last executing test programs: 4m1.770762203s ago: executing program 3 (id=1853): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000a80)={r3, 0x0, "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"}, &(0x7f0000000180)=0xfebd) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) ptrace$peekuser(0x3, r0, 0x3ff) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x2, 0x6010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}}) r5 = syz_open_dev$video(&(0x7f0000000000), 0x9, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000002c0)="d8acfb7ed000e661d931cd32173cde7d93b413ea2681ac4a0b5a6c666e7e31eb12b84a05a83efcb06a00ff952db8722419c61c5d2f596fe744c5e364dcc8c3", 0x3f}, {&(0x7f0000000400)="2f8396e3adfeecc211bcb71587fed1fe57fb330ae997ec45fbbbbc3830a77478cc02a18add8e2eb087d2f4c578f5504906c5d0d5a2866e16eb66892c49d52d8132713b9ec0fe7e8aa5f70deb8bd4e78fba", 0x51}], 0x2, 0x0, 0x0, 0x22004041}], 0x1, 0x4040810) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) ioctl$VIDIOC_G_INPUT(r5, 0x80045626, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) 4m0.61823915s ago: executing program 3 (id=1856): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e40), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1a010079", @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf2509000000050013009a0000000800140005000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x400c040) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', &(0x7f0000000000), 0x30c0094, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=virtio,afid=0', @ANYRESOCT=0x0]) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r2, &(0x7f0000000f40)={0x2020}, 0x2020) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200140, 0xa) faccessat(r3, &(0x7f0000000140)='./file0\x00', 0x140) 4m0.617813788s ago: executing program 3 (id=1857): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}]}], {0x14, 0x10}}, 0xcc}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x2d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x0, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000}], 0xa0000) unshare(0x62040200) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000000100)={0xfffffffb, 0x0, 0x40}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000002140)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) 3m59.608106999s ago: executing program 3 (id=1862): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x4a0}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000080)='./file0/../file0\x00') pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x4) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="105583c91b00000514210629bd7000fd"], 0x10}, 0x1, 0x0, 0x0, 0x44}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000400)={0x0, 0x0, @pic={0x40, 0x80, 0x9, 0x9, 0x0, 0x6, 0xf4, 0xb, 0x9, 0x8, 0x0, 0x8e, 0x4, 0x1, 0x9, 0x5}}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5400000009060300000000000000000045a71eb0dc087d2f73797a310000000000000000070000002c000780060004404e21000005000700ff0000000c000180080001400a0101010c00148008000140ffffffff244ca3c99616c1c8a540c1347a9519f6ef72bb0e6d00c4c894c71180d880c0915def8ff93a302cd5"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 3m59.530119613s ago: executing program 3 (id=1864): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x10000, 0xffffffff, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000000000)) io_uring_enter(r1, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x2000000, 0x0) io_uring_enter(r1, 0x1e61, 0xe8a4, 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) listen(r3, 0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000140)=ANY=[@ANYBLOB="6fb5732f", @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf258800000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x24000100) r6 = openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x103142) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000180)={0x4, 0x0, 0x0, 'queue1\x00', 0x40}) 3m59.111001201s ago: executing program 3 (id=1865): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x5c, r1, 0x1, 0x70bd1f, 0xc000000, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3e, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @from_mac=@device_b, {}, @value=@ver_80211n={0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x40, 0x1, 0x4}}}}]]}, 0x5c}}, 0x20000014) 3m59.067113446s ago: executing program 32 (id=1865): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x5c, r1, 0x1, 0x70bd1f, 0xc000000, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3e, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @from_mac=@device_b, {}, @value=@ver_80211n={0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x40, 0x1, 0x4}}}}]]}, 0x5c}}, 0x20000014) 12.231747909s ago: executing program 0 (id=3000): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) r2 = shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x5000) write(r1, &(0x7f0000004200)='t', 0x1) futex_waitv(&(0x7f0000004140)=[{0xfffffffffffffffb, 0x0, 0xf9411abe32f45188}], 0x1, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) r3 = openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x800, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x20002) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000080)={&(0x7f0000000d80)=[{0x3, 0x8039, 0x0, 0x0}, {0xb, 0x1, 0x0, 0x0}], 0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100}) sendfile(r1, r0, 0x0, 0x7ffff000) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) io_uring_enter(r5, 0x247b, 0xd35e, 0x4a, &(0x7f0000000000)={[0xa9, 0x5]}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newtaction={0x1dc, 0x30, 0x2, 0x70bd2a, 0x0, {}, [{0x1c8, 0x1, [@m_connmark={0x198, 0x2, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40, 0x4, 0x5, 0x0, 0x2}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x3754, 0x5, 0x14a3, 0x7}, 0x10}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x4, 0xffff, 0x93}, 0x992}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3da3, 0x8, 0x4, 0x6}, 0x1000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff, 0x6, 0x0, 0x1, 0x3}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x1, 0x4492, 0x6}, 0x40}}]}, {0xbd, 0x6, "a0351e7b44cb844028fc582958a5cffa16e5764fccb6e0702b0c592ffb5384728f5db1d7778e4dc12a6ad0147e84d91318e099f577eda21fe5e7850adbc55be16abc260fc5cc7e8fb3792294c70bccf97b1f0b0bee69a98c109096a29a5a6226c4dbbaf1da053e41b592878034a20594c4db8abe1eac2b9c4f7e6d6144de7a8e8525c44454c77d9807464553d72ced0c44b8577f2b252fc976aa01ff967de81fe6ebf21ae36ec28cd6350a62fe841f6378670032b323ac5ca5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x400884c}, 0xc0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xc8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) 8.036171095s ago: executing program 0 (id=3013): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff050001"], 0x24}, 0x1, 0x300}, 0x8000) 8.035819947s ago: executing program 0 (id=3014): sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x60, 0x1, 0x7, 0x3, 0x0, 0x0, {0xa}, [@NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x40}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x56}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x4000090) syz_open_procfs$namespace(0x0, &(0x7f0000000740)='ns/ipc\x00') socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) syz_emit_ethernet(0x194, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$KEYCTL_MOVE(0x1e, r6, r6, r5, 0x1) 5.720271413s ago: executing program 0 (id=3030): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400001016000103000000fcdbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, &(0x7f0000000200), 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000600)={r3, r3, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) shutdown(r3, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) unshare(0x6a040000) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x11) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) mmap(&(0x7f00005f7000/0x1000)=nil, 0x1000, 0x0, 0x80010, 0xffffffffffffffff, 0xffffd000) 3.264719575s ago: executing program 2 (id=3040): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x8002, 0x4) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x2, 0x8, {0x6, 0x9, 0x0, 0x80000000000000ff, 0x3, 0x0, 0x7fffffff, 0x58, 0x3, 0x8000, 0x9, r2, r3, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf9, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) getdents64(r4, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="428a6ce66c433e7d6473d37a71716ae84216bc67277f3e9626c032a88a7acfd09ce24f4255f37078d380c6723d7aacdc3e0220c069b0e3a64d5f03936770166422985d1b36eaea3166a4f1403dceba822af78c5c09a45e2174bb51f6e9f11deea936b040d91598d4aa373bf4c5765a17e6c33ddad61487bdd32e3e58af5741f560b4b08b02d3254eef9fe9b2f0bdbddffe42ca87595f21dd7ff6c3d5754346b6414d2d7dbb41f5de3181ef343faa894a332cfc895ad40b048dc597478a761ef691d4bad54af2c711334532ad94c6017b49990e1f01bedefed1eea35deff92249b09a7a5d762d4fef1fd20bd95c3fa810d6d99cc5b8c2dd70a8a62ddd217e069cb29c9e7ef5bec625b3a303188d8cad4f423eb71a4aee6bf69c9cf73f0884a277a9d2d39449053d13952eea2b4de2e61715f0b878bb42d48642399e4e5ff2ea4daf9bf21c73ce7d767db0171cb6d436bd0c3ea93920700e0cf64731f7cafb172b0866fbbfaacc940639d6741bb7e4c7ce69dd1a815387838b081b1d9a04bf6192bc0e8d4e16a8da6ff83df1bead9f6218e4684b78026a0b49a2a89d3f05549b12e8b07734ab867c41a9401abc9c3fc6cab66e57eaa9513fd491384a2c65715abadf29aa1036a4b78e47ecb95d76884b23fe89a251626e1c5d827dc1d96f83d6e524a93561fc1d43ceb28b9dc5b476cd0c6ee51f4f37b7792f9b5d862d69184830ab80a5fb6a53729cbef25d612640b688b72c9d77c83538ae181d2065250858adc72786027103a8e1a2d098a33f1a130db154925a8aef6c4752d6262932dc3cd957a9a91ba1021c726b8b16b0027ebf48e9f2f19bc82ac3f6743d584a5f3d3679487925157d5fee7280cac2a26934e35942c4ce233fe962bbc76b7efe9587b564b0b91f6f75c4ff570ccf8e5b15b09ca095ddcff7fef94e28cefbd1592fc30484b142838263ed9b72ee93e9db0dc0d7c60a750d80d90aa7f0fdfa3603aeb92e6f0166ae30ff4225e90ccd2d0fa3bf89407e1c038124bd628bbd864469b5b77eacd7af14a42487bd0bfd6b2fb1962d63d427ef318fc01dfac3c476611209fb2c0e599c62da902c96abb18b91c6d7f2637c5da80900d07557ff62563ae8d84537485d7102e86990476cf34acbb42b2683a247d64788c0500179d0452e879c6263c4a82bb10987dade8c195eaf8368daed13b2f46e62de7e72c5189868372f081b72e48871e6598e5076997755e6d70c8c78b8ff937003e9558b0e7809ca260bac8d2c165818287cfdf7eab197cbe17b9ecb556931dbb2494b4290ab1eed4d00fd4c3c88f942c57b70ccd9e618872d658111c25a7ca4f271fa92ba1f8bb3d625ebdf2c0635b74c6d10e1c67116eee87687974d1be802b883ce2e05296831cf0552454f0b6a1a29ff2d5ac9af44f10817d063142327170f30d15fb49baa3506313f4c859e23dd153d5fa303df32fd52d0c6e27db0860c2cd00128e3fcb7f63832ac42a507b83fa587049fec1cb4b171236835d1ffc2645686edc9e9b5233a38020ba84c7d3744a5041eb4056d0be3fe6a6ed2a9c87ae8c1010a7ae9a08b189cb10b989358f0d9b5501b31b876fa8e78e591d29e82ff391c913c6894b9dc7aee2fba54a03f020473abcaf75ca71b48e43a195de1be70e30895c34fce11dbcaa81d55f674fe84d2ddcfbcb6cda65c206c0d48e73e2d23c16d8871e409313177c564dfc98ae86ff903e1e37a5c7cc1f5e8ba7f2ea4fb2974a1af29d84d4470ab769eda38506d8a5dc6b7dadafd94847ee26ca5e8221e0269147828fb569a0873b50d9b82a698a58b04aaa3c0f39e76b8f5def74ac1921ffce7bd2d5c9e3ae3e1b78040c7492be0854e52ba0df6100c5bb6c1732a5fa989ddfd0713c12531856969f0cf40e4e6a3e7ec1491eb351967b9679cd733977d0cf8629fc7e32a668015de2a79c76e0ba30b1557acbc067a66630aff2d68409d59c04e0d507e88f35fd2d3af2eee43a06a69c963fd30b3606e08a172d2012ae8c7c25475249a3d8a2fb7aa48fec18893c8f8bde721ddae7d9444a5963007ebe36063515094d54f36de8b29877f2d6faf147d50beff0b5b5f17088452dd97c91d5872e3596cf2f26546e8009448ab45fd1351f09ea7138ae510512715692fa181483da711fa6a861c81d27ee0b8e2701c61c8e4844401e26e2136d9371e5edd223c98fcfe3d5ddf7e514ddde1be2450f64a6c6af79ff4ceb529cc573f178de2322d98091d81c0375e42dc600907c236cac3b3dd2a61dc706a228e803a54e4640cfdb318be734686e04e6deba7e85cd2bb5a2135c143cbc25d64d2e5a50df677f518cfdb178090b8be719e96b742d370f9ddfe4852ac3c9a3ca4d0f63ce5ffed0605c1efb72de7e5d79aa70aac1b1e7e622c6cc7732a2a08496d2d22191aa78a037c89f9c7620a7d3a9530f5b02fc460dbbc16b46d814d4c49c55771ba591daf6fe9300e8c2694c438da06383ea67ed6cb22cc1ead51c89a0eae2b221af22969b5e01be6b4ee752465b0b96e7c0bde2e2654260c63c7c711e23ceedfc7c8f60f94ddce5056684e3213e6e79ab800a9464d1c407ae07999d9a1733a075d10621f796aec1b93cfec393e609f6a317768fa6d90f450e3f77f54bbdc254806f22ae03933d72b0526b77679ddd89b1bbcfa7c0a97025dbc7f66e4fc99444ce2f1a9eff1b741de631ee206a53e1b53256c5722587b6722962576a0c519285f09e1a17df9d7da065b14d26d1fa50ec0c67dcae691eef2d581a262004c900243e1dfb39b8a5a8e0c8f565491895e4c589be089b32d0e92e0a6846885e39da03023197061b99c0b2304eb0a41ab1c99079fa99dbe1ad9b3930cbddaf433407b790a40d1669d8e764243488f53c9c5597320dc7abd32ae9e0207919cf2b9a955509f84f6c18e8aa676a13917fef06d65755ef538a624112d8c4f62c4ad4a1c6a39774fcac69fc0ff99e6d36bff208974ce4f08556032cb5b8ac3a75ad24a8f87b5d36119ea43aa37054b4e7d9bd68d5b0500e863464101185c7006082698afb70fba7a9a1db9a294019b195ee5364a77250a0742a0395d22397d57ec972f71955a6ab34f894ff08484a3565cd5e3a1793267cb186b40adb4056837843c90ad254814aae1d6e44406b148c829434fba7caa2c3db16ef5ac904f505a18b1f55c43f16591577ecbfdeaa960363c26f782335772f78a693fb8e45ed0418646e57b12d5ec9f96a4c4dbc96bc0f3a2b18eda4a279428bf34920a55e96c6d50d8c0f7e7728ec8667e39bba86664120fd688ea9f067f64e4d27ea53e14f8ee8560c347df20cf7ca4a7905420bab3e327fc875154a9e0f52596e86bdeadebaf6e79ad4bab8ec079720a414eb20f7938ccbf8204fe04c1b18f3f3e69b79bcd135f60d7c46c22cef7f8f72410516fc4be391c0c7f4a6f1063c0e739f91c757a34f3ff587051d4356c26bb0b2579b6096a912bf8cfdbc7d1d2adbc194441677c22ab17b108ea7f2491ab519f18d8ba2b20aefe1a694941050f27ec6ee6a2c230afac26dc93065f9cd52ca326378bf36e3260bdf011af695ebdb3b0fa321f80ced7d7024020e23d381474844019bf3f72a2afa6ebf43cd853b7852792b7b14a0e23f4ef42911e2c0748c44a8f2117e440c0ffda360d4f8252187b938dcc9b4eeacd97f374281ac31fefc69e6e8ac84300022f307c5c4e7fc96d3bbf8044e72c778ed85a3d02ca5fe9b15cc3245fae21f57a02383f06bfcc6a3b37a4b9df50baa1162b8669d7549e88b8731ec9e5e058d4e41150ce3d3acb17069d1c08519ca1d1896b843877b9c2beda2a5fa839930349e6331488cd3fa1dc8acd598767b03c5e633cdbbb7f84ae29ebbdf16751498cb6fabe81a50d0eea6887d8ed52b77448c1344647aed17903bb9f2ce08e03e73ddc8f94e27053b81066de7666004870094a5bc9902f866b191cad4603a17eb7c3d62bacbaa4ba524908517fb431f51f2777f7de4053113c5083358e696b9969f912376643aabe3b4a6ab9b6baf71f71673f5872f4367afeb514aa9647907776fc8527f48f75a87f8dbaaa59055753e89985864915ab8f323b1e6012009b49afa8201a3f6634882a5f88a9e6eece7a491a8f4652c32f27784d94d1ba715f6146b5ccb0ecb37109ddd4026d8af2c308f9d8475945d497ad5e0a47bcad2e70290c5085f886f3d58d2099b8e47012cb86e67eb3b760e15f345c001b4f950ea739762a752a22bfe0b9844660b92afb5a1fec179f155a95461230dce2607ffcfda4263907fa5053c6f84089677b8766daab786271d08eed53c228ee7d8c9a818c7aff7973dc86c1600a4e3decca6a6047e2e633e682425ec28e3a77dbb3a21fcd0aaf4b4826f5f9a99d52415faa21fc500d5c99a9bf5e43d7b11dd820975cddf18212df99a0166306e5e45d72c75a917ab0f844d35c2934af58e5b8a12e2e9a1f16925a3b342c3509e86885f3a487a5b74c94bdcb150a81f853b431a74cf47510e55f89da8e2089d07faacb650f64473dfbaf308264a361db8cccfdc4c80bf97c8c4bf9db7789c231e62c2878837c2e72585584de5d52c3f59fed0a4a14a8957279a8dcf8b6efa0e81f00c73b52f34eedf8f31840a0b18c9634570cfed3d7f4e13b78c0fcb16628d380de48e2807d884e9a46f7c2737e89cb7fbbff6491db2f9f6dafc248a5e417ba926304784be621e83db65dddb0b84141e5b97728a9bcd1b1916f9c2da403e86bd178a2ffb3a1f5d64253707f8f6da3ca22a00de18c8bb000384a38293da2ce968fc184b696fd5d26618b5d3b633145e971ff010ab9cbfb0f3173cf6f8016cdef01a2ed0921e3608f3e3e0a511a7480464638ecba810df33e2146a7f53258b440339d1eeb5e06eb94814d9fe24d835704cf34be75fc56f4bfb3f8355776f319095b1987a81dce624c6425d080258d355263224b888a8317782101769e1ec4874c20ff75b430037710bc9437234a791fc7606d9498f6c353af33adc0c92c53229574095a7988c59bfcda13bf1a4185fdd6318b250590aeedb15aeaccf049665316eb1873e4d5a4a7b686ec6279a987444c17927e530e598d5b5f672b88ff6f98fbc52b193053a516f19da80fb2873a49fb9cad5b037eaf9e9afd7c5a6bd0e3349c0aac078968f2655b789abc08b82af590bf7e3f1051188ad725dbff39c124915037afeccc741912def5645951b2ded95b29797da1ac40b16a3f89863047131e1d99879896db7d5e019bbbef6753752f665e0cbdb6473bf86da661e63ff8b0893de82ca786d08dd0a4b7f8cb9181aba271ef13bbb6d6b7ed79debf6105ac5a971dbae815ef10303b630cdfcd8ba9a0bcda0052a6c2a8a6135c6f466fc543d44a9e722bd2a3fc3d004e5f6430246c8e2fae6272cd238581412748d4ef37a404b7e4035a03a981be204606dec92a430c5cf303f663878c6b16215e63e41869496f634cdeced1475c47864e78a7cc398c06cd53d229ec08488651695ea5c018b00dcad9e48fdb8006fd38e1f53fcdea59aeb3570a1098659892d20b3be362edd0e587f4c3f78af67301c78e83b8aff103667709afd8968846caa34d9291fd549b4aaad4cc783042a117f3bdb009169eebde40bea76925218c7e964cd3e42c09220cbf27e2c253b3a4615af8039c4a713e9afb3dea376152cc9d011886674ca84f9aa413dc1ddc9936472bb7e9107c792da1dd56a7a396fd036f5caab4d4ffe35ee1f0771f3d04c9933a94aa0f28bc489bd81ad331a1cffaf1fcb44694bca71886978ac7ea1aeaf1e8cda64d195414c4da561a074ee28e2c983742477d7de8eeca587cf279aa948a037bd3b596862f928910d0d0e077c4949a0c7b340e41d41f5b217bd6ae4cb2b2a34561652978e64616863f56ffe91f896eb85823ade588333e6f9acccaeee63d0d4f19bf6eb58ce9311cfc1a731705e484ce612eba0bb81f89fe2ca223df2c3b9f37684c5d4419379e96e65830cff6e0e03c146f171cd9f9d287e8edc631d21887e7f63109dc9c57feb3cb3e67f3146c3d7c8735f73d5d6f038ed2ab29b6ab7a64aa936671d71a2a82abc41d907ec91d4aa187b53e1a5790974b3a65ef3e7f145b040a17991b287513c43ffc35d58440c200e1f5914f216dd2d8c1477bb7715dcb96b4ac12263e52bbf7869e82a0f1a2de61ac65af1e016f5cf811031c3ef2be67fc442114082688aba559ce993c523a9d60eb19245bca03dc2783fba384740295e86cdf6433ae624f0a84eea3d1d133f3cb8d3655601debfdfb89995aa86bdeaab4bf37ecd728958f32739030527b51532fad7ca3861ed5599568dbe9445f622b0a1cd9d5864544265752fecc10e874c2f1a0c6f11d5dc945696fcae70b50fdde191d0aafe50632a786dff3fd5f976aaa5af332156bc96c3c86a88f35f2ea876d050a0aeea72e61d57a988183bf3ff14508f825f86f2cb6742c809096c1c16a343e5e38be54b8426ed809e1ce15600b92f251ddfbc6244b82d3ec22bf888929a11cf9e591dbc06007cd15ab7edc093dfbcdae3a145ece8ded5f0b63bb5f3928ea0a1996762b982e10394fb8a6b33bf62dc4a6f8f614ec856a9b1d790b9d06e675320afa41e1a465dcf6fbb49d737f66ff492f019b0c4b34f9dad26e088ec3b9019a19a78a6a25f7421702d87ce9d50415ecfb3cb4d5c6f3ed0c24ed3bc5dc7fcc26e54403d319a7e629664953aed9f96fa63f2b1aa9a6a066a12d004b7ec28bb92457ca3fd863745085bf6eb40794beb5363ccaf0371844a24252aae1e49ca4bac41961e7a155fb8938a01ba73ad66f55ce33c415a6c6b860021dbc61b0fbde29ad55556a11a7ca4c5a85b0608ca2a2a649ae7654974e8aca57c5d013a02de7f389245aba981d23fe4e115415d3f5c7a52951f122ef4ac3efd9783f6229576ee88e3320112e885038b17d9ce1847c84c972bf57b0cdbc30794b9f3ef626c897fb38db40141f8a0049a998524f90dec8e657289c49634e773e9d3e776b0fd14afcb3f54127d95f062c8078540efa31a11aaeffc8c68cd981ef531a1f166ea73c00590e1044db5e719947dabe2a8dff7ae0b8400a9fcdd6f5cf69250acec7b06ee2db86a45fc90bf5abeb90d1d11cb2b657475bac2a5cc4606fda1f19171fe63f72746d29a218cca87616d283fc5d35f0d36840bde80577ae91f1148960079d027a72a8084b5aebed10b201eacc4924bed0ca734772c8dbec33bc256cbbb08a80bbc4545d5b5ac9f610aa4ac32faa0bd741e6bc39c5840559a9a6de4646ff5b62ccaf3340985151203e885bfcffa11b9c77e0b42b903de4fd7db842135ea3efb1c227aa7eac69102b09832c6d5456315b894c15d706386a0cd336cb57dbd8b97fe4e03cba770ac356445449bc53754dcc18abee099ff5674c6637e433b448221bac334475f45ebaeabb3e0cc1d35164d501a75205253060c80db6c0e65b307375adeab281eb4433b3eccb1dc27d4e2db0b712dc21b0aafd05d07d59995f94d6b45070eee5174f54067871b29b02ec23fc2c6eb122fe690cbab49b040d48d9dc0217b9ac439001ad5ed7f73b673739010ca8b99ec3b2f1fb528e3db34c698fd5dee32794b31fd63c2b72f32bda74506e40b6f88e4495739f6c3863542ca7cb4ec69b5b48a3da1b808e9249c285811d6eb031ff7449e75f0ab1235c44bdadfb7f4549cc361f3d370831580269a2a0004596fb719dfe15faf4db82cf533f0e813e25e5ada6d06f235c695be58ae02bd0a05ea836d15faac2ceb330bd93abe5abe4355a4bcc00382845a0fee4d4c5b831cceb8d6c8bf543b18f34355a7d03e89be95f0ddce76625af30aa71a5090f7639f85accd686fce53abc71512a4289d14e992a64ad5303fb0fb1298648d268939136f1625039b472f0d144599290c909aa2924563a7ff5fd5cdaa5018e592e9b4853bcba57c34c1167f77dc7fc010a2fe8a8e3e82e5dfd8cbde7a73d1f0f84691b452c263ed4bf0fe336ab05910d42f95b8fe1b52421315d611b16820ae75089ddbc222edc1830a952c91180a6d3228d1e1fe823d908bfa4d24c1a6424461007d1b94f0fbc13a9e718243ced7e6f24522a80005a4fcff858dff00585cd9283ea1a597f0ca1e76c54747d050f392cd0e086326d0ddc766ab1fbe30c3b8cba924c01475b160e775c3d1d26c35840f83269a7e28f1338ea375e53dc98b862c8d15a19f772ac23b3ee9f90bb04e03dfde4e82fb9dd3a0890fe06a99101c59ae696ff1e1bb1d652b6f3f9635c18616a7c86b1b6ace325a6c62d132cda8d826654641b6e802acba840a4265e24e85cc274b55e0fbd01a76dd9af91441ae349e5bf7f585c9860f5c4500da889c3b72497b86f193fcf969d1424eb0f64e9ae1db82c102e1d57bb4f6646209a691cd0b286182f2a66dfd3dbda20a83156b0a108bb0e0a5c8e2bc7a2c19cbab09f25db581771af9fdcb09d77a46f337f2443962f1858e374c16b37f8e993646cf84b2869d9f93a4e38e0f4db5444c287d4030f4ed1bfaded4f37646d81255ec9bbad06687f49678dcb4690284c2db493464e7fc5c2e39832ae3ede01b136ff32532f5e670ba2d753983fdd2052f42311fbf917e96a1e29b4898d62130c683bc0d45cc2be5945cc41e35475fda252ee1c3f035afc352f34b77ea13a4fb09c09dea26110e700693cff04ce8e06b30f66535608968e65d2ebef57698ad72e69beea4db56b0e8c6f91cdf187fd0d49c84c1d5ab34900f6004b00503131e7d6c996dce0a84341ae8236bb5741adf6cf5b447d750f1e5f0cb5b3787e22992a9f26310f28d4789d09c53df3057113f6ffbf2978984762fa679cdacbe509d6dc4b637f17b6cf49283d5a523e04a2205b1a1af1c6880fce33502a83170a5b0ed1f384ed1451e683b622f44ccc0d385b3d7540ca3116d6112aaf905039471b564d3cf615ccb8823cfd34e635c3b2af982ed0a98fdf2358b42cfa8e8cf2ac184b7e08bf48988f000850163bffafe7f69b3f8a761936a3e1974e79ec92ce893f6a8474fe900b42025c9bf56799dc9a0db57239e8fa5dbb3b1972b0d2c456f7777ab2baa1aef60f5be9d48b4aba1aa934a493682c70687b4e7b05f5226eafe9a25d4fc33cc2af7a7315b37c7db101ad3456d8ad04ddc3b76d2baa96129da53c810d55377382a2a25d6ce0d4c113c3367fc906034eb775290c1d5e5c881d9a8c6567d8470d68b33b506bfab2d6b61a9a7ca6eb003772e30165ed01544d896f96c0f286a23ab55ae258c1554b8054e9f6de37e9f29bb644c4f2ee3ec42d51daf7d4da1cda30f16a56f12e299b5e302deae593fbbd6f75390f4eb25555185bf62eeaa882c23416872a4cc18d2534ddc4d2a1f3a0c3ca461d9b9e4fda10c3294ee74c631c65e840d5e4a94a1798e07a5e151968b7b22892d65ac2c81e7e8d9a471a790f66a9391b4e8c19a2251488255c96d498cda6ddb3aaef264454f2b4ff43a70c48b1fba3ed45c43d0dd44bc26452045e9fffa2b25901b3d5704ae3b0352fa3e8830774b6e38025c7552c13d312a273cb88c1649dc6d8ab38ebd1b2bfb16b2cc056f870c138052b951baacdee560e218972b1a0932bc266855062fafed6064bcc637db59713538c45a69c838b09e1b143b7c1e2e6b72a6a00b7cd0afff8d20b9008d61023aadf193d8ff8040220564c0bcbd9dc03a98ab1b8eb96c576291636c0c1de5e3d872c095876efafa7575f994f45c29cb3fa9e96f98012b7a84ce820e172e625b1de98031e5471cf5c9036864289d95d2f1956abf5d4f9a7e81ac2796c67a4aec8f54a5896bffd05b4514df6b2a7df1038183ea740459db4a07ad275e153a08cef7542abf7775a8ff164e73a424bd22815da91265c8c86c1dd90ed926fe313fe32be9c040f7065b27c8cd03d585bbdef6f149ebb3e3906fed7290a19ee7d42621393d634940c771c6dd95a9fd153bf25e029b453a69b10cd3c9d3fb17fd936ee6243a5357b38ccdfacff843aa2a51081925acac1b7ef3dae20304562be99ee3464885988d6e08b8f1ec22e51d5960b25c799d4ec379bec80219cacbcb4e312e744b6e5da1cb39e6d7b90c492ddacc215d1218891f65acb3d3917ed208bd6e8fd520eddf7584ecc920c9243c657cb6482dbf6a38af25d199f2137880b605f640a4f996f48da1f7058d81604a70c672414230105990aeb151560ab80379e346a1326c0438b68ce6bd291654d736881176ad30d11e1fad2871eb83f4b339e5fb0bb68eabe3b707324673b3ba607fa27953c9109185ecc2eeff24cc3a7494cbf04f70bbda0b85e644d8e2434bfdeb2bb242016bd82fc78e8ff2b1bb18167e7834f621225eef2607be6d2318ea29e507f7be94764f67aa5c61c7d15dba36cbea919c665137f9216e30310c1c3a410eb7ffd8bfb3d339273a8934b4089efeea8ce06cd5dcdc46907e169dad730be362e6583a512071d6a2b7ead9c4482dc91f55a62592925adcd3892dd57461ac830d74cb8ceb47c78ddaf2558cb8bde9dd3ce2edb882cbb0fe019ea611bbf778493d63a3b68b3d94a283470e4e682ee4cc569ebc6629b4f0a5e10fa9bbd6dc044cf7d61d11d0ec5563c0b7b86141e7a852fe64fa7c8496b112f366ca2e4afefc68ebd78bddfd5bf95b40f691b0d81fdb5126e9ed55e32db62af1dca33a3449aba59f12bd03c0f4a64e1fefb18ed08f6a9a1325248139659687a73d378f09002ebc4b2baab643ca44b4a7ee63dc4631f211181647daea7e36806eb0a79980ae519fbc77c9988db03cebecc1ce2db3acbdc928e2de2111fd171c89feac400249b28c14267f3e6f711206b0517aea57817e13d0f6553e6e9b73d99a3f85e5a9cc8bd7e3605dbf5b4f4e665bc7541fe888c7d86cac5811d560e044ebe3bb4768eb9307369da53a32201a7467c066b83b86c333876e821801f98b466dcd2dd6077468029722b01988324e101b8dc37d5d45be0cfa5655e232bebbdae8bd70e92a66140ddfa4bd182beecf5038d4f0bc31b37fa26ed21820c78450770d380c2f42386a5c27a93b2f85f37756d9b32df934ec4d1598e5b3ff6fc53d5cdaf6acdaa53566a122349bd1c21a73b634dfaf23130db368a236376144efbdfbcbea34e78000a261b3817a10eb7c0413534dafdc55cb12f65bbcb73a4467bbc2c2319ab070ffaaa8e4eb24ef9cfa2cdeab19e16e0b1a502104492ca060ce50381e7ebeae0341ab532bc8a4e9a4bdf31e25fbf7674353f347c274fcc40083486fd48c08602c12c9c6806c7517c5b8aa178f65286f5007ea8d94170a7b070e66bae28e5e143b477a2629efa8e33883c03e0e58a6f21e253d87683d4852abd31f1199496337eef9c8bb81c5e3313a0a4c96cd4e4a3997144340f0bd5d3fe3ecdcd0feeee6bcb3ba0cbd160298936e6c26e3be0b86644e2704b0ead40f64e486a95856736f04d5493944eba60794ebc538fe149367eec24d8855061ca11078832d771d0efdfa221f66af302e1424bd3e4afef26dab0cf76b51d95b90d75d4ea196f5eff677e4260170b21918b0882eeab5dba283b07b4feb99bdce197c6e453371c41be2a8fa6e29d6ab5cbeff6", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000000000000000200000000040035e508659f69a60a1f554e0627a0db3fbff6f3691e6ac2519956"], 