last executing test programs: 1m43.853395025s ago: executing program 3 (id=1162): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x401, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x9b, 0x79}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002fa0000102509888840000102030109022d0001010ea0020904000001030102050921d6970501222a0c09058103009ef8d376c4cf12090502030004030405000000"], &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x311, 0xf, 0xff, 0x2, 0x40, 0x10}, 0x21, &(0x7f0000000100)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x8, 0xff00, 0xa, [0xff600f, 0xff00, 0x0, 0x6000]}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3409}}]}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)) futex$unlock_wake_list32(&(0x7f0000002940)=0xfffffffe, 0x601, 0x200, 0x0, &(0x7f00000029c0)=0xfd, 0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)) shutdown(r4, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000140)={0x2000200b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0xc0844123, &(0x7f00000001c0)) r5 = syz_open_dev$vim2m(&(0x7f0000000240), 0xa4d1, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f0000000800)={0x5, 0x100, 0x4, {0x1, @vbi={0x9d, 0x5, 0x3, 0x3831354f, [0x4, 0x6], [0x7, 0x6], 0x1}}, 0x4b1}) 1m40.531311262s ago: executing program 3 (id=1192): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="19020000000000000000000000000000850000002a000000180100002020702500000000002020207b1af9ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000950000000000000070723abb634de14affc5548455969e909e1b69731498c502f11a1aa6f6a17a6580c33c80ae77af37063fac6347a1fbceb5fd37dae3e51888e2ec070ef8c986356b5192b87386ad30a200f925099a8756bd76e827cbb34924cab9b322000cda4309"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000100)=""/93, 0x5d, 0x327) 1m40.308526919s ago: executing program 3 (id=1195): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, 0x0, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r1, 0x0, 0x0, 0x122, 0x0, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x2, 0x2}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) 1m39.496986813s ago: executing program 0 (id=1203): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="19020000000000000000000000000000850000002a000000180100002020702500000000002020207b1af9ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000950000000000000070723abb634de14affc5548455969e909e1b69731498c502f11a1aa6f6a17a6580c33c80ae77af37063fac6347a1fbceb5fd37dae3e51888e2ec070ef8c986356b5192b87386ad30a200f925099a8756bd76e827cbb34924cab9b322000cda4309"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000100)=""/93, 0x5d, 0x327) 1m39.096078417s ago: executing program 3 (id=1204): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0xc000, &(0x7f0000000240)={[{@uuid_on}], [{@dont_measure}, {@fsuuid={'fsuuid', 0x3d, {[0xf2, 0xe50db4b6506f6752, 0x35, 0x32, 0x39, 0x61, 0x35, 0x34], 0x2d, [0x38, 0x38, 0x65, 0x64], 0x2d, [0x33, 0x6, 0x64, 0x52], 0x2d, [0x36, 0x65, 0x37, 0x30], 0x2d, [0x53, 0x38, 0x31, 0x32, 0x32, 0x63, 0x31, 0x38]}}}]}) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x6b0ac9633503c2a7) r5 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) syz_fuse_handle_req(r1, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x10000, {0x3, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x40004, {0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x218180, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r7, 0x0, 0x3, 0x0, &(0x7f0000000a00)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x11000000) write$proc_mixer(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="4d49430a494741494e202753796e74682043617074757265205377697460dcd8fdfbd1e7f120d2436368"], 0x3c) close(r6) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x10815, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffd}}, 0x50) link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00') syz_fuse_handle_req(r1, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d64000d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af78b49b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc21d2648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e09001af8bff5c81a581d35d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c177554be8c4925dacb5764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda2d42527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aeeb3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0f00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd03e5b04bfdb61f5e169b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf2828a6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e500", 0x2000, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0xffffffffffffffda, 0x96, {0x5, 0x0, 0x0, 0x5, 0x3, 0x550, {0xfffffffffffffffe, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff77, 0x0, 0x0, 0xffffffff, 0xc000, 0xfffffffc, 0x0, 0x0, 0x14}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0x7, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180064a7e7080eabde89ddaf40000000911117000000000095000000000000007616649718f056b3f83dff61a20ac53f700140780d4e65b91b03a09fb5738da949364eaf63219f048301c1aa"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) close_range(r0, 0xffffffffffffffff, 0x0) 1m39.046390743s ago: executing program 0 (id=1205): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1, 0x2}) (async, rerun: 32) open_by_handle_at(r1, &(0x7f0000000040)=@xfs={0x18, 0x81, {0x6, 0x1934, 0xffffffffffffff81, 0x5}}, 0x40080) (async, rerun: 32) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) (async, rerun: 64) ioctl$PPPIOCSPASS(r0, 0x40087447, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) (rerun: 64) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="00010021100007000000000000000000fe8800000000000000000000000000012001000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000bb000000002b000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000a0000ff0000000014000e00fe8000000000000000000000000000bb"], 0x100}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1m39.045948718s ago: executing program 0 (id=1206): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@v={0x93, 0x0, 0x80, 0x6, @MIDI_NOTEON=@special, 0x60, 0x3}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) pwritev(r4, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = openat$cdrom(0xffffff9c, &(0x7f0000000400), 0x80, 0x0) ioctl$CDROMREADTOCENTRY(r6, 0x5306, &(0x7f0000000440)={0x48, 0x6, 0xd, 0x3, @msf={0x8, 0x3, 0x6}, 0x9}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@getchain={0x6c, 0x66, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0x1}, {0x4, 0xd}, {0xfff3, 0x2}}, [{0x8, 0xb, 0x80}, {0x8, 0xb, 0x533a}, {0x8, 0xb, 0x28}, {0x8, 0xb, 0x10101}, {0x8, 0xb, 0x543}, {0x8, 0xb, 0x6d}, {0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xf86a}]}, 0x6c}}, 0x840) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r7, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6100000000103afffe8000000000000000000000000004aa000000000000000000000186009078002d060099090000325900000000000000"], 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(0xffffffffffffffff, r8, 0xfffffffffffffc01, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f00000019c0)={&(0x7f00000009c0)=[0x9, 0x8, 0x8, 0x2, 0x5, 0x5, 0x4c56, 0x2b3, 0x5, 0x10000, 0x2, 0x8, 0x1, 0x6, 0x9, 0x3, 0x2, 0x4, 0x8, 0x1, 0x1ff, 0x3, 0x2, 0x90000, 0x81, 0x5, 0x5, 0x200, 0x4, 0x1, 0x7, 0x0, 0xd8e2, 0x9, 0x2, 0x0, 0x8, 0x1d4, 0x9, 0x4, 0xf, 0x3, 0x3, 0x2, 0xfffffffc, 0x9, 0x7fff, 0x5, 0x5, 0x2, 0x0, 0x8, 0x990, 0x2, 0x0, 0x9, 0xa43, 0x8, 0x9, 0xffffffd4, 0x5ee, 0x3, 0x8, 0x81, 0x7, 0x6, 0x4, 0xffffffff, 0x993, 0x9, 0x8, 0x6, 0x1, 0x4b, 0x7, 0x101, 0x3, 0x7fffffff, 0x1, 0x1, 0xe, 0x4, 0x2, 0x0, 0x7, 0x800, 0x5, 0x6, 0x3, 0x9, 0x7, 0xc, 0x5, 0x9, 0x89c2, 0x9, 0x1, 0xa2cc, 0x1000, 0x7, 0x3, 0x800, 0x10, 0x3, 0xfff, 0x1, 0xe7c9, 0x6, 0x6, 0x10, 0x7, 0x51, 0x4, 0xa, 0xfe2, 0x9, 0x4, 0x2, 0x4, 0x3, 0x9, 0x0, 0x401, 0xdd7, 0x3, 0x3, 0x6, 0x10000, 0x7fffffff, 0xc, 0x5, 0x60002, 0x9, 0xffffffff, 0x17, 0x40, 0x7, 0x5, 0x58c, 0xf, 0xffff9a9a, 0x3, 0x3, 0x80000000, 0x6, 0x6, 0x31b1, 0x5b, 0x1, 0x949, 0x6, 0x5, 0xfffffff7, 0x7, 0x8000, 0x100, 0x3, 0x10001, 0x100007, 0xf1, 0xba2d, 0x6, 0x4, 0xff, 0x3, 0x7f2, 0x3, 0x5, 0x0, 0x7, 0x5, 0x15, 0x3, 0x4, 0x6, 0xe, 0x0, 0x7, 0x2, 0x4, 0x6, 0x20, 0x10, 0xa9d, 0x2, 0x8, 0xc096, 0x0, 0x611c, 0x10003, 0x0, 0x40, 0x1008, 0x800, 0x7, 0x80000000, 0x1, 0x5, 0x6, 0x208, 0x0, 0x8, 0x1, 0x10, 0x8f, 0x0, 0x8, 0xf5, 0x1, 0x8000, 0x6, 0x39c7, 0xb3, 0x800, 0x101, 0x6, 0x6dfb, 0x3, 0x4, 0xfff, 0x3a2, 0x800016bf, 0x1, 0x9, 0x7, 0x6, 0x4, 0x0, 0xb, 0x4, 0x0, 0x1, 0x8a, 0x3, 0x0, 0x0, 0x2, 0x80000000, 0x8, 0x1, 0x1, 0xffffffff, 0x80, 0x6, 0x9, 0x3ec, 0x80000001, 0x7, 0x9, 0x5, 0x6, 0x6, 0x0, 0x6, 0x40, 0x10000, 0x4, 0xff, 0x0, 0x9, 0x6, 0x6, 0x0, 0x4, 0x2, 0x5, 0x3, 0xfffffffa, 0x1f07, 0xa, 0x0, 0x3, 0x39, 0x2, 0x40, 0x1000, 0x5, 0x22a4, 0x2, 0x49, 0x8, 0x13d3, 0x1c00, 0x9, 0x101, 0x9, 0x0, 0x0, 0x8, 0x9, 0x5, 0x0, 0x37565859, 0x6, 0x40, 0x20, 0x5, 0x6, 0x1, 0x4, 0x0, 0x63eb, 0x5, 0x3, 0x7, 0x9, 0x97ca, 0x6, 0x8, 0x400, 0x1, 0x6, 0x5, 0x0, 0x0, 0x4, 0x3, 0x1, 0x2, 0x3, 0x4, 0x1, 0x1, 0x3, 0x8, 0xfff, 0x5, 0xfffffffa, 0x8, 0x7fff, 0x9, 0x401, 0x50, 0x2, 0x1ff, 0x9, 0x9, 0x7fff, 0x7, 0xa, 0x5, 0x5b4281db, 0x4, 0x3ff, 0x5436, 0xd93, 0x31292e42, 0x9, 0x8, 0x9, 0x2f, 0x2, 0x200, 0x200, 0x2ae, 0x7, 0x8, 0x7fffffff, 0x7, 0x2, 0x7, 0xe, 0x1, 0x0, 0x3, 0x7, 0x6, 0x92, 0x80000000, 0x0, 0x5, 0x9, 0x8, 0x3, 0x8, 0x5, 0xeaa, 0x3c0be1b5, 0x5, 0x7, 0x3, 0x2, 0x4, 0xfaf, 0x3, 0x6, 0x40, 0x3, 0x8, 0x8, 0x4, 0x3, 0x3, 0x4, 0x2, 0xea, 0x5, 0x3, 0x401, 0x970e, 0x8001, 0xb, 0x9, 0x673, 0x10001, 0x3, 0x3, 0xc00000, 0x31c2, 0x0, 0x2, 0x80, 0x36f7, 0x8, 0xffff, 0x544e9669, 0xc, 0x6, 0x2, 0x4, 0xae4f, 0x1, 0x4, 0x0, 0x6f47, 0x5, 0x9ffb, 0x1ee, 0x1, 0xc153, 0x2, 0x3ff, 0x6, 0x7, 0xdda, 0x9, 0x8, 0x20000001, 0x0, 0x8000, 0x3, 0x1, 0xf1, 0x1, 0x12df, 0x3, 0x2, 0x1680, 0x1, 0x183, 0x1, 0x9, 0xec, 0x5, 0xd8, 0x1, 0x0, 0xf877, 0xffff, 0x2c3e, 0x8000000, 0x0, 0x2, 0x8, 0x40, 0x9, 0xfffffffd, 0x8, 0x81, 0x7fffffff, 0x3, 0x5, 0x101, 0x1, 0x7, 0xff, 0xfffffff8, 0x9e7, 0x81, 0xe, 0x3, 0x2, 0x3, 0x0, 0xfffffff4, 0xfffffff9, 0x147, 0xa12, 0x10000, 0x10, 0x3, 0x1000, 0x8, 0x52e1bca6, 0x9, 0x8e, 0xc, 0x1, 0x6, 0x10001, 0x9, 0xb, 0x7, 0xffbc, 0x200, 0x1, 0x40, 0x2, 0x7, 0x1, 0x4, 0x6, 0x8, 0xc, 0x5, 0x0, 0xfffffff7, 0x5, 0xf9c, 0x2, 0xa, 0x7, 0xdccc, 0x9fe, 0x2, 0x80, 0x401, 0xf5e, 0x0, 0x9, 0x7, 0x1, 0x2, 0x6, 0x2, 0x7, 0xc, 0x3ff, 0xf, 0x3, 0x0, 0x8000, 0x5, 0x200, 0x8001, 0x6, 0x101, 0x7fffffff, 0x1, 0x1, 0xffff60e1, 0x0, 0x5, 0xffffffff, 0x6, 0x0, 0x5cdf, 0x40000000, 0x1000, 0x8006, 0xc, 0x9, 0x0, 0x3, 0x1, 0xd7, 0x2, 0x9, 0x9, 0xf, 0x4, 0x9, 0x62, 0x6, 0xebf4, 0xb4, 0x0, 0xffffffff, 0xfffffffb, 0xd1ab, 0x226, 0x5, 0x1, 0x1, 0x10, 0x4, 0x5, 0x8, 0xf2, 0x9, 0x43, 0xdfb, 0x1b, 0x3ff, 0x6, 0xfffffffb, 0x10000, 0x1, 0x8ed, 0x4, 0x10000, 0x3, 0x1ff, 0x3, 0xfc000000, 0xfffffff8, 0x0, 0x7, 0xe, 0x7, 0x0, 0x7, 0x3087, 0x0, 0x0, 0x9, 0x2, 0xe, 0x2, 0xb35, 0x9, 0x1, 0xfffffffc, 0x6, 0xfffffff7, 0x995e, 0x5de, 0x8, 0x8, 0xfffffff8, 0x6, 0x6, 0x10001, 0x3, 0x5, 0xba97, 0x2, 0x8, 0x8, 0xfffffff9, 0x7, 0x4, 0x3, 0x0, 0x5, 0x9, 0x7, 0x79, 0x1, 0x3, 0x4, 0x8, 0x5, 0x302, 0xb3, 0x3, 0x0, 0x80000001, 0xe, 0x8, 0xfffffff2, 0x3, 0x7fff, 0x0, 0x35, 0x4, 0x8, 0x80000000, 0xc49d, 0x3, 0x3, 0x8, 0x55, 0x3, 0x9, 0x6, 0x3, 0x2, 0x81, 0x400, 0xc0, 0xfff, 0x80000001, 0x9, 0x7, 0x1, 0x8000, 0xf165, 0x2, 0x4, 0x4, 0x2, 0x101, 0x9, 0x2, 0xc, 0x5, 0x7, 0x7fff, 0x8, 0x8, 0x6, 0x5, 0x1, 0x1, 0x28, 0xfffffffc, 0x4, 0x2, 0x720, 0xfffffffa, 0x80000000, 0xc20, 0x2, 0x3, 0x6, 0x4, 0x8, 0x3, 0x2, 0xae4a, 0x0, 0x0, 0x6, 0x0, 0x1, 0x401, 0x9, 0x2b, 0x9, 0x7ff, 0xfffff000, 0xffff, 0x401, 0x3, 0x5, 0x6, 0x9, 0xdb, 0xfffffff1, 0x4, 0x1, 0x8512, 0x0, 0x9, 0x10001, 0xfada, 0x762aa50f, 0x7fff, 0x7, 0x1, 0xc3, 0x9, 0x44b9, 0x9, 0x81, 0x1000, 0x0, 0x5c1bd4bd, 0x436e00, 0x3, 0x1, 0x1, 0x1, 0x3, 0x0, 0xfffffffa, 0x4, 0x81, 0xd0ac, 0x2, 0x2, 0x5, 0x100, 0x100, 0x7, 0x7, 0x7, 0x2, 0x101, 0x0, 0x2, 0xe, 0x2, 0x61d, 0x9, 0x1, 0x1, 0x1, 0x8, 0x100, 0x80, 0x2, 0x9, 0x0, 0x2, 0x3, 0xfffffffa, 0x1, 0x3e6, 0x2, 0x250, 0x81, 0x2, 0xa, 0x36, 0x6, 0x4, 0x1, 0x0, 0x8, 0x7fffffff, 0x2, 0x9, 0xb, 0x8, 0x7, 0x3, 0x9, 0x0, 0xdda, 0x80000000, 0x5, 0xbe1, 0xfffffe00, 0xc98d0000, 0x2219e34e, 0x9, 0x1000, 0x2, 0x9, 0x8001, 0x1052, 0x9, 0x4, 0x79f, 0x8, 0x2, 0x3, 0x5, 0x6, 0x2, 0x6, 0x8, 0x100, 0xc00, 0xe, 0x4, 0x6, 0x78, 0x6, 0x2, 0x7, 0x8001, 0x4, 0x8, 0x377, 0x7f, 0x6, 0x1, 0x8, 0xbe3, 0x4, 0xf, 0x5, 0x401, 0x6, 0x3c000, 0x1, 0x2b5, 0x3, 0xce, 0x1f2, 0xe8b3, 0x1000, 0x2, 0x2, 0x9, 0xd6c2, 0x7, 0x350, 0x1, 0x7, 0x4, 0x7, 0x0, 0xfa62, 0x5, 0x28d7, 0x8, 0x4, 0x3, 0x8, 0x81, 0x3ff, 0xfff, 0xf6, 0xfffffff8, 0x1ff, 0x4795, 0x0, 0xd, 0x40, 0x1, 0x0, 0x9, 0x5e6, 0x400, 0x6, 0xc, 0x5, 0x4, 0x0, 0x40, 0x9ded, 0x6, 0x2, 0xe, 0xac, 0x81, 0xd94, 0xdf, 0x2, 0x5, 0x200, 0x80, 0x8, 0x3, 0x2, 0x5b, 0x3f6, 0x7fff, 0x3, 0x1, 0x6, 0x9, 0x1, 0x0, 0x3, 0x800, 0xfffffffb, 0x10000, 0x1000, 0xfffff771, 0x5, 0x1, 0x3, 0xd, 0x7, 0xfffffffe, 0x6, 0x8000, 0x8, 0x3, 0x7, 0x8, 0x57a8, 0x5, 0x0, 0x0, 0x0, 0x9, 0x8, 0x4, 0x8, 0x1, 0x2, 0x7, 0x5, 0x7, 0x6, 0x7, 0xff, 0x4, 0x80000001, 0x9, 0xb6, 0x2, 0x8, 0x6, 0xe000, 0x7001, 0x4, 0x81, 0x2, 0x6, 0x7, 0x2, 0x4, 0x7, 0x1, 0x6fc, 0x10, 0x5, 0x2, 0xfad, 0x4, 0x1, 0x7, 0x1, 0x55f4, 0x9, 0x10000, 0x0, 0x100, 0x9, 0x7fc, 0xfffffff7, 0x3, 0x3, 0x2, 0x4dd, 0x0, 0x6, 0x7, 0x5, 0x1, 0x4, 0x1000, 0x9, 0x2229, 0x7, 0x6, 0xffffffff], 0x4, 0x400, 0x1}) mkdirat(0xffffffffffffff9c, 0x0, 0x100) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1m38.843128726s ago: executing program 3 (id=1207): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000100)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='stm32g0-typec 0x', 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16, @ANYBLOB="0100d8000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a"], 0x184}}, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setns(0xc9, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newroute={0x60, 0x18, 0x401, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x1}, [@RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2}}, @RTA_OIF={0x8, 0x4, 0x2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x1c, 0x1, {0x0, 0x2, 0x1, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}]}, 0x60}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newroute={0x38, 0x18, 0x401, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x3}, [@RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2}}, @RTA_OIF={0x8, 0x4, 0x2}]}, 0x38}}, 0x0) sendmsg$inet(r2, 0x0, 0x400c804) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006"], 0xd0}}, 0x571f68543cec8180) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x194, r7, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd4, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77ad40c5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x334ddd95}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x538511fb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b1adce3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fcff094}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbe42b30}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6773dc7a}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7cca6f75}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x7c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5964167}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32d41a1f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x378d7ef0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3fcd13d2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}]}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) r8 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) prlimit64(r8, 0x0, &(0x7f0000000380)={0x800, 0x100008b}, 0x0) 1m38.715789912s ago: executing program 0 (id=1208): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672ba2600fb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a310000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000ffff27bd7074f1dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="170c03000000000014001280090001007663616e0000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff2}, {0xffff, 0xffff}, {0x1, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_emit_ethernet(0x50, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c20000f0aaaaaaaaaa348100000086dd60910100001611fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e22001690780203000000030000004400000000"], 0x0) 1m38.715167857s ago: executing program 3 (id=1210): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000001d80), r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x60040000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10001, 0xe, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000006000000850000004f00000085000000d000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) preadv(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x300100, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x6, 'sit0\x00', {0x2}, 0x4}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}]}}}]}, 0x38}}, 0x20004000) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r7 = fcntl$dupfd(r3, 0x406, r3) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x48890) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r7, &(0x7f0000000000)=ANY=[], 0xfffffd0a) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}}, 0x804) syz_emit_ethernet(0x32, &(0x7f0000000000)={@broadcast, @multicast, @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x1, 0x0, 0x2}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @random="ba1aed2bd9ca", @multicast1, @broadcast, @rand_addr=0x64010101}}}}, 0x0) 1m38.466175561s ago: executing program 0 (id=1216): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendto(r0, 0x0, 0x0, 0x5, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0xfffffffffffff001, 0x100000001, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x6, 0x6a], 0xeeee8000, 0x300092}) ioctl$KVM_RUN(r3, 0xae80, 0x0) fanotify_init(0xf00, 0x0) openat$null(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x0) r4 = epoll_create1(0x80000) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140)={0xe000200c}) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105c45b24fd", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r6, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000000)={0x2, 0x1, 0x3, 0x2, 0x4}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 1m38.386925032s ago: executing program 0 (id=1219): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) bpf$PROG_LOAD(0x26, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x26, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x6000000d}) (async) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x6000000d}) write$P9_RATTACH(r4, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x80}}, 0x14) (async) write$P9_RATTACH(r4, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x80}}, 0x14) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 1m23.342409307s ago: executing program 32 (id=1219): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) bpf$PROG_LOAD(0x26, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x26, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x6000000d}) (async) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x6000000d}) write$P9_RATTACH(r4, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x80}}, 0x14) (async) write$P9_RATTACH(r4, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x80}}, 0x14) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 1m23.305843197s ago: executing program 33 (id=1210): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000001d80), r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x60040000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10001, 0xe, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000006000000850000004f00000085000000d000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) preadv(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x300100, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x6, 'sit0\x00', {0x2}, 0x4}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}]}}}]}, 0x38}}, 0x20004000) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r7 = fcntl$dupfd(r3, 0x406, r3) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x48890) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r7, &(0x7f0000000000)=ANY=[], 0xfffffd0a) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}}, 0x804) syz_emit_ethernet(0x32, &(0x7f0000000000)={@broadcast, @multicast, @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x1, 0x0, 