4b000) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) mprotect(&(0x7f0000556000/0x1000)=nil, 0x1000, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0xfffffffffffffda9, 0x3, 0x8, 0x8, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0x1}, 0x0) 50.563441909s ago: executing program 0 (id=2512): r0 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x209081, &(0x7f0000000a00)) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x81) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') sendto$inet6(r0, &(0x7f0000001140)="7000000018002507b9409b14ffff00000204be040205fe050e0204094300080004000000060000000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66e", 0x70, 0x70, 0x0, 0x0) 50.498295387s ago: executing program 0 (id=2515): socket(0x10, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x1) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) setxattr$security_capability(0x0, 0x0, &(0x7f00000000c0)=@v2={0x2000000, [{0x8000, 0x8}, {0x40000, 0xfffffffe}]}, 0x14, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="186f9eb33637843a23c900"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x200c1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') exit(0x800) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) 47.209477754s ago: executing program 0 (id=2532): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r7, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x4cbe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(r8, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) openat$ubi_ctrl(0xffffff9c, &(0x7f0000000340), 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 43.857078093s ago: executing program 0 (id=2534): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) openat$dlm_monitor(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300)) socket$unix(0x1, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x2, 0x400000000000003, 0x0, 0x9, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x70000001}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0xb0}}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214ffff0600fffff8070000000000000000000100080003000b000000", 0x24) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f00003ab000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000024a000/0x1000)=nil) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x88000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000940)) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f00000000c0)={0xfdfdffff, 0x8, 0x353, 0x40087ffd, 0x14, "69120700000000000000002000"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 43.276894395s ago: executing program 0 (id=2540): r0 = socket$nl_route(0x10, 0x3, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000001800)={'vlan1\x00', {0x2, 0x0, @loopback}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) setresgid(0x0, 0xee01, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x1, 0x2867a93, 0x0, 0x0, 0x0, 0xaef}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, 0x0) r8 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e21, 0x3, @mcast1}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f00000002c0)="5569c645ae450d6ce504e3003d05c05b8b4f406ecf40f2d7af8e5350d769606e754df10cfd73975b47d4666886e99840319fe875362fa8af544f1547a62b96bda8a4eba9baae37a55b2e4616d4f16f38768068ce25152327a7012e212b8a5c34c58fa8233010d61ffbf1b8bf5e5d89ec6947e1065f0d623be35fcbd7648604c8991ddcefbd0b478a2c702de1c4", 0x8d, r8}, 0x64) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xecc, 0x30, 0xb, 0x0, 0x0, {}, [{0xeb8, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe6c, 0x2, 0x0, 0x0, {{0xa}, {0xe40, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, @TCA_PEDIT_KEYS_EX={0x1c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xecc}}, 0x0) 27.23737294s ago: executing program 36 (id=2540): r0 = socket$nl_route(0x10, 0x3, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000001800)={'vlan1\x00', {0x2, 0x0, @loopback}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) setresgid(0x0, 0xee01, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x1, 0x2867a93, 0x0, 0x0, 0x0, 0xaef}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, 0x0) r8 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e21, 0x3, @mcast1}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f00000002c0)="5569c645ae450d6ce504e3003d05c05b8b4f406ecf40f2d7af8e5350d769606e754df10cfd73975b47d4666886e99840319fe875362fa8af544f1547a62b96bda8a4eba9baae37a55b2e4616d4f16f38768068ce25152327a7012e212b8a5c34c58fa8233010d61ffbf1b8bf5e5d89ec6947e1065f0d623be35fcbd7648604c8991ddcefbd0b478a2c702de1c4", 0x8d, r8}, 0x64) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xecc, 0x30, 0xb, 0x0, 0x0, {}, [{0xeb8, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe6c, 0x2, 0x0, 0x0, {{0xa}, {0xe40, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, @TCA_PEDIT_KEYS_EX={0x1c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xecc}}, 0x0) 6.336771445s ago: executing program 8 (id=2711): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) writev(r1, &(0x7f0000000180)=[{&(0x7f00000005c0)="f3", 0x1}, {&(0x7f0000000000)="bc62cd340703498cb8b5827db3604891d496e29f6d7bed30b0c92dcbb1e6a964", 0x20}], 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) open(&(0x7f00009e1000)='./file0\x00', 0x60900, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) eventfd2(0xff, 0x80801) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1100000004000000040000000200000010000000", @ANYRES16=r4, @ANYBLOB, @ANYRES64, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0xa0280, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) 4.990234681s ago: executing program 8 (id=2716): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x4000, 0x0) r0 = socket$inet6(0xa, 0xa, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000070961c40e90f55dbfb690102c9030902120001000000000904"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0xa840, 0x582) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000300)={0x1, 0x77, 0x2000000, 0x0}) 4.733035923s ago: executing program 2 (id=2717): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001ac0)=[{{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="82860ecd424c6dd8471637f4977e7029af11f5c59af88545400fe49d97c940657abf402e679df650b49d51d248b56138d4c4e0568ff8ac24d9af"}, {&(0x7f0000000300)="8afb20e55ab7"}, {&(0x7f0000000380)="4571293b14874026550d0ec3153bfb47e5336a71cd9b7bcaee59c0f2751addfd541e254ed0ea657616ce6663381fff818b5edf46fc6fb9736a2ff0deb5b76955e80371454ec088267efda17f23aafe68a9c4337207de545f83830edede1ca25f1503dbeaf258b08b0242fdd9f513c814a18fc5853ee1fc76fd14aa269e2576bd2bb3688700291f288520945d1a7fdd56fd657282e0bff47912ac29"}, {&(0x7f0000000440)="f8cfe5607cdacbf31d5f8f2030a02882c93678dc69ebee02c044a08e50a1695167ff4c082de407d82025caba5b1bb563b434711bb49f1da119c8"}, {&(0x7f0000000480)="c10baac8a3b93e11e4ee02a3e2836c67562303bb3dccfaab5c6c3569089a1a8df7b7ea5734dcf87f86e3931871dda4b3d672418d1b47404b89bbeea663ca1a0c373b750ab95bc7a58d5c47e705724915f97d91da7954f35e5704a90253f10c63454a675656e25f71642304d5a3ba6fe8c92223a98d7afd5d30f59fbdd792522214a8739cf253ccabc9de32b217b7d5ae6978aa0dfbbe4243e7f21c176c01ee21050eb5dc2e736863fc3ae71edee024dffd580d841a1d5536bced9852e61e5282f970236301af3f56c2c90231c3e5050ec0737709a7558bcf0d2585744381a8b99b6ac0073124e31a2262e71196f833c4e44be2b9"}, {&(0x7f0000000580)="0cffd620e48a131e8160a88885b065b6653df2bcb6201c5cfa82c72933b9ae13e5fd856e70cf46cb97909171afa73a06deae4165b0c3250e2bea9e42842cd4755c2543fbd91aab5f2bc1a3b48efaf48f57837e526c168d7a2c02fcd56d8ffe9cd78a2bf410286bed095527e42ed1ca0890af294c5e638cc5d0449bda5f037bbc0ffcbd2a8ed1c39fcaa00747bfeeffa43972b736c513e5a1163750a3bb8125bd3e78645afca17077c7248355a7611ae490"}, {&(0x7f0000000640)="922d3a675259250d36678c52af606bf45b880ed10295b5c2626c1e8f9b857c76bed1e3c0d2a6a46f8c0dc6e2b25da01e62b446f3e4eddc15d71fab3075c166d61176867e81afaf32d4a8c1ea6959045e5d0eaaa359620a"}, {&(0x7f00000007c0)="650d390d29f6496aaaa77c9cdf85df8316d83845fce635c8cd45df34bcbff8181a2aedb1f1a3cdfff0776cc0125aa72784a3f2cdb002aa505276b0943c0641d035025964fe6421a3d5067be02557e80016a92e7425971a43e7813b38acc57927ce1080c58dcfd69495d3442d59e222fbcc7565fce59355f97e19bd882ff30e3cfbfa43f28fd69b6b7677753ce29463062e4b2ef5605d9a902ef1d851ad5a5c1749cb4b9bbf4c5f6eeb867145b55dcffc54783c94bdd4ab843a9eac9cc17c6419c6feb7d265419715f8f69b24b85e4fdd6a7bbf9124394d512406d57a194161e0d972ab908f"}, {&(0x7f00000006c0)="8af55d5c98e9119662ee1768de7d421265a8848f658b604711"}, {&(0x7f00000008c0)="40223d3e338aa1b16f8eddbd3b9cc926a67cdd68bc2da1ecbf43878ec36d9a02482ea91acedb0552acc6674da4e938133665e74fa7a912d680198ccc0b9ec654b4c298a383165bfc77f6b8e68241023085e2ee35c256662369ab084db67be62030dbb837a0e2040262e07f273ab40e0634fd9e1d602d63d59e098a5c02aa24a76296577b07a9045bcab31fe3b1582087ee69f047cba13919f0708f579585ceac47cc74"}], 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB="f6ff0d000200000001000000", @ANYRES32, @ANYBLOB="000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0]}}, {{&(0x7f0000000dc0)=@file={0x1, './file0\x00'}, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000e40)="522bc447b6abe4213e933f7db73748386587d735a82c7150cdd9965958c25b23fe8b043a62603b342e30a78bbb96b258fadb6f8d10dcd0e405dee5ce274f06adb5f9d72267d7bd6c41d0bd349ef55f01066797b9c002b87a77a7f03ff01dc7fe67bf5b3b7657641db1a0b20d7ed3bc4184dbdada17b0b741f086e87bdcd8a16d42bdb19c08cd3adac402cb972278512f3932c0"}, {&(0x7f0000000f00)="a68d520423f70eadd1063cc73dc27af8f8ad2497815fe0fc2c891ccdfb2665801d50c171b0dab6763440ba2340beb2ba9f53a5e9c035c494717645d1c4c44f65127a650f3928c1f6fd609522f7fccff14cb0bec7246f29f391898f31e6b277b90f0305f54c68b2db1d68c0b65ceb105b111ce612aba387c3bc24ce4f6883f8e6ad97c4c8be4e1d60279dec6fb5c6a30340651c685ec4010fe09741dacf1fb01ca74f8821b436c779d682e7af93317632f900124fefd2"}, {&(0x7f0000000fc0)="45ec2b950487edeecf53b84d7d681b846792c8cbbeef4231c0e5153d3900c9041718636e3974074a551f37b8f19230d73f67be629c0e99fa997bb0e3c9b18982a8b14b782382cc2c293ae243e5fe6af6bc9511b1adfa9b309dd1fe959b8624d0319ec235baaaa2f57b3d63f3dda59da6782cc2eb3c7b82326b38d3c3ab546d469071fe30d1d159932e1fadd5f948fe4e2f0da63fefee8d3b2d740570448f2a941f1c14d783e43825364a3cc576684d7b6d08cad47203f715b4bda603170352dc430bc94b81fea2d078f55e6dbb32969cca485b557f3cc9842e952b"}, {&(0x7f0000004180)="c23a9b409eb03fff784923d81b2678520de9ca3d66a91339230d2ee4daeb83a1d94730c7af788995686a25e80d1f2431d5512d71b0724baf6c0f2d63933505b5b154e9ee69fe74ea6093ff9a7b6f96fc5ced03a21d9dd09ab03c7886c7c274874589d21bd74c7379df7e0078617e0b18b83637a1896ee0fb3f386dfaf817e2da5e6bfd232dca71afb216a745c23d86b94e2337f0fafdac110ec0a71bef7071b161de2a53079c03ec33c423f2204fa084f5db894d229b399f0c345731ea45f8719a2d8861ce9655a5951a8d3298fd7ff26031d1e659d6527cdde549cdcb9ba67394d6983a04f139f32048d7266e80ba8e389396674b88fe3c9ef67561b593324fa30de29c0d1fa5e44e43e93ecf549cdebc22d0bd389b80314c2807ebfd8b506be39779fb241921cd4926122430429d5fbf4108e7239a88e4a784503794b0a6e7eef9207dd9346b315d04d3f522e15365dc4f4159a32fa1782bc6af68f93f70a5dcf32edd723c4eed42ffc4993afe8aed5dc77182ae08c2a672df9050683466c9f4fe2363368df6cde90f8c26487680fe5ec5fdc5efebbab4e173fbbc82fb3e50be663c9b5e3472b45c64e0ded4e103a289a146e9b6a3ab9ce7cc40d3d6ea012a069e8dd5c6461d06cb356f3974d043626856c399127b91f1d533ec8bc83483a4c292d0931b1481f4715823adc0a94043190c035a25406cbc268c80abe91ad528d4c90595981d5957cfcd152336aedc319ed21a88dcfc0e321f7cb8eeae13e3c673db3fe494bc80b956837344b174f49de650a043cf961c18e3fde4b9274845f03b024dd132a4982bb51f79afa54fe33d84b9427bd2587134b68c9affd00aa016a0778fe009e32f1ac24f9fcb8f71917e8ea6309487867672fa70e49e84bea063348e8f20fa379d2a1097c79e6f8c653b1b226fd4d5823d63dd1773205b4d2b315248b467c364d61a47e00e762c19f79a3dc2095a392fce22f0d4eaa8a04868482c5bbc1d352a1c8a1ae745a152e103b9603e3f1643a6415d3e3930675156aba2ce667af064842a43077d78aec84eeed2c7fa82ca91c8268fb41874131d325aa22143600af7282d9f81497fa1fa8a9eca035d172830d1bc658c26fe00682e1f765e2634e91f31a1a44dacae50eb2e0644f845c299bbe7395d9fa0503edf57e788737f8aa434098a3d60ba235239e1d67d83d26a985a30e137212a802e42d89f874a66554f9b783dc0789fca69536ce85c397034c87b8a157c42ca3a9c57dfdd751507a255aea853c0980d9414e1211e5fa53d75b2ba831c44ae61cf5b4f167453353b9f480941b49b68b10c9501afb2078094a1589765dd02e1f64908b69cbed38e6b9f7b96881c1121b56e25a62b35c6109ddd6a25f7d18f69ab37aed5b8aaf7b784a176a43a742b6dcb5f78ddd1540a67cc2b6adc1e380bb7023afba9079eac380495e1ff037c82f395f748f420d5e343672d17ada2c4146cc11d558bfbb4a5699032dd6e4dd7889bfb6072d0ac9188cc22c04764b12377d7393876856fd2c8d6c8d8ddad3cdbaab6c24d11e7209b009576d9b0e5a1c6b0c9e1660d6c0f09aa47896702b6b488b004364db7dd1e093e5a65ef324ba9aa5c3c318e797d36335c387854c985fb436bffb50eeb104b7cc4c5b54b72eccac037be7cc6bc5c27115962f20ea85753aed164271075ab3254f80d78b671a17a766a2702b0dc9fa2c5537f1074ab3bc7809f5181c2d87a481a4d7abf0027010dfa17810554f2e4468e6a559fbdd8a2c322e2263149a73a3bf4c519275877f8e19d5242e0ecbbc50902a7521c33efceb3387fecc5796614a0a1db6e425ecf10ce256c56de3d98905d69013eff856242ca2cdffbb26370368eb515e3a8a67684b0ab16c1cb62b1c97b4e5fee471324cb8ef42af54fe801c473429ac3599269a5d3cc90c32ad56a4442c2bc44f680d0d8124147fa498261980bd90d085eb198d4721914d70236b6e6fd9568658e4e0f63ed4df709eb827aa7837a2ba1fa1110b0be59e20b50f4ee43f8d4f043505a807b760721f2e2cf009d32a5952ccc8a69d8388acffce556534d4bb99e5e62c751eade3aee09f16c034988feffc3b3d9ef365043c2698c1d19b857bd30551c14aecf55ce9324161a351402a633a7ca52785bbf08d143f68d99beaf8f2a01b86f61b8ac7c05034f76ed6b7811833cf474cb55abb51a7635ce3003d37430470ebdf4572ddf4722c403e3c3c6237a9e1c6aaa5a1359968b33603828e1866d99851f4ab0f9db18e2214340831e85b62b1ab1f042049aac2d304a9108631f7b9e593a926d2255bf25bb73c98b19250524710e2e729d26ae09189e0d5d4cb1429d3b3b20e6acfbb50f377507627785628a26d5b2c086652531426107ea7a4c51f379d7bf4c8c690fa45962dc0edef86a671c003f224227d10258f03c0fa7ddec1e94cf411d61e98f064a9c3472568a13044e9513fb943b7720986ae93a7ce43677187c5eeb79bc427877782e65351b83e6a18e0079908c8c0febd2775c265c0825b673a9cb0a916cf9536b39cb12a79ca2b72a11dc2e17a408b32c159031cb9094b09fb092d54b079b390e48781e20eeef4836bf025144614d76b7e82a523079195bf40c6e7df580c7d4da9a741ca79f94f2fd182c4e4b1df9cedd094986c6d8d25f0980a37b848671a7965e32aa3f8ebdfc284b60938eac9e62530426f51a6405aad450f99f7d21606c88d59c126295eb44b2c0d091c2bc8072e93f82b1d773a99d4aa141b4b15a741943267a2c1510aa86e37d93181c2c3a7ac4a61ed19b3c61e8ecd9516389221a85ba8847e9b4e64ad02ca3b43776c0923d00833107beefa1525df900498c4562a212126db5a7863189282d1c445cc8936d65bb263a255ed341220a7680b27e6edfeb70aa01bc89d4b01f4ce256da8d514fa7b98484b106ff690914ef171d219574b6759e8f308f436da0d601d598b493b953c79f364f760a03f70614d0e4697768abccead086d7446bd450cc764e3977556e99490347a8580454b5c5a9544e6d6fbc48825a0902cc462a5f2c5996fabc40d79a31a7da879d7bf180793fdbb070a24616ca4a6fb8816f542f6453360855c0a4b1b7227ffc1a0b8f63b9abaaa5dec4b26c5d0867028d5b8e8da5db60de8abeab4b899aa8b469e418519fe8d842e8ae4350c044d7c0ae6f165f767711923ab99217d5f82c522285f1124fafec86f8084463fbb769491577051d80666ebe87c4a9fc8dba069b00084975b985540121f549749a1fa48d7bd480444c9d51b5d75e1bfb1788eddb1da4f13cadcce5e0d7ee83190f0e98b554947c05a92b8e3eb9005ef0f183c6a7a8c0cb8b4fbd18112b0be8b8fcbbb9351899037096a15df45449df08f347d8ab8db715a05a5de3478ce38e39acf19fe960831530e4dc4d5c0199854c7a4eea9eb26cf7bc3477603134ca8850b85295c9cfd43af4d1bda02927288a7169fac48914757cc3ac59d4fedd305b18ce5ec214ee1723bcb105c9a373bccefcf324e03a6197dc32082962d285211dddf6c92965b1923078e42e9577a53bb26a45daa9dc6a82bf10fff39972ffc38f2f29378d1896d446c1a4126c6df9e247c714d22a13e6601847d131c0e2d7caeb2429a3cab022e386dc8ed6b28e7be69c6845355c057568add2a7d5c06c3a91e762e4cb6e38ac4a48a573248c781ed871b520cefe3908b18d7d4e3670f1e0cc13cba69909f731d1eee8d0ac85ab7e91c70ff2221a8d773aa37af04920cbd340b98a0aafd0ad5cac03f8f634eb3597349c13be5df79f526a98054702fde3d0b80e23dbaadd2e0b5242f892cd2bf4eb8791288607c9a0ccc6da4fc5b6271791d2f47542efd108f5e9c5493afa924b534bc9a51c15061a1943cde965065437132f055057fd26ad818cf6088b9e241e135dbc4f84d050c6e0a212a9b8bfdf0519ec527cb5b5932a4cbfb1246335fbee32a4744652a933a8232537006d4fb74a32ac4fa5d07cd5b86f75edbe2232104ba1821674bed15733953a3526c567199a3dbf365cac1cf50a748cc8234ab968fa26cda8bc5b111e90bd9d5d975460aa8580623c6d6c8a1714b10ece0de3bdf4f7b58ac8a085ac3509ff7b47a86e25ada7a1c805612e97af9561f77eef1842fef82aef3bd112f88bee514ee9b1c4dc15c3231a4dac2256134c33cf6f4130d640b7e42ea900a7a15286efd7de92b5aade5700d3408ee3403de139d03671f022ab7c6171dbe8bc1a9b5fbf0b8920a61d411f2ee1847597bcfe679e2e74b2c5b36256d0997c7f9e429bd91978482b80ecd058e89bad74a11a991f9a1b97e46758e9062ea45dbb77793ea89fc9825e7d3833d81e8ebd43a414be22c047e1e90536f32a0700a842c9b1b637504ba7f6e78405966dbf600c3ee73608c5c6b319555adebed6ef297b3755f8608d349cc717e32b67beb5fcd2f3e929b465045e01aac1cda467c72a513f979efe74c955a03ea4a0ccc2a0aef244505d57ed8657d57e20b4298d3d304a968a9c25fe0eca26c4d8af39891151209d8130373899f45cd55154339b95d06e7a208f1cfdc04cbe77a0c72083f7fa4f99b0988357debfae3e3b565de8c7e233b0fdcdb41cdc4a27ba11ed7fbc1bfbe5978dc8f70bc3037f549153d853caf442d38e5b51d13633bcb4c397330edebd58297c71a62c5b70dbf9ace0bbe07ac3347c6bba66e6756a5c9a8e707ad923199faa498133916512bc5810838723e834d958ab2fd7658d3047ef596d065a0c50003ff05e37c3475432950ba219f3290ee5dd8eae17abd76f6bd93460f8ab286cdf31ca80451f3e5800fd12d25e0c32fc4e7c27914cda9c04cb51610cff50b66dfacd154f0d73628778d34ff0424fd9156dc39b83f39222ad1c3c97bbf1e8c399dd678c9411b1c63214df2dd3d50632cdad31bb11eed4953149bd80d6d596d7023cf89235412accce307c6c987dab4c9880fcceb998fe9e862ed4ece3f726ee2810ca60932fac9acb6269b909186ef8ec0edd227b1a46f474c85c6a5476f3a1761798e6db8e2041776492f47a7b62b8df64fa7b03607e0aee2685d803e18f2108a774b94cf4361de65b7e460ad2ecb40bd6ba45a8413e1a86b8da9a2fb269a85dcb955613cd05d93ff5fb51af3e9fd78bef42daca77b00c73d41f65648bb4a19eb0ff76ae493242bbd7c4c23b8e9c08e4e3586f72200ea19dd63931ebf0ecc976a0633a495193bc850902448c13fff8f837ab844ca0581a586ffcd9e55d01afe65454faa449b9453b02761b5691e0123fd03360ec21464e8e49f80a95918a0204c1965a6f76f23397db0a8a243e9dc12942d39690aa0b7f6c0dd41c385b1e593edcd05926a61f5674044e881670345639bf9b6785913e77c0903b18f29329c019898f0d59b3b43a514a19b19ef00cc30ff1372803d84f6d00ef055a15fe725d07781493ff5a3e3eb92c61db35eca87155b9a5426e69d08144a16c6cc5c7ede899a363833db404429adb4a2d73837d5eeb315af0a8e4033995f4b99285be1d5c2fb46cb381f6d320e76c800021450678d51a1bbadd94be9c9f5665343d14b2b6a88e2cd9a30485205ef5e6bcb80fd820a2ce4c9211afdfc3037563704ae71f50f838280abc10e7ad4dee7b9ff2d8871095c3e202114f2129b11537d71301ba4cf1709bb3a50b609f4f8b5cca69a1c4875180e828a74a13f6fee83d168974f40abcf65723a4040d92f7405cc45f873534c60177544db8c9cc73b19c0a79fe34ce34a04c2f793658708ba0be0eeef8c5f76d4a45a1fb2e"}, {&(0x7f0000005180)="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"}, {&(0x7f00000010c0)="ca0154e267c95f79cd1ae46ef976344facb5dff96a3663f78db4d2"}, {&(0x7f0000001100)="cc1ae6cc2ab8abd2c1dcea57572e6ee58fd4d8b0d2f805"}, {&(0x7f0000001140)="86d987e4308ed12ff4e3b58d77eacbf4e4cdc6800582266a315fa6bab9b2750945c99ddbdb2a2ccc8b3ae86d068d4d089ba4bb603017a5577a6d991fd4a3174bfc6482e108c2760308d9e83dbc017009d71d0c8a938a13f8a3f4d326278a8e749de952"}, {&(0x7f00000011c0)="749c78fdc52ef1e5da2f0d6f9b77b78ada809fd35a1e2cd5438cafc24f5bc9cfcf305342dff3e059f015e4611da4be5f6c47066e1b80cbbbcaabf9f99e51f7dc4d54339d767a93dbe2efc1b94b3d229291a8d156ba93ed397822243a32195422eb0bc0f8c561f07c0dbcdcdef7f4fd10126ab5302c6506be4718874ce5ac188993fa3933e5817004bcc20c461b006ffe8863952e03ed607f14ce5144ce36ae9e37a1f2ecf688224930595920ade44fb85aacf5ffdbdcb509a4b3a0c1d9b4d208ff"}, {&(0x7f00000012c0)="8e073a125cf73e8153cc4590e45d0a45aac515d9b41eeab3e41055a8335db202dc76f5c4935a7a3d020a87dda678c093b1dbb168ba65c55d00193413261b59900a2ab242bc3af68878f80c25ec0fb999a8b7f9b9e04f5ec7b039537296fec136d1e22bfb39e2885590fc2d7895151518144b9abdcf0f4309212cfdcbc5c95fad6e49feb09cfa5e5de0609997f647636b67108d91c8ccff8bdbed7da502de4b9efd4074cb254012cec686f66c6d17ef92e3d4b6a26a880d447f9e824305344be0ee25b73104844064c827f8b347071bdcfc504b04c72a63642e826ed76b62caba6c016078c0bff17dbc123b"}], 0x0, &(0x7f0000001440)=[@cred, @cred, @cred], 0x0, 0x44041}}, {{&(0x7f00000014c0)=@abs={0x0, 0x0, 0x4e24}, 0x0, &(0x7f0000001740)=[{&(0x7f0000001540)="8e1b820a06f05459d605dae077acc41f87e814d96499fb3ad9d486fdaf0f0df7a5a6495325c821664aed4706ea52f97d7e6309b6ac8bda11971b970a3217da4f17f02e6a38027a66060237f0126ea8413d089ed0a9d1a4495f3564084c62705f2ae2831c848a064dba384eb2d1e80849ea9cb61e61c35c437af2f1c68c7ed5028df83d25af88a260e838243984286e92c67e099ee8d09dd063a59a8b554dc5fedc9fae3a37191268626be908040548bd1df1551e971e2758f0af2b9b"}, {&(0x7f0000001640)="4056ed920228ff989aa2c46236e69b0808bb0a19ce3705251586638e2c4133ce6c85a7057af6f928d94eebc9babbb46e044191c671c3877fdd4989800b9f5fa59a628877ea61d165833612a0081bc5c6c122e6ad5e5f7e9e413a51e5738eb3cf54d33c2265e41bd0bd4e0f1df38d0481aacc529ccb1c8fc8773771b4a254420bb5b79601bed3d0c0262f37f8e6fa2ca7ca70d5bf7b35b49cb44f1a6fb228f8d616966fbc5994d375cef63054571d600fc7c505480f7d4fd6aff327d3356dec72a7b259f2b2d751450f317d1aa8dc78574b73"}], 0x0, 0x0, 0x0, 0x4}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001780)="19b9fcea6b5753c190d0b9ba1338abf90d4831778739c85ce119b9c4945ad87a9b8aa92dba5cc019833e2188acd28b3877"}, {&(0x7f0000008280)="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"}, {&(0x7f00000017c0)="941679baa2641922a76e149498bc1e1e6ae61d38ceecb01811426157667c44eb264c3a8114ef2c9f4566933aaf852b39800026ed6b05f2884d1996d7700ae235ed06adee8b51331c48000b"}, {&(0x7f0000001840)="9d6f65ec7627d0b999f486b196e5678d9f2f268d3e911a1a35cb6e5195"}, {&(0x7f0000001880)="d715066bd81bbf8deb754591203ea3f29d23fe4551255bb3cc8a82ecde2fec871daaa5d649a221f49e78a11491fd4783b4dac5fe6936540895601f20fdead459971f3113d62b1bd9dec7a6a29767518371c9b924e4d647f563c5a12623ec8966b0708a352d34ee59e492ec41d8b18beaf546a171beac9cee8ba184850e7be69680e55ec4c71767bc15a80c3678cba2e9e50f6b7e4ef0d9ec5f3d799f4a04c0ed08fcfc74ed495c40712baadd78007538e9f92585fa1a9b08eba5dbf438191fbfd9bacbc0bb07dee7696f48b7cfc161162b7aa1fe7a3efea594849891d2f46aa8a8a1d99adcc842ac57a5777810"}], 