0x0, 0x0, 0x0, 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'tgr160\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) poll(&(0x7f00000002c0)=[{r6, 0x8000}], 0x1, 0xec) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x4dc8aa39}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) getdents(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000010ec0)="2c7f3a6fc245d681b084e71bc56b18ce046e3a78ede7077c0fa7890497e6e51fd41654be1eb9c2d19317839140b4519f3e8565dc8567eb4b60ef31856b8e5102bce08854a96fa59e2f9514cc941a2e3504fc642f22ba91631cb35ba6f5efaa8802c2daedb17217aa436fd3590f633dec00a56bca002732e08f28d42af0e9bb20e30a34ffedf9471ab60e2f7648d568edb191c6732ecf6704e27e979602663071244e9155fb4408944b5e4a60149debcab2f2e13b8200e917010b4f2dc8ea98d45a77ef00daec0f4852d2ea050606cae921869f9c5f6e5eeb4b1e83ab8bb7b28a69abd09e9221a22bab9f4be89261775b6932c5cb364895849722c4b46ed80289a881638b763d84ce5f70509a47f08c4f20e02119d15f1d85ac57c9ed6fb042fcca5cfac8fa563254ba5d093ee77d00ba8a73e328777d8b4e8bfc298e2d51ad63d8c546480093883aece2e0692c240f45b6771adb53c79731488afbf6231364c546daf3f55c48c79412c1b2c7b2170e29c514046d095e5fcaa7bf5d18d06ee00b067a23f8287929f977e9740469f479103d44df9368f5961998829cb66cf61ed458b1a55d3328cb757894d3202e886645122d995d3cd2c30c47ff46897cb880cd1409026cee957dbc154665664cfb725eef87cc39992dcc7b740693050e32398c91f1cd13a9fe7ef5268e8602149275c512a2aafcb4e9b3d484f7814516c569299b9b81a02facf43c0c5753b3000fb68f29c88d1e920c26f9ca0c002a20fe64857a025b249cebef97915dd708f9006cde6a7dab39422cf537ff9ef14802526a70bf477504c3d1059a75d8eb5378528c5edaaa096019bfe89cf9ed8b9aded0d93bc5f0e6dc21294948b630a5c1613ce168338152e1dc63c4d63b9bc64aad9836e24019d32327cb30f3e22a509dcd210d1e906b57a96013c589e8a96edf92baf736f0c69988030d93c5afac4f31d09a2b23d0bde1c818c58ce828d33bc810d8116807ec1a4acf537c077b1a5956edb9a581737fd3039420750ce4ea71564f071b55682487ba33e1478289a37cdcda771feb1d5864fce210036174bd24896844049a13a4f8a540bd7dfe32cf5896e2018f1b1b7dd603a019c3f5485c851b9e98e3110719c9680ba15578cbb5120730ebe8860b199eba93fbd63bb5150963bfac8bd5893a1b3d5ae457a1d74a8684aa7aaed4a28413ab4d59559cbd3a8c592c7bdb34e03e36809d9d8e470d4a88d38a6b1ffa1be60ab73c3eaef6a07f1d1572a438acc52e4a4d370eb87f3445daadc7ae52c15523414aa0b21abbef0bb97eee7b84e5e4d6b4573ce84eb16cc9139a03a100adad0aa2ec509b3fdc50aaa37244346071fdc3b23d10df5a9eaadb9aede01e02d67d0b5924a92f1d24c6d83329c4cec5abfc9678fb7dbd1aedf558eeda4bc917599948b8efafc9fbe0052559e9d2f94b779dc3b59825ae867bf647de5211ce8916c8ac01347804c9c5fe7958d44e63cea3241eeac5981ed5d93cadc2d21610f7d398d4526395d71cc97e5fbb20396a777977d92c47b912f0fcc93c171df535729e783337d0260db9db9959909c4913a3496f23244258419562f410ee8d68e30b05fd6d5cc88dc39659540d74a9d1eff09afc760ba6a32bd6405377881716de82a22970678c792d46b71e268ddcff321e1109cb27051ca54d9093da5e32d17bda5f90ee37cd172585489ff764f16adddcc59e94e7c3159ae4f60cf66c05af269d93f350a58ea0d5b6963a70264886170142f0502e81f0d922004f1776014ad2ed56175340d80f424702966438809542ff082033d1bcfd428fab8d54572a84fd1c1b357e8bce5db197af4f3110ef2b23379103e3f7d188f50c45e057cf468ef3e44123f7227ee60e2bbac3ae0311d9326660f8208e8544dc5aa66cfb3b9598585594d1dbd60f58bc7364baedc58062fad0854370d9788da40cebabf1ef729ed92ebfc74627c55c1b37ddbe7a2c8c254cf4121fc6d6686ae23c620e6615a594b975fcb49a319ea27a668c555dda48c4a1b40bdd45adc170d0cf1e02a5aa3856ad06c1951c77745e72420aca20348aadacb0ba9dc66ed46aa56c939228cbee5c8ad7f7aca94c2302c4908476290bdea9e7d262c23d9ddd9d5855eadb151eedf6d8d95766319bcf330a94110b0895657dcfb7d12dcbab7cc15df4b3cca9ff3b2295f0ad13c21f22573d1fdf5630c79b5fe46f1adfe7bb9cadb850418aea1ff10e2df9b49c5d07a000a619d21e13809414549ee0d89cf39f3c00fc2113b2884edbf18b00a8b1103d4f40bd5fccc6e50d8ee3d0f2588774fbbdde3869ac9940d74feb11983244a4517d57690a6503c63ed56d7d52ddb10bc0e331f4738b804c429d1c208de672296b3f87acbac1c9874e0f0b33edd5e1e2ebb0927730c86d7ad07e36402c3f1515d4cf29ac68789242f44bfaf775e5ba5fcfb6f4d4371ab8ad9d6eb8b2ae27fa8ffc9801fec0a107d19ddd4c25d36eb750ef4ed805e4fbff4122bc2b8afcd329c9170ae410731169f11e2015e9e2228d37b775809a28ec6a3b67e0572f47bf6498c2a147a594ab309b6a18ff5b8f41fa8535bc3b342bd5c23576c2fc78626a84765c71644e8bb2b033a5080f70ea05cbdef77922a668ea9415ca6602aab534187402e2840393854b331e91dbf9ac337a6d0d80deeb4ab423f0690babfe0571e355d2ac548d889abc896cfb867c147b29162d47899c4961354a5531baafa04aff30f1ce0eecb8218e922575037c19ad74f76e489a2d18b6fc5f1fa765a005c9acf03aa723f7321e8eedddcb4ebc839c188da378dc15575a6804e0cd79b9bfbc0c7fbbeaedd292b14644d3e962cad174fd62f9ded4630d27b6ad66575349d96ea055f26ab5645a41d64706c47036674180ea39e8d9031218bba148cc26d77fff99029629b88a644821f5e8149011cc0e2e3803680eda38bc771ff7f5eff707388d1d87f94cbfaa55e1a0de5e945f3aa0086114b5c64f29a0d09e2a7de267d61ba09b11020e34b17180f9929a1dd3d781df95365fd638cf3d858755b481880c6e529cc44b9fbd417a7cbf4f4e7bc5deed2c7f038afd951872baad9799f53b197182c917d3605cbb5de2c95fa9d09b883c3d9f6cf1cb30ff6aaadd6e17010325cabdb247af05faf9df9b0aee027857f88c3da7ad19e08da3cb5f663cc9dce6eec8416a0bfbe2e77a5b20a6da4e4acc9670c7cc63eddf615d13fd89e2f00aefb1439e69a2818b8f24d7ae04bc718a401fba508b0685e1e52dc7bca6c53c049d757d5755ba6394427ba45bafec43c39cbc3a5f68b88afdefa51df6be63a0c63f39c69e2ad10567cf7b408e15fd441ac365be897d6b60fe30bba997045c0ae891326369206cf9c53a609292eebe3f67c58964535710929c37211cade7dae9c965933b1aa2377d056ae400d8ef9f540f11c907f48858007fcb9303b0f2814cc6dd30636389f167d88847c9a55fb6a70adf41e54f7a433a79c9464f72ad2f615386cfa0b14081f1f55eb54b9dc96f4910ad369f37cb33259a4fae1dcf051699017ec8dce20f5401a768275f54cb61c346f06217de6eb195982b49b0a576d894fdeb1796a1b99b72d99783eca623fee56d239c263b0db23caea3462136cdac22128f0acbab8b332a7c1303bbb5997114f987398e0afbce9678ec9ce3a93b7d66fc8359c9ba1b53a65d90a1eb62caa8c56b98b337289809a56874f631edf56c508ef43106147be721c4597291f19dc8cd4150d2b34ea30846fcd8531b34dbbae516e7c42366e980c91d0180421195fb6bfb9574c2741d0a45583e275b1fd0e48f4b164957247b81a5c0292075a38f5016ab017d39c5783eb8b602281867cfdd980ee1fbe181617c526f2b3bc64905474d352b07ae36e89f5829c49b3bd2f27df0d11d1b893cfc16d2e3dcca2adc1f54915fdf6bf55be5995197bfdae10dec6556ff5f61e5e1f64112f153892b79051fa92f852854360eab66a2d9012eca143affe992ed5ad883bcb736a883e12c25d025790a1c477258a413b71fdf6321f2624efbe74f7bf816f6b07ef348bc8a8389c73293f320951d093307baa49f7544bab3b51cdc52a0cb1994358d4ca436aa66f791adae81921a01c807f1212e38b7dacc6ab7cd2a0809069c88787daecb201e7e82d321248c1f747eb9c31f76017436c2aa345c13ed45227214d37eb6701c15ff52b1d5d3d490dc80d67bd3b779009939a7dd65e759317103f21695ba06260f455d98454e3992f419899047e8ae24ef10b3c96621506d65a5c20dc5732a71478c019b240f1194fc959d77df7a1d5d6b1b6f8f43cf7e4d4d72dadf888041c3936f354045b15f2530bbdc38a2fbd8a966732ffe26d994b7ffa0c558259ff7395e4bad1f3225250ba85707e5c653e742bed1a342e6fe56c75a4c7cdf7f342e83b6a83e5dff2ee9aaab8edcc7a3ee33631887b2492995da3190e3ca8ba74ac2732a27d6524218605207c8387baf8372e3cc79879b78590dc5447ddc0aadd6c7aacbd354a445d826d6a07f89245c26ea48871a01dc9cdb40e0c6d20e5aae8141aa3aa15b5e6c85abf6eb8be70b056cabdd6da3f383b8e94fbbb1a0d9480dc55542cedb897a90b48a61776ddc4532c995c10c262c22bbac38ba5b111a09d3587ea98feaa6288bdb3f5bb3bee3ea69e4440f0192a34bf3498b933abdbfbeec830a6e74171cedc90847bc05047402f7f0501e5ca2503022c613dc779fe618ffec011ff69b9e37ad5cc2340f28656093f792742a3069c8a96e213cde8c33d110a2723bd41db10e3842e4f019f10b56c18d2093d9b508a043e1242bbc9de165f21df3530c470cda9e60a3859833bcccb9715ffd7313bac4ac1b9c1d0a3e71bb5ddba842084683a3e2ebb2b1d9fc9dbb6ecfc92af8c7bba41f3eee1c861e73d1e1e6aa7310b9adf5fc32f94913ce8cb2f924c6fb5df0be37b10d50c58b201833b03c1712d4fe50a2054a045084b892fb77457d2f0e399256a599bd91feffe659f3feeab33f8ffa4e4747ccad3814d43980d5cdb46b3a1f033b782162cdc89162a1d901590f5344781ec7d96713103893766684a4a71bf482d4223ab8c0f71b09bdfe176063ba3a967f5b5907f501302d00ad10f030aa640559feca28d9d2362ad4be69d9012ccb8ed8bb031ed27c03134c2e00de5743adf4deb78f3162f3d194d70250b4020ff64d52a30755e699d58460cac659c63c4633b43317a2265d8be16bb1abbe492033ede9d12744741124370e441e6614ab896aa239b30cfe55db1cf09c527fd23725bbd209e89aab62e517bf1449c2fbc203d78ad763892cdd5934fdbc97f023334201501260588ec39bc7b6231fe38b5b9ac8fc121049cd61c33fd23ff0480363ddd82fcb6f5d118724427fde4671cd416b96298727927f476e83bbc17f0856c7988b88e76f0cedb5d397ce4cb76efc02d7fc626e838b08ed594659cba8537f319585365f83b1269c3d4dd253bf238690dcf542b715b419100b03857f57a0dad7d2f0e099597de6bdbd9f0e18ce6a6ca478bfd7644e3ddb913bef96569c74f5733176fd25749436d6f6c8852821ad5653401814657f7ff5ccb1d47161eabdf56573f38f766827cb8bbd1fd9fd26d5eeb2e9dc5c0b0e05d0a8e335da8180f384c6bac1ad872accfe09ac9ca9102f2c35dad7689cf734a5378dc8d834b267560a089da2372d5cfbbce9aa13a55dba0b03def8ee1dec2f6a97ff7ff9a35e65272a0fff7db3aec4e9456b1d310f9b69e910be07fd161de8f67b845805282a51572a7b3668c923d03a600cfa68a881bddcf814ff4a98d9adfa2d06e883d3e65f8b6d4ca5dc4667be08449be9d08cd6fbb78c11873b1ef3f081b10cf6314bbd06ffb380df233d0e644dc8ee498bd95333c2daf9db0e6801fb274577205e791071debdb01d9786b1cc624e1425b1561afb438feaf5069937de348c51e0b4c79c88856791e9bf736d6c748025f9b28182521b67596acdf15a9e41fa02b592de42d72702ba41c1976029e082d4bb2f63da60d73732bb98783db88cc0d09e849ffac5323b2b28290ba34d1a3e0c1228a2fb0c2e92503b51d54fd0825948ca15c5511b032c36cce2c04431a47cbc378e3ec1c57ad3b37aa2b667bbc23f21880dce621a3b203579da06ffb79359619b181a72ed4d192e52c13f2dacfc18ba40f7254071e1103a164f5cf8323bbec9cd9fa6f2c9eae70715a1ef57b18c6908dabb0f7c1efe1a6ae9b6068e510209d54f760f922ed4401f1709ab65a1e4953772054d585b8a8a738463f6d70ee9dc180feeab307e6ee094ad80050a3dd450a75a7e7dff6e7a74256f2b651ce905d1c99eb30786c00e1544872b76892286848b297f31d8222cf23a4a4a664bd784ffb7a2c3abadac43cc7a791926e59e0471bdc45186ff4f564b68a9b8beedd2ef63b79823acc0a81c867b443d8f8a2242e6efe1838a8db801930644cbc73d769c0e1668a413eb2609b6151329edce4a024c5ff11110beb54a408e752729e033baccecbd321dfd8e4f16f79d16d13aa4ef212139d0cb81c8f755b6d189ef9c2869e5c2cee655df4b75c00828333c8b62c93b3ec270fe0c1af3fae784c950b441f6f78639ea5678652fbd216700d4ee85cd8662db78a061e959507787e12c7ba002f08fa01a860b34549e89bd1d3da3d23befc59ce2d50abcecba8671f4e8c312816f3977e65479b6fa8cfc618e1f569e9a12c8faea700e86748ff468c43adbd7ea74ce1702d2659bfc26ce49b24c62731dfc1f161bd31d8b6af4ea1100caf248ec18976f1a6c8143df40416e42ef9d225e40436b5fbf34450fad6f3bb8abfcffa367e0a16305dda8205bfdd33625667f709ec3a947e6ea1329c4f7d7aa8917aeccd6078e54ec7196ec7dfb27ee64e26df48a6a705c2ce330ca7b3f21a9ba1f55e2fc334adccbd7b05b489008a6d8c01f81b2b0d8933770e277ab8ceae9776e30df8573cc0032c487eea774893b300b7680188093074c71b4856436fb6dff8c82de2e227af5ea8dae0387a239c70ed977b9bc3087c55af8ec448eb4d819156fde9104bc6443d49ef5a4f3cf27614b99507c894af487637377d06476b3671c7158a870613e0a7d9ee3c693a7fd132adcc06c22e6d4655a2eef2570ab323f8a5a4b50360b0ec14c528b6cffa26b160a07c798947315ec19dafcb805b06dd45fd9a2f328dff773e680435b53349bb241cd82842f915fd23b27099b5ba5483a81fdea7f28408654f4932edfa33d10fd90281b208a9a5915543bc7e15427b4e5db36d1d1ab238e1c1cd5ffb646bf7cb033dd613bd2ddb6d56983d943618c5bd0e44f5c2d981b54ec7e5e7a988dbeb6d8b7c2707c3e7685ddbfe80fc77c1d9cb31c63c5436cd5b2b105dbc1cb7d024dcda8a47ba30068f24677b38503ba582c286437435d7b8a16dca4a56dad4db7e715a578391acfc62d6350ef92ef8b789877158c904803c3354affc8a235f2cc768856a13edf0a4cd9de6b67f7333e1b882a8ecadeb0fbc2005a708f838daf2dc86fe35d953a15d2ede3cc093e45f2719653da1d8936d10c596a66cfd588b5663e8c2afe73b5bc23c967826cf4d24fbbf9d68d18b8f65347933238d7242f69a458959cf51ae79f3f5c5a7180fe23cab53edbf0d81534b7f9b5c697981a0822c36aa483fd95111417834e5062e4ac25817727ac3380c91c7440bcb212a4354035c3813664c0fbf042623bd791873e90646940ef658f4784cdcb714e55d48cc3a30b0195895850aedc32df9435a53c0a9fab07ecfd8778d64b44be1d270fce94c2ff04e984b9f50d541e4d4d871d193a37a05f83d557be8d9cc66027d7dd3a6315b3c9838c0da8c897ca81bcb44e076bee3a7614d9806d018541c46c196b7fd677e2960306849be082875b535dd411428847dddfc2ee9af77a16c282c1ad32151ad2e2ec2a9a1281c593bddddda03afe69cd5bfd83a6e416fa2d47066533877a4dcf24b24d84dadd27acee6127fd94db9be4e3efe74650f2ad01a9adfcecfdc535cc48e3b770a9a8cde6cea193501fb89097c97d25f1bdf00c8b69ce94bd38e1c133b9f52fb8b05a7c477ce4bcaeffda896f457e21e4e93c779657cf05712a7ca161f9680a8619e1dee220ad153729b47789e737675a04733cf94fb494ecebfc8750dfe44e3959558d21ae42f76b705bf092e45445b2521162409cacc720aad8f00f5821f452953512798548369f5a5700c8d02d49cf797e7a48d05c7d7fcc09b9bbe21a907c81d5f4cbb978f21d25d802a047cd46640025f75f2c01c10a21c92a9dec5618dcbd6025dd67b215b038aaae91e76f7c729dd5b61092858013930675f124fc3c62b130f0d898affd9972a202785def90fe7f9ddd821c7de4b5acc2a30bc74085225c23e091cdb2ec42df6f5c88a6666ced41b601374c9e761c0686f71cc1c8f0daade0ba730dd6c2670df4db97c1d1ad250bf7eeaf7f5309ec18a4331e0c3a9808832898d208d7cd293bdfbb7c51d17e3f3d1397a579b8c81e5aec1e1b0ce4cd796f1cf68a49b19841126c73affc13641756cd954ad3c0e62caca61e71c9491441a294739e172d3306b00e4230febdb13bd7630184c8db1dc363fe62015e5985997d56b059dd0602b98a6bb4c0a8e0a10853cc19b2e9e187c0b2e8d70789cb863c71544445acb31edb4459698a21c1aed76a592786053f904f144d5e7715737c253a34a038cc47d4877f8140eb06fd7da9633772b445b21a7c6fe985997b64732bdf022538d57952f6f7340981ea8a2e1f19d639a3138e5f1e58f9413e74d1017f6f0649be152a3fb01a6f53521a446fd5f1a70d0279730a4ae15bc300490f55880232a3dc10a6519dc7b489160ef480e8fb3029428005c4cbee70ac0360094228e70afa66460d09e8d6ea83e89932d58a6a7ba76059de6ed122d3a02ca42bcb1572d214112e906ee607351663efea2dfd7d1a2bcb6d1d9f5d8351703b990944ca1db5452132de124677da884939c6b4890cb94f000d71f2edb511bb94a4f61afb5ee1edc7f4e14cf81ca27bbc5bcf7dd84dd495e0f174d3c9b43469c1ab1514430d7dd3adce3bdfeaa714162ea45e43f6a3b57d719449c7a191383d23069779fe7e57032c2d37d04054728acc67c2c87351d7615239978373bf22d2f5d70366eb7f3fb4a155293f98c9078b28aef1449e552616dc44963dd2b79061784f57a72105e180a6b2770c7cede4d321efda0dd526e0b5c05af55bfe606abf51569316dc0bdbc2f6f46c47a33b4bf9536acdf783dee9424605bd290f6ece0745b0890d836b24efb5361c457cc5fe6a61fe5251d60c60819365377c878a3a53229e88f3b02616ed33a23b46da3d3ecec20d174981ddb45bbfdafafc6d3296f6952e063f24a5024499b1a6b2045a29c1b8a7090e70c9f32bc187da0df89e3a1445057010206dc172ad0e247a84d8f665687f5c50eba70e019b88ebff42e9091675882af7c04c540e5b779603510d46f8e504a8a0cdcb9709ec0db4f882292c791398eefe3ac8951c0e055872c8cd29acf3b785dbd145a7c5b9e1e57853e6287ea09c2a167fd3f55ee323191dbc54f77c6875cd000a587896c658ccf47c66727d4e866206edd84b198a39adec533369ebaadb85b230b3457ed685548aa09c7c8a6e256b4c668a27a85871456e447fc221228a205ffe2b78276928416626d788feb47054db5409b03d923ab7d5443b135161171f70eee14f596d386707354be9422fcc4f3f318cd81ba2cce3e3d357b67e8fc70490a9a04d639d772077d5d8fb5665e4721e8142de055952f6c0152eb59d042f336e8e3b988de0cbad82fed64932fe71c3276ea1ec3034799b32761c71534f3b3db4037a9c541ccc6984b963c8da9cdc1ea4feaeb95ffece5aac1424a4e9d5e215c74c0f5d760e82d92126fc36eb5809ccc9e84e185494f5c0d01f68fc5623fedf20ba355166f22deabaaff5911b82ffefcb7e625ba4c3fd280d49eff03fe4114ed658c43a9d5321bd20ab75055fc3ae4270326f67e6d4ffc4ec54a727a5385f690aa18ca103edeeaf1725d4e13a7079314165e0ab1ed9e035bd530aaaaaee8f7e2a0134be70988795b535aefa64a8f52efb7ccaa3464dd9800a4281443dadfcc3d31d1acf1e205ff6f351a15efb2f19d587fbce90029ab9bc9d3dd3425c54b836492ae2c3726b91ce7e4b5082d83c8c22e394a529cb301c1288c03da50b3f16bb450522fcac0a2e7508640d130682557a615906be3506c27e6edfe2248182a5eb8f6df2da7be7d8db534b4f39e9ef46f336340e820a8433fd5df91c629e6bb459b770f750b3dd80f402b9297e72df4ef5a06d0e43acde89303cc7f5ed771f2b9fbc97166c48b277f6aa37766903d7d210899eede048a3ab9485edd521f917488913b5da3521c7b97717d27c26c7416276e9de97ea8427060c6c6c1d5049af3d793c99dd767177a6d5b123c688f93050956b024d4d49aa4573e9e99f9aa5402da85eafc14979cba26420a6bf0bb2621948295d45c3279065cd3a7313c280864f78d4b274f5f92adb20e374c6d2f7cda8938a52da1f56ac226612b95ea1e4ef5bfd11c5e3fe9604972447d3aa7fd4d78f56ecd2dd3d9f79ee12485f1b8ba3cd86e62402a76a5cad273a5446da398a66f4c36cd14bf834cdde99f18201ed3d1922b48171cc9b62d632b5fb34424e610f2fdcc8595d28842d78b26b1f2a7dcdad1c02f91a09626079470eea9f90d08a543ecf9e6b50756a160d240bcfdc5f3ee6ed995c98fb64efca7dcdba8223c07902e3117161ce2ec916888a9780cfd34ac52083301e30fdddb111c1bb61fe38d3489f09f89ef5823a6fa0b41ea013056c0a7f27ed2f3deba06b68661f5eeffe5d53829edace17a81d788f8eb8c7ce644312cc23e9b6ff48b0153f7df30f544e33f9b791ddb45e93cfda5f9874ee1e70c0864cd295be114ab8dd42d89cc1b4c34ad91d5779dc68294c7085a166c917e72cd09b637307a1fc5efe6fe163eabe16bbbca30ee1f292a904156ac4782889378d439c3dee4f95bd63c59b5ce44104d929c93c0648279b98cb7fe8ba7638d94e8e77cb74e2ea560932b3a28017783230ff22287e5c00d93f6923f8b6edccc412522f3fcd3c9146cb5c43f261705a08c64e84d923ce6b1a06e922c8dac6d7e5c22b2e5c9b8269b2810b490b8a43c0fe42b298bbc1f03f62dcdb67e24e89b14f7558fee85ca00f0a3d34b1664aeb940917dd3f1a08c5db10858f4cffee54f480e816a6dc9553b5043870d7f0a76134ee95a5a688b50281a1836fb721abe9105f9dfd7173f32bbb2bd00a75af11bc3a7618a0111cb8d5e30c5af5fe512bc23b5c590377817c063b25e2f5eed4a64825d4ca494518c4c0b9cac88cc3ccaa5477ad3e9c0b3577c156e88cd4df354d383efa800536d62790c86feb6a862cae1543e3e9c984c64ecb2b25319d62a3308e20b8ad261ecdb746bf28f58220c5ebe03204d5fe86094d81036a36ed905d4cfcc8054e7947f3ac9e88897a983adce3e3724745df71395b959b067ddc1bd8c30f092546d25a0b24f5df9136af84fb76a96d3eccefcf9ab5", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x10, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0}) copy_file_range(r0, &(0x7f0000000040)=0x4b543156, r0, &(0x7f00000001c0)=0x40, 0x3, 0x0) 3.046861536s ago: executing program 0 (id=3044): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) setxattr$incfs_metadata(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0x7ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) openat$hpet(0xffffff9c, &(0x7f0000000300), 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="64ff1ec4624307f1561b5ad480b718edf0ee74c7e370c8c0c568358cd8c65301c35e5f6a317435e1195ee61792096cdb57196fef44bc5be37efc8fea5656bd30b925d6185fda406b0ae8058fe702815f99c8"], &(0x7f0000000500)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', r3, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket$key(0xf, 0x3, 0x2) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x1, 0x5001) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000100000000000000000000000000000000000000000000000004000400000080000000000000000000000000000000000000000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8800000000000000000000000000010000000000000000030007000000000002000000ffffffff0000000000000000020013"], 0xd8}}, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040), 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 2.879930065s ago: executing program 2 (id=3045): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2, &(0x7f0000000240)=[&(0x7f00008ce000/0x4000)=nil, &(0x7f0000af0000/0x4000)=nil], &(0x7f0000002640), &(0x7f0000000000), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x40]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}}, 0x0, {[0x1, 0x0, 0xfffffffc, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x80000) recvmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000000380)=""/193, 0xc1}, {&(0x7f0000000540)=""/192, 0xc0}], 0x3}, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f00000012c0)="a4eac90f8e3ae7580e2e693731ef6b447fc2057d9a84e61f40c79e10218d131f865d68b23cd7c3f2b681e2205f67f140252abcc3b8015e176881d81a9e61b6a2c92a9d8e1f51861b64e7b61bf9a131e197f5a6c6d4d887d86c79836e81c69e211d2bf4c595b01c94de464ff9aa72b6058fe774c81142bbce9bd0d83f6239362c3347e3daadb292cf3fee4766a2d43cf006a476ce0e4dd221acdcdefcf67733ed2978c2cd564772844077920cf54543db03688079168e36709dbbf84933a2415a32617f7de4336d89967c2cbcd76a973d88a3c440862bc11e51df6f1cd25f1aa711b721c33703645bcf93b775f1eb28c7640d1b7cbe44b9fc0e55d1a4d8f83b8fd537a231fe75ebb7255387d089ae7924c86b36f11d4c09d27626fd8cd62dbee1662558322e3dffdb4c4816e8ee2501b8", 0x130}, {&(0x7f0000000180)="1a39e33c9bb56fd43a362ffea90553761d7ed507c9de39febbf44d3f865312c8f87355b539002cdd0c62a1b4af1b231aedcaa350cbed61f038c59eb5ab370f7078bb09bba3f39fd8421406392f4ce058", 0x50}, {&(0x7f0000000480)="607dd884f33ff413bd131c8b890067b9df813bdca47007b3029f63a8ce8d396f0741075350111184a065fdecf602a80cba8b0ceaac55d2a5ac82ea58fd20f788ba0f910bce416fd530579aec17ed688e6f569c95d7049bea84d87e6477c0d22a895de1f4d49936c287c188a7a1a833", 0x6f}], 0x3) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000000c0)={0xff}, 0x4) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000040000000240012800c0001006d6163766c616e001400028008000900ffffffff0800010010000001140035006d6163766c616e300000000000000400"], 0x58}}, 0x8000) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r6, 0x0, 0xffffffffffffff9c, 0x0, 0x274) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) openat$vimc2(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) 2.460038488s ago: executing program 2 (id=3046): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r2}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x9, 0x0, 0x2, 0x7fff7ffc}]}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x40) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) close_range(r3, 0xffffffffffffffff, 0x200000000000000) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r9, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r10, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r11 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r11, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r12, 0x1, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r11, 0x0}]) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r10, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r10, 0xc02064b6, &(0x7f00000003c0)={r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f0000000480)={0x0, 0x0, r14, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r10, 0xc03064b7, &(0x7f0000000040)={r13, r14, r15, 0x5, 0x0, 0xfffffffd, 0xfffffffc, 0x200, 0xfffffffd, 0x0, 0x1, 0x200000}) close_range(r0, 0xffffffffffffffff, 0x0) 2.155937964s ago: executing program 2 (id=3048): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x12}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x8) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000280)=0x8) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, 0x0, &(0x7f00000001c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[], 0x20}}, 0xc010) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r3, 0x0, 0x25, 0x5, @val=@netfilter={0xa, 0x0, 0xd}}, 0x20) mount$9p_virtio(&(0x7f0000000340), &(0x7f00000001c0)='.