0x2}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @random="ba1aed2bd9ca", @multicast1, @broadcast, @rand_addr=0x64010101}}}}, 0x0) 38.756214585s ago: executing program 4 (id=1759): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x702, 0xff9f, 0x0, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 38.75586332s ago: executing program 4 (id=1760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672ba2600fb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a310000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff2}, {0xffff, 0xffff}, {0x1, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_emit_ethernet(0x50, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c20000f0aaaaaaaaaa348100000086dd60910100001611fffe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e22001690780203000000030000004400000000"], 0x0) 38.665152456s ago: executing program 4 (id=1763): madvise(&(0x7f000000f000/0x4000)=nil, 0x4000, 0xa) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newtaction={0x190, 0x30, 0x1, 0x0, 0x0, {}, [{0x17c, 0x1, [@m_tunnel_key={0x178, 0x1f, 0x0, 0x0, {{0xf}, {0x68, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x0, 0x4, 0x5}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2f}}]}, {0xe4, 0x6, "722b4aae6aedf22065797135534687e7c7712ea6a8452eb4d707408f6e098483a52521935df384df1a83a8cd267ca28660d33fc5660808d59e7c385c3c42a72162549acbaa89407ce7e67528655cb7f8c424cc52c4243a89e63565d30caecf92da45f1306c299c8f629f3cdd61a6ecdeda6bcb00eb0f6add334eabe4a64d2d6523245d91e8d3c36175c90a738e595b6bd81751621984878e9bcc89c89566ad569101f29b620f90d7d73ca42d0f5ba70e2b1fbb1f2ae53f9530d8777b053e61c1f0a980245a7e6518ee4ed6d77ba55470ab9e5f988f46ae7d60d19d92ad9b8031"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x190}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000100)={0x20002004}) epoll_pwait2(0xffffffffffffffff, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000080)={0x8000004}) 38.335087798s ago: executing program 5 (id=1767): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) keyctl$clear(0x11, 0xfffffffffffffffd) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz0\x00', {0x0, 0x0, 0x0, 0xf}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xa9, 0x0, 0x1, 0x0, 0x7ff, 0x80, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x4, 0xfffffffd, 0x800, 0x9262, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1000, 0x401f, 0x0, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfd5], [0x0, 0xfffffff6, 0x0, 0x20000004, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x80000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x6, 0x82, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x6, 0x6, 0x0, 0x5], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0xffffffff, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x3, 0x0, 0xffffffdc, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0xe58b, 0xfffffff9, 0x0, 0x3, 0x0, 0x4, 0x1ff]}, 0x45c) listen(0xffffffffffffffff, 0xa) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/22], 0x48) sendfile(r2, r2, 0x0, 0x1ffffc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa0042, 0x0) ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x486, 0x0, 0x7}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) 37.701989294s ago: executing program 4 (id=1768): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', 0x0, 0x0, 0x0) (async) mount(0x0, &(0x7f0000000340)='./sys\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x246101, 0x0) (async) r0 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x246101, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) (async) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x40000000}) syz_ublk_add_dev(r3, r4, r5, r6, 0x0, 0x0) (async) syz_ublk_add_dev(r3, r4, r5, r6, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000080)={0xe, 0xffffffffffffffff, 0x0, {0x8fff, 0x4}}, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 36.681733357s ago: executing program 4 (id=1770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4400000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000000c0005"], 0x44}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0x2, 0x4, 0x7, 0x6, 0xfffffffe, 0xcd}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000200)={0xfc, {"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", 0xffffffffffffff07}}, 0x1006) close(0xffffffffffffffff) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = dup3(r6, r7, 0x0) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/tracing/instances/A\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x483, 0x0, 0x1fffffffff7fffd}]}) 36.111831642s ago: executing program 4 (id=1772): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000009b000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0xfffffffffffffff5, r3, {0x7, 0x9, 0x40, 0x31008003, 0xfffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}}, 0x50) r5 = openat$audio1(0xffffff9c, &(0x7f0000002280), 0x34840, 0x0) ioctl$SOUND_PCM_READ_BITS(r5, 0x80045005, &(0x7f00000022c0)) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) syz_open_procfs(r4, &(0x7f0000002380)='net/mcfilter\x00') r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r7, r8, 0x0, 0x20fffe82) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, r9, 0x6}}, 0x48) fremovexattr(r0, &(0x7f0000000180)=@random={'user.', '\x00'}) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 35.74304372s ago: executing program 5 (id=1776): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x800, 0x20000002, 0x202}, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000980)=0x0) syz_io_uring_submit(0x0, r2, r3, &(0x7f00000004c0)=@IORING_OP_SYMLINKAT={0x26, 0x54, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00'}) syz_ublk_add_dev(r1, 0x0, r2, r3, &(0x7f00000000c0)={0x2e, 0x9, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x1, 0xe8d, 0x0, 0x0, 0x1000, 0x1}}}, &(0x7f0000000180)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) socket$tipc(0x1e, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@local}) personality(0x4100001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r9 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) dup2(r9, r8) ppoll(&(0x7f0000000140)=[{r7, 0x8002}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) preadv2(r4, &(0x7f0000003a80)=[{&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/84, 0x54}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/70, 0x46}, {&(0x7f00000037c0)=""/3, 0x3}, {&(0x7f0000003800)=""/214, 0xd6}, {&(0x7f0000003900)=""/184, 0xb8}, {&(0x7f00000039c0)=""/152, 0x98}], 0x9, 0x3, 0x6, 0x8) dup2(r6, r7) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r5, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x98, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xc5a, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4000000, 0x0, 0x0, 0x8000000, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0xb624, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r5, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r5, 0x7af, &(0x7f00000002c0)={@my=0x1, 0x3}) accept4(r4, &(0x7f0000000300)=@l2tp={0x2, 0x0, @local}, &(0x7f0000000380)=0x80, 0x0) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x62201) r10 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000500)={'bond0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x4a, 0x9, 0x38, 0x5, 0xa, 0xc, 0x7, 0x5, 0x3, 0xe0, 0x68, 0x2, 0x9, 0x3, 0x2, 0xc, [0x7, 0x10000]}}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) 34.412356998s ago: executing program 5 (id=1780): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012080000000076657468"], 0x48}}, 0x4000000) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8005}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@deltfilter={0x58, 0x2d, 0x10, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xd, 0x8}, {0xffff, 0x3}, {0x4}}, [@filter_kind_options=@f_matchall={{0xd}, {0x24, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xb}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff1, 0xfff2}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xc}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xffff}}]}}]}, 0x58}}, 0x4040004) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000591b00224e0000", 0x58}], 0x1) socket(0x10, 0x803, 0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) io_pgetevents(0x0, 0x7, 0x4, &(0x7f0000000500)=[{}, {}, {}, {}], &(0x7f0000000580)={0x0, 0x989680}, &(0x7f0000000600)={&(0x7f00000005c0)={[0x7, 0x10001]}, 0x8}) read$dsp(0xffffffffffffffff, &(0x7f0000000200)=""/6, 0x6) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0xff1) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) dup3(r6, r5, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) syz_socket_connect_nvme_tcp() ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)) syz_open_dev$media(0x0, 0x4, 0x10000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 34.328715905s ago: executing program 5 (id=1781): r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000000000, &(0x7f0000006680)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002680)={0x20, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2125099, 0x0) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 34.084347024s ago: executing program 5 (id=1782): lsm_set_self_attr(0x66, &(0x7f0000000e40)=ANY=[], 0x20, 0x0) (fail_nth: 5) 33.943150152s ago: executing program 5 (id=1784): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000540)=0x189d, 0x1a) (async) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000040)=0x4, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0x13, r2, 0xfffffffffffffffc, &(0x7f00000003c0)) (async) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}, 0xb393}], 0x1, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000040)={0x5, 0x0, 0x2, 0xfffffbff, 0x1b, "bab652d7c744545eecc0a21621e26ad070462e"}) syz_emit_ethernet(0x2b, &(0x7f0000000280)=ANY=[], 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000003700)='\x00'/17, 0x11}], 0x1, &(0x7f0000000080)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x40}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff3]}, 0x8, 0x80000) ppoll(&(0x7f0000000180)=[{r4, 0x2005}], 0x1, 0x0, 0x0, 0x0) (async) read$alg(r3, &(0x7f0000000400)=""/8704, 0x2200) 33.857151046s ago: executing program 34 (id=1784): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000540)=0x189d, 0x1a) (async) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000040)=0x4, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0x13, r2, 0xfffffffffffffffc, &(0x7f00000003c0)) (async) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}, 0xb393}], 0x1, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000040)={0x5, 0x0, 0x2, 0xfffffbff, 0x1b, "bab652d7c744545eecc0a21621e26ad070462e"}) syz_emit_ethernet(0x2b, &(0x7f0000000280)=ANY=[], 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000003700)='\x00'/17, 0x11}], 0x1, &(0x7f0000000080)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x40}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff3]}, 0x8, 0x80000) ppoll(&(0x7f0000000180)=[{r4, 0x2005}], 0x1, 0x0, 0x0, 0x0) (async) read$alg(r3, &(0x7f0000000400)=""/8704, 0x2200) 21.040497272s ago: executing program 35 (id=1772): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000009b000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0xfffffffffffffff5, r3, {0x7, 0x9, 0x40, 0x31008003, 0xfffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}}, 0x50) r5 = openat$audio1(0xffffff9c, &(0x7f0000002280), 0x34840, 0x0) ioctl$SOUND_PCM_READ_BITS(r5, 0x80045005, &(0x7f00000022c0)) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) syz_open_procfs(r4, &(0x7f0000002380)='net/mcfilter\x00') r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r7, r8, 0x0, 0x20fffe82) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, r9, 0x6}}, 0x48) fremovexattr(r0, &(0x7f0000000180)=@random={'user.', '\x00'}) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 2.90837548s ago: executing program 1 (id=1986): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x98, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xc5a, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4000000, 0x0, 0x0, 0x8000000, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0xb624, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f00000002c0)={@my=0x1, 0x3}) 2.867602364s ago: executing program 1 (id=1988): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = timerfd_create(0x0, 0x800) syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x1, &(0x7f0000000100)=""/32, &(0x7f0000000140)=0x20) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000280)={0x1f, 0xfffffffffffffffe, 0xe, 0x400, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000280)=""/79, 0x4f) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000004c0)={0x0, @private, @loopback}, 0x0) socket$alg(0x26, 0x5, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) timerfd_settime(r3, 0x3, &(0x7f0000000200), 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.919026356s ago: executing program 1 (id=1991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = io_uring_setup(0x1d4c, &(0x7f0000000140)={0x0, 0x64b13e, 0x80, 0x6, 0x58}) fanotify_init(0x1a, 0x800) syz_open_dev$video(&(0x7f00000001c0), 0x7, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x6, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x4f8f1592, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x0, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x45, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x3, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x2000, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.491838161s ago: executing program 6 (id=1994): r0 = openat$cuse(0xffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="270000000300000000000000000000000100000000000000ffff"], 0x27) bpf$MAP_CREATE_RINGBUF(0x0, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xe) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0460986d0510219b5d50d0230fdd1e482f7e1f39b76bb49900"/35], 0xe) 1.475439997s ago: executing program 1 (id=1995): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="19020000000000000000000000000000850000002a000000180100002020702500000000002020207b1af9ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000950000000000000070723abb634de14affc5548455969e909e1b69731498c502f11a1aa6f6a17a6580c33c80ae77af37063fac6347a1fbceb5fd37dae3e51888e2ec070ef8c986356b5192b87386ad30a200f925099a8756bd76e827cbb34924cab9b322000cda4309"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x7, 0x0, &(0x7f0000000380)="e0b9547ed387db", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000100)=""/93, 0x5d, 0x327) 1.472302418s ago: executing program 2 (id=1996): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) sendmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000700)=@qipcrtr={0x2a, 0x2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="4f04", 0x2}], 0x1}}], 0x1, 0x0) (fail_nth: 4) 1.228507671s ago: executing program 6 (id=1997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672ba2600fb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a310000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000080) syz_emit_ethernet(0x50, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c20000f0aaaaaaaaaa348100000086dd609101000016"], 0x0) 1.226826461s ago: executing program 2 (id=1998): madvise(&(0x7f000000f000/0x4000)=nil, 0x4000, 0xa) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newtaction={0x190, 0x30, 0x1, 0x0, 0x0, {}, [{0x17c, 0x1, [@m_tunnel_key={0x178, 0x1f, 0x0, 0x0, {{0xf}, {0x68, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x0, 0x4, 0x5}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2f}}]}, {0xe3, 0x6, "722b4aae6aedf22065797135534687e7c7712ea6a8452eb4d707408f6e098483a52521935df384df1a83a8cd267ca28660d33fc5660808d59e7c385c3c42a72162549acbaa89407ce7e67528655cb7f8c424cc52c4243a89e63565d30caecf92da45f1306c299c8f629f3cdd61a6ecdeda6bcb00eb0f6add334eabe4a64d2d6523245d91e8d3c36175c90a738e595b6bd81751621984878e9bcc89c89566ad569101f29b620f90d7d73ca42d0f5ba70e2b1fbb1f2ae53f9530d8777b053e61c1f0a980245a7e6518ee4ed6d77ba55470ab9e5f988f46ae7d60d19d92ad9b80"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x190}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r5, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/85, 0x55}, {&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000001700)=""/4096, 0x1055}], 0x3}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x40019000}], 0x3, 0x2, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000100)={0x20002004}) epoll_pwait2(r7, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000080)={0x8000004}) 1.226418442s ago: executing program 1 (id=1999): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = timerfd_create(0x0, 0x800) syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x1, &(0x7f0000000100)=""/32, &(0x7f0000000140)=0x20) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000280)={0x1f, 0xfffffffffffffffe, 0xe, 0x400, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000280)=""/79, 0x4f) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000004c0)={0x0, @private, @loopback}, 0x0) socket$alg(0x26, 0x5, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) timerfd_settime(r3, 0x3, &(0x7f0000000200), 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.027823495s ago: executing program 6 (id=2000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) syz_open_dev$video(&(0x7f00000001c0), 0x7, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x6, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x4f8f1592, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x0, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x45, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x3, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x2000, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 802.414352ms ago: executing program 6 (id=2003): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xb, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0x4000015}, 0xc844) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$nci(r1, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001500), 0x0, 0xf73, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, 0x0, 0x0) (fail_nth: 4) 642.646035ms ago: executing program 7 (id=2004): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x40000008, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bind$llc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200900) syz_emit_vhci(0x0, 0x9) 545.725222ms ago: executing program 7 (id=2005): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x9}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) (async) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000], 0x80a0000, 0x45273d1cb4fa23e8}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket(0x2a, 0x2, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 32) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (rerun: 64) setns(0xc9, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_G_INPUT(r4, 0x80045626, &(0x7f0000000240)) r6 = dup(r5) (async) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f00000010c0)={0xb, {"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", 0x1000}}, 0x1006) (async) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r8) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x7852}}, './file0\x00'}) write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) 315.984976ms ago: executing program 2 (id=2006): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@setlink={0x20, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) syz_emit_ethernet(0x15, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2ffac000242ac110001000742420300"], 0x0) 315.612845ms ago: executing program 7 (id=2007): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x2, 0x5, 0x9}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000004c0)={r2, 0x0, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000003c0)={&(0x7f00000001c0)=[0x0, 0x0], 0x2, r4, r5, 0x3, 0x0, 0xffffffff, 0x100, {0xac80, 0x1, 0x3, 0x67, 0xb0b, 0x1, 0x2, 0x10, 0x12f, 0xe154, 0x1000, 0x0, 0xe7, 0xffffffff, "fe1db2003413000000000020b42717e47f0000000000000000000000ef000098"}}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000800)={0x0, 0x0, r4, r5, 0x84, 0x6, 0xd, 0x4, {0x6, 0x4, 0x8, 0x19f6, 0x3, 0x0, 0x3, 0x1, 0x8fb5, 0x5, 0xfff5, 0x1, 0x1, 0x6, "c0ea3aeb08b5eafd5ef8871782557f8b2ae537e332dd83be72506d2e5669e183"}}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0) add_key(&(0x7f0000000240)='.request_key_auth\x00', 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0e010410000002"], 0x11) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000140), 0xbd, 0x200100) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000000180)=""/79) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x8, 0xd, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x3, 0x4, 0x0, @multicast2, @multicast2}}}}) r8 = openat$autofs(0xffffff9c, &(0x7f0000000200), 0x80200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r10, 0x5420, &(0x7f0000000000)=0xf22) r11 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000180)=0x3) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00'}) 315.382199ms ago: executing program 6 (id=2008): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="19020000000000000000000000000000850000002a000000180100002020702500000000002020207b1af9ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000950000000000000070723abb634de14affc5548455969e909e1b69731498c502f11a1aa6f6a17a6580c33c80ae77af37063fac6347a1fbceb5fd37dae3e51888e2ec070ef8c986356b5192b87386ad30a200f925099a8756bd76e827cbb34924cab9b322000cda4309"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x7, 0x0, &(0x7f0000000380)="e0b9547ed387db", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000100)=""/93, 0x5d, 0x327) 288.082407ms ago: executing program 2 (id=2009): setresgid(0x0, 0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='rpc_pipefs\x00', &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x48002, 0x4) r1 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)=']\x00', &(0x7f0000000240)='match_busid\x00', 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x210c00) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xf6ers\x00\xcc\xfa\xf2:\xc4\x0ec\xd7\xfb\xed\x93v\xa1>\xc3fT7\xad\x0f\xb0\xd5\xcb\xd0]\xd9x\f\xec\xb2\xffk@\xe8`\xf6\xce5\xdb\x1c\x95\x99E\x82\xce9L\xe06D\x14v\xc5\xb9\xef\x0er\x10\xf0#\x8c\xeb\xa8\x9f\xd9wU\x9d6\a\xed,\xffY\xa4go\x1b\x81\xe1\x1e\xc2\xd9\xcavY%\b.