0x0, &(0x7f0000001a40)=[@cred, @rights={{0x0, 0x1, 0x1, [r0, r0, r2]}}, @cred, @cred, @cred], 0x0, 0x24004080}}], 0x80000000000025b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffdf}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x80) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001600), 0x802, 0x0) ioctl$UI_SET_MSCBIT(r4, 0x40045568, 0x4) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)=ANY=[@ANYRESOCT=r4, @ANYRES16=0x0, @ANYRESHEX=r2], 0x2c}}, 0x800) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = openat$fuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = openat$fuse(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f0000000100)=r7) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000780)=@ethtool_gstrings={0x1b, 0x1}}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x185802, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r8, 0x8922, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x9}, 0x8, 0x10, &(0x7f0000000ac0), 0x10}, 0x94) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000614010000000020000000000900020073797a3174"], 0x38}}, 0x0) 4.604765881s ago: executing program 7 (id=2718): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0x9d, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x3, @local, 0x3}, 0x1c) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) (async) r3 = syz_open_dev$I2C(&(0x7f00000002c0), 0x2, 0x40402) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x7, &(0x7f0000006680)) openat$rfkill(0xffffff9c, &(0x7f00000001c0), 0x50000, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000000c0)=""/207) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x2000000, 0xb, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e41", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) (async) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x10) (async) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x400c0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000340)=0x17, 0x4) pidfd_send_signal(0xffffffffffffffff, 0x30, 0x0, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1ff, 0x4, 0x4, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x58}}, 0x0) (async) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000300)={&(0x7f0000000200)=[{0xa2, 0x810, 0x3d, &(0x7f0000000340)="ab8f3e6b589416bf70719478f84cffa6cd08f9326a9ed6c6628d1a39a8a07051eae737a3c84ffb3ad63e9ccff606105db323988e566e534ff9a12cf5c3"}], 0x1}) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f000001f840)={0x0, 0x0, &(0x7f000001f800)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010025bd700100dcdf051b00000007002100e3"], 0x1c}, 0x1, 0x0, 0x0, 0x20040844}, 0x48c0) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x10) 4.541048142s ago: executing program 7 (id=2719): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) io_uring_setup(0x10, &(0x7f0000001240)={0x0, 0x3eda, 0x40, 0x1, 0x167}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) syslog(0x4, &(0x7f00000001c0)=""/211, 0xd3) 4.476602033s ago: executing program 7 (id=2720): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x3, 0x82000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) process_mrelease(0xffffffffffffffff, 0x1000000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000080)={0x7, 0x20000000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000280)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0xaa, 0x0, @void}}}}}}}, 0x0) 3.792120461s ago: executing program 2 (id=2721): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@bridge_setlink={0x38, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x68, r1}, [@IFLA_LINKINFO={0x18, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x4, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x300}, 0x4050) 3.791553141s ago: executing program 2 (id=2722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.728364351s ago: executing program 2 (id=2723): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0xc989, 0x0, 0xffffffdf, 0x173}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r0, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 3.727868805s ago: executing program 8 (id=2724): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) r4 = syz_open_procfs(r1, &(0x7f0000000380)='net/if_inet6\x00') openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x501042, 0x1ef) openat$vcs(0xffffff9c, &(0x7f00000000c0), 0x100, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) close(0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x3, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xfffffe, 0x2, 0xfffffffe}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0211f9f407000904001f00000000000000000000000800040001000000", 0x24) sendmsg$IPSET_CMD_LIST(r5, 0x0, 0x80) socket$nl_route(0x10, 0x3, 0x0) 3.310941009s ago: executing program 2 (id=2725): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0x8, 0xa0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0xc1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x14, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000340), 0x1, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f00000003c0)=@overlay={0x1, 0x1, 0x4, 0x400, 0x9, {}, {0x1, 0x1, 0x3, 0x0, 0x4, 0x3, "129f89fd"}, 0x2, 0x3, {}, 0x2}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000d80)=@newtaction={0x1b7c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x1b68, 0x1, [@m_skbmod={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x0, 0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0x100, 0x1d, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x156}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x3, 0x8, 0x0, 0x6}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x99d}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}]}, {0x99, 0x6, "b4c6207fec03204136c1b9401af036e25091725803e988ebf092d4220d328f742a897ca135a975451b3582f50bce6b9ebbfa2e670e2cb8597ac9d82bab189550eb7fbacf4f72273fe1ccc20869d452d7fc2e489a0efcd05780898ea177ed212dd34c57abdad6d47398ad76643091f2a2d23780e6e8ad81a3e1bed3b29a6ea8e65c9755a21b7e8b19f1477ee8d7c70ef5eae8ca4fff"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x8d4, 0x1a, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x401}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x7fff, 0x1ff, 0xb3, 0x2, 0x6, 0x0, 0xaf5, 0x9, 0x7771, 0x2, 0x81, 0x800, 0x5, 0x7, 0x625, 0x0, 0x2, 0x9, 0x1, 0x8000, 0x2, 0x1, 0x6, 0xffff8000, 0x80000001, 0x1, 0x66ce0d96, 0x7ff, 0x3, 0x7, 0x4, 0x0, 0xa, 0xa989, 0x9, 0x4, 0xfffffffa, 0x6000, 0x0, 0xf, 0x7fffffff, 0x32d, 0x6, 0x81, 0x3062, 0x8, 0x0, 0xe4, 0xb9f, 0x6, 0x3, 0x800, 0x8001, 0x9, 0xf7, 0x1, 0x2, 0x5, 0x9, 0x9, 0x1, 0x1ef, 0x800, 0x86a6, 0x6, 0xac, 0x8f1, 0x5, 0x0, 0x2, 0x3, 0x9, 0xaa22, 0x3, 0x4, 0xf3, 0x9, 0x1ff, 0x66e, 0xfffffffd, 0x9, 0x2, 0xd79, 0x5, 0x5, 0x89a, 0x3ff, 0xfffffffb, 0x9, 0x2bc, 0x7, 0x7e, 0xc0, 0x358, 0x0, 0x4, 0x6, 0x0, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x3, 0x6, 0x15, 0x0, 0x58000000, 0x7, 0x5, 0x6, 0x5, 0x7fff, 0x0, 0x8, 0x2a, 0x100, 0x1, 0x80000000, 0xffff, 0x4, 0xffffffff, 0x9, 0x1, 0x3000, 0xfffffffd, 0x7, 0xe39, 0xffffffff, 0xffff, 0xfffffffc, 0x6e, 0xfffffbdf, 0x0, 0x1, 0xfff, 0x101, 0xfffffffc, 0x7ff, 0x4, 0x9, 0x4, 0x7, 0x5, 0x10000, 0x81, 0x3, 0x1, 0x4, 0x4, 0xfffffff7, 0x9, 0x3, 0x3, 0x141, 0x10000, 0x4330, 0x50, 0x0, 0x101, 0xffffffff, 0x7292, 0x0, 0xfffffffe, 0x0, 0x101, 0x9, 0x4, 0x0, 0x6, 0x1000, 0x2a6a, 0x5, 0x6, 0x7, 0x4, 0x1, 0x7, 0x9, 0x1000, 0x5, 0x7, 0x8, 0xa4, 0x22a, 0x27, 0xe922, 0x1, 0x3, 0xa, 0x9, 0x9, 0x2, 0x7f, 0x0, 0xb529, 0x1, 0x1, 0x8, 0x20502926, 0x5, 0x4, 0x1, 0xfffffffc, 0x7f28, 0xdd, 0x7, 0x2000, 0x7, 0x9, 0x3, 0x5, 0xfffffffc, 0x9, 0x3, 0x9, 0x846, 0x1, 0xd00, 0x4, 0x8, 0x78, 0x5, 0xb, 0xfff, 0x40, 0x6, 0x6, 0x7fff, 0x4, 0x3, 0x80000000, 0x3, 0x3, 0x4efd, 0x473, 0x8, 0x2, 0x6, 0xee2, 0x7, 0xffffff33, 0x401, 0x5, 0x200, 0x7, 0x1, 0x6, 0x0, 0x3, 0x3, 0x1, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffc00, 0x8, 0x0, 0x6, 0x0, 0x6, 0x5, 0x0, 0x2, 0xe, 0xea, 0x8, 0x8, 0x27c, 0x8, 0xfffffffb, 0x1, 0x9, 0xd, 0x9, 0x3, 0x5, 0x0, 0x5, 0x0, 0x7f, 0x5, 0x81, 0x8, 0x3, 0x1, 0x7, 0x9a, 0x18000, 0x8, 0x1, 0xe, 0xf, 0x401, 0x7, 0xb3, 0xb, 0x0, 0xff, 0x6dfd, 0x2ef3981e, 0x9, 0x3, 0x2, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0x80000000, 0x8, 0xd3, 0x9, 0x6, 0x10, 0xc, 0x43f1, 0x66, 0xfff, 0x6, 0xf, 0xfffffff1, 0xfffffffc, 0x7, 0x47, 0x9, 0x8, 0x6f, 0x6, 0x40000000, 0x0, 0x0, 0x9, 0xc58, 0x8, 0x9, 0x3, 0x4, 0x6, 0x80000000, 0x7, 0xe, 0x2, 0x8, 0x7fff, 0x0, 0x6, 0x79aed2cd, 0x5, 0x6, 0x7, 0xff, 0x9913, 0x803, 0x1, 0x400, 0x7, 0x5, 0x4e6, 0x8, 0x1, 0x7, 0x3, 0xf, 0x6, 0x1, 0x1b, 0xfd8, 0x9e2, 0x400, 0x0, 0x8fc, 0x4, 0x8000, 0x3, 0x1, 0x7, 0x80000000, 0x1, 0x7, 0x0, 0xfffffffd, 0x0, 0x400, 0x1, 0x8e, 0x0, 0x6, 0x1, 0x0, 0x7fffffff, 0x7, 0x64d, 0x4, 0x10, 0x0, 0x3, 0x9a8, 0x7ff, 0x85, 0xfe6c, 0xffff, 0x4, 0x8, 0x3ff, 0x6, 0x2, 0xc0c0, 0x6, 0x1, 0x10000, 0x0, 0x1eb0683d, 0x0, 0x10000, 0x7, 0x492, 0x8, 0x5, 0x7b, 0xfffffbff, 0x80000000, 0x101, 0x8, 0x8, 0x0, 0x0, 0x7, 0x81, 0xbab, 0xfffffffd, 0xb79, 0x2, 0x5, 0x7f, 0x8, 0x4, 0x2, 0x4, 0x6, 0x5, 0x1, 0x40, 0xf9, 0x2, 0x5, 0x2, 0x5, 0x10, 0x9fa, 0x8, 0x5, 0x9873, 0x401, 0x5, 0x1, 0x3, 0x7, 0xbdf, 0xfffff001, 0x0, 0x7, 0x4, 0xa, 0x9fe, 0x50, 0x100, 0x6, 0x842, 0x0, 0x6479, 0x6, 0xff, 0x1, 0xfffffffe, 0x9, 0xd, 0xffff, 0x3, 0x1, 0x4, 0x10001, 0x10000, 0x32, 0x6, 0x101, 0x788, 0x2, 0x5, 0x3, 0x3, 0x3, 0xfb, 0x5, 0x8001, 0x1, 0x9, 0x7fff, 0x0, 0x1, 0x8, 0x9664, 0xd5a, 0x8a2, 0x77d4ffc3, 0x8001, 0x1, 0x6ce, 0x1, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x800}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffc8}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffa}]]}, {0x55, 0x6, "cb245c2eafcefaa33ae64419ff97a1e5fdf488b8d78638997460fc20d49d997ac38a575dcecf2f3cb5d4df93d3f6c2ccd817eab53589bbea92d1c89307a3088b2a5e4ec3f64b67854b5cb070a793d49cc8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0xb4, 0x13, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x16cf}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xeb2c}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x4, 0x7, 0xb33, 0x5}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x2, 0x7, 0x2}}]}, {0x2f, 0x6, "2b2ba208b33f07f31ce91fee5c2a335c7891a599a3f5a9041fe3aa7423e6a73660dcd374e02bf1bd4f012c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0x1054, 0xa, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0xffffffff, 0x2, 0x3, 0xb2c0}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x676}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x1b7c}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x4}) 2.808751465s ago: executing program 7 (id=2726): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) writev(r1, &(0x7f0000000180)=[{&(0x7f00000005c0)="f3", 0x1}, {&(0x7f0000000000)="bc62cd340703498cb8b5827db3604891d496e29f6d7bed30b0c92dcbb1e6a964", 0x20}], 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) open(&(0x7f00009e1000)='./file0\x00', 0x60900, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) eventfd2(0xff, 0x80801) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1100000004000000040000000200000010000000", @ANYRES16=r4, @ANYBLOB, @ANYRES64, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0xa0280, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) 2.488231257s ago: executing program 5 (id=2727): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x80}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0xf00, 0x5e}) 2.240312071s ago: executing program 5 (id=2728): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) io_uring_setup(0x10, &(0x7f0000001240)={0x0, 0x3eda, 0x40, 0x1, 0x167}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) syslog(0x4, &(0x7f00000001c0)=""/211, 0xd3) 2.135392726s ago: executing program 5 (id=2729): syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @loopback, {[@timestamp_addr={0x44, 0xc, 0x5, 0x3, 0x0, [{@loopback}]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) socket(0x1d, 0x2, 0x6) r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(r0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0), 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4008800) mknodat$loop(0xffffffffffffffff, 0x0, 0x100, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) io_uring_setup(0x7327, &(0x7f00000000c0)={0x0, 0xebcc, 0x1, 0x1, 0x24}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write$binfmt_script(r5, 0x0, 0x0) syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x7faa, 0x0, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000400)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) 2.004323786s ago: executing program 8 (id=2730): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x29, 0x4, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) sendto$inet6(r2, 0x0, 0xa, 0x20891, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) write$P9_RSTATu(r3, &(0x7f0000000080)={0x233, 0x7d, 0x2, {{0x500, 0xf2, 0x0, 0x4, {0x0, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0xf, '\xcf\xc2m\xd7\xc5\xb4\x99\xbf\xb4+\x93\x80~\x8bZ', 0x5d, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\xa6\x1dR\xc3l\xde{\a\xdb\xda\xb2\x88K\xaf\x05\x00~\x04\xe6\x9d\xb0\xc3\xca\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x9e\x95?\xa5\xe0R\x15t\x80\xe8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\xff\xff\xff\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4U\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0xee01}}, 0x233) r4 = socket(0x10, 0x803, 0x0) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/pid_for_children\x00') r6 = gettid() tkill(r6, 0xb) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=@RTM_GETNSID={0x34, 0x5a, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NETNSA_FD={0x8, 0x3, r5}, @NETNSA_FD={0x8, 0x3, r5}, @NETNSA_PID={0x8, 0x2, r6}, @NETNSA_NSID={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040880}, 0x200080c0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xffff, 0x12, 0x6}}]}]}]}, 0x38}}, 0x0) 1.7919722s ago: executing program 8 (id=2731): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, 0x0, 0x400, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000002400)={0x5, 0x3, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x3}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}}) read$FUSE(r1, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x4fcb6233, {0x0, 0xfffffff7, 0x0, '\x00', {0x1, 0x803, 0xadf, 0x804, r2, r3, 0xc000, '\x00', 0x100000007, 0x8, 0xffffffff, 0x3, {0x8, 0x8}, {0x7, 0x3}, {0x32, 0x7}, {0x1000000000, 0xa00}, 0x401, 0xa, 0xfffffffe, 0x6}}}}) getegid() getgid() socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) rt_sigsuspend(0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect(0xffffffffffffffff, &(0x7f0000000500)=@ll={0x11, 0x7, 0x0, 0x1, 0x10, 0x6, @local}, 0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1.675854082s ago: executing program 2 (id=2732): syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) (async) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) r1 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom$rxrpc(r1, &(0x7f0000000340)=""/180, 0xb4, 0x0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @rand_addr=0x64010100}}, 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, r2, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) rseq(&(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x2, 0x7fffffff, 0x3, 0x9}, 0x6}, 0x20, 0x0, 0x0) (async) rseq(&(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x2, 0x7fffffff, 0x3, 0x9}, 0x6}, 0x20, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) (async) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x80000002, 0x1b9}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r7, 0x118, &(0x7f0000000500), 0x0, 0x4) openat$cdrom(0xffffff9c, &(0x7f0000000100), 0x101082, 0x0) (async) r9 = openat$cdrom(0xffffff9c, &(0x7f0000000100), 0x101082, 0x0) ioctl$CDROM_DEBUG(r9, 0x5330, 0x1) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x28, 0x4007, @fd_index=0x8, 0x1000, &(0x7f00000000c0), 0x0, 0x1, 0x1}) (async) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x28, 0x4007, @fd_index=0x8, 0x1000, &(0x7f00000000c0), 0x0, 0x1, 0x1}) io_uring_enter(r6, 0x47f6, 0x0, 0x2, 0x0, 0x0) r10 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_REGISTER(r10, &(0x7f00000000c0), 0x2) getsockopt(r0, 0x4e, 0x8, &(0x7f0000000400)=""/13, &(0x7f0000000440)=0xd) r11 = socket$inet(0x2, 0x80004, 0x544) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000000)) 1.183634232s ago: executing program 5 (id=2733): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0xc989, 0x0, 0xffffffdf, 0x173}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r0, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 1.182631555s ago: executing program 7 (id=2734): openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7fffffff, 0x4) pipe(&(0x7f00000001c0)) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000000), 0x8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000440)={0x2, 0x20e8d, 0x1, {0x2, @sliced={0x7, [0x3, 0x5, 0x3, 0x0, 0x5f, 0x3edd, 0x1ff, 0xfffe, 0x5, 0x88, 0x7d, 0x3, 0x9, 0x0, 0x0, 0xff36, 0x5, 0xf001, 0x0, 0x41, 0x4, 0x0, 0xfff, 0x800, 0xfffc, 0x5, 0x0, 0xfff7, 0x1, 0x6, 0x0, 0x71, 0x200, 0x8, 0x8, 0xfc00, 0x1, 0x6, 0xa, 0xffc, 0x9, 0x4, 0xd3e, 0xd78, 0x8, 0xff, 0x0, 0x2], 0x1}}}) symlinkat(&(0x7f0000000240)='./file0\x00', r0, &(0x7f00000000c0)='./file0/file0/file0\x00') mount$overlay(0x0, 0x0, &(0x7f0000000440), 0x41008, &(0x7f0000000140)={[], [{@smackfshat={'smackfshat', 0x3d, '/dev/kvm\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-::-'}}, {@subj_type={'subj_type', 0x3d, '\x00'}}]}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) openat$nullb(0xffffffffffffff9c, 0x0, 0x2c240, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x7, 0x7, 0x9, 0x7}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000180)) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) chdir(&(0x7f00000003c0)='./bus\x00') creat(&(0x7f0000000040)='./file0\x00', 0x51) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4a, &(0x7f0000000100), 0x4) 1.117247368s ago: executing program 5 (id=2735): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r1, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) r2 = syz_io_uring_setup(0x53f, &(0x7f0000000340)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfd}, &(0x7f00000000c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xec, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x38, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x0, 0xca, 0x0, &(0x7f0000000240)=""/202, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)="84", 0x2}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) 1.034207815s ago: executing program 5 (id=2736): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x3f, 0x1, 0x0, r1, 0x0}]) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f00000000c0)=0x6bf, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xf7, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x26, 0x301, 0x20010002, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) r7 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r7, 0x8002f515, &(0x7f0000000080)) 521.010577ms ago: executing program 8 (id=2737): syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmsg(0xffffffffffffffff, 0x0, 0x40000100) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x80047453, &(0x7f00000000c0)={0x18, 0x0, {0x1, @remote, 'veth0_to_team\x00'}}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000180)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r3, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) syz_open_pts(r3, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, 0x0) fcntl$dupfd(r1, 0x406, r1) sendmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) r4 = semget$private(0x0, 0x2, 0xe6) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000002400)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xea, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000003010101"], 0x14}}, 0x0) 0s ago: executing program 7 (id=2738): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x2) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x20, 0x0, 0x0) r3 = fanotify_init(0xf00, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="757365722e0003be8a30eb9be2f2a901bfceb4255c9c0a642aa48498f5d48e13beda51728a9fc06b9a805f04df424ddb34d1c05045374064819021ac84ca33bd50308b2b1ae301bb2eddb69e9c81e5c2a5a297610bf6ee0458f6dc68da80f06f670deaa5f367ee23a513b1235b4cdf042bb14ae58256179f209ec978d405007d4b82aed8b6742c8daf48ac84c45eece8c25366abf9bb61cd25782c7b288feeeea83eec12f3cca8bf1ca12ad99bf7ce4b0713037b5b3c561394e371517d01b8f94efbc62297d372b54518586bb5c1f7169a15d17888d5bcbbd0e63c7c0e705209cd14f275"]) r4 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r8 = syz_io_uring_setup(0xd, &(0x7f0000000300)={0x0, 0xbcb3, 0x8000, 0x0, 0x153}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mkdirat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x898a, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0/../file0\x00', 0x5) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r7, 0x0}) io_uring_enter(r8, 0x3516, 0x3e44, 