\x00', &(0x7f0000000400), 0x100000, &(0x7f0000000400)=ANY=[]) read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020}, 0x2020) fcntl$dupfd(r2, 0x406, r2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x54, 0x0, 0x1, {0x8, 0x1}, {0x53, 0xfffe}, @period={0x5d, 0x8e, 0x5, 0x9, 0x101, {0x2, 0x9201, 0x5}, 0x0, 0x0}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002500190326bd70000001000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x4840}, 0x24044004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c12f319738b00000306010200000000000000000700000a05000102"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x87c}, 0x0) r7 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x14a300, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000300)={'dt2814\x00', [0xfffffff9, 0x5, 0x5, 0xbff7ffff, 0xffff7ffd, 0x0, 0x20000004, 0x6, 0xffd, 0x9, 0x200001, 0x1001, 0x8004, 0x3, 0xfffc, 0x5, 0x8, 0x40000006, 0x3, 0x8, 0x80208, 0x5, 0x800800, 0xeadb, 0xffffffff, 0x1, 0xffff, 0x81, 0x1, 0xd6d, 0x70f]}) 1.660053307s ago: executing program 4 (id=3050): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000280), 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0xd}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27050200420014000600002fb96d", 0xe}, {&(0x7f0000000440)}], 0x2}, 0x0) 1.549219063s ago: executing program 4 (id=3051): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x24, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa5}]}]}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001640)={&(0x7f0000000380)={0x28c, r1, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'erspan0\x00'}}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9314}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x36}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8d}, @TIPC_NLA_NODE_ID={0xa6, 0x3, "cb8cb848614a85835ebdd4a67f9f46debee916209fec6070de4a445ef3a70a015e13b2dce8624b3882cf3aaa90061a31db08bb594e50f6cc62eef103b10331137d3fcf5649a82ddf6ac6f3fec68e4c9a96d516239e876515847be5cf4bc8ae1f1d01b8c9d1f3487fbc11b21835c6bca0268e92229abc5e87c5cc89bb7fbe5ae9f1d4343a1852434df32baadc40abedaa8867f2cbd98bb3ab95f4dee63100a74ecaf0"}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}]}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x8000}, 0x801) 1.53245879s ago: executing program 4 (id=3052): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0xa1}, 0x1, 0x0, 0x0, 0x80}, 0x884) 1.269889704s ago: executing program 4 (id=3057): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030002ac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.269035242s ago: executing program 4 (id=3059): creat(&(0x7f0000000140)='./file1\x00', 0x1c0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000100)=0x1003ff, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3000000, 0x0, 0x1ff, 0x7d, 0x2, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000000)={0x3ff, 0x8, 0x6, 0x80, 0x4, 0xf, 0x80000806}, 0x0, 0x0) 1.172058618s ago: executing program 1 (id=3061): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000280), 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0xd}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27050200420014000600002fb96d", 0xe}, {&(0x7f0000000440)}], 0x2}, 0x0) 1.101092495s ago: executing program 0 (id=3062): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x10b, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x100ffff, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x7}, [{0x2, 0x3, 0xee01}], {0x4, 0x5}, [], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x1) setreuid(0xffffffffffffffff, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000900020073797a3000000000050001000600000005000500000000000500040000000000140007800800114000000000050015007a8537350d000300686173683a6d6163"], 0x5c}}, 0x4000) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$read(0xb, r1, &(0x7f0000000000)=""/56, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @random="0e0000000005"}) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000200)) write$cgroup_int(r0, &(0x7f0000000080)=0x2, 0x12) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x73, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xb, '\x00', 0x4bb, 0x0, 0x1ff, 0x3}}}}]}, 0x48}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_vlan\x00', &(0x7f0000000340)=@ethtool_gstrings={0x1b, 0x8, 0xe3, "a67dc9dee35cdac86741e29af93b8ccbcf7f6dcba050f8c7e6a40e62b098ae3215c8d7bf8630e358bbfef11f7db3839c70093a74eeb52666dfeda18ce0df1e1d077f320a72c6a9991ac16b83357025fab21973dff01c8e02590fa495a10879fc7b6932a7d9ecf540a5890b02ea22e46444a3ca9ba6cbb504d81e051e56177d62fc7f965fa11e40288e5d385cf4b20086bce502fb92c36ce67e13ff4a17be862b49e36cbd5c8e1e78f614479493a7fa93db53c87d26ec03359118e453f74970739cce680e3c5214b46f8a33af4efba36253ed8ea99246958311b38558e589afd430b40d"}}) landlock_restrict_self(0xffffffffffffffff, 0x0) r8 = openat$nci(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000300)) 1.068852099s ago: executing program 1 (id=3063): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa5}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x801) 917.190353ms ago: executing program 2 (id=3064): socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x4568, 0x400, 0x0, 0x37d}, 0x0, &(0x7f0000000080), &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) io_uring_setup(0x30aa, 0x0) setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000140), 0x4) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) timerfd_create(0x9, 0x0) landlock_create_ruleset(0x0, 0x0, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) syz_io_uring_setup(0x641a, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x0, 0x400002d8}, 0x0, &(0x7f0000000100), &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x32d9, &(0x7f0000000200)={0x0, 0x6273, 0x8, 0xffffffff, 0x400000}, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x80, 0x40, 0x3471, 0x1, {{0x39, 0x4, 0x1, 0x3d, 0xe4, 0x66, 0x0, 0x8, 0x2f, 0x0, @private=0xa010101, @local, {[@timestamp={0x44, 0x8, 0xdf, 0x0, 0x2, [0x1]}, @timestamp_addr={0x44, 0x2c, 0x55, 0x1, 0x6, [{@broadcast, 0x1f2}, {@multicast2, 0x6}, {@rand_addr=0x64010101, 0x4}, {@multicast2, 0x6}, {@broadcast, 0x50}]}, @ra={0x94, 0x4}, @noop, @lsrr={0x83, 0xf, 0x14, [@loopback, @dev={0xac, 0x14, 0x14, 0x2d}, @broadcast]}, @cipso={0x86, 0x38, 0x8000000000000002, [{0x2, 0x5, "e92947"}, {0x6, 0x5, "8959b2"}, {0x6, 0x11, "2e3e89226a88aabcf81c370457c367"}, {0x2, 0xb, "69afe03d65f5d472f7"}, {0x5, 0xc, "ba70bc27e23bc2744d7e"}]}, @generic={0x94, 0x11, "7f7fa813d383b8e823856618b34461"}, @rr={0x7, 0x7, 0x8a, [@local]}, @ssrr={0x89, 0x1b, 0xcd, [@remote, @private=0xa010100, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @rand_addr=0x64010101]}, @ssrr={0x89, 0x1b, 0xa1, [@dev={0xac, 0x14, 0x14, 0x38}, @broadcast, @remote, @rand_addr=0x64010101, @private=0xa010100, @private=0xa010102]}]}}}}}) bind$xdp(0xffffffffffffffff, &(0x7f00000005c0)={0x2c, 0x0, r5, 0x3b}, 0x10) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index=0x3, 0x8, 0x0}) io_uring_enter(r1, 0x7ec5, 0x9f84, 0x24, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x440b0) 840.541816ms ago: executing program 2 (id=3065): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) setxattr$incfs_metadata(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0x7ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) openat$hpet(0xffffff9c, &(0x7f0000000300), 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="64ff1ec4624307f1561b5ad480b718edf0ee74c7e370c8c0c568358cd8c65301c35e5f6a317435e1195ee61792096cdb57196fef44bc5be37efc8fea5656bd30b925d6185fda406b0ae8058fe702815f99c8"], &(0x7f0000000500)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', r3, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket$key(0xf, 0x3, 0x2) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x1, 0x5001) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000100000000000000000000000000000000000000000000000004000400000080000000000000000000000000000000000000000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8800000000000000000000000000010000000000000000030007000000000002000000ffffffff0000000000000000020013"], 0xd8}}, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040), 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 666.748647ms ago: executing program 1 (id=3066): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x19c, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x160, 0x2, [@TCA_BPF_ACT={0xbc, 0x1, [@m_gact={0xb8, 0xb, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x0, 0xd, 0x6d4c}}]}, {0x71, 0x6, "3532565adeea82a6d355b04e82cf0d976e9e3d561f7832a2553c4393a1a4d9d755a3ca015b8308cae8430cb3ee720daf513b7d09d45af79089af4ca0f7ae568b98646f301384cfe6ba628a461810b458401b48d92b11c4b84c4fc318de1f6827de4e78cdbcf73ddf84c9950303"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x88, 0x1, [@m_tunnel_key={0x84, 0x5, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, {0x11, 0x6, "67a638128ad3f52f2e793588c6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x46, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 308.602548ms ago: executing program 4 (id=3067): socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb8, 0x30, 0xb, 0x0, 0x0, {}, [{0xea4, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe58, 0x2, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {}, {}, {}, {}, {0x100000}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0xc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x400}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000000}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x7c}, {}, {}, {}, {}, {0x400000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb8}}, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x400, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 64) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x8000000001cb, 0x12) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) (async, rerun: 32) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) (rerun: 32) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000180)={0x1d, r6, 0x40000000003, {0x2, 0x1, 0x4}, 0xff}, 0x18) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) sendmsg$can_j1939(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x25c5dd54083b231a}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet(0x2, 0x3, 0x8d) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) 308.195101ms ago: executing program 1 (id=3068): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030002ac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 75.907307ms ago: executing program 1 (id=3069): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480100001409052bbd7000fbdbb40b021f00cb", @ANYRES32=r2, @ANYBLOB="0800040064010104080008000001000008000200e0000002080009000600000008000a00030000000800090007010000"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 0s ago: executing program 1 (id=3070): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xb883, 0x1dc) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000000), 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r3, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xf, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f9858c1a7bedabd69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30d50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc20d81a8ca55ba139c01802c4dae4162e43acff03ad02", [0x8000000000000001, 0x7]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) kernel console output (not intermixed with test programs): ? __local_bh_enable_ip+0x9e/0x120 [ 663.006510][T15363] ? lockdep_hardirqs_on+0x78/0x100 [ 663.006526][T15363] ? __dev_queue_xmit+0x8a0/0x4800 [ 663.006578][T15363] ? __nla_parse+0x40/0x60 [ 663.006595][T15363] nfnetlink_rcv+0x3bd/0x440 [ 663.006615][T15363] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 663.006641][T15363] netlink_unicast+0x5aa/0x870 [ 663.006663][T15363] ? __pfx_netlink_unicast+0x10/0x10 [ 663.006689][T15363] netlink_sendmsg+0x8b0/0xda0 [ 663.006710][T15363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.006731][T15363] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 663.006754][T15363] ____sys_sendmsg+0x9e1/0xb70 [ 663.006775][T15363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.006794][T15363] ? __pfx_____sys_sendmsg+0x10/0x10 [ 663.006826][T15363] ___sys_sendmsg+0x190/0x1e0 [ 663.006851][T15363] ? __pfx____sys_sendmsg+0x10/0x10 [ 663.006903][T15363] __sys_sendmsg+0x170/0x220 [ 663.006921][T15363] ? __pfx___sys_sendmsg+0x10/0x10 [ 663.006946][T15363] ? __pfx_ksys_write+0x10/0x10 [ 663.006970][T15363] __do_fast_syscall_32+0xe3/0x8c0 [ 663.006992][T15363] do_fast_syscall_32+0x32/0x70 [ 663.007012][T15363] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 663.007034][T15363] RIP: 0023:0xf6feef6c [ 663.007050][T15363] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 663.007066][T15363] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 663.007084][T15363] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 663.007094][T15363] RDX: 0000000020050800 RSI: 0000000000000000 RDI: 0000000000000000 [ 663.007104][T15363] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 663.007113][T15363] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 663.007123][T15363] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 663.007146][T15363] [ 663.216129][T15370] netlink: 'syz.1.2314': attribute type 4 has an invalid length. [ 663.220866][T15370] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2314'. [ 663.327660][T15372] IPVS: Unknown mcast interface: vcan0 [ 663.568772][T15378] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input82 [ 663.758784][T15381] can0: slcan on ttyS3. [ 663.775847][T15378] lo speed is unknown, defaulting to 1000 [ 663.828763][ T5300] Bluetooth: hci2: command 0x041b tx timeout [ 663.844391][T15353] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2307'. [ 663.877390][T15378] wlan0 speed is unknown, defaulting to 1000 [ 663.877552][T15385] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 663.930827][T15381] can0 (unregistered): slcan off ttyS3. [ 664.803072][ T5300] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 664.808908][ T5300] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 664.819083][ T5300] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 664.831261][ T5300] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 664.834121][ T5300] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 664.905613][T15414] lo speed is unknown, defaulting to 1000 [ 664.908256][T15414] wlan0 speed is unknown, defaulting to 1000 [ 665.125931][T15412] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2323'. [ 665.257823][T15414] chnl_net:caif_netlink_parms(): no params data found [ 665.493076][T15439] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input83 [ 665.723064][T15442] can0: slcan on ttyS3. [ 665.911202][T15439] lo speed is unknown, defaulting to 1000 [ 665.911303][T15414] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.916253][T15414] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.919371][T15414] bridge_slave_0: entered allmulticast mode [ 665.922862][T15414] bridge_slave_0: entered promiscuous mode [ 665.929971][T15439] wlan0 speed is unknown, defaulting to 1000 [ 665.930521][T15414] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.934569][T15414] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.937024][T15414] bridge_slave_1: entered allmulticast mode [ 665.940491][T15414] bridge_slave_1: entered promiscuous mode [ 665.972178][T15414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.977225][T15414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.989582][T15446] can0 (unregistered): slcan off ttyS3. [ 666.023791][T15414] team0: Port device team_slave_0 added [ 666.042026][T15414] team0: Port device team_slave_1 added [ 666.084259][T15414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.086938][T15414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.095199][T15414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.102521][T15414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.105577][T15414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.114132][T15414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.146147][T15414] hsr_slave_0: entered promiscuous mode [ 666.149214][T15414] hsr_slave_1: entered promiscuous mode [ 666.151561][T15414] debugfs: 'hsr0' already exists in 'hsr' [ 666.153383][T15414] Cannot create hsr debugfs directory [ 666.573610][T15414] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.577428][T15414] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 666.670979][T15414] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.674590][T15414] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 666.791942][T15471] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input84 [ 666.868738][ T5300] Bluetooth: hci4: command tx timeout [ 667.117397][T15414] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.123450][T15414] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 667.158966][T15473] can0: slcan on ttyS3. [ 667.350215][T15474] can0 (unregistered): slcan off ttyS3. [ 667.378088][T15414] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.381739][T15414] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 667.412905][T15471] lo speed is unknown, defaulting to 1000 [ 667.430213][T15471] wlan0 speed is unknown, defaulting to 1000 [ 667.596620][T15414] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 667.601678][T15414] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 667.644259][T15414] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 667.649788][T15414] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 667.741998][T15414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.786956][T15414] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.794939][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.797538][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.968427][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.971248][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.130924][T15414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.179640][T15414] veth0_vlan: entered promiscuous mode [ 668.189111][T15414] veth1_vlan: entered promiscuous mode [ 668.262142][T15414] veth0_macvtap: entered promiscuous mode [ 668.266808][T15414] veth1_macvtap: entered promiscuous mode [ 668.285859][T15414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.301463][T15414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.316755][ T1141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.320516][ T1141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.327024][ T1141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.344332][ T1141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.431854][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.434570][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.458298][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.461949][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.960499][ T5300] Bluetooth: hci4: command tx timeout [ 669.361924][T15537] netlink: 'syz.2.2340': attribute type 1 has an invalid length. [ 669.364792][T15537] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2340'. [ 669.368660][T15537] netlink: 658 bytes leftover after parsing attributes in process `syz.2.2340'. [ 669.371745][T15537] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2340'. [ 669.382106][T15537] binder: BINDER_SET_CONTEXT_MGR already set [ 669.384421][T15537] binder: 15532:15537 ioctl 4018620d 80000040 returned -16 [ 670.126614][T15549] binder: 15547:15549 ioctl c0306201 80000640 returned -22 [ 670.850608][T15561] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input85 [ 671.028945][ T5300] Bluetooth: hci4: command tx timeout [ 671.280274][T15549] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.283224][T15549] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.565522][T15565] slcan: can't register candev [ 671.896978][T15323] udevd[15323]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 