\xfb\xbc\xc6\xa8\xa2\xe7\xc1y\xfd\x986f^A\xa2J\x8ar\x06\xbd\rw\xbe\xb9\xce2\x189N\xc0\x1a\x00\x9b0t6\xea\xdc\xcc\xc0\xf4`\xc5\xb0CM9\xde9wx]\xf6\xc2pk 6', &(0x7f0000000280)='M\t\xb0\xa2+\xd6\x9e\x8e\t\xa8\xf0x\f\x00\x00\x00\x00\x00\x00\xff\x7f\x00'/42, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) r2 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000e00)={0x0, 0x186a0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='match_busid\x00', 0x2, 0x0) write(r3, &(0x7f0000000140)='add 1-1\x00', 0x8) write(r3, &(0x7f0000000180)='del 1-1\x00', 0x8) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4}) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000002c0)=@userptr={0x0, 0xa, 0x4, 0x800, 0x2, {}, {0x1, 0x8, 0x6, 0x4, 0x8, 0x4, "d22d8395"}, 0x71f, 0x2, {0x0}, 0x4}) r5 = syz_io_uring_complete(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) setgroups(0x0, 0x0) setuid(0xee00) write$P9_RATTACH(r5, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x4, 0x0, 0x2}}, 0x14) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000008000/0x1000)=nil) 286.419268ms ago: executing program 1 (id=2010): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x8102, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000000)="10", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000140)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}, {0x300, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) 235.829298ms ago: executing program 7 (id=2011): madvise(&(0x7f000000f000/0x4000)=nil, 0x4000, 0xa) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)=0xe, 0x800) close_range(r0, r1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x20002004}) epoll_pwait2(r4, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000080)={0x8000004}) 101.966221ms ago: executing program 2 (id=2012): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x8, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)="39d295b4e2d80215a0b22cf18889c1128fe7891cea52d74bae3924dc19169051b8a6b8d0881a45259471c1eba1c594c087e88ec6cb8dc618a322201d5f7a7be8dcbf28874b00554b4b87d218da91d7c1c23583b69326779e56a39895ba168054439587f7b9b07f74e4145bd428a80b817518dfd4f7d1599dadb4be6db78efa222d8c", 0x1a) 101.667543ms ago: executing program 7 (id=2013): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = io_uring_setup(0x1d4c, &(0x7f0000000140)={0x0, 0x64b13e, 0x80, 0x6, 0x58}) syz_open_dev$video(&(0x7f00000001c0), 0x7, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x6, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x4f8f1592, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x0, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x45, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x3, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x2000, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 45.297388ms ago: executing program 2 (id=2014): madvise(&(0x7f000000f000/0x4000)=nil, 0x4000, 0xa) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x20002004}) epoll_pwait2(r3, &(0x7f00000001c0)=[{}], 0xfc, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000080)={0x8000004}) 25.106085ms ago: executing program 7 (id=2015): syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800081800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 0s ago: executing program 6 (id=2016): r0 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r0, 0x4068aea3, &(0x7f0000000040)={0x80, 0x0, 0x6}) (async) r1 = epoll_create1(0x0) (async) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f00000000c0)) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x1406, 0x10, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x10}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000051) (async) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz1\x00', {0x3, 0x2, 0x8, 0x1}, 0x49, [0x6, 0x9, 0x3b, 0x9, 0x83, 0x9, 0x1, 0xc8a1, 0xffff, 0x9, 0xbf, 0x9, 0x101, 0x4, 0xc, 0x8001, 0xfff, 0x8, 0x5, 0x37, 0xc11, 0xffffffff, 0x10000, 0xfffff000, 0x0, 0x7, 0x7, 0xfffffffa, 0x0, 0x0, 0x2, 0xb, 0x101, 0xfffffffb, 0x0, 0x7ff, 0x1, 0x8, 0x4, 0x7, 0x9, 0xfffffff7, 0x3, 0x8, 0x3, 0x1, 0x35f7, 0x2000000, 0x7f8e1fa, 0x0, 0xc133, 0x80, 0x400080, 0x29, 0x0, 0x3, 0x8, 0x1, 0xa5c, 0x3, 0x8000, 0x0, 0xc, 0xfffffff1], [0x3, 0xffffffff, 0x0, 0x3353, 0x1ab, 0x2, 0x2, 0x0, 0x1, 0x5, 0x6, 0xffff, 0x0, 0x3, 0xfff, 0x5, 0xffffffff, 0x4, 0x4, 0x2, 0xc, 0x7, 0x7ff, 0x80000001, 0x9, 0x4, 0x40, 0x3ff, 0x12, 0xffffffff, 0xfffffff9, 0x800, 0x7fffffff, 0xffffffff, 0x5, 0xffffffff, 0x8001, 0xfffffff8, 0x6, 0xb83, 0x4dc, 0x8, 0x7fffffff, 0x0, 0x3, 0x3ff, 0x2, 0x1000, 0x9, 0x3d12, 0x5, 0x7fffffff, 0x6, 0x3, 0x6, 0x0, 0x2, 0x5, 0x8, 0x401, 0x5, 0x7, 0x2, 0x80000000], [0xeab3, 0x7, 0x1, 0x5, 0x4, 0x3, 0x3, 0x2, 0xf, 0x9, 0x8b, 0xfffffffa, 0xfff, 0xd, 0x4, 0x94e, 0x5, 0x7fff, 0x60, 0xac, 0x7, 0x40, 0x1, 0x4, 0x6, 0x1, 0x7, 0x8000, 0x0, 0x1766, 0x2000000, 0x1, 0x80000001, 0x14, 0x1, 0x4, 0xff, 0x6, 0xe78, 0x2, 0x9, 0x1, 0xfffffffd, 0x2, 0x1, 0x1, 0x6, 0x6, 0x8, 0xc, 0x9, 0x10, 0x0, 0x101, 0x7, 0xfffffff7, 0x80000001, 0x3, 0x2, 0x3, 0x312030c8, 0xfffffff8, 0x1, 0xfffffff8], [0xfffc0000, 0x8, 0xa6, 0x425, 0x9, 0x5, 0x40, 0x5, 0xff, 0x70, 0x100, 0x9, 0xffffffff, 0x2, 0x4, 0x8, 0xf0000000, 0x80000000, 0x3, 0x7, 0x1, 0x9, 0x800, 0x3, 0x6, 0x4, 0xb714, 0x3, 0x200, 0x3, 0x8, 0x4, 0x337, 0x6, 0x2, 0x0, 0x80000000, 0x6, 0x5, 0xbf, 0x7fffffff, 0x10001, 0x5, 0x9, 0xac000000, 0xfffffff4, 0x3, 0x2d4f, 0x7ff, 0x1815, 0x10001, 0x6, 0x3, 0x7, 0x9, 0x2, 0x3, 0x5, 0x6, 0xcd, 0x101, 0x8, 0xf033, 0x3]}, 0x45c) (async) read$usbfs(r0, &(0x7f00000006c0)=""/194, 0xc2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = accept4(r2, &(0x7f00000007c0)=@alg, &(0x7f0000000840)=0x80, 0x800) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a80)={r0, 0x58, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r0, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)='%pi6 \x00'}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x8, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, [@jmp={0x5, 0x1, 0x9, 0x8, 0x7, 0x10, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000008c0)='GPL\x00', 0x5, 0xfa, &(0x7f0000000900)=""/250, 0x41000, 0x2, '\x00', r4, 0x25, r0, 0x8, &(0x7f0000000ac0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000b00)={0x5, 0x1, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000c00)=[0x1, r5, r0, r0], &(0x7f0000000c40)=[{0x3, 0x5, 0xc, 0x9}], 0x10, 0x7}, 0x94) (async, rerun: 64) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000d40)=0x7, 0xf, 0x3) (async, rerun: 64) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x18) r6 = syz_open_dev$vcsa(&(0x7f0000000d80), 0x9, 0x84000) ioctl$SIOCX25GCALLUSERDATA(r6, 0x89e4, &(0x7f0000000dc0)={0x4b, "2abeef772e904c5ba27f81d09e82320c4fb0b96f9f92d404024a123880f920c7b09f066d4290a237326c14043819807468aa1266f64ea820df5dd8268f362ed1d823e31bb69e87da92eded55407af305defa12cc9ee52941c7aa3d2a2da46b0d7594d8fb5f5a1855437dbe84a600f10784a396377f86e6c39ece92c07bce8e5e"}) (async) write$midi(r6, &(0x7f0000000e80)="daaa739c4256", 0x6) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f00), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x18, r7, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000001000)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'}) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r5, 0x40106e80, &(0x7f0000001040)={0x7}) (async) sendmsg$nl_generic(r9, &(0x7f0000001500)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x900}, 0xc, &(0x7f00000014c0)={&(0x7f00000010c0)={0x3f8, 0x28, 0x200, 0x70bd29, 0x25dfdbfd, {0x4}, [@typed={0x4, 0x12a}, @generic="d13a250d806b144971f6", @generic="543d0f7e686b80f1fb6d42c029960dd09894ca8755a87af61989bad8", @nested={0xa5, 0x116, 0x0, 0x1, [@nested={0x4, 0xde}, @nested={0x4, 0xc5}, @generic="4cc15a4953e79fadde6401d5daf502056ecef5c33eea2b664bfaa3790974a11cc2c23f2c71aa26cdd07e7e66f366525726ab12f25fd9e5f336eeba5ce759ba7d76136b729b65b30e65cb24097daf13a64f04beafc0babfd3c0704ace0d6455225821e6358fdd5ea55cea660d228223518337f360db47b9a308bc72d5ee7c9c3e9cf0aa1096fb8d9463875c8c45f23fa888b32a3502e784fee7"]}, @typed={0xc, 0xf3, 0x0, 0x0, @u64=0x401}, @generic="b9f1c3038c5aa926a7233663d5a850d4907a449b42523346d5300b1bb7b486a5cf4fc05114b681ecf55aa67fa9b7783e2eb0f56cf1168cd64cce3d6cd58efd48376c57672c1dc04475cdd0c5c698c4f661b58039870bd59991704bbd3b06f465169dc6116c45adcf6b8678712d828b54919492d1aaa735da58469b2f57df1917c690326881397ad75828da8fa9a8cc8ed31ac8707bf1d898ec406945ae92267bcc0844be676f618cb2dd086ec65b87", @generic="e275f05d356b6ee8279318d649c6f9f9fc3c844a0a07bff723d6d146980b5315bde162029a7613a239f48bc1289dccd0421842eae90577d9c25eb2bb8e9830a1c6065c2b62a1e05e28e1458a1fcc2ec32459fa6b4cbbc9978eb280d117e42ff1d1066c985eaa6742586db2a02cae90708f70e31717ad4829f8470ec1932ecbd3991ad48dc4c6475b7e5fc2dc0a68b618b24645e1f81fe722c5296c38ec4c8cb92813", @generic="93cb1f33d984c6243cf0ebbf5273ac195504a6babdb43e9e11b954ad4479d8c69fcbd8c9389bc4905bed265e192753222bf4e101738e183bf38041670faed3a969ad0c22d46e76c8b964cf77a6a1a975d350d18010dffb5380c51ff0e46c45d463618cd30b7334297cbabd8c0edc3b58d9e5775cc9afda9889f26aa4220955c9886db35e752ef7f2aafeb3efa2d598f055d2fbfcf47102d5930f6836f627a8b60e0ef489d60401bf4c47f15c85d91c9bac70edc37e049dac", @nested={0xf3, 0x71, 0x0, 0x1, [@generic="1ab10404080a440b388ba97555d08056bef4ab4e90d7be266b1c04469f73398d1c38f09775be64cebb1e18bc74c749b94e103fbff4349d936509826154e9dbb7e73444fde7a53e50bcb56d37465fb701820981d59ab4b6348702a5a6f3ee8610c271723ae46d6079a6c1fbfac4bbf9725772f01302be0ce3925030b32a6efa324ed7028c61735fd8a8942d6f181e367dd1e86d326c2a6ee509feb2764306449c8fbb17d360691e8c305d2919153fead9fe018dff89bb114c8e37b51116b01f80a7b4a9c8f25f1a24d3255c832c22b04842081efa86c5c5c6236a93ad31dd963c40aa86987da19b54269e65", @nested={0x4, 0x34}]}, @typed={0x8, 0x7e, 0x0, 0x0, @ipv4=@multicast1}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x8000}, 0x4080) (async) r10 = syz_open_dev$radio(&(0x7f0000001540), 0x3, 0x2) ioctl$BTRFS_IOC_BALANCE_CTL(r10, 0x40049421, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000015c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r9, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x28, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x3, 0x64}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40) (async) ioctl$sock_netdev_private(r9, 0x89fe, &(0x7f00000016c0)="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") (async) ioctl$USBDEVFS_ALLOW_SUSPEND(r8, 0x5522) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), r9) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000002800)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)={0x74, r12, 0x410, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x200, 0x6e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x8084}, 0x20040000) kernel console output (not intermixed with test programs): 044][T10987] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 236.013468][T10987] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 236.019760][T10987] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 236.022337][T10987] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 236.024884][T10987] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 236.027397][T10987] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 236.029949][T10987] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 236.032405][T10987] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 236.040752][T10987] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 236.043407][T10987] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 236.046583][T10987] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 236.049226][T10987] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 236.051809][T10987] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 236.054593][T10987] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 236.057754][T10987] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 236.060315][T10987] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 236.060621][ T5928] usb 10-1: USB disconnect, device number 11 [ 236.062926][T10987] usb 10-1: cannot submit urb 0, error -19: no device [ 236.067865][T10987] usb 10-1: cannot submit urb 0, error -19: no device [ 236.070284][T10987] usb 10-1: cannot submit urb 0, error -19: no device [ 236.099990][T11012] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 236.112080][T11012] block device autoloading is deprecated and will be removed. [ 236.678150][T11026] Set syz0 is full, maxelem 0 reached [ 237.476285][T11047] siw: device registration error -23 [ 237.745062][T11049] wg2 speed is unknown, defaulting to 1000 [ 238.197641][ T42] kauditd_printk_skb: 56 callbacks suppressed [ 238.197660][ T42] audit: type=1800 audit(1786885650.576:794): pid=11071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1549" name="driver_override" dev="sysfs" ino=2635 res=0 errno=0 [ 238.210728][ T42] audit: type=1800 audit(1786885650.586:795): pid=11071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1549" name="unbind" dev="sysfs" ino=6681 res=0 errno=0 [ 238.265962][ T42] audit: type=1800 audit(1786885650.646:796): pid=11072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1549" name="bind" dev="sysfs" ino=25298 res=0 errno=0 [ 238.337564][ T42] audit: type=1800 audit(1786885650.716:797): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=2603 res=0 errno=0 [ 238.379603][ T42] audit: type=1800 audit(1786885650.756:798): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 238.429566][ T42] audit: type=1800 audit(1786885650.796:799): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 238.445681][ T42] audit: type=1800 audit(1786885650.826:800): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=321080 res=0 errno=0 [ 238.493483][T11072] 0000:00:03.0 (uninitialized): Cannot find proper PCI device base address, aborting [ 238.538807][T11078] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1551'. [ 238.552586][ T42] audit: type=1800 audit(1786885650.926:801): pid=11078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1551" name="remove" dev="sysfs" ino=2467 res=0 errno=0 [ 238.603880][T11078] Console: switching to colour dummy device 80x25 [ 238.609787][ T42] audit: type=1800 audit(1786885650.986:802): pid=11079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1551" name="rescan" dev="sysfs" ino=820 res=0 errno=0 [ 238.734726][ T888] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 238.765959][ T42] audit: type=1800 audit(1786885651.146:803): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=2465 res=0 errno=0 [ 238.807283][T11079] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 238.849273][T11079] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 238.852619][T11079] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 238.855949][T11079] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 238.863106][T11079] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 238.877974][T11079] pci 0000:00:01.0: Adding to iommu group 1 [ 238.887842][ T888] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.893234][ T888] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.896653][T11079] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 238.898416][ T888] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 238.898477][T11081] 9pnet_virtio: no channels available for device c::: [ 238.900391][T11079] pci 0000:00:01.0: vgaarb: bridge control possible [ 238.900408][T11079] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 238.916930][ T888] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.922196][ T888] usb 10-1: Product: syz [ 238.924003][T11079] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 238.926089][ T888] usb 10-1: Manufacturer: syz [ 238.931703][ T888] usb 10-1: SerialNumber: syz [ 238.956162][T11079] pci 0000:00:01.0: BAR 2 [mem 0x80200000-0x80200fff]: assigned [ 238.961363][T11079] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 238.964210][ T888] cdc_mbim 10-1:1.0: skipping garbage [ 238.977245][T11079] [drm] Found bochs VGA, ID 0xb0c5. [ 238.979707][T11079] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80200000. [ 239.006658][T11079] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 239.021876][T11086] batman_adv: batadv0: Interface activated: dummy0 [ 239.025649][T11086] batadv0: mtu less than device minimum [ 239.029903][T11086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 239.036013][T11086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 239.040521][T11086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 239.046111][T11086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 239.051989][T11086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 239.056967][T11086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 239.062967][T11086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 239.064086][T11086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 239.081225][T11083] netlink: 456 bytes leftover after parsing attributes in process `syz.2.1554'. [ 239.150593][T11076] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 239.210292][T11079] Console: switching to colour frame buffer device 160x50 [ 239.289769][T11079] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 239.511611][T11111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1561'. [ 239.593963][T11117] overlayfs: missing 'lowerdir' [ 239.695540][T11121] vhci_hcd vhci_hcd.0: failed to lookup sock [ 239.810279][T11076] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 239.813137][ T888] cdc_mbim 10-1:1.0: setting tx_max = 16384 [ 239.832086][ T888] cdc_mbim 10-1:1.0: cdc-wdm0: USB WDM device [ 240.164525][ T5827] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 240.212518][T11151] overlayfs: failed to clone upperpath [ 240.294801][ T5827] usb 7-1: device descriptor read/64, error -71 [ 240.404593][ T888] wwan wwan0: port wwan0mbim0 attached [ 240.470126][ T888] cdc_mbim 10-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, ba:57:c2:25:a1:de [ 240.477602][ T888] usb 10-1: USB disconnect, device number 12 [ 240.480306][ T888] cdc_mbim 10-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 240.509948][T11157] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1577'. [ 240.534467][ T5827] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 240.555556][ T888] wwan wwan0: port wwan0mbim0 disconnected [ 240.662908][T11163] netlink: 'syz.5.1579': attribute type 10 has an invalid length. [ 240.667934][ T5827] usb 7-1: device descriptor read/64, error -71 [ 240.677444][T11163] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.690653][T11163] bond0: (slave team0): Enslaving as an active interface with an up link [ 240.774933][ T5827] usb usb7-port1: attempt power cycle [ 241.114399][ T5827] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 241.138348][T11174] wg2 speed is unknown, defaulting to 1000 [ 241.146073][ T5827] usb 7-1: device descriptor read/8, error -71 [ 241.384396][ T5827] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 