0x8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r12, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="2600b51f82f5e77bd49e247c83336ff670c4e408dd9b3d3702be0ff2832972b8aa2263d71ea8b08f6fddef2714f2a34f5bdc1457bc1938c42af37b77e632275b452801df3d06f45ddbeb605bc16ff43ec89f3b0ec069df79ad72703d09270d1a7f42ae96df5794e5bbe58e411bb2cd7d52bace865c6e0cfe018920e58341f71619360db751f38baadde70268a67a8337d8752b6daaec127a6442bc82e73134cc5d7b587f8087a45a0a9d0e8b2ff9067931fd1b1018cd15985fb770d506", @ANYRES16=r6, @ANYBLOB="000228bd7000fddbdf253800000008000300", @ANYRES32=r11, @ANYBLOB="0c009900080000005b0000000c0058008000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000540)=ANY=[@ANYBLOB="481bce06", @ANYRESOCT=r1, @ANYBLOB="010000000000000000000700000008000300a8279f70f294e9e4ab031aade079bc949cccdce143a55716ba78b4d2819719548b9736f51b9f30bb9ed4c84a0eb4c1da7cea0dd587881e027f5b23741ae09c5cb7d1e8cba299b090a0672a210bd6", @ANYRES32=r11, @ANYBLOB="0b00990004000000190000001400040073797a5f74756e00000000000000000008000500060000000000040070696d36726567300000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x24000085) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000d678fa00"], 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000feffffff000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r15 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r15, 0x1, 0x32, &(0x7f0000000900)=r14, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) fanotify_mark(r3, 0x105, 0x5000003a, r1, 0x0) 0s ago: executing program 7 (id=2739): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r0, r1, 0x0, 0x4) socket$nl_generic(0x11, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x2, 0x7fffffff}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003500)=@newtaction={0x1288, 0x30, 0x1, 0x0, 0x1}, 0x1288}, 0x1, 0x0, 0x0, 0x4004045}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000003b00010325bd7000fadbdf2501edd77114522ff6000000"], 0x14}}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b0400000000000000000200000048000480440001800b000100657874686472000034000280080004400000000008000740000000000800064000000001050002000000000008000340000000000800f540000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x4085) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x7}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e1d, 0x4, @loopback, 0x40}, 0x1c) sendto$inet(r1, &(0x7f0000001080)="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", 0x1000, 0x4c044, &(0x7f0000000180)={0x2, 0x4e24, @local}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private2}, 0x1c) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000000)={0x0, @bt={0x8a1, 0x96, 0x1, 0x2, 0xd59f83, 0x19ef, 0x9, 0x9, 0xffffffff, 0x4, 0x20027ff, 0x2880, 0x2, 0xbb5, 0xf, 0x8, {0x8}, 0xd0, 0x89}}) process_mrelease(0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ge0: left promiscuous mode [ 470.681532][T14215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2209'. [ 470.782116][T14204] netlink: 'syz.5.2206': attribute type 1 has an invalid length. [ 470.784925][T14204] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2206'. [ 471.114073][T14227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2211'. [ 471.122708][T14227] 8021q: VLANs not supported on lo [ 471.126833][T14227] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2211'. [ 471.363275][T14243] lo speed is unknown, defaulting to 1000 [ 471.367748][T14243] wg2 speed is unknown, defaulting to 1000 [ 471.600468][T14251] netlink: 'syz.2.2217': attribute type 4 has an invalid length. [ 471.610558][T14251] netlink: 'syz.2.2217': attribute type 4 has an invalid length. [ 471.685735][ T5976] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 471.931545][ T5976] usb 10-1: Using ep0 maxpacket: 32 [ 471.941856][ T5976] usb 10-1: config 0 has an invalid interface number: 209 but max is 0 [ 471.947435][ T5976] usb 10-1: config 0 has no interface number 0 [ 471.953827][ T5976] usb 10-1: config 0 interface 209 has no altsetting 0 [ 471.963889][ T5976] usb 10-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 471.990665][ T5976] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.995091][ T5976] usb 10-1: Product: syz [ 472.035639][ T5976] usb 10-1: Manufacturer: syz [ 472.041682][ T5976] usb 10-1: SerialNumber: syz [ 472.076819][ T5976] usb 10-1: config 0 descriptor?? [ 472.337920][T14243] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2215'. [ 472.423482][ T5935] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 472.429350][ T5935] Bluetooth: hci0: Injecting HCI hardware error event [ 472.436132][ T5297] Bluetooth: hci0: hardware error 0x00 [ 472.481612][ T5976] usb 10-1: USB disconnect, device number 35 [ 472.772033][T14262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2221'. [ 473.610094][ T5935] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 473.614186][ T5935] Bluetooth: hci4: Injecting HCI hardware error event [ 473.621457][ T5938] Bluetooth: hci4: hardware error 0x00 [ 474.011318][T14277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2226'. [ 474.066850][T14277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2226'. [ 474.275787][T14289] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2229'. [ 474.426795][T14293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2230'. [ 474.475280][T14293] netlink: 'syz.2.2230': attribute type 23 has an invalid length. [ 474.517634][T14299] afs: Unknown parameter 'measure' [ 474.637253][ T5297] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 475.871724][T14316] loop6: detected capacity change from 0 to 2640 [ 475.879001][T14316] buffer_io_error: 16 callbacks suppressed [ 475.879423][T14316] Buffer I/O error on dev loop6, logical block 0, async page read [ 475.886159][T14316] Buffer I/O error on dev loop6, logical block 0, async page read [ 475.890816][T14316] Buffer I/O error on dev loop6, logical block 0, async page read [ 475.894731][T14316] Buffer I/O error on dev loop6, logical block 0, async page read [ 475.899991][T14316] Buffer I/O error on dev loop6, logical block 0, async page read [ 475.903775][T14316] Buffer I/O error on dev loop6, logical block 0, async page read [ 475.907040][T14316] Buffer I/O error on dev loop6, logical block 0, async page read [ 475.910866][T14316] Buffer I/O error on dev loop6, logical block 0, async page read [ 475.913953][T14316] ldm_validate_partition_table(): Disk read failed. [ 475.916565][T14316] Buffer I/O error on dev loop6, logical block 0, async page read [ 475.919991][T14316] Buffer I/O error on dev loop6, logical block 0, async page read [ 475.923003][T14316] Dev loop6: unable to read RDB block 0 [ 475.927750][T14316] loop6: unable to read partition table [ 475.930773][T14316] loop_reread_partitions: partition scan of loop6 (3Ÿ Ύ‚³˜) failed (rc=-5) [ 476.004819][ T5938] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 476.357790][ T6029] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 476.492019][T14334] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 476.495865][T14334] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 476.528584][ T6029] usb 11-1: Using ep0 maxpacket: 32 [ 476.535474][ T6029] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 476.543899][ T6029] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 476.548818][ T6029] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 476.553688][ T6029] usb 11-1: Product: syz [ 476.556618][ T6029] usb 11-1: Manufacturer: syz [ 476.559260][ T6029] usb 11-1: SerialNumber: syz [ 476.564098][ T6029] usb 11-1: config 0 descriptor?? [ 476.568105][T14324] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 476.793588][T13521] usb 11-1: USB disconnect, device number 6 [ 477.406132][T14339] __nla_validate_parse: 2 callbacks suppressed [ 477.406151][T14339] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2245'. [ 478.092978][T14350] netlink: 'syz.5.2247': attribute type 13 has an invalid length. [ 478.415837][T14352] loop6: detected capacity change from 0 to 2640 [ 478.421413][T14352] ldm_validate_partition_table(): Disk read failed. [ 478.423914][T14352] Dev loop6: unable to read RDB block 0 [ 478.426192][T14352] loop6: unable to read partition table [ 478.429758][T14352] loop_reread_partitions: partition scan of loop6 (3Ÿ Ύ‚³˜) failed (rc=-5) [ 479.014234][T14367] program syz.6.2250 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 479.094629][ T1108] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 479.098298][ T1108] ata1.00: irq_stat 0x40000000 [ 479.100528][ T1108] ata1.00: failed command: ZAC MANAGEMENT OUT [ 479.103212][ T1108] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 11 nodata 0 in [ 479.103212][ T1108] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 479.116461][ T1108] ata1.00: status: { DRDY ERR } [ 479.118857][ T1108] ata1.00: error: { ABRT } [ 479.120843][ T1108] ata1.00: device reported invalid CHS sector 0 [ 479.224623][T14367] lo speed is unknown, defaulting to 1000 [ 479.227313][T14367] wg2 speed is unknown, defaulting to 1000 [ 479.457836][T14376] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 479.460412][T14376] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 479.465251][T14376] vhci_hcd vhci_hcd.0: Device attached [ 479.757176][ T60] usb 48-1: SetAddress Request (26) to port 0 [ 479.757234][ T60] usb 48-1: new SuperSpeed USB device number 26 using vhci_hcd [ 479.803506][T14381] overlayfs: metacopy with no lower data found - abort lookup (/bus) [ 480.058547][T14377] vhci_hcd: connection reset by peer [ 480.067359][ T8337] vhci_hcd vhci_hcd.5: stop threads [ 480.072347][ T8337] vhci_hcd vhci_hcd.5: release socket [ 480.074888][ T8337] vhci_hcd vhci_hcd.5: disconnect device [ 480.954488][ T6029] usb 10-1: new low-speed USB device number 36 using dummy_hcd [ 480.970095][T14394] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 480.973003][T14394] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 480.986755][T14394] vhci_hcd vhci_hcd.0: Device attached [ 480.998643][T14395] vhci_hcd: connection closed [ 480.999054][ T8349] vhci_hcd vhci_hcd.2: stop threads [ 481.002959][ T8349] vhci_hcd vhci_hcd.2: release socket [ 481.004941][ T8349] vhci_hcd vhci_hcd.2: disconnect device [ 481.138415][ T6029] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.141933][ T6029] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 481.145009][ T6029] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 481.149324][ T6029] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.152721][ T6029] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 481.155933][ T6029] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.169123][ T6029] hub 10-1:1.0: bad descriptor, ignoring hub [ 481.171184][ T6029] hub 10-1:1.0: probe with driver hub failed with error -5 [ 481.173844][ T6029] cdc_wdm 10-1:1.0: skipping garbage [ 481.175713][ T6029] cdc_wdm 10-1:1.0: skipping garbage [ 481.197744][ T6029] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 481.199875][ T6029] cdc_wdm 10-1:1.0: Unknown control protocol [ 481.387555][T14402] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 481.397553][T14402] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 481.415449][T14402] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 481.499887][ T8519] usb 10-1: USB disconnect, device number 36 [ 481.605408][T14415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2263'. [ 481.863142][ T8519] usb 10-1: new low-speed USB device number 37 using dummy_hcd [ 482.025157][ T8519] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.029975][ T8519] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 482.035158][ T8519] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 482.038963][ T8519] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.045443][ T8519] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 482.047093][ C3] ata1: illegal qc_active transition (00000000->00001000) [ 482.049444][ T8519] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.064925][ T8519] hub 10-1:1.0: bad descriptor, ignoring hub [ 482.067846][ T8519] hub 10-1:1.0: probe with driver hub failed with error -5 [ 482.072167][ T8519] cdc_wdm 10-1:1.0: skipping garbage [ 482.074596][ T8519] cdc_wdm 10-1:1.0: skipping garbage [ 482.082770][ T8519] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 482.085499][ T8519] cdc_wdm 10-1:1.0: Unknown control protocol [ 482.388205][ T6020] usb 10-1: USB disconnect, device number 37 [ 482.402338][ T1108] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 482.406718][ T1108] ata1.00: configured for UDMA/100 [ 482.976824][T14451] loop6: detected capacity change from 0 to 2640 [ 482.980174][T13300] buffer_io_error: 32 callbacks suppressed [ 482.980183][T13300] Buffer I/O error on dev loop6, logical block 0, async page read [ 482.986358][T13300] Buffer I/O error on dev loop6, logical block 0, async page read [ 482.988951][T13300] Buffer I/O error on dev loop6, logical block 0, async page read [ 482.991747][T13300] Buffer I/O error on dev loop6, logical block 0, async page read [ 482.994791][T13300] Buffer I/O error on dev loop6, logical block 0, async page read [ 482.997860][T13300] Buffer I/O error on dev loop6, logical block 0, async page read [ 483.000511][T13300] Buffer I/O error on dev loop6, logical block 0, async page read [ 483.006295][T13300] Buffer I/O error on dev loop6, logical block 0, async page read [ 483.010198][T13300] ldm_validate_partition_table(): Disk read failed. [ 483.013249][T13300] Buffer I/O error on dev loop6, logical block 0, async page read [ 483.017028][T13300] Buffer I/O error on dev loop6, logical block 0, async page read [ 483.021376][T13300] Dev loop6: unable to read RDB block 0 [ 483.024757][T13300] loop6: unable to read partition table [ 483.043434][T14451] ldm_validate_partition_table(): Disk read failed. [ 483.046465][T14451] Dev loop6: unable to read RDB block 0 [ 483.049084][T14451] loop6: unable to read partition table [ 483.056882][T14451] loop_reread_partitions: partition scan of loop6 (3Ÿ Ύ‚³˜) failed (rc=-5) [ 483.530950][ T5938] Bluetooth: hci2: command 0x0c1a tx timeout [ 483.902863][T14470] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 483.906148][T14470] overlayfs: failed to set xattr on upper [ 483.908680][T14470] overlayfs: ...falling back to redirect_dir=nofollow. [ 483.911684][T14470] overlayfs: ...falling back to index=off. [ 483.914267][T14470] overlayfs: ...falling back to uuid=null. [ 483.922002][T14470] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 485.158943][T14489] netlink: 'syz.5.2287': attribute type 10 has an invalid length. [ 485.167015][ T60] usb 48-1: device descriptor read/8, error -110 [ 485.218929][T14489] netlink: 'syz.5.2287': attribute type 10 has an invalid length. [ 485.298277][T14496] netlink: 'syz.0.2289': attribute type 3 has an invalid length. [ 485.301370][T14496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2289'. [ 485.338769][T14499] sg_read: process 283 (syz.0.2290) changed security contexts after opening file descriptor, this is not allowed. [ 485.649536][ T60] usb usb48-port1: attempt power cycle [ 485.756059][ T5935] Bluetooth: hci2: command 0x0c1a tx timeout [ 486.017372][T14510] loop6: detected capacity change from 0 to 2640 [ 486.021624][T13300] ldm_validate_partition_table(): Disk read failed. [ 486.035776][T13300] Dev loop6: unable to read RDB block 0 [ 486.038284][T13300] loop6: unable to read partition table [ 486.041666][T14510] ldm_validate_partition_table(): Disk read failed. [ 486.044366][T14510] Dev loop6: unable to read RDB block 0 [ 486.046387][T14510] loop6: unable to read partition table [ 486.048425][T14510] loop_reread_partitions: partition scan of loop6 (3Ÿ Ύ‚³˜) failed (rc=-5) [ 486.059370][ T5346] ldm_validate_partition_table(): Disk read failed. [ 486.062378][ T5346] Dev loop6: unable to read RDB block 0 [ 486.065363][ T5346] loop6: unable to read partition table [ 486.290106][ T60] usb usb48-port1: unable to enumerate USB device [ 486.309784][T14519] FAULT_INJECTION: forcing a failure. [ 486.309784][T14519] name failslab, interval 1, probability 0, space 0, times 0 [ 486.316173][T14519] CPU: 3 UID: 0 PID: 14519 Comm: syz.6.2297 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.316206][T14519] Tainted: [L]=SOFTLOCKUP [ 486.316213][T14519] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 486.316226][T14519] Call Trace: [ 486.316233][T14519] [ 486.316240][T14519] dump_stack_lvl+0x16c/0x1f0 [ 486.316283][T14519] should_fail_ex+0x512/0x640 [ 486.316305][T14519] ? __kmalloc_cache_noprof+0x5f/0x800 [ 486.316332][T14519] should_failslab+0xc2/0x120 [ 486.316361][T14519] __kmalloc_cache_noprof+0x80/0x800 [ 486.316385][T14519] ? lowpan_enable_set+0x43/0x1f0 [ 486.316414][T14519] ? __pfx_lowpan_enable_set+0x10/0x10 [ 486.316439][T14519] ? lowpan_enable_set+0x43/0x1f0 [ 486.316463][T14519] lowpan_enable_set+0x43/0x1f0 [ 486.316485][T14519] ? __pfx_lowpan_enable_set+0x10/0x10 [ 486.316507][T14519] simple_attr_write_xsigned.constprop.0.isra.0+0x200/0x310 [ 486.316541][T14519] ? __pfx_simple_attr_write_xsigned.constprop.0.isra.0+0x10/0x10 [ 486.316577][T14519] debugfs_attr_write+0x76/0xa0 [ 486.316604][T14519] ? __pfx_debugfs_attr_write+0x10/0x10 [ 486.316627][T14519] vfs_write+0x2a0/0x11d0 [ 486.316656][T14519] ? __pfx___mutex_lock+0x10/0x10 [ 486.316686][T14519] ? __pfx_vfs_write+0x10/0x10 [ 486.316709][T14519] ? find_held_lock+0x2b/0x80 [ 486.316741][T14519] ? __fget_files+0x20e/0x3c0 [ 486.316775][T14519] ksys_write+0x12a/0x250 [ 486.316801][T14519] ? __pfx_ksys_write+0x10/0x10 [ 486.316828][T14519] ? do_user_addr_fault+0x843/0x1370 [ 486.316855][T14519] __do_fast_syscall_32+0xe8/0x680 [ 486.316886][T14519] do_fast_syscall_32+0x32/0x80 [ 486.316914][T14519] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 486.316937][T14519] RIP: 0023:0xf70ad579 [ 486.316951][T14519] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 486.316966][T14519] RSP: 002b:00000000f549d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 486.316982][T14519] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 486.316991][T14519] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 486.317000][T14519] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 486.317008][T14519] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 486.317017][T14519] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 486.317038][T14519] [ 486.567139][ T60] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 486.741619][ T60] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 486.745709][ T60] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.749447][ T60] usb 10-1: Product: syz [ 486.751606][ T60] usb 10-1: Manufacturer: syz [ 486.753570][ T60] usb 10-1: SerialNumber: syz [ 486.758515][ T60] usb 10-1: config 0 descriptor?? [ 486.980744][ T60] usb 10-1: USB disconnect, device number 38 [ 487.129580][T14529] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 487.132491][T14529] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 487.136948][T14529] vhci_hcd vhci_hcd.0: Device attached [ 487.433026][ T60] usb 50-1: SetAddress Request (2) to port 0 [ 487.436419][ T60] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 487.978341][ T5935] Bluetooth: hci2: command 0x0c1a tx timeout [ 488.014778][T14530] vhci_hcd: connection reset by peer [ 488.017607][ T8350] vhci_hcd vhci_hcd.6: stop threads [ 488.020177][ T8350] vhci_hcd vhci_hcd.6: release socket [ 488.024750][ T8350] vhci_hcd vhci_hcd.6: disconnect device [ 488.208988][T14551] Bluetooth: MGMT ver 1.23 [ 488.519402][T14561] random: crng reseeded on system resumption [ 488.558933][T14565] binder: 14564:14565 ioctl c0189376 80000200 returned -22 [ 488.792271][T14573] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2310'. [ 490.373432][ T5938] Bluetooth: hci2: command 0x0c1a tx timeout [ 490.426426][ T5935] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 490.852896][T14598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2314'. [ 491.310532][T14611] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2316'. [ 491.311463][ T5935] Bluetooth: hci2: unexpected event for opcode 0x0c14 [ 491.796227][T14619] binder: 14617:14619 ioctl 0 80000040 returned -22 [ 492.816417][ C2] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 492.863054][ T60] usb 50-1: device descriptor read/8, error -110 [ 493.295751][ T60] usb usb50-port1: attempt power cycle [ 493.623745][T14637] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 493.626600][T14637] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 493.632587][ T40] kauditd_printk_skb: 1284 callbacks suppressed [ 493.632603][ T40] audit: type=1800 audit(1767203798.681:6624): pid=14631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2324" name="cpuset.memory_pressure_enabled" dev="9p" ino=71827935 res=0 errno=0 [ 493.666205][T14637] vhci_hcd vhci_hcd.0: Device attached [ 493.688343][T14642] 9pnet_virtio: no channels available for device syz [ 493.740546][ T60] usb 50-1: SetAddress Request (5) to port 0 [ 493.744169][ T60] usb 50-1: new SuperSpeed USB device number 5 using vhci_hcd [ 493.997008][ T3242] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 494.066888][T14647] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2328'. [ 494.168072][ T3242] usb 11-1: Using ep0 maxpacket: 8 [ 494.180828][ T3242] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 494.184613][ T3242] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 494.187821][ T3242] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.235005][ T8519] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 494.262860][ T3242] usb 11-1: config 0 descriptor?? [ 495.251424][T14668] batman_adv: batadv0: Adding interface: dummy0 [ 495.254320][T14668] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.346067][T14668] batman_adv: batadv0: Interface activated: dummy0 [ 495.360284][T14672] batadv0: mtu less than device minimum [ 