671.907189][T15329] udevd[15329]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 671.968775][ T86] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.990540][ T86] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.993495][ T86] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.996510][ T86] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.007610][T15561] lo speed is unknown, defaulting to 1000 [ 672.010999][T15561] wlan0 speed is unknown, defaulting to 1000 [ 672.218898][T15584] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input86 [ 672.677518][T15586] can0: slcan on ttyS3. [ 672.723294][T15584] lo speed is unknown, defaulting to 1000 [ 672.725828][T15584] wlan0 speed is unknown, defaulting to 1000 [ 672.810556][T15587] can0 (unregistered): slcan off ttyS3. [ 673.118760][ T5300] Bluetooth: hci4: command tx timeout [ 673.634172][T15606] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 673.636953][T15606] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 673.640798][T15606] vhci_hcd vhci_hcd.0: Device attached [ 673.918760][ T5828] usb 38-1: SetAddress Request (18) to port 0 [ 673.920866][ T5828] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 673.949935][T15610] vhci_hcd: connection reset by peer [ 673.957083][T15329] udevd[15329]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 673.963180][T11625] vhci_hcd vhci_hcd.0: stop threads [ 673.964960][T11625] vhci_hcd vhci_hcd.0: release socket [ 673.974700][T11625] vhci_hcd vhci_hcd.0: disconnect device [ 674.102192][T15627] netlink: 'syz.4.2353': attribute type 1 has an invalid length. [ 674.104667][T15627] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2353'. [ 674.107591][T15627] netlink: 658 bytes leftover after parsing attributes in process `syz.4.2353'. [ 674.147174][T15628] lo speed is unknown, defaulting to 1000 [ 674.151403][T15628] wlan0 speed is unknown, defaulting to 1000 [ 674.187844][T15627] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2353'. [ 674.268742][T15627] binder: BINDER_SET_CONTEXT_MGR already set [ 674.271517][T15627] binder: 15619:15627 ioctl 4018620d 80000040 returned -16 [ 675.868900][T15654] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input87 [ 676.532645][T15658] can0: slcan on ttyS3. [ 676.642977][T15654] lo speed is unknown, defaulting to 1000 [ 676.660210][T15654] wlan0 speed is unknown, defaulting to 1000 [ 676.863158][T15652] can0 (unregistered): slcan off ttyS3. [ 677.859655][T15676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2364'. [ 678.175356][T15695] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input88 [ 678.178001][T15697] netlink: 'syz.1.2367': attribute type 1 has an invalid length. [ 678.183231][T15697] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2367'. [ 678.186518][T15697] netlink: 658 bytes leftover after parsing attributes in process `syz.1.2367'. [ 678.190512][T15697] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2367'. [ 678.204896][T15697] binder: BINDER_SET_CONTEXT_MGR already set [ 678.207373][T15697] binder: 15689:15697 ioctl 4018620d 80000040 returned -16 [ 678.253449][T15695] lo speed is unknown, defaulting to 1000 [ 678.256214][T15695] wlan0 speed is unknown, defaulting to 1000 [ 678.313518][T15695] can0: slcan on ttyS3. [ 678.319180][T15692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2369'. [ 678.409213][T15695] can0 (unregistered): slcan off ttyS3. [ 678.948645][ T5828] usb 38-1: device descriptor read/8, error -110 [ 679.339527][ T5828] usb usb38-port1: attempt power cycle [ 679.686722][T15323] udevd[15323]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 679.692857][T15329] udevd[15329]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 679.899244][ T5828] usb usb38-port1: unable to enumerate USB device [ 680.012661][T15733] lo speed is unknown, defaulting to 1000 [ 680.016413][T15733] wlan0 speed is unknown, defaulting to 1000 [ 681.184227][T15329] udevd[15329]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 681.726346][T15765] lo speed is unknown, defaulting to 1000 [ 681.733993][T15765] wlan0 speed is unknown, defaulting to 1000 [ 682.283312][T15781] trusted_key: encrypted_key: master key parameter '­¦«ç]h¦gP—é ?½ÝI ËÙlцš }<›+DW·j0¿Ú’­èåì÷‰`K9ð„D7â`žžÁòßä[5å³Õ&¯|½æ”-EKâ«Ù`K2æÎí¿`“âÚTÊ™ž5ùv/§3~CWÞœtÅ6ž\Åe`oíÍÍOú÷ÕȤí’O-øb*'/–yNxŒ' is invalid [ 682.838670][ T6029] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 682.988720][ T6029] usb 7-1: Using ep0 maxpacket: 16 [ 682.991631][ T6029] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 682.996472][ T6029] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 683.000129][ T6029] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.003962][T15329] udevd[15329]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 683.007966][ T6029] usb 7-1: Product: syz [ 683.017121][ T6029] usb 7-1: Manufacturer: syz [ 683.019204][ T6029] usb 7-1: SerialNumber: syz [ 683.024846][ T6029] usb 7-1: config 0 descriptor?? [ 683.030479][ T6029] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 683.033480][ T6029] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 683.543788][T15813] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input89 [ 683.636221][T15813] lo speed is unknown, defaulting to 1000 [ 683.639605][T15813] wlan0 speed is unknown, defaulting to 1000 [ 683.648413][ T6029] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 683.684891][T15817] can0: slcan on ttyS3. [ 683.869877][T15813] can0 (unregistered): slcan off ttyS3. [ 684.058849][ T6029] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 684.061926][ T6029] em28xx 7-1:0.0: board has no eeprom [ 684.110671][T15794] em28xx 7-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 684.378996][ T6029] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 684.382791][ T6029] em28xx 7-1:0.0: dvb set to bulk mode. [ 684.385184][ T24] em28xx 7-1:0.0: Binding DVB extension [ 684.412454][ T24] em28xx 7-1:0.0: Registering input extension [ 684.426202][ T6029] usb 7-1: USB disconnect, device number 44 [ 684.437953][ T6029] em28xx 7-1:0.0: Disconnecting em28xx [ 684.440604][ T6029] em28xx 7-1:0.0: Closing input extension [ 684.458163][ T6029] em28xx 7-1:0.0: Freeing device [ 684.784546][T15323] udevd[15323]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 684.793662][T15329] udevd[15329]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 684.901439][T15847] lo speed is unknown, defaulting to 1000 [ 684.905197][T15847] wlan0 speed is unknown, defaulting to 1000 [ 684.964344][ T5956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 684.969878][ T5956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 684.978590][ T5956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 684.990907][ T5956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 684.997571][ T5956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 685.035379][T15849] lo speed is unknown, defaulting to 1000 [ 685.038147][T15849] wlan0 speed is unknown, defaulting to 1000 [ 685.048632][ T29] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 685.198652][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 685.201814][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.208610][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.211801][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 685.217117][T15849] chnl_net:caif_netlink_parms(): no params data found [ 685.265173][ T29] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 685.268172][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.272426][ T29] usb 6-1: config 0 descriptor?? [ 685.365187][T15849] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.367899][T15849] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.372089][T15849] bridge_slave_0: entered allmulticast mode [ 685.375446][T15849] bridge_slave_0: entered promiscuous mode [ 685.378958][T15849] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.381174][T15849] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.383827][T15849] bridge_slave_1: entered allmulticast mode [ 685.386594][T15849] bridge_slave_1: entered promiscuous mode [ 685.419419][T15849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.450447][T15849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.469112][T15849] team0: Port device team_slave_0 added [ 685.472446][T15849] team0: Port device team_slave_1 added [ 685.526519][T15849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.528994][T15849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.538667][T15849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.588393][T15849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.592416][T15849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.601799][T15849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.669704][T15849] hsr_slave_0: entered promiscuous mode [ 685.672877][T15849] hsr_slave_1: entered promiscuous mode [ 685.675720][T15849] debugfs: 'hsr0' already exists in 'hsr' [ 685.679327][T15849] Cannot create hsr debugfs directory [ 685.791538][T11625] bridge_slave_1: left allmulticast mode [ 685.794393][T11625] bridge_slave_1: left promiscuous mode [ 685.798298][T11625] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.803625][T11625] bridge_slave_0: left allmulticast mode [ 685.805950][T11625] bridge_slave_0: left promiscuous mode [ 685.808416][T11625] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.857678][T11625] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 686.142640][T11625] bond1 (unregistering): Released all slaves [ 686.152986][T11625] bond2 (unregistering): (slave veth3): Releasing active interface [ 686.157338][T11625] bond2 (unregistering): Released all slaves [ 686.251038][T11625] tipc: Left network mode [ 686.712002][T11625] hsr_slave_0: left promiscuous mode [ 686.714334][T11625] hsr_slave_1: left promiscuous mode [ 686.785952][T11625] team0 (unregistering): Port device team_slave_1 removed [ 686.801824][T11625] team0 (unregistering): Port device team_slave_0 removed [ 686.882898][T15849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 686.888381][T15849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 686.893747][T15849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 686.899081][T15849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 686.960558][T15849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.976036][T15849] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.999238][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.001556][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.006999][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.009451][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.029791][ T5300] Bluetooth: hci3: command tx timeout [ 687.131127][T15849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 687.157721][T15849] veth0_vlan: entered promiscuous mode [ 687.163535][T15849] veth1_vlan: entered promiscuous mode [ 687.180222][T15849] veth0_macvtap: entered promiscuous mode [ 687.186461][T15849] veth1_macvtap: entered promiscuous mode [ 687.192557][T11625] IPVS: stop unused estimator thread 0... [ 687.196459][T15849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.205292][T15849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 687.212064][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.216843][ T101] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.221197][ T101] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.224037][ T101] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.278718][ T101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.281223][ T101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.299964][T12355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.302996][T12355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.386057][T15887] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 687.818307][T15898] fuse: Bad value for 'fd' [ 687.877344][ T6031] libceph: connect (1)[c::]:6789 error -101 [ 687.880401][ T6031] libceph: mon0 (1)[c::]:6789 connect error [ 687.968606][ T34] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 687.984512][ T29] usbhid 6-1:0.0: can't add hid device: -71 [ 687.986773][ T29] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 688.005719][ T29] usb 6-1: USB disconnect, device number 44 [ 688.122413][ T34] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 688.129270][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.132752][ T34] usb 5-1: Product: syz [ 688.134385][ T34] usb 5-1: Manufacturer: syz [ 688.136389][ T34] usb 5-1: SerialNumber: syz [ 688.140167][ T6031] libceph: connect (1)[c::]:6789 error -101 [ 688.148006][ T6031] libceph: mon0 (1)[c::]:6789 connect error [ 688.224385][T15894] ceph: No mds server is up or the cluster is laggy [ 688.388100][ T34] rtl8150 5-1:1.0: couldn't reset the device [ 688.391245][ T34] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 688.398754][ T34] usb 5-1: USB disconnect, device number 35 [ 689.077388][T15929] FAULT_INJECTION: forcing a failure. [ 689.077388][T15929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.077809][T15926] syzkaller0: entered promiscuous mode [ 689.081848][T15929] CPU: 3 UID: 0 PID: 15929 Comm: syz.1.2416 Tainted: G L syzkaller #0 PREEMPT(full) [ 689.081870][T15929] Tainted: [L]=SOFTLOCKUP [ 689.081874][T15929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 689.081881][T15929] Call Trace: [ 689.081887][T15929] [ 689.081893][T15929] dump_stack_lvl+0x100/0x190 [ 689.081925][T15929] should_fail_ex.cold+0x5/0xa [ 689.081949][T15929] _copy_from_user+0x2e/0xd0 [ 689.081976][T15929] do_ip_vs_get_ctl+0x27e/0x11a0 [ 689.082004][T15929] ? __pfx_do_ip_vs_get_ctl+0x10/0x10 [ 689.082026][T15929] ? find_held_lock+0x2b/0x80 [ 689.082040][T15929] ? nf_sockopt_find.isra.0+0x222/0x290 [ 689.082055][T15929] ? nf_sockopt_find.isra.0+0x222/0x290 [ 689.082071][T15929] ? __mutex_unlock_slowpath+0x15c/0x790 [ 689.082087][T15929] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 689.082107][T15929] ? nf_sockopt_find.isra.0+0x222/0x290 [ 689.082123][T15929] nf_getsockopt+0x7c/0xe0 [ 689.082137][T15929] ip_getsockopt+0x192/0x1e0 [ 689.082153][T15929] ? __pfx_ip_getsockopt+0x10/0x10 [ 689.082172][T15929] tcp_getsockopt+0xa1/0x110 [ 689.082192][T15929] smc_getsockopt+0x165/0x390 [ 689.082209][T15929] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 689.082223][T15929] ? __pfx_smc_getsockopt+0x10/0x10 [ 689.082239][T15929] ? aa_sock_opt_perm+0xfe/0x1b0 [ 689.082252][T15929] ? __pfx_smc_getsockopt+0x10/0x10 [ 689.082267][T15929] do_sock_getsockopt+0x259/0x3d0 [ 689.082282][T15929] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 689.082303][T15929] __sys_getsockopt+0x133/0x1d0 [ 689.082323][T15929] ? ksys_write+0x1ac/0x250 [ 689.082338][T15929] ? __ia32_sys_getsockopt+0xbc/0x160 [ 689.082348][T15929] __ia32_sys_getsockopt+0xbc/0x160 [ 689.082358][T15929] ? __do_fast_syscall_32+0x94/0x8c0 [ 689.082371][T15929] ? lockdep_hardirqs_on+0x78/0x100 [ 689.082384][T15929] __do_fast_syscall_32+0xe3/0x8c0 [ 689.082399][T15929] do_fast_syscall_32+0x32/0x70 [ 689.082417][T15929] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 689.082433][T15929] RIP: 0023:0xf6feef6c [ 689.082444][T15929] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 689.082455][T15929] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 689.082467][T15929] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 689.082474][T15929] RDX: 0000000000000481 RSI: 0000000080000dc0 RDI: 0000000080000e00 [ 689.082481][T15929] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 689.082488][T15929] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 689.082494][T15929] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 689.082508][T15929] [ 689.118714][ T5300] Bluetooth: hci3: command tx timeout [ 689.378267][ T6031] libceph: connect (1)[c::]:6789 error -101 [ 689.380787][ T6031] libceph: mon0 (1)[c::]:6789 connect error [ 689.640715][ T6031] libceph: connect (1)[c::]:6789 error -101 [ 689.643044][ T6031] libceph: mon0 (1)[c::]:6789 connect error [ 689.987191][T15936] ceph: No mds server is up or the cluster is laggy [ 690.779575][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.781678][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.269049][ T5300] Bluetooth: hci3: command tx timeout [ 691.329088][T15323] udevd[15323]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 691.338408][T15329] udevd[15329]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 691.388781][T15975] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 691.663045][T15993] FAULT_INJECTION: forcing a failure. [ 691.663045][T15993] name failslab, interval 1, probability 0, space 0, times 0 [ 691.667319][T15993] CPU: 3 UID: 0 PID: 15993 Comm: syz.1.2435 Tainted: G L syzkaller #0 PREEMPT(full) [ 691.667339][T15993] Tainted: [L]=SOFTLOCKUP [ 691.667343][T15993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 691.667351][T15993] Call Trace: [ 691.667356][T15993] [ 691.667362][T15993] dump_stack_lvl+0x100/0x190 [ 691.667386][T15993] should_fail_ex.cold+0x5/0xa [ 691.667402][T15993] should_failslab+0xc2/0x120 [ 691.667417][T15993] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 691.667439][T15993] ? __kernfs_new_node+0xd2/0x960 [ 691.667469][T15993] __kernfs_new_node+0xd2/0x960 [ 691.667488][T15993] ? kernfs_add_one+0x583/0x850 [ 691.667501][T15993] ? __pfx___kernfs_new_node+0x10/0x10 [ 691.667521][T15993] ? find_held_lock+0x2b/0x80 [ 691.667533][T15993] ? kernfs_root+0xee/0x2a0 [ 691.667549][T15993] ? kernfs_root+0xee/0x2a0 [ 691.667570][T15993] kernfs_new_node+0x11b/0x1a0 [ 691.667584][T15993] __kernfs_create_file+0x53/0x350 [ 691.667599][T15993] sysfs_add_file_mode_ns+0x207/0x3c0 [ 691.667619][T15993] sysfs_create_file_ns+0x145/0x1e0 [ 691.667635][T15993] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 691.667652][T15993] ? __pfx___up_read+0x10/0x10 [ 691.667668][T15993] ? acpi_device_notify+0x464/0x500 [ 691.667682][T15993] ? kobject_put+0xb9/0x640 [ 691.667698][T15993] device_create_file+0xf2/0x1d0 [ 691.667772][T15993] device_add+0x2cb/0x1950 [ 691.667788][T15993] ? __pfx_device_add+0x10/0x10 [ 691.667804][T15993] ? trace_kmalloc+0x101/0x130 [ 691.667816][T15993] ? __kasan_kmalloc+0xaa/0xb0 [ 691.667827][T15993] ? lockdep_init_map_type+0x5c/0x250 [ 691.667843][T15993] ? lockdep_init_map_type+0x5c/0x250 [ 691.667860][T15993] input_register_device+0x7d2/0xe20 [ 691.667875][T15993] uinput_ioctl_handler.isra.0+0x8d8/0x1d10 [ 691.667893][T15993] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 691.667912][T15993] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 691.667940][T15993] ? find_held_lock+0x2b/0x80 [ 691.667953][T15993] ? hook_file_ioctl_common+0x146/0x410 [ 691.667982][T15993] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 691.668000][T15993] ? __pfx_uinput_compat_ioctl+0x10/0x10 [ 691.668016][T15993] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 691.668036][T15993] __do_fast_syscall_32+0xe3/0x8c0 [ 691.668051][T15993] do_fast_syscall_32+0x32/0x70 [ 691.668064][T15993] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 691.668080][T15993] RIP: 0023:0xf6feef6c [ 691.668090][T15993] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 691.668102][T15993] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 691.668115][T15993] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005501 [ 691.668122][T15993] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 691.668128][T15993] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 691.668135][T15993] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 691.668142][T15993] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 691.668164][T15993] [ 691.994983][ T40] audit: type=1326 audit(691.877:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15985 comm="syz.4.2433" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f78f6c code=0x0 [ 692.365389][T16004] comedi comedi3: pcl812: I/O port conflict (0x40d00,16) [ 692.450422][T16011] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2440'. [ 692.798850][T16020] FAULT_INJECTION: forcing a failure. [ 692.798850][T16020] name failslab, interval 1, probability 0, space 0, times 0 [ 692.803497][T16020] CPU: 1 UID: 0 PID: 16020 Comm: syz.0.2443 Tainted: G L syzkaller #0 PREEMPT(full) [ 692.803521][T16020] Tainted: [L]=SOFTLOCKUP [ 692.803526][T16020] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 692.803533][T16020] Call Trace: [ 692.803540][T16020] [ 692.803547][T16020] dump_stack_lvl+0x100/0x190 [ 692.803572][T16020] should_fail_ex.cold+0x5/0xa [ 692.803587][T16020] should_failslab+0xc2/0x120 [ 692.803602][T16020] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 692.803622][T16020] ? mas_alloc_nodes+0x280/0x390 [ 692.803643][T16020] mas_alloc_nodes+0x280/0x390 [ 692.803663][T16020] mas_preallocate+0x39c/0xf10 [ 692.803679][T16020] ? __pfx_mas_preallocate+0x10/0x10 [ 692.803696][T16020] ? vm_area_alloc+0x1f/0x160 [ 692.803715][T16020] ? lockdep_init_map_type+0x5c/0x250 [ 692.803738][T16020] __mmap_region+0x1375/0x2a50 [ 692.803761][T16020] ? __pfx___mmap_region+0x10/0x10 [ 692.803783][T16020] ? mas_prev_slot+0x67b/0x1c10 [ 692.803800][T16020] ? mas_prev_setup.constprop.0+0xb6/0x9c0 [ 692.803820][T16020] ? unmapped_area_topdown+0x460/0x580 [ 692.803864][T16020] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 692.803886][T16020] mmap_region+0x180/0x3e0 [ 692.803907][T16020] do_mmap+0xc63/0x12f0 [ 692.803923][T16020] ? __pfx_do_mmap+0x10/0x10 [ 692.803937][T16020] ? __pfx_down_write_killable+0x10/0x10 [ 692.803954][T16020] vm_mmap_pgoff+0x29e/0x470 [ 692.803972][T16020] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 692.803987][T16020] ? find_held_lock+0x2b/0x80 [ 692.803998][T16020] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 692.804016][T16020] ksys_mmap_pgoff+0xe1/0x650 [ 692.804029][T16020] ? exc_page_fault+0x6f/0xd0 [ 692.804041][T16020] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 692.804058][T16020] __do_fast_syscall_32+0xe3/0x8c0 [ 692.804074][T16020] do_fast_syscall_32+0x32/0x70 [ 692.804089][T16020] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 692.804105][T16020] RIP: 0023:0xf704ef6c [ 692.804116][T16020] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 692.804128][T16020] RSP: 002b:00000000f543c210 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 692.804141][T16020] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000200000 [ 692.804148][T16020] RDX: 0000000000000000 RSI: 0000000000000022 RDI: 00000000ffffffff [ 692.804155][T16020] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 692.804162][T16020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 692.804169][T16020] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 692.804183][T16020] [ 692.849519][ T24] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 692.946123][T16028] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2445'. [ 692.983149][T16034] input: syz0 as /devices/virtual/input/input92 [ 693.062846][ T24] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 693.066724][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.071654][ T24] usb 6-1: Product: syz [ 693.073065][ T24] usb 6-1: Manufacturer: syz [ 693.074558][ T24] usb 6-1: SerialNumber: syz [ 693.096571][T16037] comedi comedi3: pcl812: I/O port conflict (0x40d00,16) [ 693.280141][T16009] FAULT_INJECTION: forcing a failure. [ 693.280141][T16009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 693.284626][T16009] CPU: 2 UID: 0 PID: 16009 Comm: syz.1.2439 Tainted: G L syzkaller #0 PREEMPT(full) [ 693.284646][T16009] Tainted: [L]=SOFTLOCKUP [ 693.284650][T16009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 693.284657][T16009] Call Trace: [ 693.284662][T16009] [ 693.284668][T16009] dump_stack_lvl+0x100/0x190 [ 693.284692][T16009] should_fail_ex.cold+0x5/0xa [ 693.284707][T16009] _copy_from_user+0x2e/0xd0 [ 693.284736][T16009] raw_ioctl_init+0xa8/0x850 [ 693.284773][T16009] ? __pfx_raw_ioctl_init+0x10/0x10 [ 693.284787][T16009] ? tomoyo_path_number_perm+0x188/0x580 [ 693.284812][T16009] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 693.284835][T16009] raw_ioctl+0x138a/0x2b80 [ 693.284852][T16009] ? __pfx_raw_ioctl+0x10/0x10 [ 693.284869][T16009] ? __pfx_raw_ioctl+0x10/0x10 [ 693.284883][T16009] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 693.284902][T16009] __do_fast_syscall_32+0xe3/0x8c0 [ 693.284917][T16009] do_fast_syscall_32+0x32/0x70 [ 693.284931][T16009] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 693.284946][T16009] RIP: 0023:0xf6feef6c [ 693.284956][T16009] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 693.284967][T16009] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 693.284979][T16009] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000041015500 [ 693.284986][T16009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 693.284993][T16009] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 693.284999][T16009] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 693.285006][T16009] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 693.285023][T16009] [ 693.358659][ T5300] Bluetooth: hci3: command tx timeout [ 693.372601][ T24] rtl8150 6-1:1.0: couldn't reset the device [ 693.374863][ T24] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 693.388166][ T24] usb 6-1: USB disconnect, device number 45 [ 693.956714][T16053] FAULT_INJECTION: forcing a failure. [ 693.956714][T16053] name failslab, interval 1, probability 0, space 0, times 0 [ 693.961167][T16053] CPU: 0 UID: 0 PID: 16053 Comm: syz.2.2456 Tainted: G L syzkaller #0 PREEMPT(full) [ 693.961191][T16053] Tainted: [L]=SOFTLOCKUP [ 693.961195][T16053] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 693.961203][T16053] Call Trace: [ 693.961208][T16053] [ 693.961214][T16053] dump_stack_lvl+0x100/0x190 [ 693.961239][T16053] should_fail_ex.cold+0x5/0xa [ 693.961255][T16053] ? ovl_alloc_entry+0x21/0x70 [ 693.961273][T16053] should_failslab+0xc2/0x120 [ 693.961287][T16053] __kmalloc_noprof+0xe0/0x850 [ 693.961308][T16053] ? __kmalloc_noprof+0x320/0x850 [ 693.961328][T16053] ovl_alloc_entry+0x21/0x70 [ 693.961345][T16053] ovl_lookup_layers+0xf1c/0x2ac0 [ 693.961369][T16053] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 693.961385][T16053] ? rcu_read_unlock+0x17/0x60 [ 693.961405][T16053] ? find_held_lock+0x2b/0x80 [ 693.961417][T16053] ? rcu_read_unlock+0x17/0x60 [ 693.961430][T16053] ? rcu_read_unlock+0x17/0x60 [ 693.961445][T16053] ovl_lookup+0x4a8/0x6b0 [ 693.961460][T16053] ? __memcg_slab_post_alloc_hook+0x51b/0x990 [ 693.961477][T16053] ? __pfx_ovl_lookup+0x10/0x10 [ 693.961492][T16053] ? rcu_is_watching+0x12/0xc0 [ 693.961514][T16053] ? do_raw_spin_lock+0x128/0x260 [ 693.961535][T16053] ? do_raw_spin_unlock+0x145/0x1e0 [ 693.961553][T16053] ? _raw_spin_unlock+0x28/0x50 [ 693.961575][T16053] lookup_one_qstr_excl+0x1d1/0x250 [ 693.961591][T16053] ? mnt_get_write_access+0x52/0x2f0 [ 693.961609][T16053] __start_renaming+0x16d/0x520 [ 693.961629][T16053] filename_renameat2+0x538/0xa60 [ 693.961649][T16053] ? __pfx_filename_renameat2+0x10/0x10 [ 693.961668][T16053] ? __might_fault+0xc5/0x140 [ 693.961694][T16053] ? do_getname+0x191/0x390 [ 693.961710][T16053] __ia32_sys_rename+0x80/0xb0 [ 693.961732][T16053] __do_fast_syscall_32+0xe3/0x8c0 [ 693.961747][T16053] do_fast_syscall_32+0x32/0x70 [ 693.961761][T16053] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 693.961777][T16053] RIP: 0023:0xf70bef6c [ 693.961787][T16053] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 693.961798][T16053] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000026 [ 693.961811][T16053] RAX: ffffffffffffffda RBX: 0000000080000800 RCX: 0000000080000840 [ 693.961818][T16053] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 693.961825][T16053] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 693.961832][T16053] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 693.961839][T16053] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 693.961854][T16053] [ 694.093073][T16056] libceph: resolve '0..' (ret=-3): failed [ 694.154175][T16064] FAULT_INJECTION: forcing a failure. [ 694.154175][T16064] name failslab, interval 1, probability 0, space 0, times 0 [ 694.159164][T16064] CPU: 2 UID: 0 PID: 16064 Comm: syz.2.2460 Tainted: G L syzkaller #0 PREEMPT(full) [ 694.159185][T16064] Tainted: [L]=SOFTLOCKUP [ 694.159189][T16064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 694.159197][T16064] Call Trace: [ 694.159202][T16064] [ 694.159207][T16064] dump_stack_lvl+0x100/0x190 [ 694.159230][T16064] should_fail_ex.cold+0x5/0xa [ 694.159245][T16064] should_failslab+0xc2/0x120 [ 694.159259][T16064] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 694.159279][T16064] ? ptlock_alloc+0x1f/0x70 [ 694.159298][T16064] ptlock_alloc+0x1f/0x70 [ 694.159324][T16064] pte_alloc_one+0x82/0x3d0 [ 694.159342][T16064] do_fault+0x88e/0x18e0 [ 694.159358][T16064] __handle_mm_fault+0x1815/0x2b60 [ 694.159376][T16064] ? mt_find+0x45e/0x8e0 [ 694.159391][T16064] ? __pfx___handle_mm_fault+0x10/0x10 [ 694.159412][T16064] ? __pfx_mt_find+0x10/0x10 [ 694.159432][T16064] ? find_vma+0xbf/0x140 [ 694.159443][T16064] ? __pfx_find_vma+0x10/0x10 [ 694.159456][T16064] handle_mm_fault+0x36d/0xa20 [ 694.159476][T16064] do_user_addr_fault+0x74c/0x12f0 [ 694.159491][T16064] exc_page_fault+0x6f/0xd0 [ 694.159504][T16064] asm_exc_page_fault+0x26/0x30 [ 694.159528][T16064] RIP: 0010:__get_user_4+0x14/0x20 [ 694.159545][T16064] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 694.159556][T16064] RSP: 0018:ffffc90004c87a38 EFLAGS: 00050283 [ 694.159567][T16064] RAX: 0000000080000080 RBX: 0000000000000084 RCX: ffffc90004c879dc [ 694.159574][T16064] RDX: 00007ffffffff000 RSI: ffffffff82563541 RDI: ffffffff8c1b1e20 [ 694.159581][T16064] RBP: ffffc90004c87e30 R08: 0000000000000001 R09: 00000000000001d0 [ 694.159588][T16064] R10: 0000000000000200 R11: 0000000000000000 R12: 000000000000001d [ 694.159594][T16064] R13: ffff88804f9140c0 R14: ffffffff8954c430 R15: 1ffff92000990f57 [ 694.159602][T16064] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 694.159621][T16064] ? __might_fault+0x111/0x140 [ 694.159640][T16064] sctp_getsockopt+0x285/0x7080 [ 694.159732][T16064] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 694.159747][T16064] ? __pfx__kstrtoull+0x10/0x10 [ 694.159768][T16064] ? __pfx_sctp_getsockopt+0x10/0x10 [ 694.159786][T16064] ? __lock_acquire+0x4a5/0x2630 [ 694.159807][T16064] ? __pfx___might_resched+0x10/0x10 [ 694.159829][T16064] ? aa_sk_perm+0x309/0xaa0 [ 694.159845][T16064] ? __pfx_aa_sk_perm+0x10/0x10 [ 694.159860][T16064] ? __lock_acquire+0x4a5/0x2630 [ 694.159876][T16064] ? find_held_lock+0x2b/0x80 [ 694.159889][T16064] ? aa_sock_opt_perm+0xfe/0x1b0 [ 694.159903][T16064] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 694.159916][T16064] do_sock_getsockopt+0x259/0x3d0 [ 694.159932][T16064] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 694.159954][T16064] __sys_getsockopt+0x133/0x1d0 [ 694.159974][T16064] ? ksys_write+0x1ac/0x250 [ 694.159988][T16064] ? __ia32_sys_getsockopt+0xbc/0x160 [ 694.159998][T16064] __ia32_sys_getsockopt+0xbc/0x160 [ 694.160009][T16064] ? __do_fast_syscall_32+0x94/0x8c0 [ 694.160023][T16064] ? lockdep_hardirqs_on+0x78/0x100 [ 694.160036][T16064] __do_fast_syscall_32+0xe3/0x8c0 [ 694.160051][T16064] do_fast_syscall_32+0x32/0x70 [ 694.160065][T16064] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 694.160079][T16064] RIP: 0023:0xf70bef6c [ 694.160089][T16064] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 694.160099][T16064] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 694.160109][T16064] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000084 [ 694.160116][T16064] RDX: 000000000000001d RSI: 0000000000000000 RDI: 0000000080000080 [ 694.160123][T16064] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 694.160129][T16064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.160135][T16064] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 694.160149][T16064] [ 694.300166][ T40] audit: type=1800 audit(694.177:686): pid=16067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2457" name="bus" dev="tmpfs" ino=3101 res=0 errno=0 [ 694.505258][T16081] FAULT_INJECTION: forcing a failure. [ 694.505258][T16081] name failslab, interval 1, probability 0, space 0, times 0 [ 694.511812][T16081] CPU: 3 UID: 0 PID: 16081 Comm: syz.2.2464 Tainted: G L syzkaller #0 PREEMPT(full) [ 694.511835][T16081] Tainted: [L]=SOFTLOCKUP [ 694.511839][T16081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 694.511846][T16081] Call Trace: [ 694.511851][T16081] [ 694.511857][T16081] dump_stack_lvl+0x100/0x190 [ 694.511881][T16081] should_fail_ex.cold+0x5/0xa [ 694.511895][T16081] should_failslab+0xc2/0x120 [ 694.511909][T16081] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 694.511921][T16081] ? media_pipeline_add_pad+0x6b8/0xa00 [ 694.511943][T16081] krealloc_node_align_noprof+0x30a/0x3e0 [ 694.511954][T16081] ? kasan_save_track+0x14/0x30 [ 694.511967][T16081] media_pipeline_add_pad+0x6b8/0xa00 [ 694.511987][T16081] __media_pipeline_start+0x2e6/0x22b0 [ 694.512009][T16081] ? __pfx___media_pipeline_start+0x10/0x10 [ 694.512029][T16081] ? __mutex_lock+0x26a/0x1b90 [ 694.512045][T16081] media_pipeline_start+0x49/0x70 [ 694.512063][T16081] video_device_pipeline_start+0x79/0xa0 [ 694.512076][T16081] vimc_capture_start_streaming+0x7d/0x130 [ 694.512091][T16081] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 694.512104][T16081] vb2_start_streaming+0x162/0x570 [ 694.512119][T16081] ? __bitmap_weight+0xd7/0x110 [ 694.512139][T16081] vb2_core_streamon+0x26a/0x3c0 [ 694.512155][T16081] vb2_ioctl_streamon+0xd9/0x150 [ 694.512168][T16081] ? v4l_streamon+0x1a/0xa0 [ 694.512181][T16081] __video_do_ioctl+0xb2a/0xdf0 [ 694.512195][T16081] ? __might_fault+0xc5/0x140 [ 694.512213][T16081] ? __pfx___video_do_ioctl+0x10/0x10 [ 694.512229][T16081] video_usercopy+0x3d3/0x14d0 [ 694.512241][T16081] ? __pfx___video_do_ioctl+0x10/0x10 [ 694.512254][T16081] ? __pfx_video_usercopy+0x10/0x10 [ 694.512270][T16081] ? hook_file_ioctl_common+0x146/0x410 [ 694.512289][T16081] v4l2_ioctl+0x1bd/0x250 [ 694.512304][T16081] v4l2_compat_ioctl32+0x20f/0x2d0 [ 694.512321][T16081] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 694.512338][T16081] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 694.512359][T16081] __do_fast_syscall_32+0xe3/0x8c0 [ 694.512374][T16081] do_fast_syscall_32+0x32/0x70 [ 694.512387][T16081] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 694.512408][T16081] RIP: 0023:0xf70bef6c [ 694.512418][T16081] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 694.512429][T16081] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 694.512440][T16081] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000040045612 [ 694.512447][T16081] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 694.512454][T16081] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 694.512460][T16081] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 694.512467][T16081] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 694.512481][T16081] [ 694.656192][T16083] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2465'. [ 694.767768][T16087] syzkaller1: entered promiscuous mode [ 694.770493][T16087] syzkaller1: entered allmulticast mode [ 695.886690][T16117] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2478'. [ 695.903994][T16117] ip6gre1: entered promiscuous mode [ 695.909676][T16117] ip6gre1: entered allmulticast mode [ 696.016052][T16122] syzkaller0: entered promiscuous mode [ 696.018029][T16122] syzkaller0: entered allmulticast mode [ 698.087135][T16152] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.223389][T16152] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.237436][T16171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 698.240936][T16171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.268866][T16171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 698.271617][T16171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.275569][T16176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2492'. [ 698.279888][T16176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2492'. [ 698.287736][ T40] audit: type=1400 audit(698.167:687): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=":op#" pid=16170 comm="syz.4.2492" [ 698.374646][T16152] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.519829][T16152] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.064618][ T565] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.076529][ T86] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.088425][ T46] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.102937][ T86] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.797653][T12325] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 700.172141][T12325] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 700.175375][T12325] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.177883][T12325] usb 7-1: Product: syz [ 700.179335][T12325] usb 7-1: Manufacturer: syz [ 700.181184][T12325] usb 7-1: SerialNumber: syz [ 700.301447][T16240] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.443828][T12325] rtl8150 7-1:1.0: couldn't reset the device [ 700.446153][T12325] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 700.456332][T12325] usb 7-1: USB disconnect, device number 45 [ 700.466625][T16240] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.487104][T16253] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2518'. [ 700.490718][T16253] dlm: Unknown command passed to DLM device : 3 [ 700.490718][T16253] [ 700.562158][T16240] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.773482][T16240] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.902845][ T565] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.919736][T12355] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.933587][T12355] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.946575][T12355] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.110397][T16275] lo speed is unknown, defaulting to 1000 [ 701.113140][T16275] wlan0 speed is unknown, defaulting to 1000 [ 701.150055][T16269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2524'. [ 701.215730][T16280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2526'. [ 701.299135][T16284] overlayfs: overlapping lowerdir path [ 701.302136][T16284] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 701.304980][T16284] overlayfs: overlapping lowerdir path [ 701.335765][T16286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2528'. [ 701.376954][ T34] libceph: connect (1)[c::]:6789 error -101 [ 701.380138][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 701.481776][T16290] ceph: No mds server is up or the cluster is laggy [ 701.559068][T16296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2530'. [ 701.566815][T16296] veth0_macvtap: left promiscuous mode [ 701.638652][ T841] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 701.762242][T16303] program syz.0.2533 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 701.766274][T16303] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 701.778576][ T841] usb 9-1: device descriptor read/64, error -71 [ 702.160218][ T841] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 702.308617][ T841] usb 9-1: device descriptor read/64, error -71 [ 702.429741][ T841] usb usb9-port1: attempt power cycle [ 702.778895][ T841] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 702.819213][ T841] usb 9-1: device descriptor read/8, error -71 [ 702.893498][T16317] FAULT_INJECTION: forcing a failure. [ 702.893498][T16317] name failslab, interval 1, probability 0, space 0, times 0 [ 702.900753][T16317] CPU: 3 UID: 0 PID: 16317 Comm: syz.2.2537 Tainted: G L syzkaller #0 PREEMPT(full) [ 702.900787][T16317] Tainted: [L]=SOFTLOCKUP [ 702.900794][T16317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 702.900805][T16317] Call Trace: [ 702.900811][T16317] [ 702.900819][T16317] dump_stack_lvl+0x100/0x190 [ 702.900853][T16317] should_fail_ex.cold+0x5/0xa [ 702.900878][T16317] should_failslab+0xc2/0x120 [ 702.900900][T16317] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 702.900930][T16317] ? alloc_vmap_area+0x186c/0x2bd0 [ 702.900955][T16317] alloc_vmap_area+0x186c/0x2bd0 [ 702.900986][T16317] ? __pfx_alloc_vmap_area+0x10/0x10 [ 702.901032][T16317] __get_vm_area_node+0x1ca/0x330 [ 702.901060][T16317] __vmalloc_node_range_noprof+0x213/0x1530 [ 702.901084][T16317] ? xt_compat_init_offsets+0xe6/0x1f0 [ 702.901113][T16317] ? xt_compat_init_offsets+0xe6/0x1f0 [ 702.901134][T16317] ? __mutex_lock+0x26a/0x1b90 [ 702.901160][T16317] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 702.901184][T16317] ? __pfx___mutex_lock+0x10/0x10 [ 702.901202][T16317] ? __kvmalloc_node_noprof+0x360/0xa00 [ 702.901219][T16317] ? xt_alloc_table_info+0x44/0xa0 [ 702.901237][T16317] ? compat_do_replace+0x19b/0x500 [ 702.901262][T16317] ? nf_setsockopt+0x8d/0xf0 [ 702.901281][T16317] ? ipv6_setsockopt+0x135/0x170 [ 702.901301][T16317] ? sctp_setsockopt+0x161/0xb370 [ 702.901325][T16317] ? __ia32_sys_setsockopt+0xbc/0x160 [ 702.901355][T16317] ? xt_compat_init_offsets+0xe6/0x1f0 [ 702.901376][T16317] __vmalloc_node_noprof+0xad/0xf0 [ 702.901406][T16317] ? xt_compat_init_offsets+0xe6/0x1f0 [ 702.901430][T16317] xt_compat_init_offsets+0xe6/0x1f0 [ 702.901453][T16317] translate_compat_table+0x20b/0x17e0 [ 702.901478][T16317] ? __lock_acquire+0x4a5/0x2630 [ 702.901509][T16317] ? __pfx_translate_compat_table+0x10/0x10 [ 702.901552][T16317] compat_do_replace+0x279/0x500 [ 702.901575][T16317] ? sock_set_mark+0xc0/0x130 [ 702.901593][T16317] ? __pfx_compat_do_replace+0x10/0x10 [ 702.901614][T16317] ? __local_bh_enable_ip+0x9e/0x120 [ 702.901634][T16317] ? lockdep_hardirqs_on+0x78/0x100 [ 702.901657][T16317] ? lock_acquire+0x1cf/0x380 [ 702.901687][T16317] ? bpf_lsm_capable+0x9/0x10 [ 702.901708][T16317] ? security_capable+0x80/0x260 [ 702.901731][T16317] do_ip6t_set_ctl+0x562/0xb00 [ 702.901752][T16317] ? nf_sockopt_find.isra.0+0x222/0x290 [ 702.901779][T16317] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 702.901805][T16317] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 702.901831][T16317] ? find_held_lock+0x2b/0x80 [ 702.901854][T16317] ? nf_sockopt_find.isra.0+0x222/0x290 [ 702.901879][T16317] nf_setsockopt+0x8d/0xf0 [ 702.901902][T16317] ipv6_setsockopt+0x135/0x170 [ 702.901926][T16317] sctp_setsockopt+0x161/0xb370 [ 702.901951][T16317] ? __pfx_aa_sk_perm+0x10/0x10 [ 702.901977][T16317] ? __pfx_sctp_setsockopt+0x10/0x10 [ 702.902003][T16317] ? aa_sock_opt_perm+0xfe/0x1b0 [ 702.902021][T16317] ? sock_common_setsockopt+0x2e/0xf0 [ 702.902042][T16317] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 702.902066][T16317] do_sock_setsockopt+0xf3/0x1d0 [ 702.902091][T16317] __sys_setsockopt+0x119/0x190 [ 702.902123][T16317] __ia32_sys_setsockopt+0xbc/0x160 [ 702.902150][T16317] ? __do_fast_syscall_32+0x94/0x8c0 [ 702.902170][T16317] ? lockdep_hardirqs_on+0x78/0x100 [ 702.902189][T16317] __do_fast_syscall_32+0xe3/0x8c0 [ 702.902212][T16317] do_fast_syscall_32+0x32/0x70 [ 702.902234][T16317] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 702.902257][T16317] RIP: 0023:0xf70bef6c [ 702.902273][T16317] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 702.902290][T16317] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 702.902308][T16317] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 702.902319][T16317] RDX: 0000000000000040 RSI: 0000000080000000 RDI: 0000000000000598 [ 702.902329][T16317] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 702.902339][T16317] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 702.902349][T16317] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 702.902374][T16317] [ 702.906851][T16317] Cannot find map_set index 2 as target [ 703.068515][ T841] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 703.089244][ T841] usb 9-1: device descriptor read/8, error -71 [ 703.104522][T16323] bpf: Bad value for 'mode' [ 703.174304][T16324] lo speed is unknown, defaulting to 1000 [ 703.177089][T16324] wlan0 speed is unknown, defaulting to 1000 [ 703.198795][ T841] usb usb9-port1: unable to enumerate USB device [ 704.041056][T16335] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input93 [ 704.164808][T16337] lo speed is unknown, defaulting to 1000 [ 704.171744][T16337] wlan0 speed is unknown, defaulting to 1000 [ 704.268959][ T6029] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 704.273644][T16335] can0: slcan on ttyS3. [ 704.439418][ T6029] usb 6-1: Using ep0 maxpacket: 8 [ 704.448558][ T6029] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 704.451141][ T6029] usb 6-1: config 0 has no interface number 0 [ 704.457933][ T6029] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 704.464911][ T6029] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 704.469469][ T6029] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 704.475331][ T6029] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 704.481958][T16335] can0 (unregistered): slcan off ttyS3. [ 704.483887][ T6029] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 704.486742][ T6029] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.496265][ T6029] usb 6-1: config 0 descriptor?? [ 704.506018][ T6029] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 705.922074][T16367] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.092503][T16367] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.184299][T16380] lo speed is unknown, defaulting to 1000 [ 706.186988][T16380] wlan0 speed is unknown, defaulting to 1000 [ 706.233092][T16367] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.360204][T16367] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.388882][T15329] udevd[15329]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 706.391118][ T5956] Bluetooth: hci3: command 0x0405 tx timeout [ 706.657190][ T1141] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.683187][ T565] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.721401][T12355] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.748874][T12355] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.485653][ T34] usb 6-1: USB disconnect, device number 46 [ 707.496785][ T34] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 707.728592][T16414] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input94 [ 707.827214][T16414] lo speed is unknown, defaulting to 1000 [ 707.831374][T16414] wlan0 speed is unknown, defaulting to 1000 [ 707.875651][T16419] can0: slcan on ttyS3. [ 708.179704][T16419] can0 (unregistered): slcan off ttyS3. [ 708.424172][T15329] udevd[15329]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 708.888481][ T0] NOHZ tick-stop error: local softirq work is pending, handler #4a!!! [ 708.937914][T16443] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2562'. [ 709.259868][T15329] udevd[15329]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 709.932953][T15329] udevd[15329]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 710.060925][T16475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2570'. [ 710.590566][T16476] bond1: Unable to set down delay as MII monitoring is disabled [ 710.621671][T16476] bond1 (unregistering): Released all slaves [ 711.109292][T16489] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3947684803 (3947684803 ns) > initial count (3882709461 ns). Using initial count to start timer. [ 711.115802][T16489] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 711.123180][T16489] Cannot find map_set index 2 as target [ 711.509717][T15329] udevd[15329]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 711.538591][T16506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 711.597771][T16508] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2577'. [ 711.626654][T16509] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input95 [ 711.824649][T16513] can0: slcan on ttyS3. [ 711.866940][T16509] lo speed is unknown, defaulting to 1000 [ 711.883370][T16509] wlan0 speed is unknown, defaulting to 1000 [ 711.910416][T16504] can0 (unregistered): slcan off ttyS3. [ 712.061838][T15329] udevd[15329]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 712.398240][T16528] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2578'. [ 712.946755][ T86] Bluetooth: hci1: Frame reassembly failed (-84) [ 713.076542][T15329] udevd[15329]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 714.392683][T16563] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input96 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xad000) [ 714.667385][T16563] lo speed is unknown, defaulting to 1000 [ 714.672507][T16563] wlan0 speed is unknown, defaulting to 1000 [ 714.735819][T16566] can0: slcan on ttyS3. [ 714.948805][ T5300] Bluetooth: hci1: command 0x1003 tx timeout [ 714.951621][ T5956] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 715.231031][ T40] audit: type=1804 audit(715.117:688): pid=16574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2589" name="bus" dev="ramfs" ino=65593 res=1 errno=0 [ 715.250492][ T1111] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 715.254830][ T1111] ata1: failed to read log page 10h (errno=-5) [ 715.255180][ T40] audit: type=1804 audit(715.127:689): pid=16574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2589" name="bus" dev="ramfs" ino=65593 res=1 errno=0 [ 715.257187][ T1111] ata1.00: exception Emask 0x1 SAct 0x40000000 SErr 0x0 action 0x0 [ 715.268339][ T1111] ata1.00: irq_stat 0x41000000 [ 715.270176][ T1111] ata1.00: failed command: WRITE FPDMA QUEUED [ 715.272488][ T1111] ata1.00: cmd 61/68:f0:ce:ab:0a/05:00:00:00:00/40 tag 30 ncq dma 708608 out [ 715.272488][ T1111] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 715.278981][ T1111] ata1.00: status: { DRDY } [ 715.283289][ T1111] ata1.00: error: { ABRT } [ 715.286263][ T1111] ata1.00: configured for UDMA/100 [ 715.287595][T15329] udevd[15329]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 715.298020][ T1111] ata1: EH complete [ 715.320534][T15329] udevd[15329]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 715.399989][T16571] can0 (unregistered): slcan off ttyS3. [ 715.475574][T15329] udevd[15329]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 715.519002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 715.566701][T16581] trusted_key: encrypted_key: master key parameter '­¦«ç]h¦gP—é ?½ÝI ËÙlцš }<›+DW·j0¿Ú’­èåì÷‰`K9ð„D7â`žžÁòßä[5å³Õ&¯|½æ”-EKâ«Ù`K2æÎí¿`“âÚTÊ™ž5ùv/§3~CWÞœtÅ6ž\Åe`oíÍÍOú÷ÕȤí’O-øb*'/–yNxŒ' is invalid [ 715.590908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2ca!!! [ 715.775788][T16589] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input97 [ 715.954316][T16593] lo speed is unknown, defaulting to 1000 [ 715.959182][T16593] wlan0 speed is unknown, defaulting to 1000 [ 716.026377][T16589] can0: slcan on ttyS3. [ 716.189564][T16589] can0 (unregistered): slcan off ttyS3. [ 716.748584][ T6176] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 716.900386][ T6176] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.904899][ T6176] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.909671][ T6176] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 716.916417][ T6176] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 716.920382][ T6176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.961854][ T6176] usb 5-1: config 0 descriptor?? [ 717.377595][ T6176] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 717.381210][ T6176] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 717.383768][ T6176] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 717.386488][ T6176] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 717.389824][ T6176] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 717.393194][ T6176] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 717.396250][ T6176] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 717.400275][ T6176] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 717.402752][ T6176] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 717.405578][ T6176] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 717.418929][ T6176] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 717.654056][T12325] usb 5-1: USB disconnect, device number 36 [ 717.774138][T16640] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input98 [ 717.845571][T16640] lo speed is unknown, defaulting to 1000 [ 717.848358][T16640] wlan0 speed is unknown, defaulting to 1000 [ 717.921151][T16643] can0: slcan on ttyS3. [ 717.989374][T16643] can0 (unregistered): slcan off ttyS3. [ 718.578772][ T24] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 718.708017][ T5300] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 718.717161][ T5300] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 718.722820][ T5300] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 718.727739][ T5300] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 718.732800][ T5300] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 718.748657][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 718.774339][T16660] lo speed is unknown, defaulting to 1000 [ 718.777050][T16660] wlan0 speed is unknown, defaulting to 1000 [ 718.782242][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 718.801215][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 718.804614][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.819571][ T24] usb 5-1: Product: syz [ 718.821768][ T24] usb 5-1: Manufacturer: syz [ 718.823960][ T24] usb 5-1: SerialNumber: syz [ 718.845563][ T24] usb 5-1: config 0 descriptor?? [ 718.863525][ T24] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 718.878834][ T24] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 719.121426][ T29] libceph: connect (1)[c::]:6789 error -101 [ 719.134779][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 719.328299][T15308] udevd[15308]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 719.345467][T15323] udevd[15323]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 719.388834][T13895] libceph: connect (1)[c::]:6789 error -101 [ 719.391149][T13895] libceph: mon0 (1)[c::]:6789 connect error [ 719.411102][T16660] chnl_net:caif_netlink_parms(): no params data found [ 719.487599][T16660] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.490436][T16660] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.493838][T16660] bridge_slave_0: entered allmulticast mode [ 719.497173][T16660] bridge_slave_0: entered promiscuous mode [ 719.501594][T16667] ceph: No mds server is up or the cluster is laggy [ 719.503837][T16660] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.506820][T16660] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.511004][T16660] bridge_slave_1: entered allmulticast mode [ 719.537115][T16660] bridge_slave_1: entered promiscuous mode [ 719.628699][ T1144] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.662728][T16660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.670405][T16660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.686673][ T24] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 719.700040][T16660] team0: Port device team_slave_0 added [ 719.703685][T16660] team0: Port device team_slave_1 added [ 719.727358][ T1144] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.739871][T16660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.742467][T16660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.752161][T16660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.757934][T16660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.760659][T16660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.770925][T16660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.869393][T16660] hsr_slave_0: entered promiscuous mode [ 719.872186][T16660] hsr_slave_1: entered promiscuous mode [ 719.874633][T16660] debugfs: 'hsr0' already exists in 'hsr' [ 719.877195][T16660] Cannot create hsr debugfs directory [ 719.882795][ T1144] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.974123][ T1144] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.188690][ T24] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 720.195028][ T24] em28xx 5-1:0.0: board has no eeprom [ 720.401790][T16691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.407668][T16691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.441510][ T1144] bond0 (unregistering): Released all slaves [ 720.555803][T15308] udevd[15308]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 720.580603][T15308] udevd[15308]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 720.591774][ T1144] tipc: Left network mode [ 720.618214][T16691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.622641][T16691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.697854][T16705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.701515][T16705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.788697][ T5300] Bluetooth: hci1: command tx timeout [ 720.821045][T16715] fuse: Bad value for 'fd' [ 720.876752][T16716] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input99 [ 720.966805][T16723] lo speed is unknown, defaulting to 1000 [ 720.970885][T16723] wlan0 speed is unknown, defaulting to 1000 [ 721.040598][T16716] can0: slcan on ttyS3. [ 721.151388][ T1144] hsr_slave_0: left promiscuous mode [ 721.154863][ T1144] hsr_slave_1: left promiscuous mode [ 721.176537][T16716] can0 (unregistered): slcan off ttyS3. [ 721.189384][ T1144] veth1_to_hsr: left allmulticast mode [ 721.191864][ T1144] veth1_to_hsr: left promiscuous mode [ 721.194374][ T1144] veth1_macvtap: left promiscuous mode [ 721.196406][ T1144] veth0_macvtap: left promiscuous mode [ 721.198614][ T1144] veth1_vlan: left promiscuous mode [ 721.200603][ T1144] veth0_vlan: left promiscuous mode [ 721.266382][ T1144] pim6reg (unregistering): left allmulticast mode [ 721.273616][T16650] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 721.328490][ T24] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 721.331422][ T24] em28xx 5-1:0.0: dvb set to bulk mode. [ 721.336183][ T6029] em28xx 5-1:0.0: Binding DVB extension [ 721.377756][ T6029] em28xx 5-1:0.0: Registering input extension [ 721.567004][T16660] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 721.577663][T16660] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 721.585658][T16660] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 721.600702][T16660] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 721.730476][T16660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.740851][T16660] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.747150][T11625] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.749522][T11625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.765927][T11625] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.768502][T11625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.889623][T16660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.918968][T16660] veth0_vlan: entered promiscuous mode [ 721.924715][T16660] veth1_vlan: entered promiscuous mode [ 721.943890][T16660] veth0_macvtap: entered promiscuous mode [ 721.953951][T16660] veth1_macvtap: entered promiscuous mode [ 721.972733][T16660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.980639][T16660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.987167][T11625] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.991257][T11625] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.994829][T11625] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.000454][T11625] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.064029][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.066767][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.087313][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.090194][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.339156][ T6029] usb 5-1: USB disconnect, device number 37 [ 722.359667][ T6029] em28xx 5-1:0.0: Disconnecting em28xx [ 722.362048][ T6029] em28xx 5-1:0.0: Closing input extension [ 722.385079][ T6029] em28xx 5-1:0.0: Freeing device [ 722.868575][ T5300] Bluetooth: hci1: command tx timeout [ 723.043707][T16781] fuse: Bad value for 'fd' [ 723.056069][T16783] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input101 [ 723.205589][T16790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2632'. [ 723.217369][T16783] lo speed is unknown, defaulting to 1000 [ 723.230546][T16783] wlan0 speed is unknown, defaulting to 1000 [ 723.260032][T16789] can0: slcan on ttyS3. [ 723.419240][T16798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2635'. [ 723.420326][T16789] can0 (unregistered): slcan off ttyS3. [ 725.002422][ T5300] Bluetooth: hci1: command tx timeout [ 725.446465][T16833] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input102 [ 725.507891][T16830] lo speed is unknown, defaulting to 1000 [ 725.514836][T16830] wlan0 speed is unknown, defaulting to 1000 [ 725.570216][T16833] can0: slcan on ttyS3. [ 725.889687][ T40] audit: type=1326 audit(725.777:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16849 comm="syz.2.2647" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bef6c code=0x0 [ 725.908917][T16833] can0 (unregistered): slcan off ttyS3. [ 726.017739][T16859] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2647'. [ 726.042632][T16861] tmpfs: Unknown parameter '00000000000000000000000' [ 727.028705][ T5300] Bluetooth: hci1: command tx timeout [ 727.339228][T16889] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input103 [ 727.449615][T16889] lo speed is unknown, defaulting to 1000 [ 727.453052][T16889] wlan0 speed is unknown, defaulting to 1000 [ 727.492923][T16892] can0: slcan on ttyS3. [ 727.940934][T16892] can0 (unregistered): slcan off ttyS3. [ 728.206617][T15329] udevd[15329]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 728.682639][T16915] siw: device registration error -23 [ 728.944989][T16925] FAULT_INJECTION: forcing a failure. [ 728.944989][T16925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.947273][T13895] libceph: connect (1)[c::]:6789 error -101 [ 728.955616][T16925] CPU: 3 UID: 0 PID: 16925 Comm: syz.0.2665 Tainted: G L syzkaller #0 PREEMPT(full) [ 728.955649][T16925] Tainted: [L]=SOFTLOCKUP [ 728.955656][T16925] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 728.955668][T16925] Call Trace: [ 728.955674][T16925] [ 728.955682][T16925] dump_stack_lvl+0x100/0x190 [ 728.955717][T16925] should_fail_ex.cold+0x5/0xa [ 728.955742][T16925] _copy_from_user+0x2e/0xd0 [ 728.955768][T16925] copy_from_buffer+0x7f/0xc0 [ 728.955795][T16925] copy_uabi_to_xstate+0x266/0x650 [ 728.955824][T16925] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 728.955855][T16925] ? __fpu_restore_sig+0xa65/0x1360 [ 728.955880][T16925] ? x86_task_fpu+0x5f/0x90 [ 728.955901][T16925] __fpu_restore_sig+0x10a3/0x1360 [ 728.955927][T16925] ? __lock_acquire+0x4a5/0x2630 [ 728.955952][T16925] ? __pfx___fpu_restore_sig+0x10/0x10 [ 728.955975][T16925] ? retarget_shared_pending.isra.0+0x261/0x2f0 [ 728.956017][T16925] ? __might_fault+0xc5/0x140 [ 728.956050][T16925] fpu__restore_sig+0x151/0x190 [ 728.956076][T16925] ia32_restore_sigcontext+0x44c/0x620 [ 728.956105][T16925] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 728.956138][T16925] ? rcu_is_watching+0x12/0xc0 [ 728.956166][T16925] ? _raw_spin_unlock_irq+0x23/0x50 [ 728.956201][T16925] ? lockdep_hardirqs_on+0x78/0x100 [ 728.956226][T16925] __do_compat_sys_rt_sigreturn+0x18c/0x270 [ 728.956254][T16925] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 728.956289][T16925] do_int80_emulation+0x141/0x6b0 [ 728.956314][T16925] asm_int80_emulation+0x1a/0x20 [ 728.956334][T16925] RIP: 0023:0xf704ef6a [ 728.956350][T16925] Code: 19 85 d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 728.956368][T16925] RSP: 002b:00000000f543d50c EFLAGS: 00000292 [ 728.956384][T16925] RAX: 0000000000000004 RBX: 0000000000000003 RCX: 0000000080000100 [ 728.956396][T16925] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 728.956407][T16925] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 728.956417][T16925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 728.956428][T16925] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 728.956451][T16925] [ 728.972274][T13895] libceph: mon0 (1)[c::]:6789 connect error [ 728.975531][T16933] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2664'. [ 729.079317][T16917] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2664'. [ 729.083333][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2664'. [ 729.090537][T16917] netlink: 'syz.1.2664': attribute type 1 has an invalid length. [ 729.228788][ T841] libceph: connect (1)[c::]:6789 error -101 [ 729.231334][ T841] libceph: mon0 (1)[c::]:6789 connect error [ 729.456901][T16928] ceph: No mds server is up or the cluster is laggy [ 729.486200][T16949] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input104 [ 729.692808][T16949] lo speed is unknown, defaulting to 1000 [ 729.697228][T16949] wlan0 speed is unknown, defaulting to 1000 [ 729.738937][T16950] can0: slcan on ttyS3. [ 729.820756][T16950] can0 (unregistered): slcan off ttyS3. [ 730.329032][T16973] siw: device registration error -23 [ 731.274601][T15329] udevd[15329]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 731.489805][T16984] bond1: option primary: mode dependency failed, not supported in mode broadcast(3) [ 731.504410][T16984] bond1 (unregistering): Released all slaves [ 731.902580][T17010] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input105 [ 732.007095][T17012] overlayfs: failed to clone upperpath [ 732.131631][T17011] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 732.133892][T17011] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 732.331947][T17011] vhci_hcd vhci_hcd.0: Device attached [ 732.810797][ T841] usb 38-1: SetAddress Request (22) to port 0 [ 732.812900][ T841] usb 38-1: new SuperSpeed USB device number 22 using vhci_hcd [ 733.340418][T17013] vhci_hcd: connection reset by peer [ 733.342683][T12355] vhci_hcd vhci_hcd.0: stop threads [ 733.344597][T12355] vhci_hcd vhci_hcd.0: release socket [ 733.348733][T12355] vhci_hcd vhci_hcd.0: disconnect device [ 733.430286][T17029] netlink: 'syz.2.2686': attribute type 2 has an invalid length. [ 733.467300][T17010] lo speed is unknown, defaulting to 1000 [ 733.471597][T17010] wlan0 speed is unknown, defaulting to 1000 [ 733.510247][T17031] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 733.532602][T17026] can0: slcan on ttyS3. [ 733.709322][T17026] can0 (unregistered): slcan off ttyS3. [ 733.949695][T17044] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2690'. [ 734.101245][T17048] kvm: pic: single mode not supported [ 734.101262][T17048] kvm: pic: level sensitive irq not supported [ 734.103374][T17048] kvm: pic: non byte read [ 734.111385][T17048] kvm: pic: single mode not supported [ 734.111399][T17048] kvm: pic: level sensitive irq not supported [ 734.119024][T17048] kvm: pic: non byte read [ 734.124684][T17048] kvm: pic: non byte read [ 734.129361][T17048] kvm: pic: non byte read [ 734.136465][T17048] kvm: pic: non byte read [ 734.149489][T17048] kvm: pic: single mode not supported [ 734.149506][T17048] kvm: pic: level sensitive irq not supported [ 734.151832][T17048] kvm: pic: non byte read [ 734.288594][ T9] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 734.448701][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 734.465928][ T9] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 734.470563][ T9] usb 6-1: config 0 has no interface number 0 [ 734.472960][ T9] usb 6-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 734.494950][ T9] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 734.498073][ T9] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 734.503533][ T9] usb 6-1: Product: syz [ 734.505288][ T9] usb 6-1: SerialNumber: syz [ 734.520438][ T9] usb 6-1: config 0 descriptor?? [ 734.550463][ T9] usbhid 6-1:0.8: couldn't find an input interrupt endpoint [ 734.683460][T17061] netlink: 'syz.2.2696': attribute type 1 has an invalid length. [ 734.726135][T17061] bond1: (slave geneve2): making interface the new active one [ 734.731881][T17061] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 734.735613][ T46] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 734.741205][ T46] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 734.744527][ T46] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 734.756207][ T46] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 734.764046][T17061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2696'. [ 734.774721][T17061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 735.031561][T17067] lo speed is unknown, defaulting to 1000 [ 735.034033][T17067] wlan0 speed is unknown, defaulting to 1000 [ 735.161654][T17069] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 735.689335][ T6029] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 735.777371][ T24] wlan0 speed is unknown, defaulting to 1000 [ 735.786185][ T24] syz1: Port: 1 Link DOWN [ 735.838892][ T6029] usb 5-1: Using ep0 maxpacket: 32 [ 735.848371][ T6029] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 735.855421][ T6029] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 735.860646][ T6029] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 735.863846][ T6029] usb 5-1: Product: syz [ 735.865414][ T6029] usb 5-1: Manufacturer: syz [ 735.866997][ T6029] usb 5-1: SerialNumber: syz [ 735.872647][ T6029] usb 5-1: config 0 descriptor?? [ 735.875371][T17076] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 736.066287][T17087] x_tables: duplicate underflow at hook 1 [ 736.184503][ T6176] usb 5-1: USB disconnect, device number 38 [ 736.884210][T17109] fuse: Bad value for 'fd' [ 736.931117][ T24] usb 6-1: USB disconnect, device number 47 [ 736.984082][T17112] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input106 [ 737.113442][T17112] lo speed is unknown, defaulting to 1000 [ 737.116225][T17112] wlan0 speed is unknown, defaulting to 1000 [ 737.169963][T17115] can0: slcan on ttyS3. [ 737.368818][T17112] can0 (unregistered): slcan off ttyS3. [ 737.545334][T17128] hfsplus: unable to find HFS+ superblock [ 737.908650][ T841] usb 38-1: device descriptor read/8, error -110 [ 737.953203][T15329] udevd[15329]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 738.299500][ T841] usb usb38-port1: attempt power cycle [ 738.729542][T17157] fuse: Bad value for 'fd' [ 738.904138][ T841] usb usb38-port1: unable to enumerate USB device [ 739.083289][T17164] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input107 [ 739.209789][T17164] lo speed is unknown, defaulting to 1000 [ 739.213821][T17164] wlan0 speed is unknown, defaulting to 1000 [ 739.281840][T17166] can0: slcan on ttyS3. [ 739.359960][T17166] can0 (unregistered): slcan off ttyS3. [ 739.600253][T15329] udevd[15329]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 740.608040][T17217] hfsplus: unable to find HFS+ superblock [ 740.783398][T15329] udevd[15329]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 741.020493][T17240] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input108 [ 741.216767][T17242] lo speed is unknown, defaulting to 1000 [ 741.220855][T17242] wlan0 speed is unknown, defaulting to 1000 [ 741.285987][T17240] can0: slcan on ttyS3. [ 741.366704][T17240] can0 (unregistered): slcan off ttyS3. [ 742.564693][T17281] /dev/nullb0: Can't open blockdev [ 742.975515][T17285] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input109 [ 743.074488][T17285] lo speed is unknown, defaulting to 1000 [ 743.077566][T17285] wlan0 speed is unknown, defaulting to 1000 [ 743.124143][T17287] can0: slcan on ttyS3. [ 743.221312][T17287] can0 (unregistered): slcan off ttyS3. [ 743.424148][T17297] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2755'. [ 743.512304][T17300] siw: device registration error -23 [ 743.551172][T17300] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 743.580242][T17294] ***************************************************** [ 743.586315][T17294] ORANGEFS Device Error: You cannot open the device file [ 743.586337][T17294] [ 743.586337][T17294] /dev/pvfs2-req more than once. Please make sure that [ 743.586337][T17294] there are no [ 743.589935][T17294] instances of a program using this device [ 743.589935][T17294] currently running. (You must verify this!) [ 743.600440][T17294] For example, you can use the lsof program as follows: [ 743.602764][T17294] 'lsof | grep pvfs2-req' (run this as root) [ 743.605105][T17294] open_access_count = 1 [ 743.606925][T17294] ***************************************************** [ 744.831097][T17326] 9p: Bad value for 'rfdno' [ 744.833039][T17326] openvswitch: netlink: Unknown nsh attribute 0 [ 744.934362][T17330] /dev/nullb0: Can't open blockdev [ 745.662221][T17339] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 745.828670][ T5300] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 746.022749][T17349] siw: device registration error -23 [ 746.105430][T17349] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 746.878642][ T5300] Bluetooth: hci1: command 0x0405 tx timeout [ 746.962385][T17365] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2775'. [ 747.117776][T17368] /dev/nullb0: Can't open blockdev [ 748.588825][ T40] audit: type=1800 audit(748.468:691): pid=17348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2772" name="bus" dev="ramfs" ino=70753 res=0 errno=0 [ 749.041877][ T40] audit: type=1326 audit(748.868:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.4.2781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 749.099314][ T40] audit: type=1326 audit(748.868:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.4.2781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 749.109286][ T40] audit: type=1326 audit(748.868:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.4.2781" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 749.118263][ T40] audit: type=1326 audit(748.868:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.4.2781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 749.125915][ T40] audit: type=1326 audit(748.868:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.4.2781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 749.135370][ T40] audit: type=1326 audit(748.868:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.4.2781" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 749.143775][ T40] audit: type=1326 audit(748.868:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.4.2781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 749.165287][ T40] audit: type=1326 audit(748.868:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.4.2781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 749.175068][ T40] audit: type=1326 audit(748.878:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.4.2781" exe="/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 749.261916][T15329] udevd[15329]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 749.269661][T15329] udevd[15329]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 749.514514][T17397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2783'. [ 750.855715][T17420] siw: device registration error -23 [ 750.912386][T17420] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 752.030110][T17431] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 752.032605][T17431] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 752.068484][T17431] vhci_hcd vhci_hcd.0: Device attached [ 752.110443][T17421] random: crng reseeded on system resumption [ 752.151277][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.156326][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.242004][T17444] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input111 [ 752.287131][T17444] lo speed is unknown, defaulting to 1000 [ 752.291741][T17444] wlan0 speed is unknown, defaulting to 1000 [ 752.343308][T17450] can0: slcan on ttyS3. [ 752.392430][T17432] vhci_hcd: connection closed [ 752.392619][ T565] vhci_hcd vhci_hcd.1: stop threads [ 752.397380][ T565] vhci_hcd vhci_hcd.1: release socket [ 752.408602][ T565] vhci_hcd vhci_hcd.1: disconnect device [ 752.421922][ T29] usb 40-1: enqueue for inactive port 0 [ 752.428786][T17450] can0 (unregistered): slcan off ttyS3. [ 752.450744][T15323] udevd[15323]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 752.668488][T17456] ceph: No mds server is up or the cluster is laggy [ 752.673037][ T6031] libceph: connect (1)[c::]:6789 error -101 [ 752.675099][ T6031] libceph: mon0 (1)[c::]:6789 connect error [ 752.969032][ T29] usb usb40-port1: attempt power cycle [ 753.578274][T17469] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2796'. [ 753.610047][ T29] usb usb40-port1: unable to enumerate USB device [ 754.918908][T17498] binder: 17495:17498 ioctl c0306201 0 returned -14 [ 754.927952][T17498] binder: 17495:17498 ioctl 4018620d 0 returned -22 [ 754.983286][T17502] binder: 17495:17502 ioctl c018480d 0 returned -22 [ 755.038270][T17505] binder: 17495:17505 ioctl 8933 0 returned -22 [ 755.064273][T17504] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input112 [ 755.163022][T17504] lo speed is unknown, defaulting to 1000 [ 755.175446][T17504] wlan0 speed is unknown, defaulting to 1000 [ 755.239577][T17508] can0: slcan on ttyS3. [ 755.724535][T15329] udevd[15329]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 755.768591][T17501] can0 (unregistered): slcan off ttyS3. [ 756.258631][T17555] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 756.260776][T17555] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 756.274753][T17555] vhci_hcd vhci_hcd.0: Device attached [ 756.315537][T17555] random: crng reseeded on system resumption [ 756.360588][T17554] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 756.362991][T17554] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 756.365987][T17554] vhci_hcd vhci_hcd.0: Device attached [ 756.381292][T17554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2810'. [ 756.494140][T17558] vhci_hcd: connection closed [ 756.494440][T12355] vhci_hcd vhci_hcd.0: stop threads [ 756.497977][T12355] vhci_hcd vhci_hcd.0: release socket [ 756.501636][T12355] vhci_hcd vhci_hcd.0: disconnect device [ 756.629409][ T29] usb 46-1: SetAddress Request (5) to port 0 [ 756.631640][ T29] usb 46-1: new SuperSpeed USB device number 5 using vhci_hcd [ 756.935893][T17556] vhci_hcd: connection reset by peer [ 756.937921][T11625] vhci_hcd vhci_hcd.4: stop threads [ 756.940109][T11625] vhci_hcd vhci_hcd.4: release socket [ 756.946069][T11625] vhci_hcd vhci_hcd.4: disconnect device [ 757.090329][T17565] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input113 [ 757.181741][T17565] lo speed is unknown, defaulting to 1000 [ 757.184318][T17565] wlan0 speed is unknown, defaulting to 1000 [ 757.257141][T17572] overlayfs: failed to clone lowerpath [ 757.264294][T17565] can0: slcan on ttyS3. [ 757.442415][T17565] can0 (unregistered): slcan off ttyS3. [ 757.565361][T17567] ceph: No mds server is up or the cluster is laggy [ 758.149242][ T6031] libceph: connect (1)[c::]:6789 error -101 [ 758.151384][ T6031] libceph: mon0 (1)[c::]:6789 connect error [ 758.576307][T17603] binder: 17602:17603 ioctl c0306201 800003c0 returned -14 [ 758.609989][T17607] binder: 17606:17607 ioctl 80105873 800000c0 returned -22 [ 758.613761][T17607] binder: 17606:17607 ioctl c0306201 800003c0 returned -14 [ 758.895822][T17617] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 758.897868][T17617] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 758.901323][T17617] vhci_hcd vhci_hcd.0: Device attached [ 758.911838][T17617] random: crng reseeded on system resumption [ 758.955156][T17620] /dev/nullb0: Can't open blockdev [ 759.190248][T13895] usb 38-1: SetAddress Request (27) to port 0 [ 759.192874][T13895] usb 38-1: new SuperSpeed USB device number 27 using vhci_hcd [ 759.459657][ T9] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 759.464417][T17628] overlayfs: failed to clone upperpath [ 759.526207][T17618] vhci_hcd: connection reset by peer [ 759.531599][T11625] vhci_hcd vhci_hcd.0: stop threads [ 759.534835][T11625] vhci_hcd vhci_hcd.0: release socket [ 759.537573][T11625] vhci_hcd vhci_hcd.0: disconnect device [ 759.614947][ T841] IPVS: starting estimator thread 0... [ 759.615933][T17633] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 759.626512][ T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 759.630331][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.638141][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.647380][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 759.655347][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 759.658244][ T9] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 759.662005][ T9] usb 6-1: Manufacturer: syz [ 759.670843][ T9] usb 6-1: config 0 descriptor?? [ 759.698504][T17635] IPVS: using max 44 ests per chain, 105600 per kthread [ 760.099339][ T9] hid_parser_main: 5 callbacks suppressed [ 760.099361][ T9] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 760.123427][ T9] appleir 0003:05AC:8243.000E: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 760.188671][T17647] tun0: tun_chr_ioctl cmd 1074025675 [ 760.196589][T17647] tun0: persist disabled [ 760.281513][ T6031] IPVS: starting estimator thread 0... [ 760.360037][ T39] usb 6-1: USB disconnect, device number 48 [ 760.369636][T17649] IPVS: using max 44 ests per chain, 105600 per kthread [ 760.402911][T17658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 760.560391][T17667] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input114 [ 760.671885][T17667] lo speed is unknown, defaulting to 1000 [ 760.674891][T17667] wlan0 speed is unknown, defaulting to 1000 [ 760.708067][T17670] tipc: Enabling of bearer rejected, failed to enable media [ 760.767738][T17667] can0: slcan on ttyS3. [ 760.868702][T17667] can0 (unregistered): slcan off ttyS3. [ 761.230586][T17696] xt_TPROXY: Can be used only with -p tcp or -p udp [ 761.582944][T17708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2854'. [ 761.688666][ T29] usb 46-1: device descriptor read/8, error -110 [ 762.344181][ T29] usb usb46-port1: attempt power cycle [ 762.919068][ T29] usb usb46-port1: unable to enumerate USB device [ 763.674358][T17756] rdma_rxe: rxe_newlink: failed to add wg2 [ 764.097112][T17767] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 764.105987][T17767] CIFS mount error: No usable UNC path provided in device string! [ 764.105987][T17767] [ 764.109741][T17767] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 764.274867][T13895] usb 38-1: device descriptor read/8, error -110 [ 764.759511][T13895] usb usb38-port1: attempt power cycle [ 765.260393][ T40] kauditd_printk_skb: 51 callbacks suppressed [ 765.260409][ T40] audit: type=1326 audit(765.148:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17781 comm="syz.2.2877" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bef6c code=0x0 [ 765.349056][T13895] usb usb38-port1: unable to enumerate USB device [ 765.732456][T17794] /dev/nullb0: Can't open blockdev [ 765.789864][T17798] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 766.536970][T15329] udevd[15329]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 766.725104][T17819] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input115 [ 766.873887][T17819] lo speed is unknown, defaulting to 1000 [ 766.883656][T17819] wlan0 speed is unknown, defaulting to 1000 [ 766.925606][T17823] can0: slcan on ttyS3. [ 766.979377][T17823] can0 (unregistered): slcan off ttyS3. [ 767.410709][T17829] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input116 [ 767.665420][T17829] lo speed is unknown, defaulting to 1000 [ 767.668875][T17833] syzkaller0: entered promiscuous mode [ 767.671609][T17833] syzkaller0: entered allmulticast mode [ 767.678073][T17829] wlan0 speed is unknown, defaulting to 1000 [ 767.680133][T17833] tc action pedit offset must be on 32 bit boundaries [ 767.698484][T17835] FAULT_INJECTION: forcing a failure. [ 767.698484][T17835] name failslab, interval 1, probability 0, space 0, times 0 [ 767.707728][T17835] CPU: 1 UID: 0 PID: 17835 Comm: syz.0.2890 Tainted: G L syzkaller #0 PREEMPT(full) [ 767.707750][T17835] Tainted: [L]=SOFTLOCKUP [ 767.707755][T17835] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 767.707762][T17835] Call Trace: [ 767.707767][T17835] [ 767.707773][T17835] dump_stack_lvl+0x100/0x190 [ 767.707798][T17835] should_fail_ex.cold+0x5/0xa [ 767.707814][T17835] should_failslab+0xc2/0x120 [ 767.707828][T17835] __kmalloc_cache_noprof+0x7a/0x6f0 [ 767.707844][T17835] ? addr_event.isra.0+0xcc/0x560 [ 767.707866][T17835] addr_event.isra.0+0xcc/0x560 [ 767.707884][T17835] inetaddr_event+0xf3/0x150 [ 767.707901][T17835] ? __pfx_inetaddr_event+0x10/0x10 [ 767.707918][T17835] ? down_read+0x13b/0x460 [ 767.707935][T17835] notifier_call_chain+0x99/0x420 [ 767.707955][T17835] blocking_notifier_call_chain+0x69/0xa0 [ 767.707973][T17835] __inet_del_ifa+0x3df/0xf40 [ 767.707985][T17835] ? full_name_hash+0xbc/0x100 [ 767.708004][T17835] devinet_ioctl+0x154c/0x1f10 [ 767.708019][T17835] ? __pfx_devinet_ioctl+0x10/0x10 [ 767.708032][T17835] ? _copy_from_user+0x59/0xd0 [ 767.708050][T17835] inet_ioctl+0x3aa/0x3f0 [ 767.708063][T17835] ? __pfx_inet_ioctl+0x10/0x10 [ 767.708081][T17835] ? kasan_quarantine_put+0x104/0x240 [ 767.708100][T17835] ? lockdep_hardirqs_on+0x78/0x100 [ 767.708118][T17835] ? tomoyo_path_number_perm+0x188/0x580 [ 767.708135][T17835] sock_do_ioctl+0x118/0x280 [ 767.708151][T17835] ? __pfx_sock_do_ioctl+0x10/0x10 [ 767.708165][T17835] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 767.708178][T17835] ? do_vfs_ioctl+0x226/0x13e0 [ 767.708199][T17835] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 767.708219][T17835] compat_sock_ioctl+0x568/0x760 [ 767.708238][T17835] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 767.708256][T17835] ? __fget_files+0x21f/0x3d0 [ 767.708270][T17835] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 767.708287][T17835] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 767.708306][T17835] __do_fast_syscall_32+0xe3/0x8c0 [ 767.708326][T17835] do_fast_syscall_32+0x32/0x70 [ 767.708353][T17835] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 767.708369][T17835] RIP: 0023:0xf704ef6c [ 767.708379][T17835] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 767.708390][T17835] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 767.708401][T17835] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000891c [ 767.708408][T17835] RDX: 0000000080000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 767.708415][T17835] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 767.708422][T17835] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 767.708429][T17835] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 767.708443][T17835] [ 767.815124][T17830] can0: slcan on ttyS3. [ 767.908747][T17838] can0 (unregistered): slcan off ttyS3. [ 768.636167][T17862] hfsplus: unable to find HFS+ superblock [ 768.941501][T17868] misc userio: No port type given on /dev/userio [ 770.578751][T17891] fuse: Bad value for 'fd' [ 770.857903][T17895] siw: device registration error -23 [ 771.034235][T17903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2912'. [ 771.252589][T17913] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 771.254866][T17913] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 771.259099][T17913] vhci_hcd vhci_hcd.0: Device attached [ 771.294380][T17913] random: crng reseeded on system resumption [ 771.578461][ T29] usb 40-1: SetAddress Request (18) to port 0 [ 771.580990][ T29] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd [ 771.849047][T17914] vhci_hcd: connection reset by peer [ 771.853693][ T101] vhci_hcd vhci_hcd.1: stop threads [ 771.856584][ T101] vhci_hcd vhci_hcd.1: release socket [ 771.859446][ T101] vhci_hcd vhci_hcd.1: disconnect device [ 772.053623][T17941] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2925'. [ 772.058781][T17942] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2925'. [ 772.173718][T17942] siw: device registration error -23 [ 772.173735][T17941] siw: device registration error -23 [ 772.239735][T17945] siw: device registration error -23 [ 772.294743][T17946] cifs: Unknown parameter 'cachi' [ 774.381474][T17955] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 774.525350][T17955] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 774.530845][T17955] overlayfs: failed to look up (tracing) for ino (-66) [ 774.754602][T17968] netlink: 'syz.1.2932': attribute type 2 has an invalid length. [ 774.786496][T17968] : entered promiscuous mode [ 775.410921][T17998] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input117 [ 775.555713][T17998] lo speed is unknown, defaulting to 1000 [ 775.561730][T17998] wlan0 speed is unknown, defaulting to 1000 [ 775.664509][T18000] can0: slcan on ttyS3. [ 775.789866][T18000] can0 (unregistered): slcan off ttyS3. [ 775.869973][T17993] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 775.872345][T17993] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 775.972524][T17993] vhci_hcd vhci_hcd.0: Device attached [ 776.012063][T17993] random: crng reseeded on system resumption [ 776.123530][T18013] cifs: Unknown parameter 'cachi' [ 776.460008][ T6012] usb 