241.405558][ T5827] usb 7-1: device descriptor read/8, error -71 [ 241.514989][ T5827] usb usb7-port1: unable to enumerate USB device [ 241.897289][T11199] fuse: fd is not a fuse device [ 242.356767][ T48] rpcbind: server 127.0.0.1 not responding, timed out [ 243.005683][T11218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1595'. [ 243.069032][T11226] netlink: 'syz.4.1603': attribute type 30 has an invalid length. [ 243.383929][T11234] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 244.012875][ T42] kauditd_printk_skb: 53 callbacks suppressed [ 244.012896][ T42] audit: type=1800 audit(1786885656.386:857): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 244.039379][ T42] audit: type=1800 audit(1786885656.416:858): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 244.065786][ T42] audit: type=1800 audit(1786885656.446:859): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 244.079288][ T42] audit: type=1800 audit(1786885656.456:860): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 244.167023][T11248] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 244.184627][T11248] CIFS: Attempting to mount //127.0.0.1/share [ 244.520776][T11260] tipc: Started in network mode [ 244.522937][T11260] tipc: Node identity ac14140f, cluster identity 4711 [ 244.527048][T11260] tipc: New replicast peer: 255.255.255.255 [ 244.529940][T11260] tipc: Enabled bearer , priority 10 [ 244.966005][T11248] CIFS: VFS: Error connecting to socket. Aborting operation. [ 244.968643][T11248] CIFS: VFS: cifs_mount failed w/return code = -4 [ 245.163323][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1607'. [ 245.171944][T11263] macsec1: entered promiscuous mode [ 245.173632][T11263] batadv0: entered promiscuous mode [ 245.175629][T11263] macsec1: entered allmulticast mode [ 245.177303][T11263] batadv0: entered allmulticast mode [ 245.180876][T11263] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 245.187381][T11263] batadv0: left allmulticast mode [ 245.189477][T11263] batadv0: left promiscuous mode [ 245.207645][ T42] audit: type=1800 audit(1786885657.586:861): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 245.226609][ T42] audit: type=1800 audit(1786885657.606:862): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 245.233220][T11266] net_ratelimit: 11 callbacks suppressed [ 245.233243][T11266] netlink: zone id is out of range [ 245.238378][T11266] netlink: zone id is out of range [ 245.240089][T11266] netlink: zone id is out of range [ 245.246260][T11266] netlink: zone id is out of range [ 245.271249][ T42] audit: type=1800 audit(1786885657.646:863): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=332075 res=0 errno=0 [ 245.291585][ T42] audit: type=1800 audit(1786885657.656:864): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=332085 res=0 errno=0 [ 245.317437][ T42] audit: type=1800 audit(1786885657.676:865): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 245.415849][ T42] audit: type=1800 audit(1786885657.786:866): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 245.418708][T11279] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1611'. [ 245.657675][ T852] tipc: Node number set to 2886997007 [ 245.690215][T11291] syz.2.1617: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 245.899357][T11300] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 245.902114][T11300] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 245.910783][T11300] vhci_hcd vhci_hcd.0: Device attached [ 246.174669][ T888] usb 46-1: SetAddress Request (2) to port 0 [ 246.176879][ T888] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 246.201797][T11311] 0000:00:03.0 (uninitialized): Cannot find proper PCI device base address, aborting [ 246.399573][T11301] vhci_hcd: connection reset by peer [ 246.402917][ T13] vhci_hcd vhci_hcd.4: stop threads [ 246.404609][ T13] vhci_hcd vhci_hcd.4: release socket [ 246.409255][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 247.003529][T11329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1623'. [ 247.076836][T11334] Set syz0 is full, maxelem 0 reached [ 247.107379][T11329] macsec1: entered promiscuous mode [ 247.109868][T11329] batadv0: entered promiscuous mode [ 247.112567][T11329] macsec1: entered allmulticast mode [ 247.115025][T11329] batadv0: entered allmulticast mode [ 247.121712][T11329] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 247.184531][T11342] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1629'. [ 247.205454][T11332] netlink: zone id is out of range [ 247.209280][T11332] netlink: zone id is out of range [ 247.211756][T11332] netlink: zone id is out of range [ 247.214280][T11332] netlink: zone id is out of range [ 247.236456][T11329] batadv0: left allmulticast mode [ 247.238288][T11329] batadv0: left promiscuous mode [ 247.494824][ T5928] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 247.658064][ T5928] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 247.673079][ T5928] usb 9-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 247.688816][ T5928] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 247.704808][ T5928] usb 9-1: config 0 interface 0 has no altsetting 0 [ 247.749593][ T5928] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 247.772283][ T5928] usb 9-1: Product: syz [ 247.779764][ T5928] usb 9-1: Manufacturer: syz [ 247.786406][ T5928] usb 9-1: SerialNumber: syz [ 247.899460][ T5928] usb 9-1: config 0 descriptor?? [ 247.927257][T11340] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 247.993308][ T5928] usb 9-1: selecting invalid altsetting 0 [ 248.196280][T11340] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 248.202271][T11340] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 248.206036][T11340] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 248.208658][T11340] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 248.211437][T11340] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 248.214061][T11340] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 248.217070][T11340] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 248.220070][T11340] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 248.227609][T11340] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 248.230225][T11340] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 248.232693][T11340] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 248.234275][T11350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1630'. [ 248.235619][T11340] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 248.240584][T11340] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 248.243163][T11340] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 248.246296][T11340] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 248.251832][ T5820] usb 9-1: USB disconnect, device number 2 [ 248.831867][T11401] overlayfs: failed to clone upperpath [ 249.058021][ T42] kauditd_printk_skb: 55 callbacks suppressed [ 249.058036][ T42] audit: type=1800 audit(1786885661.436:922): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 249.095192][ T42] audit: type=1800 audit(1786885661.476:923): pid=11417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1658" name="control" dev="sysfs" ino=5361 res=0 errno=0 [ 249.269075][ T42] audit: type=1800 audit(1786885661.646:924): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 249.483672][ T42] audit: type=1800 audit(1786885661.856:925): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 249.517715][ T42] audit: type=1800 audit(1786885661.896:926): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 249.641808][ T42] audit: type=1800 audit(1786885662.016:927): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=104243 res=0 errno=0 [ 249.647991][ T42] audit: type=1800 audit(1786885662.016:928): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=104247 res=0 errno=0 [ 249.654710][ T42] audit: type=1800 audit(1786885662.016:929): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=104251 res=0 errno=0 [ 249.661454][ T42] audit: type=1800 audit(1786885662.016:930): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=104250 res=0 errno=0 [ 249.830668][ T42] audit: type=1800 audit(1786885662.206:931): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=332545 res=0 errno=0 [ 249.835247][ T5928] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 249.985167][ T5928] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 249.988856][ T5928] usb 10-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 249.992455][ T5928] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 249.996220][ T5928] usb 10-1: config 0 interface 0 has no altsetting 0 [ 249.999941][ T5928] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 250.002623][ T5928] usb 10-1: Product: syz [ 250.003980][ T5928] usb 10-1: Manufacturer: syz [ 250.005788][ T5928] usb 10-1: SerialNumber: syz [ 250.013198][ T5928] usb 10-1: config 0 descriptor?? [ 250.015537][T11445] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 250.020392][ T5928] usb 10-1: selecting invalid altsetting 0 [ 250.134453][ T6155] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 250.221572][T11441] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 250.224239][T11441] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 250.227089][T11441] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 250.229743][T11441] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 250.232264][T11441] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 250.235091][T11441] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 250.238236][T11441] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 250.240875][T11441] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 250.243399][T11441] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 250.246144][T11441] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 250.249229][T11441] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 250.252241][T11441] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 250.255041][T11441] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 250.257709][T11441] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 250.260298][T11441] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 250.262875][T11441] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 250.265670][T11441] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 250.268822][T11441] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 250.271622][T11441] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 250.274440][ T41] usb 10-1: USB disconnect, device number 13 [ 250.275206][T11441] usb 10-1: cannot submit urb 0, error -19: no device [ 250.287230][ T6155] usb 9-1: device descriptor read/64, error -71 [ 250.534449][ T6155] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 250.664514][ T6155] usb 9-1: device descriptor read/64, error -71 [ 250.774604][ T6155] usb usb9-port1: attempt power cycle [ 251.114485][ T6155] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 251.154957][ T6155] usb 9-1: device descriptor read/8, error -71 [ 251.244482][ T888] usb 46-1: device descriptor read/8, error -110 [ 251.404415][ T6155] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 251.424930][ T6155] usb 9-1: device descriptor read/8, error -71 [ 251.545646][ T6155] usb usb9-port1: unable to enumerate USB device [ 251.610688][T11490] FAULT_INJECTION: forcing a failure. [ 251.610688][T11490] name failslab, interval 1, probability 0, space 0, times 0 [ 251.616036][T11490] CPU: 0 UID: 0 PID: 11490 Comm: syz.5.1675 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.616064][T11490] Tainted: [L]=SOFTLOCKUP [ 251.616071][T11490] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 251.616081][T11490] Call Trace: [ 251.616088][T11490] [ 251.616096][T11490] dump_stack_lvl+0x100/0x190 [ 251.616306][T11490] should_fail_ex.cold+0x5/0xa [ 251.616364][T11490] should_failslab+0xc2/0x120 [ 251.616423][T11490] kmem_cache_alloc_noprof+0x91/0x6a0 [ 251.616447][T11490] ? trace_kmem_cache_alloc+0xdd/0x100 [ 251.616472][T11490] ? security_file_alloc+0x34/0x2c0 [ 251.616555][T11490] security_file_alloc+0x34/0x2c0 [ 251.616578][T11490] init_file+0x95/0x480 [ 251.616616][T11490] alloc_empty_file+0x79/0x1c0 [ 251.616638][T11490] path_openat+0xe7/0x4280 [ 251.616655][T11490] ? kasan_save_track+0x14/0x30 [ 251.616677][T11490] ? __kasan_slab_alloc+0x89/0x90 [ 251.616698][T11490] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 251.616718][T11490] ? do_getname+0x35/0x390 [ 251.616738][T11490] ? do_sys_openat2+0xc7/0x1e0 [ 251.616758][T11490] ? __ia32_compat_sys_openat+0x12d/0x210 [ 251.616780][T11490] ? do_int80_emulation+0x14b/0x720 [ 251.616897][T11490] ? __pfx_path_openat+0x10/0x10 [ 251.616922][T11490] do_file_open+0x20e/0x430 [ 251.616939][T11490] ? __lock_acquire+0x49f/0x1a40 [ 251.616983][T11490] ? __pfx_do_file_open+0x10/0x10 [ 251.617015][T11490] ? _raw_spin_unlock+0x28/0x50 [ 251.617055][T11490] ? alloc_fd+0x471/0x7a0 [ 251.617083][T11490] do_sys_openat2+0x10f/0x1e0 [ 251.617106][T11490] ? __pfx_do_sys_openat2+0x10/0x10 [ 251.617129][T11490] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 251.617150][T11490] ? __fget_files+0x21f/0x3d0 [ 251.617172][T11490] __ia32_compat_sys_openat+0x12d/0x210 [ 251.617197][T11490] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 251.617221][T11490] ? ksys_write+0x1ac/0x250 [ 251.617246][T11490] do_int80_emulation+0x14b/0x720 [ 251.617271][T11490] asm_int80_emulation+0x1a/0x20 [ 251.617289][T11490] RIP: 0023:0xf71a74eb [ 251.617305][T11490] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 251.617322][T11490] RSP: 002b:00000000f54243cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 251.617350][T11490] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5424490 [ 251.617362][T11490] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 251.617372][T11490] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 251.617382][T11490] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 251.617391][T11490] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 251.617413][T11490] [ 251.675048][ T888] usb usb46-port1: attempt power cycle [ 251.734045][T11492] qrtr: Invalid version 0 [ 251.747976][T11492] syzkaller1: entered promiscuous mode [ 251.749733][T11492] syzkaller1: entered allmulticast mode [ 252.005890][T11505] comedi comedi0: ni_at_a2150: I/O base address not correctly aligned [ 252.288370][ T888] usb usb46-port1: unable to enumerate USB device [ 252.892545][T11524] overlayfs: failed to clone lowerpath [ 252.899369][T11524] overlayfs: failed to clone lowerpath [ 252.928408][T11511] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 252.940669][T11511] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 252.942613][T11511] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 252.946556][T11511] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 252.949915][T11511] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 252.956108][T11511] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 252.959326][T11528] netlink: 'syz.1.1687': attribute type 11 has an invalid length. [ 252.960256][T11511] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 252.968946][T11511] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 252.972292][T11511] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 253.051273][T11533] Cannot find del_set index 0 as target [ 253.125597][T11540] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 253.145720][T11540] 9pnet_fd: Insufficient options for proto=fd [ 253.229197][T11547] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1691'. [ 253.232178][T11547] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1691'. [ 253.235265][T11547] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1691'. [ 253.324553][ T5928] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 253.484411][ T5928] usb 9-1: Using ep0 maxpacket: 8 [ 253.486784][ T5928] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 253.490768][ T5928] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 253.493657][ T5928] usb 9-1: config 0 has no interface number 0 [ 253.495719][ T5928] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 253.499036][ T5928] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 253.502657][ T5928] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 253.506188][ T5928] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 253.510080][ T5928] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.518332][ T5928] usb 9-1: config 0 descriptor?? [ 253.526693][ T5928] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 253.770460][ T5928] usb 9-1: USB disconnect, device number 7 [ 253.780080][ T5928] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 253.943010][T11564] netlink: 'syz.5.1700': attribute type 11 has an invalid length. [ 254.194490][ T5748] Bluetooth: hci0: command 0x0c1a tx timeout [ 254.303427][ T42] kauditd_printk_skb: 54 callbacks suppressed [ 254.303440][ T42] audit: type=1800 audit(1786885666.676:986): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 254.350349][ T42] audit: type=1800 audit(1786885666.726:987): pid=11569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1701" name="UDC" dev="configfs" ino=30067 res=0 errno=0 [ 254.357088][T11569] Need at least one configuration in g1. [ 254.362330][ T42] audit: type=1800 audit(1786885666.726:988): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=333459 res=0 errno=0 [ 254.372643][T11569] udc dummy_udc.0: failed to start g1: -22 [ 254.380107][T11569] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 254.391789][T11569] UDC core: g1: couldn't find an available UDC or it's busy [ 254.489586][ T42] audit: type=1800 audit(1786885666.866:989): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 254.531828][ T42] audit: type=1800 audit(1786885666.906:990): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 254.554786][ T42] audit: type=1326 audit(1786885666.936:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11583 comm="syz.4.1707" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x0 [ 254.644419][ T42] audit: type=1800 audit(1786885667.016:992): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 254.932263][ T42] audit: type=1800 audit(1786885667.306:993): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 254.957833][ T42] audit: type=1800 audit(1786885667.336:994): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 254.994924][ T5748] Bluetooth: hci4: command 0x0c1a tx timeout [ 254.995131][ T5747] Bluetooth: hci3: command 0x0c1a tx timeout [ 254.996899][ T5737] Bluetooth: hci5: command 0x0c1a tx timeout [ 254.999008][ T5095] Bluetooth: hci1: command 0x0c1a tx timeout [ 255.238754][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.241007][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.246852][ T42] audit: type=1326 audit(1786885667.626:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11605 comm="syz.1.1714" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 255.484080][T11617] qrtr: Invalid version 0 [ 255.500282][T11617] syzkaller1: entered promiscuous mode [ 255.502060][T11617] syzkaller1: entered allmulticast mode [ 255.989088][T11629] openvswitch: netlink: IPv4 tunnel dst address is zero [ 256.114752][T11633] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 256.117473][T11633] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 256.120631][T11633] vhci_hcd vhci_hcd.0: Device attached [ 256.164785][ T192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.167327][ T192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.404573][ T6155] usb 48-1: SetAddress Request (2) to port 0 [ 256.408817][ T6155] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 256.483179][T11639] futex_wake_op: syz.1.1721 tries to shift op by 144; fix this program [ 256.721873][T11634] vhci_hcd: connection reset by peer [ 256.725350][ T13] vhci_hcd vhci_hcd.5: stop threads [ 256.729222][ T13] vhci_hcd vhci_hcd.5: release socket [ 256.734402][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 256.828237][T11650] MTD: Couldn't look up './dev/mtdblock0': -2 [ 257.075351][ T5095] Bluetooth: hci4: command 0x0c1a tx timeout [ 257.084482][ T5095] Bluetooth: hci5: command 0x0c1a tx timeout [ 257.377332][T11681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1727'. [ 257.691900][T11688] syz.5.1735: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 257.699251][ T192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.704521][T11688] CPU: 2 UID: 0 PID: 11688 Comm: syz.5.1735 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.704542][T11688] Tainted: [L]=SOFTLOCKUP [ 257.704546][T11688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 257.704553][T11688] Call Trace: [ 257.704558][T11688] [ 257.704563][T11688] dump_stack_lvl+0x100/0x190 [ 257.704730][T11688] warn_alloc.cold+0x94/0xa8 [ 257.704758][T11688] ? __pfx_warn_alloc+0x10/0x10 [ 257.704798][T11688] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 257.704893][T11688] ? __pfx_get_page_from_freelist+0x10/0x10 [ 257.704911][T11688] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 257.704933][T11688] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 257.704946][T11688] ? __lock_acquire+0x49f/0x1a40 [ 257.704994][T11688] ? __lock_acquire+0x49f/0x1a40 [ 257.705034][T11688] __folio_alloc_noprof+0x13/0x260 [ 257.705047][T11688] alloc_migration_target+0x1d7/0x6d0 [ 257.705075][T11688] migrate_pages_batch+0x5dc/0x45c0 [ 257.705093][T11688] ? __pfx_alloc_migration_target+0x10/0x10 [ 257.705111][T11688] ? do_raw_spin_lock+0x128/0x260 [ 257.705126][T11688] ? __pfx_migrate_pages_batch+0x10/0x10 [ 257.705141][T11688] ? __lock_acquire+0x49f/0x1a40 [ 257.705151][T11688] ? do_raw_spin_unlock+0x145/0x1e0 [ 257.705164][T11688] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 257.705177][T11688] ? rcu_is_watching+0x12/0xc0 [ 257.705197][T11688] ? trace_hrtimer_start+0x77/0x220 [ 257.705218][T11688] ? hrtimer_start_range_ns_common+0x78e/0x18b0 [ 257.705235][T11688] migrate_pages_sync+0x12c/0x880 [ 257.705252][T11688] ? __pfx_alloc_migration_target+0x10/0x10 [ 257.705271][T11688] ? __pfx_migrate_pages_sync+0x10/0x10 [ 257.705291][T11688] ? __lock_acquire+0x49f/0x1a40 [ 257.705300][T11688] ? __css_rstat_updated+0x1ce/0x5a0 [ 257.705326][T11688] migrate_pages+0x1a83/0x2850 [ 257.705344][T11688] ? __pfx_alloc_migration_target+0x10/0x10 [ 257.705363][T11688] ? find_held_lock+0x2b/0x80 [ 257.705377][T11688] ? __pfx_migrate_pages+0x10/0x10 [ 257.705394][T11688] ? __mod_zone_page_state+0xe2/0x190 [ 257.705413][T11688] ? lru_gen_update_size+0x431/0xe20 [ 257.705436][T11688] move_pages_and_store_status+0xf1/0x230 [ 257.705454][T11688] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 257.705473][T11688] ? kernel_move_pages+0xbfb/0x14a0 [ 257.705489][T11688] ? kernel_move_pages+0xbfb/0x14a0 [ 257.705508][T11688] kernel_move_pages+0xcf6/0x14a0 [ 257.705530][T11688] ? __pfx_kernel_move_pages+0x10/0x10 [ 257.705548][T11688] ? kcov_ioctl+0x17a/0x750 [ 257.705566][T11688] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 257.705580][T11688] ? kcov_ioctl+0x17a/0x750 [ 257.705596][T11688] __ia32_sys_move_pages+0xdd/0x1b0 [ 257.705606][T11688] ? __do_fast_syscall_32+0x98/0x970 [ 257.705621][T11688] ? lockdep_hardirqs_on+0x78/0x100 [ 257.705634][T11688] __do_fast_syscall_32+0xe7/0x970 [ 257.705650][T11688] do_fast_syscall_32+0x32/0x70 [ 257.705664][T11688] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 257.705679][T11688] RIP: 0023:0xf7fa3fec [ 257.705697][T11688] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 257.705710][T11688] RSP: 002b:00000000f544550c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 257.705722][T11688] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000002 [ 257.705728][T11688] RDX: 00000000800003c0 RSI: 00000000800004c0 RDI: 0000000080000700 [ 257.705735][T11688] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 257.705741][T11688] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 257.705747][T11688] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.705761][T11688] [ 257.705854][T11688] Mem-Info: [ 257.707165][ T192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.709446][T11688] active_anon:17526 inactive_anon:1829 isolated_anon:0 [ 257.709446][T11688] active_file:3816 inactive_file:23192 isolated_file:0 [ 257.709446][T11688] unevictable:1001 dirty:402 writeback:0 [ 257.709446][T11688] slab_reclaimable:7208 slab_unreclaimable:70440 [ 257.709446][T11688] mapped:40774 shmem:13973 pagetables:1334 [ 257.709446][T11688] sec_pagetables:299 bounce:0 [ 257.709446][T11688] kernel_misc_reclaimable:0 [ 257.709446][T11688] free:32270 free_pcp:233 free_cma:0 [ 257.852148][T11688] Node 0 active_anon:0kB inactive_anon:132kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:5660kB dirty:4kB writeback:0kB shmem:4kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8512kB pagetables:1716kB sec_pagetables:1104kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 257.863516][T11688] Node 1 active_anon:70204kB inactive_anon:7184kB active_file:15264kB inactive_file:92756kB unevictable:4004kB isolated(anon):0kB isolated(file):0kB mapped:146036kB dirty:1604kB writeback:0kB shmem:55988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6476kB pagetables:3620kB sec_pagetables:92kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 257.874650][T11688] Node 0 DMA free:2732kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 257.884498][T11688] lowmem_reserve[]: 0 280 280 280 280 [ 257.886293][T11688] Node 0 DMA32 free:28508kB boost:16384kB min:29156kB low:32348kB high:35540kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:132kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:4kB zspages:0kB present:1032196kB managed:286892kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 257.896055][T11688] lowmem_reserve[]: 0 0 0 0 0 [ 257.897647][T11688] Node 1 DMA32 free:91640kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:70204kB inactive_anon:7184kB active_file:15264kB inactive_file:92756kB unevictable:4004kB writepending:1604kB zspages:2444kB present:1048432kB managed:948212kB mlocked:4kB bounce:0kB free_pcp:7572kB local_pcp:5984kB free_cma:0kB [ 257.908103][T11688] lowmem_reserve[]: 0 0 0 0 0 [ 257.909729][T11688] Node 0 DMA: 125*4kB (U) 27*8kB (U) 6*16kB (U) 20*32kB (U) 4*64kB (U) 2*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2732kB [ 257.914094][T11688] Node 0 DMA32: 492*4kB (UME) 83*8kB (UME) 58*16kB (UME) 229*32kB (UME) 90*64kB (UME) 29*128kB (UME) 14*256kB (UME) 5*512kB (UM) 0*1024kB 1*2048kB (U) 0*4096kB = 28552kB [ 257.919634][T11688] Node 1 DMA32: 19*4kB (E) 309*8kB (UME) 172*16kB (UME) 190*32kB (UME) 214*64kB (UME) 121*128kB (UME) 51*256kB (UM) 10*512kB (UME) 6*1024kB (UME) 5*2048kB (M) 4*4096kB (UM) = 91508kB [ 257.925416][T11688] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 257.928441][T11688] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 257.932563][T11688] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 257.935762][T11688] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 257.938683][T11688] 42454 total pagecache pages [ 257.940163][T11688] 1447 pages in swap cache [ 257.941574][T11688] Free swap = 114868kB [ 257.942976][T11688] Total swap = 124996kB [ 257.944365][T11688] 524155 pages RAM [ 257.945601][T11688] 0 pages HighMem/MovableOnly [ 257.947099][T11688] 211539 pages reserved [ 257.948680][T11688] 0 pages cma reserved [ 258.520296][T11703] FAULT_INJECTION: forcing a failure. [ 258.520296][T11703] name failslab, interval 1, probability 0, space 0, times 0 [ 258.528009][T11703] CPU: 3 UID: 0 PID: 11703 Comm: syz.5.1742 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.528030][T11703] Tainted: [L]=SOFTLOCKUP [ 258.528034][T11703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 258.528041][T11703] Call Trace: [ 258.528045][T11703] [ 258.528050][T11703] dump_stack_lvl+0x100/0x190 [ 258.528080][T11703] should_fail_ex.cold+0x5/0xa [ 258.528101][T11703] should_failslab+0xc2/0x120 [ 258.528120][T11703] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 258.528134][T11703] ? kasan_save_stack+0x30/0x50 [ 258.528149][T11703] ? __d_alloc+0x35/0xa50 [ 258.528171][T11703] __d_alloc+0x35/0xa50 [ 258.528185][T11703] d_alloc_parallel+0x105/0x14b0 [ 258.528205][T11703] ? __pfx_d_alloc_parallel+0x10/0x10 [ 258.528221][T11703] ? __pfx___might_resched+0x10/0x10 [ 258.528246][T11703] ? find_held_lock+0x2b/0x80 [ 258.528262][T11703] ? down_read+0x13b/0x4c0 [ 258.528278][T11703] ? __pfx_down_read+0x10/0x10 [ 258.528294][T11703] __lookup_slow+0x98/0x320 [ 258.528311][T11703] lookup_slow+0x50/0x70 [ 258.528325][T11703] link_path_walk+0x1377/0x1cc0 [ 258.528346][T11703] path_openat+0x1c9/0x4280 [ 258.528357][T11703] ? kasan_save_track+0x14/0x30 [ 258.528370][T11703] ? __kasan_slab_alloc+0x89/0x90 [ 258.528384][T11703] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 258.528396][T11703] ? do_sys_openat2+0xc7/0x1e0 [ 258.528420][T11703] ? __pfx_path_openat+0x10/0x10 [ 258.528448][T11703] do_file_open+0x20e/0x430 [ 258.528460][T11703] ? __lock_acquire+0x49f/0x1a40 [ 258.528471][T11703] ? __pfx_do_file_open+0x10/0x10 [ 258.528493][T11703] ? _raw_spin_unlock+0x28/0x50 [ 258.528503][T11703] ? alloc_fd+0x471/0x7a0 [ 258.528519][T11703] do_sys_openat2+0x10f/0x1e0 [ 258.528534][T11703] ? __pfx_do_sys_openat2+0x10/0x10 [ 258.528550][T11703] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 258.528566][T11703] __ia32_compat_sys_openat+0x12d/0x210 [ 258.528582][T11703] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 258.528597][T11703] ? fput+0x79/0x100 [ 258.528610][T11703] ? ksys_write+0x1ac/0x250 [ 258.528620][T11703] ? __pfx_ksys_write+0x10/0x10 [ 258.528633][T11703] __do_fast_syscall_32+0xe7/0x970 [ 258.528647][T11703] ? lockdep_hardirqs_on+0x78/0x100 [ 258.528661][T11703] do_fast_syscall_32+0x32/0x70 [ 258.528675][T11703] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 258.528689][T11703] RIP: 0023:0xf7fa3fec [ 258.528703][T11703] Code: Unable to access opcode bytes at 0xf7fa3fc2. [ 258.528708][T11703] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 258.528718][T11703] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000100 [ 258.528725][T11703] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 258.528731][T11703] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 258.528737][T11703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.528743][T11703] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 258.528757][T11703] [ 258.736000][T11707] For dev_enable ops, only valid value is "1" [ 258.979285][T11716] Set syz0 is full, maxelem 0 reached [ 259.027882][T11718] futex_wake_op: syz.1.1748 tries to shift op by 144; fix this program [ 259.030278][T11720] futex_wake_op: syz.4.1749 tries to shift op by 144; fix this program [ 259.164533][ T5737] Bluetooth: hci4: command 0x0c1a tx timeout [ 259.167121][ T5095] Bluetooth: hci5: command 0x0c1a tx timeout [ 259.411189][ T42] kauditd_printk_skb: 39 callbacks suppressed [ 259.411203][ T42] audit: type=1800 audit(1786885671.786:1035): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 259.419562][ T42] audit: type=1800 audit(1786885671.796:1036): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34989 res=0 errno=0 [ 259.442519][ T42] audit: type=1800 audit(1786885671.816:1037): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35012 res=0 errno=0 [ 259.584393][ T888] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 259.734525][ T888] usb 7-1: Using ep0 maxpacket: 8 [ 259.736736][ T888] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 259.740608][ T888] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 259.743364][ T888] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 259.746488][ T888] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 259.749520][ T888] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 259.752906][ T888] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.757112][ T888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.796701][ T42] audit: type=1800 audit(1786885672.176:1038): pid=6784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=334611 res=0 errno=0 [ 259.802944][ T42] audit: type=1800 audit(1786885672.176:1039): pid=6784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=334640 res=0 errno=0 [ 259.809354][ T42] audit: type=1800 audit(1786885672.176:1040): pid=6784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=334618 res=0 errno=0 [ 259.815781][ T42] audit: type=1800 audit(1786885672.176:1041): pid=6784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=334619 res=0 errno=0 [ 259.822478][ T42] audit: type=1800 audit(1786885672.176:1042): pid=6784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=334620 res=0 errno=0 [ 259.839241][ T42] audit: type=1800 audit(1786885672.216:1043): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=334660 res=0 errno=0 [ 259.966763][ T888] usb 7-1: usb_control_msg returned -32 [ 259.968953][ T888] usbtmc 7-1:16.0: can't read capabilities [ 259.971998][ T42] audit: type=1800 audit(1786885672.346:1044): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 260.324933][T11760] usbtmc 7-1:16.0: usb_bulk_msg returned -71 [ 260.521801][T11765] Set syz0 is full, maxelem 0 reached [ 261.523673][ T6155] usb 48-1: device descriptor read/8, error -110 [ 262.379433][T11783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1770'. [ 262.441670][ T5095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 262.445395][ T5095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 262.450568][ T5095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 262.454961][ T5095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 262.455468][ T5095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 262.473481][ T10] usb 7-1: USB disconnect, device number 30 [ 262.525392][ T6155] usb usb48-port1: attempt power cycle [ 262.863547][T11780] wg2 speed is unknown, defaulting to 1000 [ 263.084959][ T6155] usb usb48-port1: unable to enumerate USB device [ 263.261644][T11780] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.264052][T11780] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.266676][T11780] bridge_slave_0: entered allmulticast mode [ 263.269569][T11780] bridge_slave_0: entered promiscuous mode [ 263.275455][T11780] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.285754][T11780] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.288212][T11780] bridge_slave_1: entered allmulticast mode [ 263.297964][T11780] bridge_slave_1: entered promiscuous mode [ 263.333050][T11780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.347347][T11780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.374389][ T24] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 263.382567][T11780] team0: Port device team_slave_0 added [ 263.388104][T11780] team0: Port device team_slave_1 added [ 263.402947][T11780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.406137][T11780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.413989][T11780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.418749][T11780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.420949][T11780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.429768][T11780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.452350][T11780] hsr_slave_0: entered promiscuous mode [ 263.454885][T11780] hsr_slave_1: entered promiscuous mode [ 263.456996][T11780] debugfs: 'hsr0' already exists in 'hsr' [ 263.458753][T11780] Cannot create hsr debugfs directory [ 263.564893][ T24] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 263.568805][ T24] usb 10-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 263.572551][ T24] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 263.576666][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 263.580850][ T24] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 263.583525][ T24] usb 10-1: Product: syz [ 263.585875][ T24] usb 10-1: Manufacturer: syz [ 263.587472][ T24] usb 10-1: SerialNumber: syz [ 263.593227][ T24] usb 10-1: config 0 descriptor?? [ 263.595731][T11812] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 263.600895][ T24] usb 10-1: selecting invalid altsetting 0 [ 263.809448][ T5827] usb 10-1: USB disconnect, device number 14 [ 263.998176][T11780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 264.002447][T11780] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 264.005519][T11780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 264.009603][T11780] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 264.012309][T11780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 264.018107][T11780] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 264.020725][T11780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 264.024871][T11780] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 264.063531][T11780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.073178][T11780] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.079114][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.081519][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.087763][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.090173][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.224774][ T5928] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 264.326606][T11780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.352524][T11780] veth0_vlan: entered promiscuous mode [ 264.369022][T11780] veth1_vlan: entered promiscuous mode [ 264.373747][T11842] binder: 11841:11842 ioctl c0306201 0 returned -14 [ 264.384758][T11780] veth0_macvtap: entered promiscuous mode [ 264.386001][ T5928] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 264.390408][T11780] veth1_macvtap: entered promiscuous mode [ 264.395473][ T5928] usb 7-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 264.401430][ T5928] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 264.402250][T11780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.405891][ T5928] usb 7-1: config 0 interface 0 has no altsetting 0 [ 264.411413][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 264.414015][ T5928] usb 7-1: Product: syz [ 264.415765][ T5928] usb 7-1: Manufacturer: syz [ 264.416765][T11780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.417290][ T5928] usb 7-1: SerialNumber: syz [ 264.427892][ T5928] usb 7-1: config 0 descriptor?? [ 264.430078][T11824] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 264.430152][ T42] kauditd_printk_skb: 52 callbacks suppressed [ 264.430162][ T42] audit: type=1800 audit(1786885676.806:1097): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=350373 res=0 errno=0 [ 264.438489][ T5928] usb 7-1: selecting invalid altsetting 0 [ 264.442201][ T42] audit: type=1800 audit(1786885676.806:1098): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=350405 res=0 errno=0 [ 264.469587][ T42] audit: type=1800 audit(1786885676.806:1099): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=350380 res=0 errno=0 [ 264.488684][ T42] audit: type=1800 audit(1786885676.816:1100): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=350381 res=0 errno=0 [ 264.503200][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.506593][ T42] audit: type=1800 audit(1786885676.866:1101): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=350402 res=0 errno=0 [ 264.519103][ T42] audit: type=1800 audit(1786885676.866:1102): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=350403 res=0 errno=0 [ 264.525718][ T5095] Bluetooth: hci2: command tx timeout [ 264.529955][ T42] audit: type=1800 audit(1786885676.866:1103): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=350382 res=0 errno=0 [ 264.530670][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.541497][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.549496][ T42] audit: type=1800 audit(1786885676.866:1104): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=350404 res=0 errno=0 [ 264.565120][ T42] audit: type=1800 audit(1786885676.886:1105): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=22590 res=0 errno=0 [ 264.576949][ T42] audit: type=1800 audit(1786885676.886:1106): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=22619 res=0 errno=0 [ 264.580343][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.584408][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.591939][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.608995][ T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.612132][ T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.644850][ T5928] usb 7-1: USB disconnect, device number 31 [ 264.999459][ T5737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 265.006458][ T5737] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 265.009534][ T5737] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 265.012509][ T5737] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 265.016256][ T5737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 265.164459][ T61] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 265.256366][T11867] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 265.296386][ T5884] bridge_slave_1: left allmulticast mode [ 265.301607][ T5884] bridge_slave_1: left promiscuous mode [ 265.307015][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.316501][ T5884] bridge_slave_0: left allmulticast mode [ 265.322873][ T5884] bridge_slave_0: left promiscuous mode [ 265.325301][ T61] usb 6-1: Using ep0 maxpacket: 16 [ 