495.364357][T14672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 495.370168][T14672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 495.375757][T14672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 495.381304][T14672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 495.386950][T14672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 495.392577][T14672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 495.398080][T14672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 495.403751][T14672] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 495.948782][T14639] vhci_hcd: connection reset by peer [ 495.952924][ T8337] vhci_hcd vhci_hcd.6: stop threads [ 495.956422][ T8337] vhci_hcd vhci_hcd.6: release socket [ 495.959328][ T8337] vhci_hcd vhci_hcd.6: disconnect device [ 496.251851][ T3242] iowarrior 11-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 496.258571][ T3242] usb 11-1: USB disconnect, device number 7 [ 496.809775][T14690] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 496.811960][T14690] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 496.814681][T14690] vhci_hcd vhci_hcd.0: Device attached [ 497.038010][T14692] vhci_hcd: connection closed [ 497.092143][ T8348] vhci_hcd vhci_hcd.6: stop threads [ 497.096765][ T8348] vhci_hcd vhci_hcd.6: release socket [ 497.108023][ T8348] vhci_hcd vhci_hcd.6: disconnect device [ 497.774144][T14714] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 498.216383][T14719] lo speed is unknown, defaulting to 1000 [ 498.219107][T14719] wg2 speed is unknown, defaulting to 1000 [ 498.311921][T14724] fuse: Unknown parameter '0x00000000000000050x0000000000000005' [ 499.028771][ T40] audit: type=1326 audit(1767203803.732:6625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14738 comm="syz.0.2351" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 499.037484][ T40] audit: type=1326 audit(1767203803.732:6626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14738 comm="syz.0.2351" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 499.045943][ T40] audit: type=1326 audit(1767203803.751:6627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14738 comm="syz.0.2351" exe="/syz-executor" sig=0 arch=40000003 syscall=77 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 499.054752][ T40] audit: type=1326 audit(1767203803.751:6628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14738 comm="syz.0.2351" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 499.062820][ T40] audit: type=1326 audit(1767203803.751:6629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14738 comm="syz.0.2351" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 499.071582][ T40] audit: type=1326 audit(1767203803.761:6630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14738 comm="syz.0.2351" exe="/syz-executor" sig=0 arch=40000003 syscall=187 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 499.079414][ T40] audit: type=1326 audit(1767203803.761:6631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14738 comm="syz.0.2351" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 499.087089][ T40] audit: type=1326 audit(1767203803.761:6632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14738 comm="syz.0.2351" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 499.095082][ T40] audit: type=1326 audit(1767203803.761:6633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14738 comm="syz.0.2351" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 499.103518][ T40] audit: type=1326 audit(1767203803.761:6634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14738 comm="syz.0.2351" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 499.191711][ T60] usb 50-1: device descriptor read/8, error -110 [ 499.310835][ T60] usb usb50-port1: unable to enumerate USB device [ 499.406483][ T3242] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 499.566785][ T3242] usb 11-1: Using ep0 maxpacket: 32 [ 499.576247][ T3242] usb 11-1: config 1 interface 0 has no altsetting 0 [ 499.581703][ T3242] usb 11-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.40 [ 499.585765][ T3242] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.589944][ T3242] usb 11-1: Product: Π‚ [ 499.591813][ T3242] usb 11-1: Manufacturer: ζΌžδ™¨Ι½ΰ‘¦ο™η²·λ©œη«΄θŽ”ζ©γ •κ’¨ι‘ΆΰͺΊηœΌξ˜κΏ³γ‰œα‰„γ₯Šΰ­‘βƒŸγ’–β›€α‘ͺβ”Ÿηžγ‚”ο§Ήμͺšβͺκ»λ―£ιŽ‘η‹­οœξ™‡δ«θ…”γ½ξ‚λ¨£ζ€–κ΄’ί§κ¦–δ˜Ώα΅Žΰ£ˆκ„ε•„λ‚―γΰ·°μΈ­ΰ°‚κ¬€αŠ€ΩΌδ΅₯ηΎ ιƒͺ喖뗰훐 [ 499.601493][ T3242] usb 11-1: SerialNumber: syz [ 500.069403][T14737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.072482][T14737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.089366][ T3242] usbhid 11-1:1.0: can't add hid device: -71 [ 500.096753][ T3242] usbhid 11-1:1.0: probe with driver usbhid failed with error -71 [ 500.113688][ T3242] usb 11-1: USB disconnect, device number 8 [ 500.972223][T14757] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 501.812087][T14774] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2364'. [ 502.032323][T14780] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 502.117493][ T5938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 502.154156][ T5938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 502.158258][ T5938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 502.164022][ T5938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 502.173123][ T5938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 502.180759][T14783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2368'. [ 502.226646][T14781] lo speed is unknown, defaulting to 1000 [ 502.230965][T14781] wg2 speed is unknown, defaulting to 1000 [ 502.312595][T14793] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 502.319111][T14793] net_ratelimit: 11 callbacks suppressed [ 502.319151][T14793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.496767][T14781] chnl_net:caif_netlink_parms(): no params data found [ 502.596524][T14781] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.599089][T14781] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.601524][T14781] bridge_slave_0: entered allmulticast mode [ 502.614682][T14781] bridge_slave_0: entered promiscuous mode [ 502.685381][T14807] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2372'. [ 502.711565][T14781] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.714993][T14781] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.718243][T14781] bridge_slave_1: entered allmulticast mode [ 502.747686][T14781] bridge_slave_1: entered promiscuous mode [ 502.825332][T14781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.832845][T14781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.861793][T14781] team0: Port device team_slave_0 added [ 502.866705][T14781] team0: Port device team_slave_1 added [ 502.893953][T14781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.897052][T14781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.908327][T14781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.915207][T14781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.918298][T14781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.929904][T14781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.981006][T14781] hsr_slave_0: entered promiscuous mode [ 502.987040][T14781] hsr_slave_1: entered promiscuous mode [ 502.989691][T14781] debugfs: 'hsr0' already exists in 'hsr' [ 502.991951][T14781] Cannot create hsr debugfs directory [ 503.079489][T14818] lo speed is unknown, defaulting to 1000 [ 503.095439][T14818] wg2 speed is unknown, defaulting to 1000 [ 503.122792][T14781] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 503.128495][T14781] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 503.150181][T14781] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 503.156887][T14781] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 503.253427][T14781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.292393][T14781] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.309357][ T8341] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.312713][ T8341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.346196][ T8341] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.349506][ T8341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.475896][T14833] lo speed is unknown, defaulting to 1000 [ 503.479321][T14833] wg2 speed is unknown, defaulting to 1000 [ 503.609818][T14842] x_tables: duplicate underflow at hook 1 [ 503.619376][T14842] hub 8-0:1.0: USB hub found [ 503.626269][T14842] hub 8-0:1.0: 1 port detected [ 503.726023][T14781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.908092][T14781] veth0_vlan: entered promiscuous mode [ 503.915868][T14781] veth1_vlan: entered promiscuous mode [ 503.944627][T14781] veth0_macvtap: entered promiscuous mode [ 503.948908][T14781] veth1_macvtap: entered promiscuous mode [ 503.959400][T14781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.968228][T14781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.977007][ T8348] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.981158][ T8348] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.985602][ T8348] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.989158][ T8348] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.023714][ T8350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.027668][ T8350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.045024][ T8348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.048081][ T8348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.399505][ T5935] Bluetooth: hci2: command tx timeout [ 504.410610][ T5935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 504.425103][ T5935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 504.430548][ T5935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 504.438646][ T5935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 504.462317][ T5935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 504.513781][T14858] lo speed is unknown, defaulting to 1000 [ 504.531020][T14858] wg2 speed is unknown, defaulting to 1000 [ 504.599153][T14863] program syz.5.2382 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 505.043528][T14858] chnl_net:caif_netlink_parms(): no params data found [ 505.194594][ T8337] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.239058][T14858] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.242398][T14858] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.246499][T14858] bridge_slave_0: entered allmulticast mode [ 505.250612][T14858] bridge_slave_0: entered promiscuous mode [ 505.255972][T14858] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.258550][T14858] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.261114][T14858] bridge_slave_1: entered allmulticast mode [ 505.264515][T14858] bridge_slave_1: entered promiscuous mode [ 505.406855][ T8337] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.420917][T14858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.428947][T14858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.480749][ T8337] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.493303][T14858] team0: Port device team_slave_0 added [ 505.510410][T14858] team0: Port device team_slave_1 added [ 505.560481][T14858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.562997][T14858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.573380][T14858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.602536][ T8337] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.613683][T14858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.616161][T14858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.625612][T14858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.677053][T14858] hsr_slave_0: entered promiscuous mode [ 505.679737][T14858] hsr_slave_1: entered promiscuous mode [ 505.682219][T14858] debugfs: 'hsr0' already exists in 'hsr' [ 505.684500][T14858] Cannot create hsr debugfs directory [ 505.768284][T14884] netlink: 512 bytes leftover after parsing attributes in process `syz.5.2386'. [ 505.773597][T14884] Invalid ELF header magic: != ELF [ 505.785382][T14884] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2386'. [ 505.789237][T14884] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2386'. [ 505.828031][ T8337] bridge_slave_1: left allmulticast mode [ 505.830245][ T8337] bridge_slave_1: left promiscuous mode [ 505.832697][ T8337] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.835151][ T5938] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 505.839982][ T8337] bridge_slave_0: left allmulticast mode [ 505.845206][ T8337] bridge_slave_0: left promiscuous mode [ 505.848012][ T8337] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.232964][ T8337] bond1 (unregistering): (slave geneve2): Releasing active interface [ 506.626562][ T5938] Bluetooth: hci3: command tx timeout [ 506.633325][ T5938] Bluetooth: hci2: command tx timeout [ 507.114805][ T8337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.119647][ T8337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.123807][ T8337] bond0 (unregistering): Released all slaves [ 507.275566][ T8337] bond1 (unregistering): Released all slaves [ 507.388635][ T8337] tipc: Left network mode [ 507.462288][T14911] trusted_key: encrypted_key: master key parameter '' is invalid [ 507.496671][T14911] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2395'. [ 507.537132][T14913] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2394'. [ 507.561704][T14911] random: crng reseeded on system resumption [ 507.927694][T14858] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 507.940932][T14858] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 507.948915][T14858] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 507.965003][T14858] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 508.104756][T14927] binder_alloc: 14920: binder_alloc_buf, no vma [ 508.206975][T14858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.224288][ T8337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.247565][ T8337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.253943][ T8337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.267555][ T8337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.297847][ T8337] veth1_macvtap: left promiscuous mode [ 508.311049][ T8337] veth0_macvtap: left promiscuous mode [ 508.332757][ T8337] veth1_vlan: left promiscuous mode [ 508.335442][ T8337] veth0_vlan: left promiscuous mode [ 508.470578][ T8337] pim6reg (unregistering): left allmulticast mode [ 508.847714][ T5938] Bluetooth: hci3: command tx timeout [ 508.847786][ T5935] Bluetooth: hci2: command tx timeout [ 508.877781][T14958] binder: 14955:14958 ioctl 84009422 0 returned -22 [ 509.014164][ T8337] team0 (unregistering): Port device team_slave_1 removed [ 509.058789][ T8337] team0 (unregistering): Port device team_slave_0 removed [ 509.326993][T14963] FAULT_INJECTION: forcing a failure. [ 509.326993][T14963] name failslab, interval 1, probability 0, space 0, times 0 [ 509.332764][T14963] CPU: 1 UID: 0 PID: 14963 Comm: syz.7.2408 Tainted: G L syzkaller #0 PREEMPT(full) [ 509.332791][T14963] Tainted: [L]=SOFTLOCKUP [ 509.332797][T14963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 509.332807][T14963] Call Trace: [ 509.332814][T14963] [ 509.332820][T14963] dump_stack_lvl+0x16c/0x1f0 [ 509.332847][T14963] should_fail_ex+0x512/0x640 [ 509.332863][T14963] ? fs_reclaim_acquire+0xae/0x150 [ 509.332890][T14963] should_failslab+0xc2/0x120 [ 509.332913][T14963] __kmalloc_noprof+0xeb/0x910 [ 509.332930][T14963] ? dmabuffs_dname+0x1d8/0x290 [ 509.332945][T14963] ? tomoyo_encode2+0x100/0x3e0 [ 509.332969][T14963] ? tomoyo_encode2+0x100/0x3e0 [ 509.332988][T14963] tomoyo_encode2+0x100/0x3e0 [ 509.333009][T14963] tomoyo_encode+0x29/0x50 [ 509.333028][T14963] tomoyo_realpath_from_path+0x18f/0x6e0 [ 509.333075][T14963] ? tomoyo_profile+0x47/0x60 [ 509.333103][T14963] tomoyo_path_number_perm+0x245/0x580 [ 509.333123][T14963] ? tomoyo_path_number_perm+0x237/0x580 [ 509.333143][T14963] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 509.333181][T14963] ? find_held_lock+0x2b/0x80 [ 509.333201][T14963] ? hook_file_ioctl_common+0x144/0x410 [ 509.333225][T14963] ? __fget_files+0x20e/0x3c0 [ 509.333246][T14963] ? fput+0x70/0xf0 [ 509.333264][T14963] security_file_ioctl_compat+0x9b/0x240 [ 509.333284][T14963] __ia32_compat_sys_ioctl+0xc3/0x370 [ 509.333306][T14963] __do_fast_syscall_32+0xe8/0x680 [ 509.333333][T14963] do_fast_syscall_32+0x32/0x80 [ 509.333357][T14963] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 509.333376][T14963] RIP: 0023:0xf7f94579 [ 509.333389][T14963] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 509.333405][T14963] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 509.333426][T14963] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000040086203 [ 509.333436][T14963] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 509.333445][T14963] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 509.333455][T14963] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 509.333464][T14963] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 509.333484][T14963] [ 509.333521][T14963] ERROR: Out of memory at tomoyo_realpath_from_path. [ 510.061992][T14965] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2409'. [ 510.065222][T14965] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2409'. [ 510.076498][ T8519] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 510.095611][T14858] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.109387][ T8340] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.112648][ T8340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.136896][T14969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.138264][ T8336] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.141773][T13521] IPVS: starting estimator thread 0... [ 510.142741][ T8336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.236156][T14970] IPVS: using max 47 ests per chain, 112800 per kthread [ 510.306807][T14858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.329103][T14858] veth0_vlan: entered promiscuous mode [ 510.335616][T14858] veth1_vlan: entered promiscuous mode [ 510.353833][T14858] veth0_macvtap: entered promiscuous mode [ 510.361572][T14858] veth1_macvtap: entered promiscuous mode [ 510.378145][T14858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.392679][T14858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.402389][ T8340] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.406065][ T8340] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.410252][ T8340] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.413708][ T8340] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.471576][ T8519] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 510.487550][ T8345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.490164][ T8345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.517702][ T8340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.520991][ T8340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.642879][ T8519] usb 5-1: Using ep0 maxpacket: 8 [ 510.648293][ T8519] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 510.651538][ T8519] usb 5-1: config 0 has no interface number 0 [ 510.656616][ T8519] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 510.661337][ T8519] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 510.667096][ T8519] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 510.671841][ T8519] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 510.676978][ T8519] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 510.680027][ T8519] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.684151][ T8519] usb 5-1: config 0 descriptor?? [ 510.690841][ T8519] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 510.892678][T14990] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 510.895668][T14990] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 510.899835][T14990] vhci_hcd vhci_hcd.0: Device attached [ 510.960895][ T8519] usb 5-1: USB disconnect, device number 16 [ 510.962842][ C2] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 510.963434][T14977] ldusb 5-1:0.55: Couldn't submit interrupt_out_urb -19 [ 510.972740][ T8519] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 511.070057][ T5935] Bluetooth: hci2: command tx timeout [ 511.072221][ T5938] Bluetooth: hci3: command tx timeout [ 511.108851][T14990] fuse: Unknown parameter 'grtup_id' [ 511.220323][ T24] usb 42-1: SetAddress Request (22) to port 0 [ 511.223077][ T24] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd [ 511.593988][T14991] vhci_hcd: connection reset by peer [ 511.597315][ T8350] vhci_hcd vhci_hcd.2: stop threads [ 511.599709][ T8350] vhci_hcd vhci_hcd.2: release socket [ 511.602361][ T8350] vhci_hcd vhci_hcd.2: disconnect device [ 512.088613][ T8337] IPVS: stop unused estimator thread 0... [ 512.323547][T15023] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2422'. [ 512.938472][T15030] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 513.238166][T15042] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 513.240977][T15042] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 513.244319][T15042] vhci_hcd vhci_hcd.0: Device attached [ 513.293829][ T5938] Bluetooth: hci3: command tx timeout [ 513.347249][ T3242] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 513.379788][T15043] vhci_hcd: connection closed [ 513.381012][ T104] vhci_hcd vhci_hcd.2: stop threads [ 513.385442][ T104] vhci_hcd vhci_hcd.2: release socket [ 513.395136][ T104] vhci_hcd vhci_hcd.2: disconnect