46-1: SetAddress Request (9) to port 0 [ 776.463568][ T6012] usb 46-1: new SuperSpeed USB device number 9 using vhci_hcd [ 776.629162][ T29] usb 40-1: device descriptor read/8, error -110 [ 777.269285][ T29] usb usb40-port1: attempt power cycle [ 777.597148][T17994] vhci_hcd: connection reset by peer [ 777.600355][ T565] vhci_hcd vhci_hcd.4: stop threads [ 777.602032][ T565] vhci_hcd vhci_hcd.4: release socket [ 777.604167][ T565] vhci_hcd vhci_hcd.4: disconnect device [ 777.789943][T18030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2945'. [ 777.802752][T18030] 8021q: adding VLAN 0 to HW filter on device bond1 [ 777.821722][T18030] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2945'. [ 777.829031][ T29] usb usb40-port1: unable to enumerate USB device [ 777.880709][T18034] lo speed is unknown, defaulting to 1000 [ 777.883405][T18034] wlan0 speed is unknown, defaulting to 1000 [ 778.158926][ T6176] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 778.329285][ T6176] usb 5-1: config 0 has no interfaces? [ 778.334374][ T6176] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 778.338627][ T6176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.342318][ T6176] usb 5-1: Product: syz [ 778.344448][ T6176] usb 5-1: Manufacturer: syz [ 778.346892][ T6176] usb 5-1: SerialNumber: syz [ 778.355576][ T6176] usb 5-1: config 0 descriptor?? [ 778.740904][T18034] veth0_macvtap: left promiscuous mode [ 778.961454][T18057] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 778.986122][T18058] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input118 [ 779.005173][T18034] veth0_macvtap: entered promiscuous mode [ 779.086524][ T24] usb 5-1: USB disconnect, device number 39 [ 779.151008][T18060] lo speed is unknown, defaulting to 1000 [ 779.154207][T18060] wlan0 speed is unknown, defaulting to 1000 [ 779.412689][T18056] can0: slcan on ttyS3. [ 779.489191][T18056] can0 (unregistered): slcan off ttyS3. [ 779.522348][T18065] overlayfs: failed to clone lowerpath [ 779.528570][T18065] overlayfs: failed to clone lowerpath [ 779.937521][T12354] veth0_macvtap: left promiscuous mode [ 780.164567][ T10] usb 6-1: new low-speed USB device number 49 using dummy_hcd [ 780.332508][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 780.336722][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 780.341281][ T10] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 166, changing to 4 [ 780.346779][ T10] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 780.563911][T18085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2961'. [ 780.576146][T18085] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2961'. [ 780.725167][T18090] /dev/nullb0: Can't open blockdev [ 780.813372][T18092] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2964'. [ 781.370430][T18115] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 781.520768][ T6012] usb 46-1: device descriptor read/8, error -110 [ 781.856052][T18131] netlink: 'syz.2.2971': attribute type 2 has an invalid length. [ 781.873363][T18131] : entered promiscuous mode [ 781.919515][ T6012] usb usb46-port1: attempt power cycle [ 782.295205][T18136] lo speed is unknown, defaulting to 1000 [ 782.301106][T18136] wlan0 speed is unknown, defaulting to 1000 [ 782.791206][ T6012] usb usb46-port1: unable to enumerate USB device [ 782.963891][ T10] usb 6-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 782.967574][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.999782][ T10] usb 6-1: can't set config #1, error -71 [ 783.002489][ T10] usb 6-1: USB disconnect, device number 49 [ 784.052548][T18150] hfsplus: unable to find HFS+ superblock [ 784.681128][T18150] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 785.279437][T18177] No buffer was provided with the request [ 785.704432][T18164] syz.2.2981 (18164) used greatest stack depth: 18816 bytes left [ 786.024958][T18161] syz.2.2980 (18161) used greatest stack depth: 18056 bytes left [ 786.146175][T18185] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2986'. [ 786.240677][T18188] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 786.243334][T18188] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 786.247091][T18188] vhci_hcd vhci_hcd.0: Device attached [ 786.548806][ T29] usb 40-1: SetAddress Request (22) to port 0 [ 786.550980][ T29] usb 40-1: new SuperSpeed USB device number 22 using vhci_hcd [ 786.750950][T18188] random: crng reseeded on system resumption [ 786.846311][T18199] syzkaller0: entered promiscuous mode [ 786.849163][T18199] syzkaller0: entered allmulticast mode [ 787.008508][ T5828] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 787.043140][T18203] lo speed is unknown, defaulting to 1000 [ 787.046781][T18203] wlan0 speed is unknown, defaulting to 1000 [ 787.068489][T18190] vhci_hcd: connection reset by peer [ 787.071080][ T86] vhci_hcd vhci_hcd.1: stop threads [ 787.072799][ T86] vhci_hcd vhci_hcd.1: release socket [ 787.074750][ T86] vhci_hcd vhci_hcd.1: disconnect device [ 787.158495][ T5828] usb 5-1: Using ep0 maxpacket: 32 [ 787.163035][ T5828] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 137, changing to 11 [ 787.167174][ T5828] usb 5-1: config 1 interface 0 has no altsetting 0 [ 787.179766][ T5828] usb 5-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.40 [ 787.183108][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.185775][ T5828] usb 5-1: Product: syz [ 787.189567][ T5828] usb 5-1: Manufacturer: syz [ 787.191682][ T5828] usb 5-1: SerialNumber: syz [ 787.328651][ T6029] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 787.481541][ T6029] usb 9-1: config 0 has no interfaces? [ 787.491762][ T6029] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 787.494831][ T6029] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.497404][ T6029] usb 9-1: Product: syz [ 787.505042][ T6029] usb 9-1: Manufacturer: syz [ 787.506940][ T6029] usb 9-1: SerialNumber: syz [ 787.510898][ T6029] usb 9-1: config 0 descriptor?? [ 787.557423][ T5300] Bluetooth: hci4: unknown advertising packet type: 0x75 [ 787.557487][ T5300] Bluetooth: hci4: Dropping invalid advertising data [ 787.566576][ T5300] Bluetooth: hci4: unknown advertising packet type: 0x40 [ 787.566598][ T5300] Bluetooth: hci4: Malformed LE Event: 0x02 [ 787.754570][ T5828] usbhid 5-1:1.0: can't add hid device: -22 [ 787.758868][ T5828] usbhid 5-1:1.0: probe with driver usbhid failed with error -22 [ 787.772587][ T5828] usb 5-1: USB disconnect, device number 40 [ 787.836742][T18203] veth0_macvtap: left promiscuous mode [ 787.931096][T18203] veth0_macvtap: entered promiscuous mode [ 787.945504][ T39] usb 9-1: USB disconnect, device number 16 [ 788.061371][T18217] /dev/nullb0: Can't open blockdev [ 788.522061][T18219] nbd: illegal input index -1495182229 [ 788.619396][T11625] veth0_macvtap: left promiscuous mode [ 789.007931][T18227] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 789.010334][T18227] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 789.024731][T18227] vhci_hcd vhci_hcd.0: Device attached [ 789.055460][T18227] random: crng reseeded on system resumption [ 789.365915][T18235] lo speed is unknown, defaulting to 1000 [ 789.370065][T18235] wlan0 speed is unknown, defaulting to 1000 [ 789.498640][T13895] usb 46-1: SetAddress Request (13) to port 0 [ 789.500824][T13895] usb 46-1: new SuperSpeed USB device number 13 using vhci_hcd [ 789.820187][T18226] can0: slcan on ttyS3. [ 789.890732][T18226] can0 (unregistered): slcan off ttyS3. [ 790.096461][ T5300] Bluetooth: hci2: command 0x041b tx timeout [ 790.184050][T18242] syzkaller0: entered promiscuous mode [ 790.217668][T18242] syzkaller0: entered allmulticast mode [ 790.227151][T18242] tc action pedit offset must be on 32 bit boundaries [ 790.334976][T18229] vhci_hcd: connection reset by peer [ 790.342174][T11625] vhci_hcd vhci_hcd.4: stop threads [ 790.344496][T11625] vhci_hcd vhci_hcd.4: release socket [ 790.346926][T11625] vhci_hcd vhci_hcd.4: disconnect device [ 790.438650][ T6176] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 790.457903][T18248] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 790.598478][ T6176] usb 5-1: Using ep0 maxpacket: 32 [ 790.613731][ T6176] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 790.617876][ T6176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.622428][ T6176] usb 5-1: Product: syz [ 790.624636][ T6176] usb 5-1: Manufacturer: syz [ 790.627417][ T6176] usb 5-1: SerialNumber: syz [ 790.639117][ T6176] usb 5-1: config 0 descriptor?? [ 790.645593][ T6176] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 790.650643][ T6176] dvb-usb: bulk message failed: -22 (4/0) [ 790.653467][ T6176] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 790.657952][ T6176] dvb-usb: bulk message failed: -22 (5/0) [ 790.661063][ T6176] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 790.669899][ T6176] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 790.674509][ T6176] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 790.678292][ T6176] usb 5-1: media controller created [ 790.694098][ T6176] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 790.711208][ T6176] usb 5-1: selecting invalid altsetting 3 [ 790.714035][ T6176] ttusb2: set interface to alts=3 failed [ 790.779325][ T6176] DVB: Unable to find symbol tda10086_attach() [ 790.782821][ T6176] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 790.787192][ T6176] dvb-usb: bulk message failed: -22 (4/0) [ 790.796748][ T6176] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 790.803340][ T6176] dvb-usb: bulk message failed: -22 (5/0) [ 790.805886][ T6176] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 790.813583][ T6176] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 790.845890][T18243] dvb-usb: bulk message failed: -22 (7/0) [ 790.850016][T18243] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 790.870012][T18243] ttusb2: i2c transfer failed. [ 791.268592][T17328] Bluetooth: hci1: command 0x0405 tx timeout [ 791.590865][ T29] usb 40-1: device descriptor read/8, error -110 [ 791.683136][T18261] lo speed is unknown, defaulting to 1000 [ 791.685837][T18261] wlan0 speed is unknown, defaulting to 1000 [ 791.715058][T18259] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 791.717512][T18259] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 791.721720][T18259] vhci_hcd vhci_hcd.0: Device attached [ 791.968674][T14759] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 792.140554][T14759] usb 6-1: config 0 has no interfaces? [ 792.146763][T14759] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 792.154047][T14759] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.157093][T14759] usb 6-1: Product: syz [ 792.162307][T14759] usb 6-1: Manufacturer: syz [ 792.164215][T14759] usb 6-1: SerialNumber: syz [ 792.168786][T14759] usb 6-1: config 0 descriptor?? [ 792.330129][ T29] usb usb40-port1: attempt power cycle [ 792.377593][T18262] vhci_hcd: connection closed [ 792.378061][T11625] vhci_hcd vhci_hcd.4: stop threads [ 792.386799][T11625] vhci_hcd vhci_hcd.4: release socket [ 792.395389][T11625] vhci_hcd vhci_hcd.4: disconnect device [ 792.447626][T18261] veth0_macvtap: left promiscuous mode [ 792.613793][T18261] veth0_macvtap: entered promiscuous mode [ 792.645150][ T24] usb 6-1: USB disconnect, device number 50 [ 792.989164][ T29] usb usb40-port1: unable to enumerate USB device [ 793.377591][T18276] /dev/nullb0: Can't open blockdev [ 793.383473][T18275] hfsplus: unable to find HFS+ superblock [ 793.413953][T18275] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 793.645133][T11625] veth0_macvtap: left promiscuous mode [ 794.264011][ T24] usb 5-1: USB disconnect, device number 41 [ 794.292474][ T24] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 794.303304][T18282] /dev/nullb0: Can't open blockdev [ 794.574160][T13895] usb 46-1: device descriptor read/8, error -110 [ 795.551268][T13895] usb usb46-port1: attempt power cycle [ 795.758432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 796.168922][T13895] usb usb46-port1: unable to enumerate USB device [ 796.208021][T18333] siw: device registration error -23 [ 796.230511][T18333] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 796.882846][T18345] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input119 [ 796.896835][T18338] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3029'. [ 798.251521][T18345] lo speed is unknown, defaulting to 1000 [ 798.254136][T18345] wlan0 speed is unknown, defaulting to 1000 [ 798.355507][T18360] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3035'. [ 798.914341][T18376] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3036'. [ 798.976478][T14759] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 799.138905][T14759] usb 6-1: Using ep0 maxpacket: 8 [ 799.144587][T14759] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 799.147825][T14759] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 799.157975][T14759] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 799.161826][T14759] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 799.165920][T14759] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 799.169116][T14759] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.441658][T14759] usb 6-1: usb_control_msg returned -71 [ 799.443549][T14759] usbtmc 6-1:16.0: can't read capabilities [ 799.468803][T14759] usb 6-1: USB disconnect, device number 51 [ 800.059404][T18414] /dev/nullb0: Can't open blockdev [ 800.167191][T18415] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 800.169587][T18415] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 800.173258][T18415] vhci_hcd vhci_hcd.0: Device attached [ 800.205008][T18415] random: crng reseeded on system resumption [ 800.458797][T13895] usb 38-1: SetAddress Request (31) to port 0 [ 800.460889][T13895] usb 38-1: new SuperSpeed USB device number 31 using vhci_hcd [ 800.578259][T18416] vhci_hcd: connection reset by peer [ 800.586023][T11625] vhci_hcd vhci_hcd.0: stop threads [ 800.590185][T11625] vhci_hcd vhci_hcd.0: release socket [ 800.595446][T11625] vhci_hcd vhci_hcd.0: disconnect device [ 800.866227][T18431] Invalid logical block size (65023) [ 800.883421][T18429] macvlan2: entered promiscuous mode [ 800.885398][T18429] macvlan2: entered allmulticast mode [ 800.887978][T18429] bond1: entered promiscuous mode [ 800.890754][T18429] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 800.903392][T18429] bond1: left promiscuous mode [ 801.023539][T18435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3056'. [ 801.125661][ T40] audit: type=1326 audit(801.008:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18441 comm="syz.1.3060" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f33f6c code=0x0 [ 801.208669][T18448] binder: 18446:18448 ioctl c0285840 0 returned -22 [ 802.489699][T18476] [ 802.490909][T18476] ====================================================== [ 802.493999][T18476] WARNING: possible circular locking dependency detected [ 802.497064][T18476] syzkaller #0 Tainted: G L [ 802.499705][T18476] ------------------------------------------------------ [ 802.501876][T18476] syz.1.3070/18476 is trying to acquire lock: [ 802.503804][T18476] ffff88801caf4220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 802.507552][T18476] [ 802.507552][T18476] but task is already holding lock: [ 802.510975][T18476] ffff888026f0b990 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 802.514529][T18476] [ 802.514529][T18476] which lock already depends on the new lock. [ 802.514529][T18476] [ 802.518583][T18476] [ 802.518583][T18476] the existing dependency chain (in reverse order) is: [ 802.522320][T18476] [ 802.522320][T18476] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 802.526053][T18476] blk_alloc_queue+0x610/0x790 [ 802.528480][T18476] blk_mq_alloc_queue+0x174/0x290 [ 802.531049][T18476] __blk_mq_alloc_disk+0x29/0x120 [ 802.533865][T18476] loop_add+0x498/0xb60 [ 802.535997][T18476] loop_init+0x1d3/0x200 [ 802.538289][T18476] do_one_initcall+0x11d/0x760 [ 802.540518][T18476] kernel_init_freeable+0x6e5/0x7a0 [ 802.542994][T18476] kernel_init+0x1f/0x1e0 [ 802.545063][T18476] ret_from_fork+0x754/0xd80 [ 802.547336][T18476] ret_from_fork_asm+0x1a/0x30 [ 802.549685][T18476] [ 802.549685][T18476] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 802.553102][T18476] fs_reclaim_acquire+0xc4/0x100 [ 802.555571][T18476] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 802.558069][T18476] __kernfs_iattrs+0x126/0x400 [ 802.560326][T18476] __kernfs_setattr+0x4d/0x3c0 [ 802.562544][T18476] kernfs_iop_setattr+0xda/0x130 [ 802.564803][T18476] notify_change+0xb25/0x1330 [ 802.566542][T18476] do_truncate+0x1df/0x240 [ 802.568211][T18476] path_openat+0x2a55/0x31a0 [ 802.570454][T18476] do_file_open+0x20e/0x430 [ 802.572594][T18476] do_sys_openat2+0x10d/0x1e0 [ 802.574290][T18476] __x64_sys_openat+0x12d/0x210 [ 802.576063][T18476] do_syscall_64+0x106/0xf80 [ 802.577687][T18476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.580162][T18476] [ 802.580162][T18476] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 802.583417][T18476] __lock_acquire+0x14b8/0x2630 [ 802.585217][T18476] lock_acquire+0x1cf/0x380 [ 802.586924][T18476] down_read+0x99/0x460 [ 802.588587][T18476] kernfs_iop_getattr+0x9c/0xf0 [ 802.590961][T18476] vfs_getattr_nosec+0x2d4/0x430 [ 802.593314][T18476] vfs_getattr+0x4a/0x60 [ 802.595517][T18476] loop_query_min_dio_size.isra.0+0x117/0x250 [ 802.598268][T18476] lo_ioctl+0x13aa/0x1bc0 [ 802.599980][T18476] lo_compat_ioctl+0xf3/0x160 [ 802.601821][T18476] compat_blkdev_ioctl+0x682/0x7b0 [ 802.604341][T18476] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 802.607094][T18476] __do_fast_syscall_32+0xe3/0x8c0 [ 802.609556][T18476] do_fast_syscall_32+0x32/0x70 [ 802.611847][T18476] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 802.614704][T18476] [ 802.614704][T18476] other info that might help us debug this: [ 802.614704][T18476] [ 802.619275][T18476] Chain exists of: [ 802.619275][T18476] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 802.619275][T18476] [ 802.625368][T18476] Possible unsafe locking scenario: [ 802.625368][T18476] [ 802.628458][T18476] CPU0 CPU1 [ 802.630717][T18476] ---- ---- [ 802.633087][T18476] lock(&q->q_usage_counter(io)#24); [ 802.635735][T18476] lock(fs_reclaim); [ 802.638616][T18476] lock(&q->q_usage_counter(io)#24); [ 802.641926][T18476] rlock(&root->kernfs_iattr_rwsem); [ 802.644207][T18476] [ 802.644207][T18476] *** DEADLOCK *** [ 802.644207][T18476] [ 802.647730][T18476] 3 locks held by syz.1.3070/18476: [ 802.650602][T18476] #0: ffff888027108448 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 802.655278][T18476] #1: ffff888026f0b990 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 802.660166][T18476] #2: ffff888026f0b9c8 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 802.665185][T18476] [ 802.665185][T18476] stack backtrace: [ 802.667664][T18476] CPU: 3 UID: 0 PID: 18476 Comm: syz.1.3070 Tainted: G L syzkaller #0 PREEMPT(full) [ 802.667687][T18476] Tainted: [L]=SOFTLOCKUP [ 802.667693][T18476] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 802.667702][T18476] Call Trace: [ 802.667709][T18476] [ 802.667715][T18476] dump_stack_lvl+0x100/0x190 [ 802.667740][T18476] print_circular_bug.cold+0x178/0x1c7 [ 802.667765][T18476] check_noncircular+0x146/0x160 [ 802.667784][T18476] __lock_acquire+0x14b8/0x2630 [ 802.667801][T18476] lock_acquire+0x1cf/0x380 [ 802.667814][T18476] ? kernfs_iop_getattr+0x9c/0xf0 [ 802.667831][T18476] ? __pfx___might_resched+0x10/0x10 [ 802.667852][T18476] down_read+0x99/0x460 [ 802.667866][T18476] ? kernfs_iop_getattr+0x9c/0xf0 [ 802.667881][T18476] ? find_held_lock+0x2b/0x80 [ 802.667892][T18476] ? __pfx_down_read+0x10/0x10 [ 802.667907][T18476] ? kernfs_root+0xee/0x2a0 [ 802.667925][T18476] kernfs_iop_getattr+0x9c/0xf0 [ 802.667943][T18476] vfs_getattr_nosec+0x2d4/0x430 [ 802.667956][T18476] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 802.667972][T18476] vfs_getattr+0x4a/0x60 [ 802.667983][T18476] loop_query_min_dio_size.isra.0+0x117/0x250 [ 802.668002][T18476] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 802.668025][T18476] lo_ioctl+0x13aa/0x1bc0 [ 802.668044][T18476] ? __pfx_lo_ioctl+0x10/0x10 [ 802.668062][T18476] ? tomoyo_path_number_perm+0x46d/0x580 [ 802.668077][T18476] ? kasan_quarantine_put+0x104/0x240 [ 802.668100][T18476] ? blk_get_meta_cap+0xd4/0x6c0 [ 802.668116][T18476] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 802.668131][T18476] ? find_held_lock+0x2b/0x80 [ 802.668142][T18476] ? tomoyo_path_number_perm+0x28f/0x580 [ 802.668160][T18476] ? blkdev_common_ioctl+0x515/0x2ba0 [ 802.668179][T18476] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 802.668198][T18476] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 802.668211][T18476] ? do_vfs_ioctl+0x226/0x13e0 [ 802.668232][T18476] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 802.668250][T18476] lo_compat_ioctl+0xf3/0x160 [ 802.668268][T18476] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 802.668289][T18476] compat_blkdev_ioctl+0x682/0x7b0 [ 802.668307][T18476] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 802.668326][T18476] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 802.668348][T18476] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 802.668370][T18476] __do_fast_syscall_32+0xe3/0x8c0 [ 802.668383][T18476] do_fast_syscall_32+0x32/0x70 [ 802.668396][T18476] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 802.668410][T18476] RIP: 0023:0xf7f33f6c [ 802.668420][T18476] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 802.668431][T18476] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 802.668444][T18476] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c06 [ 802.668450][T18476] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 802.668457][T18476] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 802.668463][T18476] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 802.668469][T18476] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 802.668482][T18476] [ 805.518525][T13895] usb 38-1: device descriptor read/8, error -110 [ 805.909411][T13895] usb usb38-port1: attempt power cycle [ 806.478987][T13895] usb usb38-port1: unable to enumerate USB device [ 810.558683][T17328] Bluetooth: hci4: command 0x0406 tx timeout