265.328444][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.331450][ T61] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.335771][ T61] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 265.339402][ T61] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 265.342519][ T61] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 265.347373][ T61] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.350056][ T61] usb 6-1: Product: syz [ 265.351391][ T61] usb 6-1: Manufacturer: syz [ 265.352905][ T61] usb 6-1: SerialNumber: syz [ 265.484917][ T5884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.490962][ T5884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.500042][ T5884] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 265.514147][ T5884] bond0 (unregistering): (slave team0): Releasing backup interface [ 265.523008][ T5884] bond0 (unregistering): Released all slaves [ 265.624464][ T888] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 265.633705][T11856] wg2 speed is unknown, defaulting to 1000 [ 265.662143][ T5448] 8021q: adding VLAN 0 to HW filter on device eth1 [ 265.785445][ T888] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 265.872886][ T888] usb 7-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 265.877196][ T888] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 265.881763][ T888] usb 7-1: config 0 interface 0 has no altsetting 0 [ 265.885829][ T888] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 265.888536][ T888] usb 7-1: Product: syz [ 265.889955][ T888] usb 7-1: Manufacturer: syz [ 265.891514][ T888] usb 7-1: SerialNumber: syz [ 265.895498][ T888] usb 7-1: config 0 descriptor?? [ 265.898093][T11872] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 265.905351][ T888] usb 7-1: selecting invalid altsetting 0 [ 266.024861][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2 [ 266.128529][ T9] usb 7-1: USB disconnect, device number 32 [ 266.228793][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3 [ 266.236034][T11856] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.250085][T11856] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.253015][T11856] bridge_slave_0: entered allmulticast mode [ 266.258560][T11856] bridge_slave_0: entered promiscuous mode [ 266.267996][T11856] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.270266][T11856] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.272559][T11856] bridge_slave_1: entered allmulticast mode [ 266.277333][T11856] bridge_slave_1: entered promiscuous mode [ 266.322203][T11856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.327569][T11856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.369874][T11856] team0: Port device team_slave_0 added [ 266.375232][T11856] team0: Port device team_slave_1 added [ 266.432833][T11856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.435341][T11856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.443322][T11856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.449292][T11856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.451549][T11856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.459662][T11856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.517262][T11856] hsr_slave_0: entered promiscuous mode [ 266.520808][T11856] hsr_slave_1: entered promiscuous mode [ 266.529161][T11856] debugfs: 'hsr0' already exists in 'hsr' [ 266.530972][T11856] Cannot create hsr debugfs directory [ 266.578243][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4 [ 266.595422][ T5095] Bluetooth: hci2: command tx timeout [ 266.824790][ T5884] hsr_slave_0: left promiscuous mode [ 266.827245][ T5884] hsr_slave_1: left promiscuous mode [ 266.829490][ T5884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.832131][ T5884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.964531][ T5928] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 266.969919][ T5884] team0 (unregistering): Port device team_slave_1 removed [ 266.982074][ T5884] team0 (unregistering): Port device team_slave_0 removed [ 267.074605][ T5095] Bluetooth: hci3: command tx timeout [ 267.136107][ T5928] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 267.142230][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.145106][ T5928] usb 7-1: Product: syz [ 267.146491][ T5928] usb 7-1: Manufacturer: syz [ 267.147951][ T5928] usb 7-1: SerialNumber: syz [ 267.257116][ T852] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 267.288114][T11856] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 267.303545][T11856] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 267.306983][T11856] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 267.326980][T11856] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 267.329847][T11856] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 267.335152][T11856] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 267.338249][T11856] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 267.343125][T11856] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 267.418264][T11856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.431772][T11856] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.439646][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.442575][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.462906][ T599] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.465971][ T599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.495548][T11908] batman_adv: batadv0: Adding interface: veth0 [ 267.499811][T11908] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.508159][T11908] batman_adv: batadv0: Interface activated: veth0 [ 267.522458][ T50] usb 7-1: USB disconnect, device number 33 [ 267.769650][T11856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.949093][ T61] cdc_ncm 6-1:1.0: bind() failure [ 267.964879][ T61] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 267.967059][ T61] cdc_ncm 6-1:1.1: bind() failure [ 267.973470][ T61] usb 6-1: USB disconnect, device number 3 [ 267.981577][T11856] veth0_vlan: entered promiscuous mode [ 267.989701][T11856] veth1_vlan: entered promiscuous mode [ 268.011171][T11856] veth0_macvtap: entered promiscuous mode [ 268.017763][T11856] veth1_macvtap: entered promiscuous mode [ 268.033105][T11856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.050374][T11856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.115571][ T5784] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.119457][ T5784] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.166531][ T5812] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.173460][ T5812] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.210831][T11942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1793'. [ 268.216993][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.221115][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.238725][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.241527][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.274774][ T852] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 268.283924][T11947] For dev_enable ops, only valid value is "1" [ 268.285193][ T852] ath9k_htc: Failed to initialize the device [ 268.299901][ T50] usb 7-1: ath9k_htc: USB layer deinitialized [ 268.687503][ T5095] Bluetooth: hci2: command tx timeout [ 269.177803][ T5095] Bluetooth: hci3: command tx timeout [ 269.180845][T11970] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:21 [ 269.770014][ T42] kauditd_printk_skb: 105 callbacks suppressed [ 269.770027][ T42] audit: type=1800 audit(1786885682.146:1212): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 269.932306][ T42] audit: type=1800 audit(1786885682.306:1213): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16583 res=0 errno=0 [ 269.969032][ T42] audit: type=1800 audit(1786885682.346:1214): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 269.982823][ T42] audit: type=1800 audit(1786885682.356:1215): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 270.160636][T11984] pim6reg: entered allmulticast mode [ 270.223545][T11983] pim6reg: left allmulticast mode [ 270.234584][ T6155] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 270.244928][ T42] audit: type=1800 audit(1786885682.626:1216): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16583 res=0 errno=0 [ 270.376781][ T42] audit: type=1800 audit(1786885682.746:1217): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16583 res=0 errno=0 [ 270.388673][ T42] audit: type=1800 audit(1786885682.766:1218): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=367837 res=0 errno=0 [ 270.415359][ T6155] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 270.421010][ T6155] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.423727][ T6155] usb 6-1: Product: syz [ 270.427048][ T6155] usb 6-1: Manufacturer: syz [ 270.429036][ T6155] usb 6-1: SerialNumber: syz [ 270.445803][ T42] audit: type=1800 audit(1786885682.826:1219): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16583 res=0 errno=0 [ 270.452091][ T42] audit: type=1800 audit(1786885682.826:1220): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35189 res=0 errno=0 [ 270.462034][ T42] audit: type=1800 audit(1786885682.826:1221): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35212 res=0 errno=0 [ 270.467303][ T888] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 270.595315][ T50] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 270.687156][T11979] batman_adv: batadv0: Adding interface: veth0 [ 270.689250][T11979] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.697404][T11979] batman_adv: batadv0: Interface activated: veth0 [ 270.731151][ T6155] usb 6-1: USB disconnect, device number 4 [ 270.764499][ T5095] Bluetooth: hci2: command tx timeout [ 270.764720][ T50] usb 11-1: Using ep0 maxpacket: 32 [ 270.767007][ T50] usb 11-1: unable to get BOS descriptor or descriptor too short [ 270.784467][ T50] usb 11-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 270.788032][ T50] usb 11-1: config 14 has an invalid interface number: 57 but max is 1 [ 270.790619][ T50] usb 11-1: config 14 has an invalid interface number: 228 but max is 1 [ 270.795882][ T50] usb 11-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 270.804374][ T50] usb 11-1: config 14 has no interface number 0 [ 270.806249][ T50] usb 11-1: config 14 has no interface number 1 [ 270.810458][ T50] usb 11-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 270.814470][ T50] usb 11-1: config 14 interface 228 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 270.818299][ T50] usb 11-1: config 14 interface 57 has no altsetting 0 [ 270.820371][ T50] usb 11-1: config 14 interface 228 has no altsetting 0 [ 270.824141][ T50] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.827332][ T50] usb 11-1: Product: syz [ 270.830140][ T50] usb 11-1: Manufacturer: syz [ 270.831707][ T50] usb 11-1: SerialNumber: syz [ 271.235156][ T5095] Bluetooth: hci3: command tx timeout [ 271.568170][ T888] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 271.574413][ T888] ath9k_htc: Failed to initialize the device [ 271.582896][ T6155] usb 6-1: ath9k_htc: USB layer deinitialized [ 271.900391][T12003] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:21 [ 272.947916][ T5928] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 273.095237][ T5928] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 273.104883][ T5928] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 273.112480][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.118184][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.122012][ T5928] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 273.129871][ T5928] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 273.137546][ T5928] usb 6-1: Manufacturer: syz [ 273.148955][ T5928] usb 6-1: config 0 descriptor?? [ 273.172259][T12020] ipvlan1: entered promiscuous mode [ 273.174223][T12020] ipvlan1: entered allmulticast mode [ 273.177065][T12020] veth0_vlan: entered allmulticast mode [ 273.314557][ T5095] Bluetooth: hci3: command tx timeout [ 273.435985][ T50] legousbtower 11-1:14.57: interrupt endpoints not found [ 273.441334][ T50] legousbtower 11-1:14.228: interrupt endpoints not found [ 273.447569][ T50] usb 11-1: USB disconnect, device number 2 [ 273.516915][T12023] raw_sendmsg: syz.6.1814 forgot to set AF_INET. Fix it! [ 273.557031][T12008] random: crng reseeded on system resumption [ 273.892822][T12031] jffs2: notice: (12031) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 275.286639][T12029] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1808'. [ 275.375221][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 275.375234][ T42] audit: type=1800 audit(1786885687.756:1257): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 275.459349][ T42] audit: type=1326 audit(1786885687.836:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.2.1818" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x0 [ 275.538700][ T42] audit: type=1800 audit(1786885687.916:1259): pid=12039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1818" name="driver_override" dev="sysfs" ino=3339 res=0 errno=0 [ 275.546501][ T42] audit: type=1800 audit(1786885687.926:1260): pid=12039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1818" name="bind" dev="sysfs" ino=27602 res=0 errno=0 [ 275.562494][ T42] audit: type=1800 audit(1786885687.936:1261): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=368635 res=0 errno=0 [ 275.563387][T12039] oxu210hp-hcd QEMU0002:00: error -ENXIO: IRQ index 0 not found [ 275.605161][ T42] audit: type=1800 audit(1786885687.976:1262): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16583 res=0 errno=0 [ 275.624615][ T42] audit: type=1800 audit(1786885687.996:1263): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=368651 res=0 errno=0 [ 275.630768][ T42] audit: type=1800 audit(1786885687.996:1264): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=368661 res=0 errno=0 [ 275.724738][ T42] audit: type=1800 audit(1786885688.096:1265): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 275.887875][ T42] audit: type=1800 audit(1786885688.256:1266): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16583 res=0 errno=0 [ 276.996726][T12066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1827'. [ 277.828564][ T5737] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.838110][ T5737] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.843561][ T5737] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.848138][ T5737] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.850801][ T5737] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.876457][T12090] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1831'. [ 277.913524][T12090] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1831'. [ 278.446355][ T5928] usbhid 6-1:0.0: can't add hid device: -32 [ 278.448336][ T5928] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 278.484669][ T10] usb 6-1: USB disconnect, device number 5 [ 278.578903][T12113] 9p: Bad value for 'rfdno' [ 278.701828][ T5884] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.836494][ T5884] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.941887][ T5884] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.990479][T12085] wg2 speed is unknown, defaulting to 1000 [ 279.093923][ T5884] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.194444][ T6155] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 279.289943][ T5884] bridge_slave_1: left allmulticast mode [ 279.291864][ T5884] bridge_slave_1: left promiscuous mode [ 279.293927][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.300208][ T5884] bridge_slave_0: left allmulticast mode [ 279.302212][ T5884] bridge_slave_0: left promiscuous mode [ 279.304145][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.355064][ T6155] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 279.359973][ T6155] usb 11-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 279.365205][ T6155] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 279.369536][ T6155] usb 11-1: config 0 interface 0 has no altsetting 0 [ 279.374921][ T6155] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 279.378833][ T6155] usb 11-1: Product: syz [ 279.380552][ T6155] usb 11-1: Manufacturer: syz [ 279.382484][ T6155] usb 11-1: SerialNumber: syz [ 279.387065][ T6155] usb 11-1: config 0 descriptor?? [ 279.390930][T12145] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 279.400699][ T6155] usb 11-1: selecting invalid altsetting 0 [ 279.450951][ T5884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.455901][ T5884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.459938][ T5884] bond0 (unregistering): Released all slaves [ 279.484722][ T5884] bond1 (unregistering): Released all slaves [ 279.544082][T12085] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.546654][T12085] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.548977][T12085] bridge_slave_0: entered allmulticast mode [ 279.551915][T12085] bridge_slave_0: entered promiscuous mode [ 279.556258][T12085] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.559500][T12085] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.561956][T12085] bridge_slave_1: entered allmulticast mode [ 279.580831][T12085] bridge_slave_1: entered promiscuous mode [ 279.597895][ T5884] : left promiscuous mode [ 279.598506][ T5928] usb 11-1: USB disconnect, device number 3 [ 279.651230][T12085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.659610][T12085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.681380][T12085] team0: Port device team_slave_0 added [ 279.686349][T12085] team0: Port device team_slave_1 added [ 279.704897][T12085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.707619][T12085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.719679][T12085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.725217][T12085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.727760][T12085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.737019][T12085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.801407][T12085] hsr_slave_0: entered promiscuous mode [ 279.803976][T12085] hsr_slave_1: entered promiscuous mode [ 279.807087][T12085] debugfs: 'hsr0' already exists in 'hsr' [ 279.809392][T12085] Cannot create hsr debugfs directory [ 279.854856][ T50] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 279.871223][ T5448] 8021q: adding VLAN 0 to HW filter on device eth5 [ 279.955017][ T5737] Bluetooth: hci5: command tx timeout [ 280.005227][ T50] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 280.009042][ T50] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 280.013955][ T50] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 280.020446][ T50] usb 6-1: config 0 interface 0 has no altsetting 0 [ 280.025585][ T50] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 280.030935][ T50] usb 6-1: Product: syz [ 280.032293][ T50] usb 6-1: Manufacturer: syz [ 280.044422][ T50] usb 6-1: SerialNumber: syz [ 280.049328][ T50] usb 6-1: config 0 descriptor?? [ 280.051994][T12155] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 280.057910][ T50] usb 6-1: selecting invalid altsetting 0 [ 280.177091][T12085] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 280.237350][T12085] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 280.256519][T12085] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 280.285626][T12085] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 280.293536][ T6155] usb 6-1: USB disconnect, device number 6 [ 280.316618][T12181] For dev_enable ops, only valid value is "1" [ 280.318579][ T5448] 8021q: adding VLAN 0 to HW filter on device eth6 [ 280.360058][T12085] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 280.367072][T12085] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 280.375867][T12085] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 280.399613][ T42] kauditd_printk_skb: 101 callbacks suppressed [ 280.399634][ T42] audit: type=1800 audit(1786885692.776:1368): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=30098 res=0 errno=0 [ 280.412386][T12085] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 280.423817][ T42] audit: type=1800 audit(1786885692.796:1369): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=30105 res=0 errno=0 [ 280.432644][T12085] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.437594][T12085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.440077][T12085] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.442722][T12085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.448794][ T42] audit: type=1800 audit(1786885692.796:1370): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=30106 res=0 errno=0 [ 