device [ 513.529276][ T3242] usb 10-1: Using ep0 maxpacket: 8 [ 513.532879][ T3242] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 513.535635][ T3242] usb 10-1: config 0 has no interface number 0 [ 513.537845][ T3242] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 513.541706][ T3242] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 513.545605][ T3242] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 513.549177][ T3242] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 513.553783][ T3242] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 513.556884][ T3242] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.561269][ T3242] usb 10-1: config 0 descriptor?? [ 513.565886][ T3242] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 513.646536][T13521] usb 12-1: new full-speed USB device number 2 using dummy_hcd [ 513.819493][T13521] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 513.823643][T13521] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.827071][T13521] usb 12-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 513.830610][T13521] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.835299][T13521] usb 12-1: config 0 descriptor?? [ 513.837276][ T3242] usb 10-1: USB disconnect, device number 39 [ 513.839458][ C3] ldusb 10-1:0.55: usb_submit_urb failed (-19) [ 513.844839][T15036] ldusb 10-1:0.55: Couldn't submit interrupt_out_urb -19 [ 513.847231][ T3242] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 514.161698][T15054] random: crng reseeded on system resumption [ 516.436746][ T62] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 516.607688][ T62] usb 10-1: Using ep0 maxpacket: 32 [ 516.629167][ T24] usb 42-1: device descriptor read/8, error -110 [ 516.714667][ T5935] Bluetooth: hci3: command 0x0405 tx timeout [ 516.795983][ T62] usb 10-1: unable to get BOS descriptor or descriptor too short [ 517.047677][ T24] usb usb42-port1: attempt power cycle [ 517.522364][ T62] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 517.525063][ T62] usb 10-1: can't read configurations, error -71 [ 517.645187][ T24] usb usb42-port1: unable to enumerate USB device [ 517.981082][T13521] usbhid 12-1:0.0: can't add hid device: -71 [ 517.983159][T13521] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 517.992209][T13521] usb 12-1: USB disconnect, device number 2 [ 518.118150][T15110] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 518.126359][T15110] bond1 (unregistering): Released all slaves [ 518.151821][T15107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2440'. [ 518.284653][ T60] IPVS: starting estimator thread 0... [ 518.288965][T15118] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 518.382280][T15119] IPVS: using max 28 ests per chain, 67200 per kthread [ 518.426104][ T6081] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 518.457328][T15121] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 518.498209][T15123] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2446'. [ 518.564060][ T60] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 518.565204][ T6081] usb 5-1: device descriptor read/64, error -71 [ 518.713642][ T60] usb 12-1: device descriptor read/64, error -71 [ 518.831332][ T6081] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 518.970254][ T60] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 518.970266][ T6081] usb 5-1: device descriptor read/64, error -71 [ 519.088317][ T6081] usb usb5-port1: attempt power cycle [ 519.110052][ T60] usb 12-1: device descriptor read/64, error -71 [ 519.227460][ T60] usb usb12-port1: attempt power cycle [ 519.451357][ T6081] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 519.473415][ T6081] usb 5-1: device descriptor read/8, error -71 [ 519.590320][ T60] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 519.597038][T15133] loop6: detected capacity change from 0 to 2640 [ 519.600320][T15133] buffer_io_error: 80 callbacks suppressed [ 519.600334][T15133] Buffer I/O error on dev loop6, logical block 0, async page read [ 519.606632][T15133] Buffer I/O error on dev loop6, logical block 0, async page read [ 519.610162][T15133] Buffer I/O error on dev loop6, logical block 0, async page read [ 519.614153][T15133] Buffer I/O error on dev loop6, logical block 0, async page read [ 519.617792][T15133] Buffer I/O error on dev loop6, logical block 0, async page read [ 519.623208][ T60] usb 12-1: device descriptor read/8, error -71 [ 519.624981][T15133] Buffer I/O error on dev loop6, logical block 0, async page read [ 519.629410][T15133] Buffer I/O error on dev loop6, logical block 0, async page read [ 519.632917][T15133] Buffer I/O error on dev loop6, logical block 0, async page read [ 519.636455][T15133] ldm_validate_partition_table(): Disk read failed. [ 519.639388][T15133] Buffer I/O error on dev loop6, logical block 0, async page read [ 519.642933][T15133] Buffer I/O error on dev loop6, logical block 0, async page read [ 519.646750][T15133] Dev loop6: unable to read RDB block 0 [ 519.649795][T15133] loop6: unable to read partition table [ 519.652396][T15133] loop_reread_partitions: partition scan of loop6 (3Ÿ Ύ‚³˜) failed (rc=-5) [ 519.730029][ T6081] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 519.751738][ T6081] usb 5-1: device descriptor read/8, error -71 [ 519.870526][ T6081] usb usb5-port1: unable to enumerate USB device [ 519.879377][ T60] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 519.902490][ T60] usb 12-1: device descriptor read/8, error -71 [ 520.018952][ T60] usb usb12-port1: unable to enumerate USB device [ 520.059049][T15139] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 520.062245][T15139] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 520.076399][T15139] vhci_hcd vhci_hcd.0: Device attached [ 520.360598][ T24] usb 48-1: SetAddress Request (30) to port 0 [ 520.363524][ T24] usb 48-1: new SuperSpeed USB device number 30 using vhci_hcd [ 520.745894][T15140] vhci_hcd: connection reset by peer [ 520.748717][ T8338] vhci_hcd vhci_hcd.5: stop threads [ 520.751152][ T8338] vhci_hcd vhci_hcd.5: release socket [ 520.753817][ T8338] vhci_hcd vhci_hcd.5: disconnect device [ 521.228940][T15143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2452'. [ 521.406115][T15152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2453'. [ 521.508746][ C3] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 521.728518][ T8519] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 521.735506][T15165] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 521.738019][T15165] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 521.741692][T15165] vhci_hcd vhci_hcd.0: Device attached [ 521.899549][ T8519] usb 10-1: Using ep0 maxpacket: 8 [ 521.902685][ T8519] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 521.905782][ T8519] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.922073][ T8519] pvrusb2: Hardware description: Terratec Grabster AV400 [ 521.924785][ T8519] pvrusb2: ********** [ 521.926400][ T8519] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 521.930233][ T8519] pvrusb2: Important functionality might not be entirely working. [ 521.963654][ T8519] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 521.974444][ T8519] pvrusb2: ********** [ 522.059860][ T62] usb 42-1: SetAddress Request (26) to port 0 [ 522.062619][ T62] usb 42-1: new SuperSpeed USB device number 26 using vhci_hcd [ 522.137941][ T2482] pvrusb2: Invalid write control endpoint [ 522.176524][ T2482] pvrusb2: Invalid write control endpoint [ 522.179513][ T2482] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 522.184508][ T2482] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 522.187728][ T2482] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 522.192201][ T2482] pvrusb2: Device being rendered inoperable [ 522.197490][ T2482] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 522.200982][ T2482] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 522.206930][ T2482] pvrusb2: Attached sub-driver cx25840 [ 522.209784][ T2482] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 522.213981][ T2482] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 522.355019][T15158] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2456'. [ 522.358895][T15158] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2456'. [ 522.363834][T15158] pvrusb2: Attempted to execute control transfer when device not ok [ 522.381438][T15169] vhci_hcd: connection reset by peer [ 522.383503][ T8341] vhci_hcd vhci_hcd.2: stop threads [ 522.385882][ T8341] vhci_hcd vhci_hcd.2: release socket [ 522.388723][ T8341] vhci_hcd vhci_hcd.2: disconnect device [ 522.448290][ T8519] usb 10-1: USB disconnect, device number 42 [ 522.616979][T15184] vivid-004: disconnect [ 522.724794][T15183] vivid-004: reconnect [ 523.841978][ T5938] Bluetooth: hci3: unexpected event for opcode 0x0c20 [ 523.854525][ T5938] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 523.859711][ T5938] Bluetooth: Wrong link type (-22) [ 523.862009][ T5938] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 523.864797][ T5938] Bluetooth: Wrong link type (-22) [ 523.867221][ T5938] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 523.870068][ T5938] Bluetooth: Wrong link type (-22) [ 523.872386][ T5938] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 523.875257][ T5938] Bluetooth: Wrong link type (-22) [ 523.914050][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 523.917037][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 524.048298][ T6797] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 524.219349][ T6797] usb 5-1: Using ep0 maxpacket: 8 [ 524.223451][ T6797] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 524.227414][ T6797] usb 5-1: config 0 has no interface number 0 [ 524.231208][ T6797] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 524.236470][ T6797] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 524.241722][ T6797] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 524.246459][ T6797] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 524.253516][ T6797] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 524.257477][ T6797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.263696][ T6797] usb 5-1: config 0 descriptor?? [ 524.270163][ T6797] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 524.560392][ T9] usb 5-1: USB disconnect, device number 21 [ 524.560539][ C2] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 524.566799][T15197] ldusb 5-1:0.55: Couldn't submit interrupt_out_urb -19 [ 524.570446][ T9] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 525.615571][T15228] FAULT_INJECTION: forcing a failure. [ 525.615571][T15228] name failslab, interval 1, probability 0, space 0, times 0 [ 525.621627][T15228] CPU: 0 UID: 0 PID: 15228 Comm: syz.0.2476 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.621652][T15228] Tainted: [L]=SOFTLOCKUP [ 525.621658][T15228] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 525.621667][T15228] Call Trace: [ 525.621672][T15228] [ 525.621677][T15228] dump_stack_lvl+0x16c/0x1f0 [ 525.621703][T15228] should_fail_ex+0x512/0x640 [ 525.621720][T15228] ? fs_reclaim_acquire+0xae/0x150 [ 525.621745][T15228] should_failslab+0xc2/0x120 [ 525.621766][T15228] __kmalloc_noprof+0xeb/0x910 [ 525.621782][T15228] ? tomoyo_encode2+0x100/0x3e0 [ 525.621805][T15228] ? tomoyo_encode2+0x100/0x3e0 [ 525.621822][T15228] tomoyo_encode2+0x100/0x3e0 [ 525.621843][T15228] tomoyo_encode+0x29/0x50 [ 525.621861][T15228] tomoyo_realpath_from_path+0x18f/0x6e0 [ 525.621882][T15228] ? tomoyo_profile+0x47/0x60 [ 525.621904][T15228] tomoyo_path_number_perm+0x245/0x580 [ 525.621920][T15228] ? tomoyo_path_number_perm+0x237/0x580 [ 525.621944][T15228] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 525.621979][T15228] ? find_held_lock+0x2b/0x80 [ 525.621998][T15228] ? hook_file_ioctl_common+0x144/0x410 [ 525.622018][T15228] ? __fget_files+0x20e/0x3c0 [ 525.622038][T15228] ? fput+0x70/0xf0 [ 525.622055][T15228] security_file_ioctl_compat+0x9b/0x240 [ 525.622074][T15228] __ia32_compat_sys_ioctl+0xc3/0x370 [ 525.622094][T15228] __do_fast_syscall_32+0xe8/0x680 [ 525.622119][T15228] do_fast_syscall_32+0x32/0x80 [ 525.622140][T15228] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 525.622158][T15228] RIP: 0023:0xf705d579 [ 525.622170][T15228] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 525.622183][T15228] RSP: 002b:00000000f544d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 525.622198][T15228] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c018aec0 [ 525.622207][T15228] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 525.622216][T15228] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 525.622224][T15228] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 525.622233][T15228] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 525.622251][T15228] [ 525.622264][T15228] ERROR: Out of memory at tomoyo_realpath_from_path. [ 525.706204][T15229] ptrace attach of "/syz-executor exec"[14781] was attempted by ""[15229] [ 525.791064][ T24] usb 48-1: device descriptor read/8, error -110 [ 526.224775][ T24] usb usb48-port1: attempt power cycle [ 526.613238][T15260] FAULT_INJECTION: forcing a failure. [ 526.613238][T15260] name failslab, interval 1, probability 0, space 0, times 0 [ 526.622127][T15260] CPU: 0 UID: 0 PID: 15260 Comm: syz.5.2484 Tainted: G L syzkaller #0 PREEMPT(full) [ 526.622154][T15260] Tainted: [L]=SOFTLOCKUP [ 526.622160][T15260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 526.622171][T15260] Call Trace: [ 526.622178][T15260] [ 526.622185][T15260] dump_stack_lvl+0x16c/0x1f0 [ 526.622212][T15260] should_fail_ex+0x512/0x640 [ 526.622230][T15260] ? fs_reclaim_acquire+0xae/0x150 [ 526.622256][T15260] should_failslab+0xc2/0x120 [ 526.622280][T15260] __kmalloc_noprof+0xeb/0x910 [ 526.622297][T15260] ? tomoyo_encode2+0x100/0x3e0 [ 526.622321][T15260] ? tomoyo_encode2+0x100/0x3e0 [ 526.622339][T15260] tomoyo_encode2+0x100/0x3e0 [ 526.622362][T15260] tomoyo_encode+0x29/0x50 [ 526.622381][T15260] tomoyo_realpath_from_path+0x18f/0x6e0 [ 526.622404][T15260] ? tomoyo_profile+0x47/0x60 [ 526.622429][T15260] tomoyo_path_number_perm+0x245/0x580 [ 526.622445][T15260] ? tomoyo_path_number_perm+0x237/0x580 [ 526.622464][T15260] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 526.622501][T15260] ? find_held_lock+0x2b/0x80 [ 526.622523][T15260] ? hook_file_ioctl_common+0x144/0x410 [ 526.622546][T15260] ? __fget_files+0x20e/0x3c0 [ 526.622567][T15260] ? fput+0x70/0xf0 [ 526.622586][T15260] security_file_ioctl_compat+0x9b/0x240 [ 526.622606][T15260] __ia32_compat_sys_ioctl+0xc3/0x370 [ 526.622627][T15260] __do_fast_syscall_32+0xe8/0x680 [ 526.622653][T15260] do_fast_syscall_32+0x32/0x80 [ 526.622677][T15260] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 526.622696][T15260] RIP: 0023:0xf7f02579 [ 526.622708][T15260] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 526.622724][T15260] RSP: 002b:00000000f53f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 526.622739][T15260] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004048aecb [ 526.622749][T15260] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 526.622759][T15260] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 526.622768][T15260] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 526.622778][T15260] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 526.622799][T15260] [ 526.622816][T15260] ERROR: Out of memory at tomoyo_realpath_from_path. [ 526.774497][ T9] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 526.830792][T15267] netlink: 512 bytes leftover after parsing attributes in process `syz.2.2486'. [ 526.844219][T15267] : entered promiscuous mode [ 526.847429][ T24] usb usb48-port1: unable to enumerate USB device [ 527.127210][ T9] usb 12-1: Using ep0 maxpacket: 8 [ 527.135214][ T9] usb 12-1: config 0 has no interfaces? [ 527.138170][ T9] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 527.142787][ T9] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.148306][ T9] usb 12-1: config 0 descriptor?? [ 527.344180][T15277] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 527.354094][T15277] bond1: (slave lo): Enslaving as an active interface with an up link [ 527.359855][T15277] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 527.383372][T13521] usb 12-1: USB disconnect, device number 7 [ 527.501399][ T62] usb 42-1: device descriptor read/8, error -110 [ 527.950373][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 528.126846][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 528.132406][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 528.136634][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 528.140464][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.153694][T15285] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 528.161509][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 528.208481][ T62] usb usb42-port1: attempt power cycle [ 528.399409][ T60] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 528.570413][ T60] usb 12-1: Using ep0 maxpacket: 8 [ 528.575467][ T60] usb 12-1: config 0 has an invalid interface number: 55 but max is 0 [ 528.579256][ T60] usb 12-1: config 0 has no interface number 0 [ 528.581940][ T60] usb 12-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 528.585246][T15295] loop6: detected capacity change from 0 to 2640 [ 528.586115][ T60] usb 12-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 528.590208][T13300] buffer_io_error: 11 callbacks suppressed [ 528.590220][T13300] Buffer I/O error on dev loop6, logical block 0, async page read [ 528.593974][ T60] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 528.596419][T13300] Buffer I/O error on dev loop6, logical block 0, async page read [ 528.599107][ T60] usb 12-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 528.604923][T13300] Buffer I/O error on dev loop6, logical block 0, async page read [ 528.606639][ T60] usb 12-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 528.612304][T13300] Buffer I/O error on dev loop6, logical block 0, async page read [ 528.612340][T13300] Buffer I/O error on dev loop6, logical block 0, async page read [ 528.615325][ T60] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.619282][T13300] Buffer I/O error on dev loop6, logical block 0, async page read [ 528.625236][ T60] usb 12-1: config 0 descriptor?? [ 528.635110][T13300] Buffer I/O error on dev loop6, logical block 0, async page read [ 528.637972][ T60] ldusb 12-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 528.638489][T13300] Buffer I/O error on dev loop6, logical block 0, async page read [ 528.644472][T13300] ldm_validate_partition_table(): Disk read failed. [ 528.648116][T13300] Buffer I/O error on dev loop6, logical block 0, async page read [ 528.651567][T13300] Buffer I/O error on dev loop6, logical block 0, async page read [ 528.654973][T13300] Dev loop6: unable to read RDB block 0 [ 528.657667][T13300] loop6: unable to read partition table [ 528.661221][T15295] ldm_validate_partition_table(): Disk read failed. [ 528.663748][T15295] Dev loop6: unable to read RDB block 0 [ 528.666068][T15295] loop6: unable to read partition table [ 528.668143][T15295] loop_reread_partitions: partition scan of loop6 (3Ÿ Ύ‚³˜) failed (rc=-5) [ 528.907208][ T24] usb 12-1: USB disconnect, device number 8 [ 528.916261][ T24] ldusb 12-1:0.55: LD USB Device #0 now disconnected [ 529.214645][ T62] usb usb42-port1: unable to enumerate USB device [ 530.736734][T15330] loop6: detected capacity change from 0 to 2640 [ 530.739910][T15330] ldm_validate_partition_table(): Disk read failed. [ 530.744589][T15330] Dev loop6: unable to read RDB block 0 [ 530.747145][T15330] loop6: unable to read partition table [ 530.749577][T15330] loop_reread_partitions: partition scan of loop6 (3Ÿ Ύ‚³˜) failed (rc=-5) [ 530.801229][ T60] usb 5-1: USB disconnect, device number 22 [ 531.168223][ T60] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 531.328630][ T60] usb 10-1: Using ep0 maxpacket: 8 [ 531.330164][ T60] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 531.330181][ T60] usb 10-1: config 0 has no interface number 0 [ 531.330200][ T60] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 531.330214][ T60] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 531.330227][ T60] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 531.330242][ T60] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 531.330263][ T60] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 531.330276][ T60] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.335369][ T60] usb 10-1: config 0 descriptor?? [ 531.338212][ T60] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 531.615547][ T24] usb 10-1: USB disconnect, device number 43 [ 531.629888][ T24] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 532.204410][T15359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2512'. [ 532.275085][T15363] loop6: detected capacity change from 0 to 2640 [ 532.277962][T13300] ldm_validate_partition_table(): Disk read failed. [ 532.281101][T13300] Dev loop6: unable to read RDB block 0 [ 532.283108][T13300] loop6: unable to read partition table [ 532.298591][T15363] ldm_validate_partition_table(): Disk read failed. [ 532.304800][T15363] Dev loop6: unable to read RDB block 0 [ 532.308153][T15363] loop6: unable to read partition table [ 532.311058][T15363] loop_reread_partitions: partition scan of loop6 (3Ÿ Ύ‚³˜) failed (rc=-5) [ 532.562800][T15379] 9p: Bad value for 'rfdno' [ 532.697095][ T3242] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 532.858819][ T3242] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 532.863094][ T3242] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 532.869045][ T3242] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 532.873395][ T3242] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.885172][T15375] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 532.979392][ T3242] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 535.535462][ T24] usb 5-1: USB disconnect, device number 23 [ 536.991188][T15428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2532'. [ 538.101122][T15428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 539.617502][T15449] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 540.435383][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 540.435394][ T40] audit: type=1326 audit(1767203842.458:6644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15462 comm="syz.2.2544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 540.457047][ T40] audit: type=1326 audit(1767203842.458:6645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15462 comm="syz.2.2544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 540.469932][ T40] audit: type=1326 audit(1767203842.458:6646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15462 comm="syz.2.2544" exe="/syz-executor" sig=0 arch=40000003 syscall=101 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 540.478740][ T40] audit: type=1326 audit(1767203842.458:6647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15462 comm="syz.2.2544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 540.488921][ T40] audit: type=1326 audit(1767203842.458:6648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15462 comm="syz.2.2544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 540.496385][ T40] audit: type=1326 audit(1767203842.458:6649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15462 comm="syz.2.2544" exe="/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 540.503737][ T40] audit: type=1326 audit(1767203842.458:6650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15462 comm="syz.2.2544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 540.511846][ T40] audit: type=1326 audit(1767203842.467:6651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15462 comm="syz.2.2544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 540.519717][ T40] audit: type=1326 audit(1767203842.467:6652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15462 comm="syz.2.2544" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 540.527121][ T40] audit: type=1326 audit(1767203842.467:6653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15462 comm="syz.2.2544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd579 code=0x7ffc0000 [ 541.369739][T15481] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2549'. [ 541.373782][T15481] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2549'. [ 541.557978][T15481] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2549'. [ 541.561201][T15481] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2549'. [ 541.688247][T15481] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2549'. [ 541.691509][T15481] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2549'. [ 542.057956][T15482] Process accounting resumed [ 542.180370][T15491] loop6: detected capacity change from 0 to 2640 [ 542.183644][T15491] buffer_io_error: 85 callbacks suppressed [ 542.183657][T15491] Buffer I/O error on dev loop6, logical block 0, async page read [ 542.189924][T15491] Buffer I/O error on dev loop6, logical block 0, async page read [ 542.206109][T15491] Buffer I/O error on dev loop6, logical block 0, async page read [ 542.211084][T15491] Buffer I/O error on dev loop6, logical block 0, async page read [ 542.215482][T15491] Buffer I/O error on dev loop6, logical block 0, async page read [ 542.219372][T15491] Buffer I/O error on dev loop6, logical block 0, async page read [ 542.223484][T15491] Buffer I/O error on dev loop6, logical block 0, async page read [ 542.227097][T15491] Buffer I/O error on dev loop6, logical block 0, async page read [ 542.228424][T15495] xt_bpf: check failed: parse error [ 542.230553][T15491] ldm_validate_partition_table(): Disk read failed. [ 542.239778][T15491] Buffer I/O error on dev loop6, logical block 0, async page read [ 542.243579][T15491] Buffer I/O error on dev loop6, logical block 0, async page read [ 542.247396][T15491] Dev loop6: unable to read RDB block 0 [ 542.250130][T15491] loop6: unable to read partition table [ 542.253015][T15491] loop_reread_partitions: partition scan of loop6 (3Ÿ Ύ‚³˜) failed (rc=-5) [ 542.553427][T15513] FAULT_INJECTION: forcing a failure. [ 542.553427][T15513] name failslab, interval 1, probability 0, space 0, times 0 [ 542.564569][T15513] CPU: 3 UID: 0 PID: 15513 Comm: syz.2.2559 Tainted: G L syzkaller #0 PREEMPT(full) [ 542.564600][T15513] Tainted: [L]=SOFTLOCKUP [ 542.564608][T15513] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 542.564619][T15513] Call Trace: [ 542.564626][T15513] [ 542.564634][T15513] dump_stack_lvl+0x16c/0x1f0 [ 542.564666][T15513] should_fail_ex+0x512/0x640 [ 542.564686][T15513] ? __kmalloc_noprof+0xca/0x910 [ 542.564710][T15513] should_failslab+0xc2/0x120 [ 542.564739][T15513] __kmalloc_noprof+0xeb/0x910 [ 542.564759][T15513] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 542.564803][T15513] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 542.564832][T15513] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 542.564868][T15513] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 542.564899][T15513] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 542.564928][T15513] ? genl_get_cmd+0x194/0x580 [ 542.564960][T15513] ? bpf_lsm_capable+0x9/0x10 [ 542.564984][T15513] ? security_capable+0x7e/0x260 [ 542.565015][T15513] ? ns_capable+0xd7/0x110 [ 542.565041][T15513] genl_rcv_msg+0x55c/0x800 [ 542.565061][T15513] ? __pfx_genl_rcv_msg+0x10/0x10 [ 542.565078][T15513] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 542.565112][T15513] netlink_rcv_skb+0x158/0x420 [ 542.565137][T15513] ? __pfx_genl_rcv_msg+0x10/0x10 [ 542.565156][T15513] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 542.565192][T15513] ? netlink_deliver_tap+0x1ae/0xd30 [ 542.565221][T15513] genl_rcv+0x28/0x40 [ 542.565248][T15513] netlink_unicast+0x5aa/0x870 [ 542.565277][T15513] ? __pfx_netlink_unicast+0x10/0x10 [ 542.565313][T15513] netlink_sendmsg+0x8c8/0xdd0 [ 542.565343][T15513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.565372][T15513] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 542.565406][T15513] ____sys_sendmsg+0xa5d/0xc30 [ 542.565433][T15513] ? qgroup_rescan_zero_tracking+0x14/0x2d0 [ 542.565465][T15513] ? __pfx_____sys_sendmsg+0x10/0x10 [ 542.565491][T15513] ? get_compat_msghdr+0x11a/0x170 [ 542.565525][T15513] ___sys_sendmsg+0x134/0x1d0 [ 542.565551][T15513] ? __pfx____sys_sendmsg+0x10/0x10 [ 542.565587][T15513] ? find_held_lock+0x2b/0x80 [ 542.565626][T15513] __sys_sendmsg+0x16d/0x220 [ 542.565650][T15513] ? __pfx___sys_sendmsg+0x10/0x10 [ 542.565683][T15513] ? do_user_addr_fault+0x843/0x1370 [ 542.565711][T15513] __do_fast_syscall_32+0xe8/0x680 [ 542.565742][T15513] do_fast_syscall_32+0x32/0x80 [ 542.565769][T15513] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 542.565796][T15513] RIP: 0023:0xf70cd579 [ 542.565812][T15513] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 542.565830][T15513] RSP: 002b:00000000f54bd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 542.565848][T15513] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 542.565861][T15513] RDX: 000000000400c0c4 RSI: 0000000000000000 RDI: 0000000000000000 [ 542.565872][T15513] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 542.565883][T15513] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 542.565894][T15513] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 542.565919][T15513] [ 543.209844][T15538] loop6: detected capacity change from 0 to 2640 [ 543.213133][T15538] ldm_validate_partition_table(): Disk read failed. [ 543.216063][T15538] Dev loop6: unable to read RDB block 0 [ 543.220111][T15538] loop6: unable to read partition table [ 543.246883][T15538] loop_reread_partitions: partition scan of loop6 (3Ÿ Ύ‚³˜) failed (rc=-5) [ 543.255888][ T5346] ldm_validate_partition_table(): Disk read failed. [ 543.259426][ T5346] Dev loop6: unable to read RDB block 0 [ 543.262201][ T5346] loop6: unable to read partition table [ 543.671266][T15549] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2570'. [ 543.674327][T15549] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2570'. [ 543.719506][T15549] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13) [ 543.722214][T15549] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 543.725145][T15549] vhci_hcd vhci_hcd.0: Device attached [ 543.731136][T15549] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(15) [ 543.733394][T15549] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 543.736286][T15549] vhci_hcd vhci_hcd.0: Device attached [ 543.750107][T15549] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(17) [ 543.752536][T15549] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 543.757951][T15549] vhci_hcd vhci_hcd.0: Device attached [ 543.778385][T15549] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(19) [ 543.781324][T15549] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 543.813410][T15549] vhci_hcd vhci_hcd.0: Device attached [ 543.828347][T15561] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 543.840509][T15558] vhci_hcd: connection closed [ 543.840679][T15010] vhci_hcd vhci_hcd.5: stop threads [ 543.845263][T15556] vhci_hcd: connection closed [ 543.845503][T15010] vhci_hcd vhci_hcd.5: release socket [ 543.850460][T15554] vhci_hcd: connection closed [ 543.850645][T15552] vhci_hcd: connection closed [ 543.851246][T15010] vhci_hcd vhci_hcd.5: disconnect device [ 543.856983][T15010] vhci_hcd vhci_hcd.5: stop threads [ 543.860173][T15010] vhci_hcd vhci_hcd.5: release socket [ 543.865301][T15010] vhci_hcd vhci_hcd.5: disconnect device [ 543.867976][T15010] vhci_hcd vhci_hcd.5: stop threads [ 543.870830][T15010] vhci_hcd vhci_hcd.5: release socket [ 543.873289][T15010] vhci_hcd vhci_hcd.5: disconnect device [ 543.875951][T15010] vhci_hcd vhci_hcd.5: stop threads [ 543.878223][T15010] vhci_hcd vhci_hcd.5: release socket [ 543.882175][T15010] vhci_hcd vhci_hcd.5: disconnect device [ 543.911772][ T60] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 544.405562][T15564] bond1 (unregistering): Released all slaves [ 545.667825][T15584] syzkaller0: entered promiscuous mode [ 545.669980][T15584] syzkaller0: entered allmulticast mode [ 545.853310][T15586] loop6: detected capacity change from 0 to 2640 [ 545.856551][T15586] ldm_validate_partition_table(): Disk read failed. [ 545.859778][T15586] Dev loop6: unable to read RDB block 0 [ 545.862241][T15586] loop6: unable to read partition table [ 545.864915][T15586] loop_reread_partitions: partition scan of loop6 (3Ÿ Ύ‚³˜) failed (rc=-5) [ 547.245896][ T40] kauditd_printk_skb: 557 callbacks suppressed [ 547.245910][ T40] audit: type=1804 audit(1767203848.828:7211): pid=15600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2581" name="/newroot/64/file0" dev="fuse" ino=1 res=1 errno=0 [ 548.205622][T15617] loop6: detected capacity change from 0 to 2640 [ 548.208236][T15617] buffer_io_error: 69 callbacks suppressed [ 548.208246][T15617] Buffer I/O error on dev loop6, logical block 0, async page read [ 548.215304][T15617] Buffer I/O error on dev loop6, logical block 0, async page read [ 548.217965][T15617] Buffer I/O error on dev loop6, logical block 0, async page read [ 548.220965][T15617] Buffer I/O error on dev loop6, logical block 0, async page read [ 548.224746][T15617] Buffer I/O error on dev loop6, logical block 0, async page read [ 548.227920][T15617] Buffer I/O error on dev loop6, logical block 0, async page read [ 548.230842][T15617] Buffer I/O error on dev loop6, logical block 0, async page read [ 548.233656][T15617] Buffer I/O error on dev loop6, logical block 0, async page read [ 548.236843][T15617] ldm_validate_partition_table(): Disk read failed. [ 548.239312][T15617] Buffer I/O error on dev loop6, logical block 0, async page read [ 548.242137][T15617] Buffer I/O error on dev loop6, logical block 0, async page read [ 548.244588][T15617] Dev loop6: unable to read RDB block 0 [ 548.246529][T15617] loop6: unable to read partition table [ 548.248512][T15617] loop_reread_partitions: partition scan of loop6 (3Ÿ Ύ‚³˜) failed (rc=-5) [ 548.438241][T15623] FAULT_INJECTION: forcing a failure. [ 548.438241][T15623] name failslab, interval 1, probability 0, space 0, times 0 [ 548.442668][T15623] CPU: 2 UID: 0 PID: 15623 Comm: syz.7.2588 Tainted: G L syzkaller #0 PREEMPT(full) [ 548.442689][T15623] Tainted: [L]=SOFTLOCKUP [ 548.442693][T15623] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 548.442724][T15623] Call Trace: [ 548.442734][T15623] [ 548.442740][T15623] dump_stack_lvl+0x16c/0x1f0 [ 548.442770][T15623] should_fail_ex+0x512/0x640 [ 548.442789][T15623] ? kmem_cache_alloc_noprof+0x62/0x770 [ 548.442812][T15623] should_failslab+0xc2/0x120 [ 548.442830][T15623] kmem_cache_alloc_noprof+0x83/0x770 [ 548.442844][T15623] ? getname_flags.part.0+0x4c/0x550 [ 548.442860][T15623] ? getname_flags.part.0+0x4c/0x550 [ 548.442872][T15623] getname_flags.part.0+0x4c/0x550 [ 548.442884][T15623] ? __pfx_ksys_write+0x10/0x10 [ 548.442901][T15623] getname_flags+0x93/0xf0 [ 548.442917][T15623] __ia32_sys_symlinkat+0x86/0xc0 [ 548.442929][T15623] __do_fast_syscall_32+0xe8/0x680 [ 548.442949][T15623] do_fast_syscall_32+0x32/0x80 [ 548.442967][T15623] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 548.442982][T15623] RIP: 0023:0xf7f94579 [ 548.442991][T15623] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 548.443003][T15623] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000130 [ 548.443014][T15623] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000006 [ 548.443022][T15623] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 548.443029][T15623] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 548.443035][T15623] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 548.443042][T15623] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 548.443058][T15623] [ 549.507014][T15633] loop0: Can't mount, would change RO state [ 549.851380][T15643] loop6: detected capacity change from 0 to 2640 [ 549.853872][T15643] ldm_validate_partition_table(): Disk read failed. [ 549.858150][T15643] Dev loop6: unable to read RDB block 0 [ 549.860621][T15643] loop6: unable to read partition table [ 549.862664][T15643] loop_reread_partitions: partition scan of loop6 (3Ÿ Ύ‚³˜) failed (rc=-5) [ 549.986212][T15646] netlink: 'syz.5.2596': attribute type 1 has an invalid length. [ 550.000137][T15646] 8021q: adding VLAN 0 to HW filter on device bond3 [ 550.011140][T15646] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2596'. [ 550.770462][T15662] overlayfs: unescaped trailing colons in lowerdir mount option. [ 550.996368][T15670] loop6: detected capacity change from 0 to 2640 [ 550.998971][T15670] ldm_validate_partition_table(): Disk read failed. [ 551.002274][T15670] Dev loop6: unable to read RDB block 0 [ 551.004222][T15670] loop6: unable to read partition table [ 551.009981][T15670] loop_reread_partitions: partition scan of loop6 (3Ÿ Ύ‚³˜) failed (rc=-5) [ 552.158858][T15695] [U] : [ 552.160454][T15695] [U] [ 552.161696][T15695] [U] [ 552.162918][T15695] [U] [ 552.164137][T15695] [U] [ 552.165479][T15695] [U] [ 552.166812][T15695] [U] [ 552.168020][T15695] [U] [ 552.169348][T15695] [U] [ 552.170599][T15695] [U] [ 552.171801][T15695] [U] [ 552.173001][T15695] [U] [ 552.174222][T15695] [U] [ 552.175449][T15695] [U] [ 552.176633][T15695] [U] [ 552.177834][T15695] [U] [ 552.179158][T15695] [U] [ 552.180388][T15695] [U] [ 552.181601][T15695] [U] [ 552.182835][T15695] [U] [ 552.184064][T15695] [U] [ 552.185288][T15695] [U] [ 552.186519][T15695] [U] [ 552.187753][T15695] [U] [ 552.189142][T15695] [U] [ 552.190336][T15695] [U] [ 552.191655][T15695] [U] [ 552.192892][T15695] [U] [ 552.194108][T15695] [U] [ 552.195344][T15695] [U] [ 552.196808][T15695] [U] [ 552.198050][T15695] [U] [ 552.199382][T15695] [U] [ 552.200637][T15695] [U] [ 552.201868][T15695] [U] [ 552.203126][T15695] [U] [ 552.204366][T15695] [U] [ 552.205597][T15695] [U] [ 552.206894][T15695] [U] [ 552.208134][T15695] [U] [ 552.209538][T15695] [U] [ 552.210796][T15695] [U] [ 552.212018][T15695] [U] [ 552.213268][T15695] [U] [ 552.214460][T15695] [U] [ 552.215682][T15695] [U] [ 552.216890][T15695] [U] [ 552.218088][T15695] [U] [ 552.219370][T15695] [U] [ 552.220616][T15695] [U] [ 552.221797][T15695] [U] [ 552.223026][T15695] [U] [ 552.224247][T15695] [U] [ 552.225470][T15695] [U] [ 552.226946][T15695] [U] [ 552.228196][T15695] [U] [ 552.229766][T15695] FAULT_INJECTION: forcing a failure. [ 552.229766][T15695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.236006][T15695] CPU: 1 UID: 0 PID: 15695 Comm: syz.2.2610 Tainted: G L syzkaller #0 PREEMPT(full) [ 552.236043][T15695] Tainted: [L]=SOFTLOCKUP [ 552.236051][T15695] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 552.236062][T15695] Call Trace: [ 552.236069][T15695] [ 552.236077][T15695] dump_stack_lvl+0x16c/0x1f0 [ 552.236110][T15695] should_fail_ex+0x512/0x640 [ 552.236135][T15695] _copy_from_iter+0x2a4/0x16c0 [ 552.236163][T15695] ? __pfx__copy_from_iter+0x10/0x10 [ 552.236186][T15695] ? __pfx___might_resched+0x10/0x10 [ 552.236213][T15695] ? iov_iter_revert+0x264/0x5a0 [ 552.236236][T15695] file_tty_write.constprop.0+0x487/0x9b0 [ 552.236270][T15695] do_iter_readv_writev+0x662/0x9e0 [ 552.236295][T15695] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 552.236319][T15695] ? common_file_perm+0x1b1/0x500 [ 552.236343][T15695] ? bpf_lsm_file_permission+0x9/0x10 [ 552.236364][T15695] ? security_file_permission+0x71/0x210 [ 552.236388][T15695] ? rw_verify_area+0xcf/0x6c0 [ 552.236410][T15695] vfs_writev+0x35f/0xde0 [ 552.236440][T15695] ? __pfx_vfs_writev+0x10/0x10 [ 552.236464][T15695] ? find_held_lock+0x2b/0x80 [ 552.236503][T15695] ? __fget_files+0x20e/0x3c0 [ 552.236524][T15695] ? __fget_files+0x160/0x3c0 [ 552.236553][T15695] ? do_writev+0x132/0x340 [ 552.236574][T15695] do_writev+0x132/0x340 [ 552.236597][T15695] ? __pfx_do_writev+0x10/0x10 [ 552.236622][T15695] ? do_user_addr_fault+0x843/0x1370 [ 552.236646][T15695] __do_fast_syscall_32+0xe8/0x680 [ 552.236676][T15695] do_fast_syscall_32+0x32/0x80 [ 552.236704][T15695] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 552.236726][T15695] RIP: 0023:0xf70cd579 [ 552.236741][T15695] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 552.236757][T15695] RSP: 002b:00000000f54bd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000092 [ 552.236773][T15695] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000b00 [ 552.236785][T15695] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 552.236794][T15695] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 552.236804][T15695] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 552.236815][T15695] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 552.236840][T15695] [ 552.238220][T15694] [U] [ 552.406271][T15703] FAULT_INJECTION: forcing a failure. [ 552.406271][T15703] name failslab, interval 1, probability 0, space 0, times 0 [ 552.411764][T15703] CPU: 1 UID: 0 PID: 15703 Comm: syz.7.2614 Tainted: G L syzkaller #0 PREEMPT(full) [ 552.411794][T15703] Tainted: [L]=SOFTLOCKUP [ 552.411800][T15703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 552.411812][T15703] Call Trace: [ 552.411819][T15703] [ 552.411827][T15703] dump_stack_lvl+0x16c/0x1f0 [ 552.411856][T15703] should_fail_ex+0x512/0x640 [ 552.411874][T15703] ? fs_reclaim_acquire+0xae/0x150 [ 552.411903][T15703] should_failslab+0xc2/0x120 [ 552.411930][T15703] __kmalloc_noprof+0xeb/0x910 [ 552.411950][T15703] ? tomoyo_encode2+0x100/0x3e0 [ 552.411977][T15703] ? tomoyo_encode2+0x100/0x3e0 [ 552.411998][T15703] tomoyo_encode2+0x100/0x3e0 [ 552.412024][T15703] tomoyo_encode+0x29/0x50 [ 552.412052][T15703] tomoyo_realpath_from_path+0x18f/0x6e0 [ 552.412082][T15703] tomoyo_path_number_perm+0x245/0x580 [ 552.412101][T15703] ? tomoyo_path_number_perm+0x237/0x580 [ 552.412123][T15703] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 552.412169][T15703] ? find_held_lock+0x2b/0x80 [ 552.412192][T15703] ? hook_file_ioctl_common+0x144/0x410 [ 552.412216][T15703] ? __fget_files+0x20e/0x3c0 [ 552.412240][T15703] ? fput+0x70/0xf0 [ 552.412261][T15703] security_file_ioctl_compat+0x9b/0x240 [ 552.412285][T15703] __ia32_compat_sys_ioctl+0xc3/0x370 [ 552.412311][T15703] __do_fast_syscall_32+0xe8/0x680 [ 552.412338][T15703] do_fast_syscall_32+0x32/0x80 [ 552.412365][T15703] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 552.412387][T15703] RIP: 0023:0xf7f94579 [ 552.412401][T15703] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 552.412418][T15703] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 552.412434][T15703] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0045520 [ 552.412444][T15703] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 552.412454][T15703] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 552.412464][T15703] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 552.412474][T15703] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 552.412499][T15703] [ 552.412516][T15703] ERROR: Out of memory at tomoyo_realpath_from_path. [ 552.622941][T15708] loop6: detected capacity change from 0 to 2640 [ 