280.465440][ T42] audit: type=1800 audit(1786885692.826:1371): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16583 res=0 errno=0 [ 280.520441][ T42] audit: type=1800 audit(1786885692.896:1372): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16583 res=0 errno=0 [ 280.521620][T12085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.534104][T12203] FAULT_INJECTION: forcing a failure. [ 280.534104][T12203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.544639][ T100] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.553062][ T100] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.565968][T12203] CPU: 2 UID: 0 PID: 12203 Comm: syz.2.1852 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.566017][T12203] Tainted: [L]=SOFTLOCKUP [ 280.566024][T12203] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 280.566033][T12203] Call Trace: [ 280.566040][T12203] [ 280.566047][T12203] dump_stack_lvl+0x100/0x190 [ 280.566076][T12203] should_fail_ex.cold+0x5/0xa [ 280.566097][T12203] _copy_from_user+0x2e/0xd0 [ 280.566210][T12203] kstrtouint_from_user+0xd6/0x1d0 [ 280.566229][T12203] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 280.566249][T12203] ? __lock_acquire+0x49f/0x1a40 [ 280.566282][T12203] proc_fail_nth_write+0x83/0x220 [ 280.566318][T12203] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 280.566349][T12203] vfs_write+0x2aa/0x1050 [ 280.566368][T12203] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 280.566393][T12203] ? __pfx_vfs_write+0x10/0x10 [ 280.566408][T12203] ? find_held_lock+0x2b/0x80 [ 280.566430][T12203] ? __fget_files+0x215/0x3d0 [ 280.566451][T12203] ? __fget_files+0x21f/0x3d0 [ 280.566474][T12203] ksys_write+0x12a/0x250 [ 280.566490][T12203] ? __pfx_ksys_write+0x10/0x10 [ 280.566513][T12203] do_int80_emulation+0x14b/0x720 [ 280.566540][T12203] asm_int80_emulation+0x1a/0x20 [ 280.566557][T12203] RIP: 0023:0xf71d74eb [ 280.566572][T12203] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 280.566588][T12203] RSP: 002b:00000000f548d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 280.566607][T12203] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f548d5d0 [ 280.566617][T12203] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 280.566626][T12203] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 280.566635][T12203] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 280.566644][T12203] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 280.566665][T12203] [ 280.877129][T12085] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.905652][ T100] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.908250][ T100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.915329][ T100] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.917541][ T100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.988797][ T5448] 8021q: adding VLAN 0 to HW filter on device eth7 [ 281.015363][T12214] Set syz0 is full, maxelem 0 reached [ 281.259370][ T5884] hsr_slave_0: left promiscuous mode [ 281.261659][ T5884] hsr_slave_1: left promiscuous mode [ 281.284851][ T5884] veth1_macvtap: left promiscuous mode [ 281.288517][ T5884] veth0_macvtap: left promiscuous mode [ 281.290549][ T5884] veth1_vlan: left promiscuous mode [ 281.292518][ T5884] veth0_vlan: left promiscuous mode [ 281.400502][ T42] audit: type=1800 audit(1786885693.776:1373): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 281.411293][ T42] audit: type=1800 audit(1786885693.776:1374): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=385131 res=0 errno=0 [ 281.431865][ T42] audit: type=1800 audit(1786885693.786:1375): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=385141 res=0 errno=0 [ 281.529625][ T42] audit: type=1800 audit(1786885693.906:1376): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16583 res=0 errno=0 [ 281.575335][ T42] audit: type=1800 audit(1786885693.956:1377): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 281.587658][T12237] ALSA: mixer_oss: invalid OSS volume '' [ 281.604773][ T5884] team0 (unregistering): Port device team_slave_1 removed [ 281.612312][ T5884] team0 (unregistering): Port device team_slave_0 removed [ 281.636499][T12238] For dev_enable ops, only valid value is "1" [ 281.707648][ T5448] 8021q: adding VLAN 0 to HW filter on device eth8 [ 281.877380][T12085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.039294][ T5095] Bluetooth: hci5: command tx timeout [ 282.057969][T12085] veth0_vlan: entered promiscuous mode [ 282.063191][T12085] veth1_vlan: entered promiscuous mode [ 282.082403][T12085] veth0_macvtap: entered promiscuous mode [ 282.087418][T12085] veth1_macvtap: entered promiscuous mode [ 282.096322][T12085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.103330][T12085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.193138][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.199098][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.220120][ T599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.223827][ T599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.238945][T12285] For dev_enable ops, only valid value is "1" [ 282.264492][ T5884] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.267306][ T5884] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.275936][T12286] overlayfs: conflicting lowerdir path [ 282.284552][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.288256][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.482136][T12297] Set syz0 is full, maxelem 0 reached [ 283.094439][ T888] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 283.275412][ T888] usb 12-1: Using ep0 maxpacket: 16 [ 283.280428][ T888] usb 12-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 283.290508][ T888] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.298288][ T888] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 283.309588][ T888] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.322837][ T888] usb 12-1: config 0 descriptor?? [ 283.370030][T12341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1885'. [ 283.430220][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1885'. [ 283.530566][ T5095] Bluetooth: hci5: unexpected event for opcode 0x2016 [ 283.682270][T12361] x_tables: duplicate underflow at hook 3 [ 283.703335][T12361] ./bus: Can't lookup blockdev [ 283.816689][ T888] usbhid 12-1:0.0: can't add hid device: -71 [ 283.819969][ T888] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 283.829973][ T888] usb 12-1: USB disconnect, device number 2 [ 284.007929][T12368] Bluetooth: MGMT ver 1.23 [ 284.182974][T12370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1889'. [ 284.451653][T12389] Set syz0 is full, maxelem 0 reached [ 284.518903][T12392] For dev_enable ops, only valid value is "1" [ 284.522838][T12394] FAULT_INJECTION: forcing a failure. [ 284.522838][T12394] name failslab, interval 1, probability 0, space 0, times 0 [ 284.529491][T12394] CPU: 2 UID: 0 PID: 12394 Comm: syz.6.1896 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.529511][T12394] Tainted: [L]=SOFTLOCKUP [ 284.529516][T12394] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 284.529523][T12394] Call Trace: [ 284.529528][T12394] [ 284.529533][T12394] dump_stack_lvl+0x100/0x190 [ 284.529555][T12394] should_fail_ex.cold+0x5/0xa [ 284.529568][T12394] should_failslab+0xc2/0x120 [ 284.529586][T12394] __kmalloc_cache_noprof+0x91/0x6c0 [ 284.529599][T12394] ? alloc_netdev_mqs+0xea8/0x15c0 [ 284.529665][T12394] alloc_netdev_mqs+0xea8/0x15c0 [ 284.529684][T12394] br_add_bridge+0x33/0xf0 [ 284.529712][T12394] br_ioctl_stub+0x489/0x4d0 [ 284.529728][T12394] ? __pfx_br_ioctl_stub+0x10/0x10 [ 284.529746][T12394] ? kasan_quarantine_put+0x104/0x240 [ 284.529763][T12394] ? tomoyo_path_number_perm+0x28f/0x580 [ 284.529795][T12394] ? __pfx_br_ioctl_stub+0x10/0x10 [ 284.529810][T12394] br_ioctl_call+0x53/0xa0 [ 284.529824][T12394] sock_ioctl+0x616/0x6b0 [ 284.529836][T12394] ? __pfx_sock_ioctl+0x10/0x10 [ 284.529850][T12394] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 284.529868][T12394] ? do_vfs_ioctl+0x226/0x13e0 [ 284.529884][T12394] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 284.529901][T12394] compat_sock_ioctl+0x595/0x760 [ 284.529916][T12394] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 284.529928][T12394] ? hook_file_ioctl_common+0x140/0x440 [ 284.529946][T12394] ? __fget_files+0x21f/0x3d0 [ 284.529959][T12394] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 284.529972][T12394] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 284.529990][T12394] __do_fast_syscall_32+0xe7/0x970 [ 284.530004][T12394] ? lockdep_hardirqs_on+0x78/0x100 [ 284.530019][T12394] do_fast_syscall_32+0x32/0x70 [ 284.530033][T12394] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 284.530047][T12394] RIP: 0023:0xf705efec [ 284.530062][T12394] Code: Unable to access opcode bytes at 0xf705efc2. [ 284.530067][T12394] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 284.530079][T12394] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089a0 [ 284.530085][T12394] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 284.530092][T12394] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 284.530098][T12394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.530104][T12394] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 284.530117][T12394] [ 284.721640][T12404] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1898'. [ 284.725550][T12404] FAULT_INJECTION: forcing a failure. [ 284.725550][T12404] name failslab, interval 1, probability 0, space 0, times 0 [ 284.730412][T12404] CPU: 1 UID: 0 PID: 12404 Comm: syz.7.1898 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.730438][T12404] Tainted: [L]=SOFTLOCKUP [ 284.730444][T12404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 284.730454][T12404] Call Trace: [ 284.730460][T12404] [ 284.730467][T12404] dump_stack_lvl+0x100/0x190 [ 284.730494][T12404] should_fail_ex.cold+0x5/0xa [ 284.730513][T12404] should_failslab+0xc2/0x120 [ 284.730538][T12404] __kvmalloc_node_noprof+0x116/0x970 [ 284.730562][T12404] ? xfrm_user_rcv_msg_compat+0x49b/0x1340 [ 284.730592][T12404] xfrm_user_rcv_msg_compat+0x49b/0x1340 [ 284.730618][T12404] ? kasan_save_stack+0x30/0x50 [ 284.730638][T12404] ? __pfx_xfrm_user_rcv_msg_compat+0x10/0x10 [ 284.730660][T12404] ? kmem_cache_free+0x127/0x6b0 [ 284.730675][T12404] ? kfree_skbmem+0x19a/0x210 [ 284.730692][T12404] ? consume_skb+0xd1/0x110 [ 284.730705][T12404] ? nlmon_xmit+0xa5/0xe0 [ 284.730766][T12404] ? dev_hard_start_xmit+0x121/0x760 [ 284.730784][T12404] ? __dev_queue_xmit+0x1bbf/0x4970 [ 284.730801][T12404] ? netlink_deliver_tap+0xa4d/0xcc0 [ 284.730850][T12404] ? find_held_lock+0x2b/0x80 [ 284.730879][T12404] ? xfrm_get_translator+0xeb/0x290 [ 284.730897][T12404] ? xfrm_get_translator+0xeb/0x290 [ 284.730922][T12404] xfrm_user_rcv_msg+0x65e/0xd00 [ 284.730946][T12404] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 284.730967][T12404] ? kfree_skbmem+0x19f/0x210 [ 284.730983][T12404] ? look_up_lock_class+0x55/0x120 [ 284.731005][T12404] ? register_lock_class+0x40/0x560 [ 284.731048][T12404] ? rcu_is_watching+0x12/0xc0 [ 284.731068][T12404] ? trace_contention_end+0x126/0x160 [ 284.731086][T12404] ? __mutex_lock+0x26d/0x1bd0 [ 284.731109][T12404] netlink_rcv_skb+0x159/0x420 [ 284.731128][T12404] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 284.731149][T12404] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 284.731183][T12404] xfrm_netlink_rcv+0x71/0x90 [ 284.731210][T12404] netlink_unicast+0x585/0x850 [ 284.731232][T12404] ? __pfx_netlink_unicast+0x10/0x10 [ 284.731257][T12404] netlink_sendmsg+0x8b0/0xda0 [ 284.731279][T12404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.731302][T12404] ? apparmor_socket_sendmsg+0x15b/0x270 [ 284.731324][T12404] ____sys_sendmsg+0xa4d/0xbe0 [ 284.731341][T12404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.731361][T12404] ? __pfx_____sys_sendmsg+0x10/0x10 [ 284.731389][T12404] ___sys_sendmsg+0x190/0x1e0 [ 284.731409][T12404] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.731443][T12404] ? find_held_lock+0x2b/0x80 [ 284.731477][T12404] __sys_sendmsg+0x160/0x210 [ 284.731499][T12404] ? __pfx___sys_sendmsg+0x10/0x10 [ 284.731526][T12404] ? __pfx_ksys_write+0x10/0x10 [ 284.731548][T12404] __do_fast_syscall_32+0xe7/0x970 [ 284.731569][T12404] ? lockdep_hardirqs_on+0x78/0x100 [ 284.731590][T12404] do_fast_syscall_32+0x32/0x70 [ 284.731611][T12404] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 284.731633][T12404] RIP: 0023:0xf6fdefec [ 284.731658][T12404] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 284.731665][T12404] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 284.731682][T12404] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 284.731693][T12404] RDX: 0000000000002014 RSI: 0000000000000000 RDI: 0000000000000000 [ 284.731702][T12404] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 284.731711][T12404] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 284.731720][T12404] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 284.731741][T12404] [ 284.740680][ T9] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 284.890606][T12412] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1899'. [ 284.956603][T12413] fuse: Bad value for 'fd' [ 285.117356][ T9] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 285.245430][T12384] ceph: No mds server is up or the cluster is laggy [ 285.544279][T12402] ceph: No mds server is up or the cluster is laggy [ 285.544635][T12410] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 285.549576][T12410] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 285.551655][T12410] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 285.553640][T12410] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 285.589933][T12410] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 285.606249][T12410] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 285.608297][T12410] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 285.621350][T12410] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 285.626690][T12410] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 285.629244][T12410] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 285.633860][T12410] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 285.752559][ T42] kauditd_printk_skb: 208 callbacks suppressed [ 285.752578][ T42] audit: type=1800 audit(1786885698.126:1586): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 285.768639][T12419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1902'. [ 285.796268][T12419] ªªªªªª: renamed from vlan0 (while UP) [ 285.813233][ T42] audit: type=1800 audit(1786885698.186:1587): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 285.894723][ T24] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 285.914761][ T42] audit: type=1800 audit(1786885698.296:1588): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 285.945657][ T42] audit: type=1800 audit(1786885698.326:1589): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 285.962656][ T42] audit: type=1800 audit(1786885698.336:1590): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 285.968227][T12426] binder: 12424:12426 ioctl 1 80000040 returned -22 [ 285.981582][ T42] audit: type=1800 audit(1786885698.356:1591): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16583 res=0 errno=0 [ 286.009234][ T42] audit: type=1800 audit(1786885698.386:1592): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 286.033201][ T42] audit: type=1800 audit(1786885698.406:1593): pid=12433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1907" name="enable" dev="configfs" ino=37753 res=0 errno=0 [ 286.033610][T12433] For dev_enable ops, only valid value is "1" [ 286.054927][ T24] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 286.058957][ T24] usb 7-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 286.062354][ T42] audit: type=1800 audit(1786885698.436:1594): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 286.062527][ T24] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 286.072509][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 286.078681][ T24] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 286.082397][ T24] usb 7-1: Product: syz [ 286.083763][ T24] usb 7-1: Manufacturer: syz [ 286.085652][ T24] usb 7-1: SerialNumber: syz [ 286.088552][ T24] usb 7-1: config 0 descriptor?? [ 286.089355][ T42] audit: type=1800 audit(1786885698.466:1595): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=386739 res=0 errno=0 [ 286.091288][T12417] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 286.103483][ T24] usb 7-1: selecting invalid altsetting 0 [ 286.304530][ T5928] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 286.308336][ T24] usb 7-1: USB disconnect, device number 34 [ 286.374515][ T9] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 286.474878][ T5928] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 286.478655][ T5928] usb 11-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 286.482420][ T5928] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 286.485969][ T5928] usb 11-1: config 0 interface 0 has no altsetting 0 [ 286.489732][ T5928] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 286.492353][ T5928] usb 11-1: Product: syz [ 286.493810][ T5928] usb 11-1: Manufacturer: syz [ 286.495656][ T5928] usb 11-1: SerialNumber: syz [ 286.499191][ T5928] usb 11-1: config 0 descriptor?? [ 286.501991][T12434] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 286.507243][ T5928] usb 11-1: selecting invalid altsetting 0 [ 286.525356][ T9] usb 12-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 286.528974][ T9] usb 12-1: too many configurations: 9, using maximum allowed: 8 [ 286.532914][ T9] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.537048][ T9] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.545736][ T9] usb 12-1: config 0 interface 0 has no altsetting 0 [ 286.549916][ T9] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.553542][ T9] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.557696][ T9] usb 12-1: config 0 interface 0 has no altsetting 0 [ 286.560516][ T9] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.563271][ T9] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.566931][ T9] usb 12-1: config 0 interface 0 has no altsetting 0 [ 286.569725][ T9] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.572511][ T9] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.576228][ T9] usb 12-1: config 0 interface 0 has no altsetting 0 [ 286.579074][ T9] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.581808][ T9] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.585467][ T9] usb 12-1: config 0 interface 0 has no altsetting 0 [ 286.588274][ T9] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.590978][ T9] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.594168][ T9] usb 12-1: config 0 interface 0 has no altsetting 0 [ 286.597369][ T9] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.600124][ T9] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.603255][ T9] usb 12-1: config 0 interface 0 has no altsetting 0 [ 286.606459][ T9] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 286.609283][ T9] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 286.612601][ T9] usb 12-1: config 0 interface 0 has no altsetting 0 [ 286.616350][ T9] usb 12-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 286.618988][ T9] usb 12-1: Product: syz [ 286.620428][ T9] usb 12-1: Manufacturer: syz [ 286.621935][ T9] usb 12-1: SerialNumber: syz [ 286.625115][ T9] usb 12-1: config 0 descriptor?? [ 286.632517][ T9] yurex 12-1:0.0: USB YUREX device now attached to Yurex #0 [ 286.768309][ T9] usb 11-1: USB disconnect, device number 4 [ 286.918118][T12444] CIFS: Attempting to mount //127.0.0.1/share [ 286.924467][ T5095] Bluetooth: hci0: command 0x0c1a tx timeout [ 287.069666][ T9] usb 12-1: USB disconnect, device number 3 [ 287.134545][ T9] yurex 12-1:0.0: USB YUREX #0 now disconnected [ 287.555703][ T5095] Bluetooth: hci2: command 0x0c1a tx timeout [ 287.558085][ T5737] Bluetooth: hci1: command 0x0c1a tx timeout [ 287.634884][ T5737] Bluetooth: hci3: command 0x0c1a tx timeout [ 287.638244][ T5095] Bluetooth: hci5: command 0x040f tx timeout [ 287.682553][T12444] CIFS: VFS: Error connecting to socket. Aborting operation. [ 287.685629][T12444] CIFS: VFS: cifs_mount failed w/return code = -4 [ 287.703798][T12469] netlink: 'syz.6.1919': attribute type 11 has an invalid length. [ 287.707331][T12469] netlink: 'syz.6.1919': attribute type 4 has an invalid length. [ 287.709783][T12469] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1919'. [ 287.905585][ T888] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 