552.626277][T15708] ldm_validate_partition_table(): Disk read failed. [ 552.628646][T15708] Dev loop6: unable to read RDB block 0 [ 552.630617][T15708] loop6: unable to read partition table [ 552.633359][T15708] loop_reread_partitions: partition scan of loop6 (3Ÿ Ύ‚³˜) failed (rc=-5) [ 554.936012][T15741] loop6: detected capacity change from 0 to 2640 [ 554.940074][T13300] buffer_io_error: 74 callbacks suppressed [ 554.940090][T13300] Buffer I/O error on dev loop6, logical block 0, async page read [ 554.949650][T13300] Buffer I/O error on dev loop6, logical block 0, async page read [ 554.953028][T13300] Buffer I/O error on dev loop6, logical block 0, async page read [ 554.956445][T13300] Buffer I/O error on dev loop6, logical block 0, async page read [ 554.960710][T13300] Buffer I/O error on dev loop6, logical block 0, async page read [ 554.964856][T13300] Buffer I/O error on dev loop6, logical block 0, async page read [ 554.968946][T13300] Buffer I/O error on dev loop6, logical block 0, async page read [ 554.972510][T13300] Buffer I/O error on dev loop6, logical block 0, async page read [ 554.976399][T13300] ldm_validate_partition_table(): Disk read failed. [ 554.979792][T13300] Buffer I/O error on dev loop6, logical block 0, async page read [ 554.982816][T13300] Buffer I/O error on dev loop6, logical block 0, async page read [ 554.986054][T13300] Dev loop6: unable to read RDB block 0 [ 554.988468][T13300] loop6: unable to read partition table [ 555.393587][T15741] ldm_validate_partition_table(): Disk read failed. [ 555.404031][T15741] Dev loop6: unable to read RDB block 0 [ 555.406098][T15741] loop6: unable to read partition table [ 555.408146][T15741] loop_reread_partitions: partition scan of loop6 (3Ÿ Ύ‚³˜) failed (rc=-5) [ 555.661167][ T5935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 555.669718][ T5935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 555.674725][ T5935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 555.677994][ T5935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 555.703542][ T5935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 555.730555][T15753] lo speed is unknown, defaulting to 1000 [ 555.733202][T15753] wg2 speed is unknown, defaulting to 1000 [ 556.113518][T15753] chnl_net:caif_netlink_parms(): no params data found [ 556.155414][T15753] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.157855][T15753] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.160336][T15753] bridge_slave_0: entered allmulticast mode [ 556.163253][T15753] bridge_slave_0: entered promiscuous mode [ 556.166920][T15753] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.169308][T15753] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.171743][T15753] bridge_slave_1: entered allmulticast mode [ 556.174989][T15753] bridge_slave_1: entered promiscuous mode [ 556.194436][T15753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.199271][T15753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.214280][T15753] team0: Port device team_slave_0 added [ 556.217820][T15753] team0: Port device team_slave_1 added [ 556.234086][T15753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.236522][T15753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.245388][T15753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.250087][T15753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.252435][T15753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.261413][T15753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.284654][T15753] hsr_slave_0: entered promiscuous mode [ 556.287082][T15753] hsr_slave_1: entered promiscuous mode [ 556.289332][T15753] debugfs: 'hsr0' already exists in 'hsr' [ 556.291613][T15753] Cannot create hsr debugfs directory [ 556.389864][T15753] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 556.396860][T15753] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 556.403112][T15753] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 556.408178][T15753] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 556.426953][T15753] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.429444][T15753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.432115][T15753] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.434511][T15753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.470083][T15753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.480421][ T8336] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.494097][ T8336] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.529753][T15753] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.544827][ T8345] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.548185][ T8345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.557259][ T8336] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.560535][ T8336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.749490][T15010] erspan0: left allmulticast mode [ 556.753213][T15010] erspan0: left promiscuous mode [ 556.756373][T15010] bridge0: port 4(erspan0) entered disabled state [ 556.759874][T15010] bridge_slave_1: left allmulticast mode [ 556.772716][T15010] bridge_slave_1: left promiscuous mode [ 556.775373][T15010] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.780251][T15010] bridge_slave_0: left allmulticast mode [ 556.782703][T15010] bridge_slave_0: left promiscuous mode [ 556.787308][T15010] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.819328][T15792] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 556.822820][T15792] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 556.994151][T15010] bond1 (unregistering): (slave geneve2): Releasing active interface [ 557.041860][T15010] team0: Port device geneve0 removed [ 557.381662][T15010] bond2 (unregistering): (slave macvlan2): Removing an active aggregator [ 557.387421][T15010] bond2 (unregistering): (slave macvlan2): Releasing backup interface [ 557.397942][T15010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 557.403844][T15010] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 557.407389][T15010] bond0 (unregistering): Released all slaves [ 557.530127][T15010] bond1 (unregistering): Released all slaves [ 557.693158][T15010] bond2 (unregistering): Released all slaves [ 557.709999][T15753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.980356][ T5938] Bluetooth: hci1: command tx timeout [ 557.984485][T15753] veth0_vlan: entered promiscuous mode [ 557.990248][T15753] veth1_vlan: entered promiscuous mode [ 558.009764][T15753] veth0_macvtap: entered promiscuous mode [ 558.014671][T15753] veth1_macvtap: entered promiscuous mode [ 558.028062][T15753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.041569][T15753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.051935][ T8336] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.059316][ T8336] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.062808][ T8336] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.069201][ T8336] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.133470][ T8345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.136489][ T8345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.155101][ T8338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.157819][ T8338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.182697][ T5938] Bluetooth: hci1: command tx timeout [ 561.271265][T15010] hsr_slave_0: left promiscuous mode [ 561.275300][T15010] hsr_slave_1: left promiscuous mode [ 561.278311][T15010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.284264][T15010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.302942][T15010] pimreg (unregistering): left allmulticast mode [ 561.320190][T15010] pim6reg (unregistering): left allmulticast mode [ 562.022546][T15010] team0 (unregistering): Port device team_slave_1 removed [ 562.078100][T15010] team0 (unregistering): Port device team_slave_0 removed [ 562.198328][T15846] netlink: 'syz.7.2647': attribute type 10 has an invalid length. [ 562.395545][ T5297] Bluetooth: hci1: command tx timeout [ 562.933048][T15846] vlan0: entered allmulticast mode [ 562.935013][T15846] veth0_vlan: entered allmulticast mode [ 563.547895][T15010] IPVS: stop unused estimator thread 0... [ 563.827463][ T8345] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.080457][ T8345] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.410685][ T8345] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.719568][ T5297] Bluetooth: hci1: command tx timeout [ 565.174681][ T8345] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.705770][ T8345] bridge_slave_1: left allmulticast mode [ 566.707985][ T8345] bridge_slave_1: left promiscuous mode [ 566.710263][ T8345] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.722125][ T8345] bridge_slave_0: left allmulticast mode [ 566.724056][ T8345] bridge_slave_0: left promiscuous mode [ 566.732481][ T8345] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.749080][ T40] audit: type=1326 audit(1767203867.078:7212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15892 comm="syz.8.2660" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x0 [ 566.749328][ T5297] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 566.764699][ T5297] CPU: 0 UID: 0 PID: 5297 Comm: kworker/u33:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 566.764721][ T5297] Tainted: [L]=SOFTLOCKUP [ 566.764726][ T5297] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 566.764735][ T5297] Workqueue: hci1 hci_rx_work [ 566.764754][ T5297] Call Trace: [ 566.764760][ T5297] [ 566.764765][ T5297] dump_stack_lvl+0x16c/0x1f0 [ 566.764785][ T5297] sysfs_warn_dup+0x7f/0xa0 [ 566.764800][ T5297] sysfs_create_dir_ns+0x24b/0x2b0 [ 566.764813][ T5297] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 566.764825][ T5297] ? find_held_lock+0x2b/0x80 [ 566.764844][ T5297] ? do_raw_spin_unlock+0x172/0x230 [ 566.764858][ T5297] kobject_add_internal+0x2c4/0x9d0 [ 566.764874][ T5297] kobject_add+0x16e/0x240 [ 566.764885][ T5297] ? __pfx_kobject_add+0x10/0x10 [ 566.764898][ T5297] ? kobject_put+0xaf/0x6f0 [ 566.764914][ T5297] ? _raw_spin_unlock+0x28/0x50 [ 566.764933][ T5297] device_add+0x288/0x1980 [ 566.764950][ T5297] ? __pfx_dev_set_name+0x10/0x10 [ 566.764967][ T5297] ? __pfx_device_add+0x10/0x10 [ 566.764987][ T5297] hci_conn_add_sysfs+0x1a8/0x260 [ 566.765006][ T5297] le_conn_complete_evt+0x11ed/0x1fa0 [ 566.765024][ T5297] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 566.765043][ T5297] hci_le_conn_complete_evt+0x23c/0x3a0 [ 566.765070][ T5297] hci_le_meta_evt+0x357/0x610 [ 566.765093][ T5297] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 566.765121][ T5297] hci_event_packet+0x685/0x1210 [ 566.765146][ T5297] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 566.765173][ T5297] ? __pfx_hci_event_packet+0x10/0x10 [ 566.765193][ T5297] ? kcov_remote_start+0x399/0x680 [ 566.765209][ T5297] ? lockdep_hardirqs_on+0x7c/0x110 [ 566.765229][ T5297] hci_rx_work+0x2c9/0x1020 [ 566.765247][ T5297] process_one_work+0x9ba/0x1b20 [ 566.765265][ T5297] ? __pfx_process_one_work+0x10/0x10 [ 566.765282][ T5297] ? assign_work+0x1a0/0x250 [ 566.765296][ T5297] worker_thread+0x6c8/0xf10 [ 566.765316][ T5297] ? __pfx_worker_thread+0x10/0x10 [ 566.765328][ T5297] kthread+0x3c5/0x780 [ 566.765340][ T5297] ? __pfx_kthread+0x10/0x10 [ 566.765352][ T5297] ? rcu_is_watching+0x12/0xc0 [ 566.765367][ T5297] ? __pfx_kthread+0x10/0x10 [ 566.765379][ T5297] ret_from_fork+0x983/0xb10 [ 566.765391][ T5297] ? __pfx_ret_from_fork+0x10/0x10 [ 566.765404][ T5297] ? __switch_to+0x7af/0x10d0 [ 566.765419][ T5297] ? __pfx_kthread+0x10/0x10 [ 566.765430][ T5297] ret_from_fork_asm+0x1a/0x30 [ 566.765454][ T5297] [ 566.765470][ T5297] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 566.767439][T15896] netlink: 'syz.7.2661': attribute type 1 has an invalid length. [ 566.769567][ T5297] Bluetooth: hci1: failed to register connection device [ 566.771885][T15896] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2661'. [ 566.940331][T15901] netlink: 'syz.5.2662': attribute type 10 has an invalid length. [ 567.181297][ T8345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.185875][ T8345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.189636][ T8345] bond0 (unregistering): Released all slaves [ 567.197521][T15901] vlan0: entered allmulticast mode [ 567.206496][T15901] veth0_vlan: entered allmulticast mode [ 567.275376][ T8345] tipc: Left network mode [ 567.537949][ T6029] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 567.719433][ T6029] usb 10-1: Using ep0 maxpacket: 8 [ 567.724318][ T6029] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 567.727487][ T6029] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 567.739787][ T6029] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 567.745411][ T6029] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 567.766266][ T6029] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 567.770660][ T6029] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 567.777324][ T6029] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.860912][ T8345] hsr_slave_0: left promiscuous mode [ 567.863999][ T8345] hsr_slave_1: left promiscuous mode [ 567.866239][ T8345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.868785][ T8345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.876237][ T8345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.878772][ T8345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.899122][ T8345] veth1_macvtap: left promiscuous mode [ 567.901221][ T8345] veth0_macvtap: left promiscuous mode [ 567.903255][ T8345] veth1_vlan: left promiscuous mode [ 567.905100][ T8345] veth0_vlan: left promiscuous mode [ 568.085141][ T6029] usb 10-1: usb_control_msg returned -32 [ 568.090810][ T6029] usbtmc 10-1:16.0: can't read capabilities [ 569.402487][T15931] usbtmc 10-1:16.0: usb_control_msg returned -32 [ 569.415050][T15929] 9p: Bad value for 'rfdno' [ 569.605893][ T6029] usb 10-1: USB disconnect, device number 44 [ 569.651672][ T8345] team0 (unregistering): Port device team_slave_1 removed [ 569.705240][ T8345] team0 (unregistering): Port device team_slave_0 removed [ 570.083044][T15938] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2671'. [ 570.086436][T15938] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2671'. [ 570.097639][T15938] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2671'. [ 570.365102][T15950] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2675'. [ 570.436130][ T8345] IPVS: stop unused estimator thread 0... [ 570.871617][ T60] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 571.044250][ T60] usb 10-1: Using ep0 maxpacket: 8 [ 571.047640][ T60] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 571.054443][ T60] usb 10-1: config 0 has no interface number 0 [ 571.057815][ T60] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 571.062624][ T60] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 571.067719][ T60] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 571.071398][ T60] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 571.077585][ T60] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 571.081343][ T60] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.088398][ T60] usb 10-1: config 0 descriptor?? [ 571.100881][ T60] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 571.237348][T15967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2680'. [ 571.401142][ T24] usb 10-1: USB disconnect, device number 45 [ 571.401383][ C3] ldusb 10-1:0.55: usb_submit_urb failed (-19) [ 571.408072][T15956] ldusb 10-1:0.55: Couldn't submit interrupt_out_urb -19 [ 571.418997][ T24] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 571.476992][T15975] mmap: syz.8.2682 (15975): VmData 37404672 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 571.483656][T15975] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2682'. [ 572.274768][T16004] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2690'. [ 572.280239][T16004] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2690'. [ 572.284923][T16004] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2690'. [ 572.383980][ T40] audit: type=1326 audit(1767203872.353:7213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16000 comm="syz.7.2691" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 572.573040][ T40] audit: type=1326 audit(1767203872.353:7214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16000 comm="syz.7.2691" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 572.584927][ T40] audit: type=1326 audit(1767203872.353:7215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16000 comm="syz.7.2691" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 572.627287][ T40] audit: type=1326 audit(1767203872.353:7216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16000 comm="syz.7.2691" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 572.641267][ T40] audit: type=1326 audit(1767203872.353:7217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16000 comm="syz.7.2691" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 572.652419][ T40] audit: type=1326 audit(1767203872.353:7218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16000 comm="syz.7.2691" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 572.666050][ T40] audit: type=1326 audit(1767203872.353:7219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16000 comm="syz.7.2691" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 572.681086][ T40] audit: type=1326 audit(1767203872.353:7220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16000 comm="syz.7.2691" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 572.698145][ T40] audit: type=1326 audit(1767203872.353:7221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16000 comm="syz.7.2691" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 572.709902][ T40] audit: type=1326 audit(1767203872.363:7222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16000 comm="syz.7.2691" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 573.066899][T16005] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 573.199888][T16015] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.203783][T16015] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.353460][ T8519] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 573.436674][T16015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.444409][T16015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.556505][ T8519] usb 13-1: Using ep0 maxpacket: 8 [ 573.561150][ T8519] usb 13-1: config 0 has an invalid interface number: 55 but max is 0 [ 573.564023][ T8519] usb 13-1: config 0 has no interface number 0 [ 573.566052][ T8519] usb 13-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 573.570162][ T8519] usb 13-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 573.574163][ T8519] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 573.578032][ T8519] usb 13-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 573.582431][ T8519] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 573.585485][ T8519] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.590807][ T8519] usb 13-1: config 0 descriptor?? [ 573.596015][ T8519] ldusb 13-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 573.653859][T15071] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.657277][T15071] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.660611][T15071] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.664066][T15071] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.870195][ T8519] usb 13-1: USB disconnect, device number 2 [ 573.875420][ T8519] ldusb 13-1:0.55: LD USB Device #0 now disconnected [ 573.912372][T16042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 573.926299][T16042] overlay: ./file0 is not a directory [ 574.101822][ T5938] Bluetooth: hci1: command 0x0406 tx timeout [ 574.612489][T16052] tmpfs: Unknown parameter 'usrquota_block_hardμimit' [ 574.768242][T16057] bond1: option mode: unable to set because the bond device has slaves [ 574.846420][T16057] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2704'. [ 575.149454][ T62] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 575.295433][T16060] futex_wake_op: syz.7.2705 tries to shift op by -1; fix this program [ 575.311145][ T62] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 575.314982][ T62] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 575.319245][ T62] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 575.322695][ T62] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 575.327170][ T62] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 575.330252][ T62] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.337871][ T62] usb 10-1: config 0 descriptor?? [ 575.777462][ T62] usbhid 10-1:0.0: can't add hid device: -71 [ 575.784301][ T62] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 575.790954][ T62] usb 10-1: USB disconnect, device number 46 [ 576.410684][T16110] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 576.412964][T16110] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 576.416033][T16110] vhci_hcd vhci_hcd.0: Device attached [ 576.426766][T16114] vhci_hcd: connection closed [ 576.427066][ T8347] vhci_hcd vhci_hcd.5: stop threads [ 576.431028][ T8347] vhci_hcd vhci_hcd.5: release socket [ 576.435694][ T8347] vhci_hcd vhci_hcd.5: disconnect device [ 576.699567][ T6797] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 576.859908][ T6797] usb 13-1: Using ep0 maxpacket: 8 [ 576.863947][ T6797] usb 13-1: config 0 has an invalid interface number: 55 but max is 0 [ 576.867573][ T6797] usb 13-1: config 0 has no interface number 0 [ 576.870426][ T6797] usb 13-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 576.876425][ T6797] usb 13-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 576.881816][ T6797] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 576.886679][ T6797] usb 13-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 576.893000][ T6797] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 576.897038][ T6797] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.904431][ T6797] usb 13-1: config 0 descriptor?? [ 576.911609][ T6797] ldusb 13-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 577.188440][ T24] usb 13-1: USB disconnect, device number 3 [ 577.194021][ T24] ldusb 13-1:0.55: LD USB Device #0 now disconnected [ 578.078711][ T62] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 578.245011][ T62] usb 13-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 578.256003][ T62] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 578.259911][ T62] usb 13-1: Product: syz [ 578.263145][ T62] usb 13-1: Manufacturer: syz [ 578.265457][ T62] usb 13-1: SerialNumber: syz [ 578.269657][ T62] usb 13-1: config 0 descriptor?? [ 578.275294][ T62] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 578.279532][ T62] dvb-usb: bulk message failed: -22 (2/0) [ 578.293275][ T62] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 578.302553][ T62] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 578.308545][ T62] usb 13-1: media controller created [ 578.324639][ T62] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 578.491704][ T62] cxusb: set interface failed [ 578.494059][ T62] dvb-usb: bulk message failed: -22 (1/0) [ 578.530248][ T62] DVB: Unable to find symbol mt352_attach() [ 578.535574][ T62] dvb-usb: bulk message failed: -22 (5/0) [ 578.538738][ T62] zl10353_read_register: readreg error (reg=127, ret==-121) [ 578.541991][ T62] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 578.613165][ T62] rc_core: IR keymap rc-dvico-mce not found [ 578.616135][ T62] Registered IR keymap rc-empty [ 578.618858][ T62] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0 [ 578.624554][ T62] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0/input20 [ 578.630488][ T62] dvb-usb: schedule remote query interval to 100 msecs. [ 578.632963][ T62] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 578.641696][ T62] usb 13-1: USB disconnect, device number 4 [ 578.646256][ T6797] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 578.686834][ T62] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 578.820971][ T6797] usb 12-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 578.825036][ T6797] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.827849][ T6797] usb 12-1: Product: syz [ 578.829329][ T6797] usb 12-1: Manufacturer: syz [ 578.831024][ T6797] usb 12-1: SerialNumber: syz [ 578.834158][ T6797] usb 12-1: config 0 descriptor?? [ 579.074220][ T40] kauditd_printk_skb: 468 callbacks suppressed [ 579.074237][ T40] audit: type=1326 audit(1767203878.611:7691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16151 comm="syz.7.2720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 579.120698][ T40] audit: type=1326 audit(1767203878.621:7692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16151 comm="syz.7.2720" exe="/syz-executor" sig=0 arch=40000003 syscall=448 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 579.130803][ T40] audit: type=1326 audit(1767203878.621:7693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16151 comm="syz.7.2720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 579.138130][ T40] audit: type=1326 audit(1767203878.621:7694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16151 comm="syz.7.2720" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 579.145531][ T40] audit: type=1326 audit(1767203878.621:7695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16151 comm="syz.7.2720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 579.152718][ T40] audit: type=1326 audit(1767203878.621:7696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16151 comm="syz.7.2720" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 579.160218][ T40] audit: type=1326 audit(1767203878.621:7697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16151 comm="syz.7.2720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 579.167552][ T40] audit: type=1326 audit(1767203878.621:7698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16151 comm="syz.7.2720" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 579.178853][ T40] audit: type=1326 audit(1767203878.621:7699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16151 comm="syz.7.2720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 579.186982][ T40] audit: type=1326 audit(1767203878.621:7700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16151 comm="syz.7.2720" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f94579 code=0x7ffc0000 [ 579.373857][ T24] usb 12-1: USB disconnect, device number 9 [ 580.238222][ T6029] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 580.537490][ T6029] usb 12-1: Using ep0 maxpacket: 8 [ 580.541571][ T6029] usb 12-1: config 0 has an invalid interface number: 55 but max is 0 [ 580.544503][ T6029] usb 12-1: config 0 has no interface number 0 [ 580.546707][ T6029] usb 12-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 580.550919][ T6029] usb 12-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 580.556383][ T6029] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 580.560209][ T6029] usb 12-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 580.564465][ T6029] usb 12-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 580.567661][ T6029] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.573334][ T6029] usb 12-1: config 0 descriptor?? [ 580.581850][ T6029] ldusb 12-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 580.881137][T13521] usb 12-1: USB disconnect, device number 10 [ 580.881280][ C0] ldusb 12-1:0.55: usb_submit_urb failed (-19) [ 580.886507][ C0] dummy_hcd dummy_hcd.7: timer fired with no URBs pending? [ 580.891502][T13521] ldusb 12-1:0.55: LD USB Device #0 now disconnected [ 581.698442][T16198] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 582.118304][T16208] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 582.121832][T16208] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 582.138471][T16208] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 582.146836][T16208] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 582.150438][T16208] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 582.159443][T16208] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 582.167487][T16208] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 582.174066][T16208] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 582.180855][T16208] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 582.188159][T16208] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 582.834645][T16219] [ 582.835529][T16219] ====================================================== [ 582.837865][T16219] WARNING: possible circular locking dependency detected [ 582.840230][T16219] syzkaller #0 Tainted: G L [ 582.842314][T16219] ------------------------------------------------------ [ 582.844737][T16219] syz.7.2739/16219 is trying to acquire lock: [ 582.846813][T16219] ffff888013546b08 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 582.849676][T16219] [ 582.849676][T16219] but task is already holding lock: [ 582.852154][T16219] ffff888052327068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 582.854910][T16219] [ 582.854910][T16219] which lock already depends on the new lock. [ 582.854910][T16219] [ 582.858185][T16219] [ 582.858185][T16219] the existing dependency chain (in reverse order) is: [ 582.861190][T16219] [ 582.861190][T16219] -> #3 (&pipe->mutex){+.+.}-{4:4}: [ 582.863661][T16219] __mutex_lock+0x1aa/0x1ca0 [ 582.865379][T16219] anon_pipe_write+0x15d/0x1bd0 [ 582.867187][T16219] __kernel_write_iter+0x720/0xb10 [ 582.869072][T16219] __kernel_write+0xf5/0x140 [ 582.870811][T16219] autofs_notify_daemon+0x4db/0xd60 [ 582.872729][T16219] autofs_wait+0x10f3/0x1ac0 [ 582.874516][T16219] autofs_mount_wait+0x132/0x3c0 [ 582.876459][T16219] autofs_d_automount+0x4b2/0x960 [ 582.878524][T16219] __traverse_mounts+0x1b9/0x830 [ 582.880344][T16219] step_into_slowpath+0x772/0xf50 [ 582.882193][T16219] path_lookupat+0x627/0xc40 [ 582.883921][T16219] filename_lookup+0x224/0x5f0 [ 582.885702][T16219] kern_path+0x35/0x50 [ 582.887269][T16219] lookup_bdev+0xd8/0x280 [ 582.888890][T16219] resume_store+0x1d6/0x490 [ 582.890637][T16219] kobj_attr_store+0x58/0x80 [ 582.892356][T16219] sysfs_kf_write+0xf2/0x150 [ 582.894342][T16219] kernfs_fop_write_iter+0x3af/0x570 [ 582.896322][T16219] vfs_write+0x7d3/0x11d0 [ 582.897974][T16219] ksys_write+0x12a/0x250 [ 582.899631][T16219] __do_fast_syscall_32+0xe8/0x680 [ 582.901528][T16219] do_fast_syscall_32+0x32/0x80 [ 582.903437][T16219] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 582.905866][T16219] [ 582.905866][T16219] -> #2 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 582.908634][T16219] __mutex_lock+0x1aa/0x1ca0 [ 582.910403][T16219] autofs_notify_daemon+0x4a6/0xd60 [ 582.912305][T16219] autofs_wait+0x10f3/0x1ac0 [ 582.914023][T16219] autofs_mount_wait+0x132/0x3c0 [ 582.915884][T16219] autofs_d_automount+0x4b2/0x960 [ 582.917738][T16219] __traverse_mounts+0x1b9/0x830 [ 582.919570][T16219] step_into_slowpath+0x772/0xf50 [ 582.921466][T16219] path_lookupat+0x627/0xc40 [ 582.923212][T16219] filename_lookup+0x224/0x5f0 [ 582.924995][T16219] kern_path+0x35/0x50 [ 582.926575][T16219] lookup_bdev+0xd8/0x280 [ 582.928206][T16219] resume_store+0x1d6/0x490 [ 582.929908][T16219] kobj_attr_store+0x58/0x80 [ 582.931672][T16219] sysfs_kf_write+0xf2/0x150 [ 582.933386][T16219] kernfs_fop_write_iter+0x3af/0x570 [ 582.935348][T16219] vfs_write+0x7d3/0x11d0 [ 582.936997][T16219] ksys_write+0x12a/0x250 [ 582.938653][T16219] __do_fast_syscall_32+0xe8/0x680 [ 582.940554][T16219] do_fast_syscall_32+0x32/0x80 [ 582.942347][T16219] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 582.944636][T16219] [ 582.944636][T16219] -> #1 (&of->mutex){+.+.}-{4:4}: [ 582.947054][T16219] __mutex_lock+0x1aa/0x1ca0 [ 582.948772][T16219] kernfs_seq_start+0x4f/0x2a0 [ 582.950573][T16219] traverse.part.0.constprop.0+0xaf/0x650 [ 582.952718][T16219] seq_read_iter+0x93c/0x12d0 [ 582.954568][T16219] kernfs_fop_read_iter+0x46c/0x610 [ 582.956585][T16219] vfs_read+0x8bf/0xcf0 [ 582.958176][T16219] ksys_pread64+0x161/0x1a0 [ 582.959873][T16219] __do_fast_syscall_32+0xe8/0x680 [ 582.961811][T16219] do_fast_syscall_32+0x32/0x80 [ 582.963672][T16219] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 582.965921][T16219] [ 582.965921][T16219] -> #0 (&p->lock){+.+.}-{4:4}: [ 582.968294][T16219] __lock_acquire+0x1669/0x2890 [ 582.970102][T16219] lock_acquire+0x179/0x330 [ 582.971812][T16219] __mutex_lock+0x1aa/0x1ca0 [ 582.973529][T16219] seq_read_iter+0xe1/0x12d0 [ 582.975248][T16219] kernfs_fop_read_iter+0x46c/0x610 [ 582.977145][T16219] copy_splice_read+0x618/0xc20 [ 582.978955][T16219] do_splice_read+0x285/0x370 [ 582.980694][T16219] splice_file_to_pipe+0x109/0x120 [ 582.982578][T16219] do_sendfile+0x400/0xe50 [ 582.984238][T16219] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 582.986313][T16219] __do_fast_syscall_32+0xe8/0x680 [ 582.988194][T16219] do_fast_syscall_32+0x32/0x80 [ 582.990056][T16219] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 582.992380][T16219] [ 582.992380][T16219] other info that might help us debug this: [ 582.992380][T16219] [ 582.995801][T16219] Chain exists of: [ 582.995801][T16219] &p->lock --> &sbi->pipe_mutex --> &pipe->mutex [ 582.995801][T16219] [ 582.999799][T16219] Possible unsafe locking scenario: [ 582.999799][T16219] [ 583.002251][T16219] CPU0 CPU1 [ 583.004048][T16219] ---- ---- [ 583.005856][T16219] lock(&pipe->mutex); [ 583.007273][T16219] lock(&sbi->pipe_mutex); [ 583.009599][T16219] lock(&pipe->mutex); [ 583.011950][T16219] lock(&p->lock); [ 583.013288][T16219] [ 583.013288][T16219] *** DEADLOCK *** [ 583.013288][T16219] [ 583.016035][T16219] 1 lock held by syz.7.2739/16219: [ 583.017828][T16219] #0: ffff888052327068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 583.021057][T16219] [ 583.021057][T16219] stack backtrace: [ 583.023207][T16219] CPU: 3 UID: 0 PID: 16219 Comm: syz.7.2739 Tainted: G L syzkaller #0 PREEMPT(full) [ 583.023224][T16219] Tainted: [L]=SOFTLOCKUP [ 583.023229][T16219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 583.023237][T16219] Call Trace: [ 583.023242][T16219] [ 583.023248][T16219] dump_stack_lvl+0x116/0x1f0 [ 583.023268][T16219] print_circular_bug+0x275/0x340 [ 583.023289][T16219] check_noncircular+0x146/0x160 [ 583.023310][T16219] __lock_acquire+0x1669/0x2890 [ 583.023326][T16219] ? mark_held_locks+0x49/0x80 [ 583.023338][T16219] lock_acquire+0x179/0x330 [ 583.023349][T16219] ? seq_read_iter+0xe1/0x12d0 [ 583.023366][T16219] ? __pfx___might_resched+0x10/0x10 [ 583.023385][T16219] __mutex_lock+0x1aa/0x1ca0 [ 583.023403][T16219] ? seq_read_iter+0xe1/0x12d0 [ 583.023417][T16219] ? do_sendfile+0x400/0xe50 [ 583.023432][T16219] ? __do_fast_syscall_32+0xe8/0x680 [ 583.023455][T16219] ? do_fast_syscall_32+0x32/0x80 [ 583.023472][T16219] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 583.023487][T16219] ? seq_read_iter+0xe1/0x12d0 [ 583.023503][T16219] ? __pfx___mutex_lock+0x10/0x10 [ 583.023523][T16219] ? alloc_pages_bulk_noprof+0xac5/0x1410 [ 583.023539][T16219] ? seq_read_iter+0xe1/0x12d0 [ 583.023553][T16219] seq_read_iter+0xe1/0x12d0 [ 583.023568][T16219] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 583.023586][T16219] kernfs_fop_read_iter+0x46c/0x610 [ 583.023606][T16219] copy_splice_read+0x618/0xc20 [ 583.023624][T16219] ? __pfx_aa_file_perm+0x10/0x10 [ 583.023640][T16219] ? __pfx_copy_splice_read+0x10/0x10 [ 583.023659][T16219] ? __fget_files+0x204/0x3c0 [ 583.023676][T16219] ? __pfx_copy_splice_read+0x10/0x10 [ 583.023692][T16219] do_splice_read+0x285/0x370 [ 583.023708][T16219] splice_file_to_pipe+0x109/0x120 [ 583.023727][T16219] do_sendfile+0x400/0xe50 [ 583.023743][T16219] ? __pfx_do_sendfile+0x10/0x10 [ 583.023759][T16219] ? __pfx___seccomp_filter+0x10/0x10 [ 583.023775][T16219] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 583.023786][T16219] ? xfd_validate_state+0x61/0x180 [ 583.023797][T16219] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 583.023809][T16219] ? __secure_computing+0x21c/0x320 [ 583.023824][T16219] __do_fast_syscall_32+0xe8/0x680 [ 583.023842][T16219] do_fast_syscall_32+0x32/0x80 [ 583.023861][T16219] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 583.023875][T16219] RIP: 0023:0xf7f94579 [ 583.023885][T16219] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 583.023897][T16219] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 583.023908][T16219] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000003 [ 583.023916][T16219] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 583.023922][T16219] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 583.023929][T16219] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 583.023936][T16219] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 583.023946][T16219] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 583.855214][T15010] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.964165][T15010] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.162213][T15010] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.281878][T15010] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.355070][T15010] erspan0: left allmulticast mode [ 584.357379][T15010] erspan0: left promiscuous mode [ 584.359691][T15010] bridge0: port 1(erspan0) entered disabled state [ 584.728640][T15010] bond0 (unregistering): (slave team0): Releasing backup interface [ 584.733136][T15010] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 584.737540][T15010] batman_adv: batadv0: Local translation table size (84) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 584.744027][T15010] bond0 (unregistering): Released all slaves [ 584.749104][T15010] bond1 (unregistering): (slave lo): Releasing backup interface [ 584.753357][T15010] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 584.758808][T15010] bond1 (unregistering): Released all slaves [ 584.764553][T15010] bond2 (unregistering): Released all slaves [ 584.914734][T15010] bond3 (unregistering): Released all slaves [ 585.343426][T15010] hsr_slave_0: left promiscuous mode [ 585.345561][T15010] hsr_slave_1: left promiscuous mode [ 585.347715][T15010] batman_adv: batadv0: Interface deactivated: dummy0 [ 585.349969][T15010] batman_adv: batadv0: Removing interface: dummy0 [ 585.352917][T15010] veth1_vlan: left allmulticast mode [ 585.354839][T15010] veth1_macvtap: left promiscuous mode [ 585.356644][T15010] veth0_macvtap: left promiscuous mode [ 585.358525][T15010] veth1_vlan: left promiscuous mode [ 585.360357][T15010] veth0_vlan: left promiscuous mode [ 586.723386][T15010] IPVS: stop unused estimator thread 0... [ 586.821280][T15010] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.894547][T15010] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.969611][T15010] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.064183][T15010] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.451597][T15010] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.545628][T15010] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.619381][T15010] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.681614][T15010] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.794725][T15010] bridge_slave_1: left allmulticast mode [ 587.796864][T15010] bridge_slave_1: left promiscuous mode [ 587.799337][T15010] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.804985][T15010] bridge_slave_0: left allmulticast mode [ 587.807521][T15010] bridge_slave_0: left promiscuous mode [ 587.809940][T15010] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.814906][T15010] bridge_slave_1: left allmulticast mode [ 587.817247][T15010] bridge_slave_1: left promiscuous mode [ 587.819978][T15010] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.823969][T15010] bridge_slave_0: left allmulticast mode [ 587.826019][T15010] bridge_slave_0: left promiscuous mode [ 587.828560][T15010] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.833408][T15010] bridge_slave_1: left allmulticast mode [ 587.835834][T15010] bridge_slave_1: left promiscuous mode [ 587.838528][T15010] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.843558][T15010] bridge_slave_0: left allmulticast mode [ 587.845443][T15010] bridge_slave_0: left promiscuous mode [ 587.847347][T15010] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.012844][T15010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.017020][T15010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.021246][T15010] bond0 (unregistering): Released all slaves [ 588.294887][T15010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.299504][T15010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.303326][T15010] bond0 (unregistering): Released all slaves [ 588.408126][T15010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.412024][T15010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.415487][T15010] bond0 (unregistering): Released all slaves [ 588.557104][T15010] : left promiscuous mode [ 589.255213][T15010] hsr_slave_0: left promiscuous mode [ 589.257422][T15010] hsr_slave_1: left promiscuous mode [ 589.259457][T15010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.262098][T15010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.264902][T15010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.267415][T15010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.272427][T15010] hsr_slave_0: left promiscuous mode [ 589.274838][T15010] hsr_slave_1: left promiscuous mode [ 589.277434][T15010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.280503][T15010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.285413][T15010] hsr_slave_0: left promiscuous mode [ 589.287646][T15010] hsr_slave_1: left promiscuous mode [ 589.289590][T15010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.292059][T15010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.295719][T15010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.298743][T15010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.306283][T15010] veth1_macvtap: left promiscuous mode [ 589.308456][T15010] veth0_macvtap: left promiscuous mode [ 589.310304][T15010] veth1_vlan: left promiscuous mode [ 589.312218][T15010] veth0_vlan: left promiscuous mode [ 589.325637][T15010] veth1_macvtap: left promiscuous mode [ 589.328438][T15010] veth0_macvtap: left promiscuous mode [ 589.330981][T15010] veth1_vlan: left promiscuous mode [ 589.333313][T15010] veth0_vlan: left promiscuous mode [ 589.465576][T15010] team0 (unregistering): Port device team_slave_1 removed [ 589.475899][T15010] team0 (unregistering): Port device team_slave_0 removed [ 589.583426][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 589.585602][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 589.868096][T15010] team0 (unregistering): Port device team_slave_1 removed [ 589.893952][T15010] team0 (unregistering): Port device team_slave_0 removed [ 590.219979][T15010] team0 (unregistering): Port device team_slave_1 removed [ 590.236260][T15010] team0 (unregistering): Port device team_slave_0 removed [ 591.282617][T15010] IPVS: stop unused estimator thread 0...