287.998698][T12445] Process accounting resumed [ 288.064943][ T888] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 288.070891][ T888] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 288.076652][ T888] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 288.084738][ T888] usb 6-1: config 0 interface 0 has no altsetting 0 [ 288.091901][ T888] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 288.095503][ T888] usb 6-1: Product: syz [ 288.096884][ T888] usb 6-1: Manufacturer: syz [ 288.099174][ T888] usb 6-1: SerialNumber: syz [ 288.103272][ T888] usb 6-1: config 0 descriptor?? [ 288.110794][T12467] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 288.116671][ T888] usb 6-1: selecting invalid altsetting 0 [ 288.136744][T12488] Set syz0 is full, maxelem 0 reached [ 288.320331][ T24] usb 6-1: USB disconnect, device number 7 [ 288.389162][T12493] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1925'. [ 288.392005][T12493] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1925'. [ 288.394938][T12493] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1925'. [ 288.953346][T12510] overlayfs: missing 'lowerdir' [ 288.962537][T12511] overlayfs: missing 'lowerdir' [ 289.028554][T12516] hpfs: hpfs_map_sector(): read error [ 289.039186][T12519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1932'. [ 289.634585][ T5095] Bluetooth: hci2: command 0x0c1a tx timeout [ 289.674420][ T5820] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 289.692996][T12551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1938'. [ 289.714597][ T5737] Bluetooth: hci3: command 0x0c1a tx timeout [ 289.717524][ T5095] Bluetooth: hci5: command 0x040f tx timeout [ 289.826153][ T5820] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 289.834882][ T5820] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 289.841763][ T5820] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 289.853362][ T5820] usb 6-1: config 0 interface 0 has no altsetting 0 [ 289.867009][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 289.874621][ T5820] usb 6-1: Product: syz [ 289.878395][ T5820] usb 6-1: Manufacturer: syz [ 289.880744][ T5820] usb 6-1: SerialNumber: syz [ 289.889934][ T5820] usb 6-1: config 0 descriptor?? [ 289.898117][T12538] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 289.916148][ T5820] usb 6-1: selecting invalid altsetting 0 [ 290.113192][ T41] usb 6-1: USB disconnect, device number 8 [ 290.698557][T12598] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1946'. [ 290.702596][T12591] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1946'. [ 290.706109][T12592] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1946'. [ 290.756771][ T42] kauditd_printk_skb: 186 callbacks suppressed [ 290.756786][ T42] audit: type=1800 audit(1786885703.136:1782): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16583 res=0 errno=0 [ 290.980327][T12607] pim6reg: entered allmulticast mode [ 291.029449][T12606] pim6reg: left allmulticast mode [ 291.160523][ T42] audit: type=1800 audit(1786885703.506:1783): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=389101 res=0 errno=0 [ 291.724905][ T5095] Bluetooth: hci2: command 0x0c1a tx timeout [ 291.795490][ T5737] Bluetooth: hci3: command 0x0c1a tx timeout [ 291.798562][ T5095] Bluetooth: hci5: command 0x040f tx timeout [ 292.000777][ T42] audit: type=1800 audit(1786885704.376:1784): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 292.019328][T12595] set match dimension is over the limit! [ 292.050289][ T42] audit: type=1800 audit(1786885704.426:1785): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=389120 res=0 errno=0 [ 292.069201][ T42] audit: type=1800 audit(1786885704.436:1786): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=389131 res=0 errno=0 [ 292.126380][T12618] fuse: Bad value for 'fd' [ 292.139349][ T42] audit: type=1800 audit(1786885704.516:1787): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=389150 res=0 errno=0 [ 292.145039][ T48] Bluetooth: hci4: Frame reassembly failed (-84) [ 292.156565][ T42] audit: type=1800 audit(1786885704.516:1788): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=389160 res=0 errno=0 [ 292.160682][ T48] Bluetooth: hci4: Frame reassembly failed (-84) [ 292.336074][ T42] audit: type=1800 audit(1786885704.716:1789): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16583 res=0 errno=0 [ 292.480426][ T42] audit: type=1800 audit(1786885704.856:1790): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16583 res=0 errno=0 [ 293.151658][ T42] audit: type=1800 audit(1786885705.526:1791): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 293.322923][T12654] Set syz0 is full, maxelem 0 reached [ 293.489707][T12650] Bluetooth: MGMT ver 1.23 [ 293.874427][ T5737] Bluetooth: hci5: command 0x040f tx timeout [ 293.954975][ T5820] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 294.105191][ T5820] usb 11-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 294.112927][ T5820] usb 11-1: config 1 has an invalid interface number: 7 but max is 0 [ 294.117664][ T5820] usb 11-1: config 1 has no interface number 0 [ 294.120286][ T5820] usb 11-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 294.124505][ T5737] Bluetooth: hci4: command 0x1003 tx timeout [ 294.125879][ T5095] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 294.130459][ T5820] usb 11-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 294.130486][ T5820] usb 11-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.139827][ T5820] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.146330][ T5820] usb 11-1: Product: syz [ 294.153563][ T5820] usb 11-1: Manufacturer: syz [ 294.155293][ T5820] usb 11-1: SerialNumber: syz [ 294.159940][T12667] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 294.161886][T12677] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 294.499097][T12711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1978'. [ 294.509059][T12714] Set syz0 is full, maxelem 0 reached [ 294.889563][T12717] Invalid option length (980030) for dns_resolver key [ 294.930380][T12711] wg2 speed is unknown, defaulting to 1000 [ 295.672764][T12732] For dev_enable ops, only valid value is "1" [ 295.775151][ T42] kauditd_printk_skb: 30 callbacks suppressed [ 295.775173][ T42] audit: type=1800 audit(1786885708.146:1822): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=399791 res=0 errno=0 [ 295.794441][ T42] audit: type=1800 audit(1786885708.166:1823): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=399801 res=0 errno=0 [ 295.879280][ T42] audit: type=1800 audit(1786885708.256:1824): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 295.948439][ T42] audit: type=1800 audit(1786885708.316:1825): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 295.956466][ T5095] Bluetooth: hci5: command 0x040f tx timeout [ 296.007584][ T42] audit: type=1800 audit(1786885708.386:1826): pid=12745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1987" name="attach" dev="sysfs" ino=36635 res=0 errno=0 [ 296.009390][T12745] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 296.017513][T12745] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 296.022359][T12745] vhci_hcd vhci_hcd.0: Device attached [ 296.058721][T12751] Set syz0 is full, maxelem 0 reached [ 296.147460][T12755] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1989'. [ 296.171784][ T42] audit: type=1800 audit(1786885708.546:1827): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 296.263434][ T6155] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 296.394945][T12755] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.668891][T12755] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.694355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 296.786195][T12749] vhci_hcd: connection reset by peer [ 296.793167][ T5812] vhci_hcd vhci_hcd.2: stop threads [ 296.800153][ T5812] vhci_hcd vhci_hcd.2: release socket [ 296.805717][ T5812] vhci_hcd vhci_hcd.2: disconnect device [ 296.819760][ T42] audit: type=1800 audit(1786885709.196:1828): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16583 res=0 errno=0 [ 296.871294][ T42] audit: type=1800 audit(1786885709.246:1829): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15938 res=0 errno=0 [ 297.063823][ T42] audit: type=1800 audit(1786885709.436:1830): pid=5146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16583 res=0 errno=0 [ 297.092095][ T5820] usb 11-1: Error in usbnet_get_endpoints (-71) [ 297.115695][ T5820] usb 11-1: USB disconnect, device number 5 [ 297.119965][ T42] audit: type=1800 audit(1786885709.496:1831): pid=6784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=389378 res=0 errno=0 [ 297.120711][T12768] For dev_enable ops, only valid value is "1" [ 297.137557][T12755] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.273571][T12770] vp-vdpa 0000:00:03.0: PCI INT A: failed to register GSI [ 297.276151][T12770] vp-vdpa 0000:00:03.0: probe with driver vp-vdpa failed with error -16 [ 297.376206][T12755] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.392382][T12779] FAULT_INJECTION: forcing a failure. [ 297.392382][T12779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.396907][T12779] CPU: 3 UID: 0 PID: 12779 Comm: syz.2.1996 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.396925][T12779] Tainted: [L]=SOFTLOCKUP [ 297.396929][T12779] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 297.396936][T12779] Call Trace: [ 297.396940][T12779] [ 297.396945][T12779] dump_stack_lvl+0x100/0x190 [ 297.396968][T12779] should_fail_ex.cold+0x5/0xa [ 297.396984][T12779] _copy_from_user+0x2e/0xd0 [ 297.397009][T12779] kstrtouint_from_user+0xd6/0x1d0 [ 297.397022][T12779] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 297.397035][T12779] ? __lock_acquire+0x49f/0x1a40 [ 297.397054][T12779] proc_fail_nth_write+0x83/0x220 [ 297.397074][T12779] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 297.397093][T12779] vfs_write+0x2aa/0x1050 [ 297.397106][T12779] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 297.397123][T12779] ? __pfx_vfs_write+0x10/0x10 [ 297.397132][T12779] ? find_held_lock+0x2b/0x80 [ 297.397147][T12779] ? __fget_files+0x215/0x3d0 [ 297.397162][T12779] ? __fget_files+0x21f/0x3d0 [ 297.397175][T12779] ksys_write+0x12a/0x250 [ 297.397186][T12779] ? __pfx_ksys_write+0x10/0x10 [ 297.397200][T12779] do_int80_emulation+0x14b/0x720 [ 297.397219][T12779] asm_int80_emulation+0x1a/0x20 [ 297.397230][T12779] RIP: 0023:0xf71d74eb [ 297.397240][T12779] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 297.397252][T12779] RSP: 002b:00000000f548d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 297.397268][T12779] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f548d5d0 [ 297.397277][T12779] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 297.397285][T12779] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 297.397293][T12779] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 297.397303][T12779] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 297.397322][T12779] [ 297.640727][T12788] Set syz0 is full, maxelem 0 reached [ 297.784680][ T5812] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.791199][ T5812] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.874568][ T5812] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.878129][ T5812] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.999509][T12800] FAULT_INJECTION: forcing a failure. [ 297.999509][T12800] name failslab, interval 1, probability 0, space 0, times 0 [ 298.006209][T12801] For dev_enable ops, only valid value is "1" [ 298.008518][T12800] CPU: 0 UID: 0 PID: 12800 Comm: syz.6.2003 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.008537][T12800] Tainted: [L]=SOFTLOCKUP [ 298.008541][T12800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 298.008547][T12800] Call Trace: [ 298.008552][T12800] [ 298.008556][T12800] dump_stack_lvl+0x100/0x190 [ 298.008576][T12800] should_fail_ex.cold+0x5/0xa [ 298.008590][T12800] should_failslab+0xc2/0x120 [ 298.008608][T12800] __kmalloc_noprof+0xfc/0x820 [ 298.008623][T12800] ? rcu_is_watching+0x12/0xc0 [ 298.008639][T12800] ? tomoyo_realpath_from_path+0xb6/0x690 [ 298.008660][T12800] tomoyo_realpath_from_path+0xb6/0x690 [ 298.008680][T12800] tomoyo_check_open_permission+0x2af/0x3c0 [ 298.008697][T12800] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 298.008710][T12800] ? iterate_dir+0x296/0xae0 [ 298.008726][T12800] ? do_fast_syscall_32+0x32/0x70 [ 298.008741][T12800] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.008758][T12800] ? hook_file_open+0x24f/0x8f0 [ 298.008782][T12800] ? path_get+0x61/0x80 [ 298.008797][T12800] tomoyo_file_open+0x6b/0x90 [ 298.008809][T12800] security_file_open+0xb5/0x1e0 [ 298.008848][T12800] do_dentry_open+0x588/0x14d0 [ 298.008864][T12800] vfs_open+0x82/0x3f0 [ 298.008881][T12800] dentry_open+0x71/0xd0 [ 298.008895][T12800] ovl_path_open+0x182/0x1d0 [ 298.008934][T12800] ovl_dir_read_merged+0x2e8/0x790 [ 298.008948][T12800] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 298.008962][T12800] ? __pfx_ovl_fill_merge+0x10/0x10 [ 298.008978][T12800] ? ovl_iterate+0xa74/0x10d0 [ 298.008996][T12800] ovl_iterate+0xb2a/0x10d0 [ 298.009009][T12800] ? __pfx_down_read_killable+0x10/0x10 [ 298.009026][T12800] ? __pfx_ovl_iterate+0x10/0x10 [ 298.009037][T12800] wrap_directory_iterator+0xa2/0xe0 [ 298.009054][T12800] iterate_dir+0x296/0xae0 [ 298.009073][T12800] __ia32_sys_getdents64+0x13a/0x2c0 [ 298.009090][T12800] ? __pfx___ia32_sys_getdents64+0x10/0x10 [ 298.009108][T12800] ? __pfx_filldir64+0x10/0x10 [ 298.009124][T12800] ? ksys_write+0x1ac/0x250 [ 298.009134][T12800] ? __pfx_ksys_write+0x10/0x10 [ 298.009147][T12800] __do_fast_syscall_32+0xe7/0x970 [ 298.009161][T12800] ? lockdep_hardirqs_on+0x78/0x100 [ 298.009175][T12800] do_fast_syscall_32+0x32/0x70 [ 298.009189][T12800] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.009203][T12800] RIP: 0023:0xf705efec [ 298.009218][T12800] Code: Unable to access opcode bytes at 0xf705efc2. [ 298.009223][T12800] RSP: 002b:00000000f542c50c EFLAGS: 00000292 ORIG_RAX: 00000000000000dc [ 298.009234][T12800] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 298.009241][T12800] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.009247][T12800] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.009253][T12800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.009259][T12800] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.009273][T12800] [ 298.009345][T12800] ERROR: Out of memory at tomoyo_realpath_from_path. [ 298.454421][ T5095] Bluetooth: hci5: unexpected event for opcode 0x1004 [ 298.694190][T12833] For dev_enable ops, only valid value is "1" [ 298.800296][T12838] [ 298.801113][T12838] ====================================================== [ 298.803258][T12838] WARNING: possible circular locking dependency detected [ 298.805507][T12838] syzkaller #0 Tainted: G L [ 298.807648][T12838] ------------------------------------------------------ [ 298.809854][T12838] syz.6.2016/12838 is trying to acquire lock: [ 298.811741][T12838] ffffffff8fd21a60 (nvmf_dev_mutex){+.+.}-{4:4}, at: nvmf_dev_show+0x26/0x210 [ 298.814711][T12838] [ 298.814711][T12838] but task is already holding lock: [ 298.817036][T12838] ffff88802acece18 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 298.819760][T12838] [ 298.819760][T12838] which lock already depends on the new lock. [ 298.819760][T12838] [ 298.823119][T12838] [ 298.823119][T12838] the existing dependency chain (in reverse order) is: [ 298.826114][T12838] [ 298.826114][T12838] -> #4 (&p->lock){+.+.}-{4:4}: [ 298.828425][T12838] lock_acquire+0x1b9/0x370 [ 298.830053][T12838] __mutex_lock+0x1a4/0x1bd0 [ 298.831783][T12838] seq_read_iter+0xe1/0x1270 [ 298.833411][T12838] kernfs_fop_read_iter+0x46c/0x610 [ 298.835290][T12838] __kernel_read+0x397/0xad0 [ 298.837089][T12838] integrity_kernel_read+0x7e/0xb0 [ 298.838930][T12838] ima_calc_file_hash_tfm+0x25e/0x350 [ 298.840905][T12838] ima_calc_file_hash+0x1e3/0x380 [ 298.842553][T12838] ima_collect_measurement+0x94f/0xb30 [ 298.844551][T12838] process_measurement+0xdfe/0x2350 [ 298.846373][T12838] ima_file_check+0xcc/0x120 [ 298.847978][T12838] security_file_post_open+0xc4/0x210 [ 298.849846][T12838] path_openat+0x985/0x4280 [ 298.851417][T12838] do_file_open+0x20e/0x430 [ 298.852872][T12838] do_sys_openat2+0x10f/0x1e0 [ 298.854575][T12838] __x64_sys_openat+0x12d/0x210 [ 298.856380][T12838] do_syscall_64+0x115/0x840 [ 298.858406][T12838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.860857][T12838] [ 298.860857][T12838] -> #3 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 298.863531][T12838] lock_acquire+0x1b9/0x370 [ 298.865212][T12838] __mutex_lock+0x1a4/0x1bd0 [ 298.866935][T12838] process_measurement+0x5ab/0x2350 [ 298.868735][T12838] ima_file_check+0xcc/0x120 [ 298.870395][T12838] security_file_post_open+0xc4/0x210 [ 298.872246][T12838] path_openat+0x985/0x4280 [ 298.873831][T12838] do_file_open_root+0x2f6/0x5a0 [ 298.875623][T12838] file_open_root+0x1c6/0x3f0 [ 298.877292][T12838] kernel_read_file_from_path_initns+0x189/0x260 [ 298.879389][T12838] _request_firmware+0x733/0x13c0 [ 298.881200][T12838] request_firmware+0x35/0x50 [ 298.882830][T12838] reg_reload_regdb+0x85/0x460 [ 298.884508][T12838] genl_family_rcv_msg_doit+0x214/0x300 [ 298.886533][T12838] genl_rcv_msg+0x560/0x800 [ 298.888133][T12838] netlink_rcv_skb+0x159/0x420 [ 298.889792][T12838] genl_rcv+0x28/0x40 [ 298.891259][T12838] netlink_unicast+0x585/0x850 [ 298.892913][T12838] netlink_sendmsg+0x8b0/0xda0 [ 298.894591][T12838] ____sys_sendmsg+0xa4d/0xbe0 [ 298.896354][T12838] ___sys_sendmsg+0x190/0x1e0 [ 298.897992][T12838] __sys_sendmsg+0x160/0x210 [ 298.899591][T12838] __do_fast_syscall_32+0xe7/0x970 [ 298.901388][T12838] do_fast_syscall_32+0x32/0x70 [ 298.903072][T12838] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.905327][T12838] [ 298.905327][T12838] -> #2 (cb_lock){++++}-{4:4}: [ 298.907877][T12838] lock_acquire+0x1b9/0x370 [ 298.909487][T12838] down_read+0x99/0x4c0 [ 298.911011][T12838] genl_release+0x7e/0x1d0 [ 298.912575][T12838] netlink_release+0x1058/0x1ff0 [ 298.914312][T12838] __sock_release+0xb3/0x260 [ 298.916032][T12838] sock_close+0x1c/0x30 [ 298.917522][T12838] __fput+0x3ff/0xb50 [ 298.918952][T12838] fput_close_sync+0x118/0x250 [ 298.920609][T12838] __x64_sys_close+0x8b/0x120 [ 298.922300][T12838] do_syscall_64+0x115/0x840 [ 298.923815][T12838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.925937][T12838] [ 298.925937][T12838] -> #1 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}: [ 298.928793][T12838] lock_acquire+0x1b9/0x370 [ 298.930399][T12838] down_write+0x8b/0x1f0 [ 298.931947][T12838] __sock_release+0x86/0x260 [ 298.933568][T12838] sock_close+0x1c/0x30 [ 298.935075][T12838] __fput+0x3ff/0xb50 [ 298.936694][T12838] __fput_sync+0xd4/0x100 [ 298.938241][T12838] nvme_tcp_alloc_queue.isra.0+0xd53/0x1750 [ 298.940241][T12838] nvme_tcp_configure_admin_queue+0x26/0x4d0 [ 298.942310][T12838] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 298.944048][T12838] nvme_tcp_create_ctrl+0x975/0xd20 [ 298.945926][T12838] nvmf_dev_write+0x4ee/0xb60 [ 298.947592][T12838] vfs_write+0x2aa/0x1050 [ 298.949131][T12838] ksys_write+0x12a/0x250 [ 298.950657][T12838] __do_fast_syscall_32+0xe7/0x970 [ 298.952454][T12838] do_fast_syscall_32+0x32/0x70 [ 298.954146][T12838] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.956345][T12838] [ 298.956345][T12838] -> #0 (nvmf_dev_mutex){+.+.}-{4:4}: [ 298.958724][T12838] check_prev_add+0xeb/0xe60 [ 298.960323][T12838] __lock_acquire+0x136c/0x1a40 [ 298.962043][T12838] lock_acquire+0x1b9/0x370 [ 298.963611][T12838] __mutex_lock+0x1a4/0x1bd0 [ 298.965258][T12838] nvmf_dev_show+0x26/0x210 [ 298.966944][T12838] seq_read_iter+0x32f/0x1270 [ 298.968580][T12838] seq_read+0x344/0x4d0 [ 298.970074][T12838] vfs_read+0x1e4/0xb40 [ 298.971550][T12838] ksys_read+0x12a/0x250 [ 298.973113][T12838] __do_fast_syscall_32+0xe7/0x970 [ 298.974905][T12838] do_fast_syscall_32+0x32/0x70 [ 298.976745][T12838] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.978962][T12838] [ 298.978962][T12838] other info that might help us debug this: [ 298.978962][T12838] [ 298.982132][T12838] Chain exists of: [ 298.982132][T12838] nvmf_dev_mutex --> &ima_iint_mutex_key[depth] --> &p->lock [ 298.982132][T12838] [ 298.986293][T12838] Possible unsafe locking scenario: [ 298.986293][T12838] [ 298.988874][T12838] CPU0 CPU1 [ 298.990549][T12838] ---- ---- [ 298.992257][T12838] lock(&p->lock); [ 298.993529][T12838] lock(&ima_iint_mutex_key[depth]); [ 298.996025][T12838] lock(&p->lock); [ 298.998048][T12838] lock(nvmf_dev_mutex); [ 298.999407][T12838] [ 298.999407][T12838] *** DEADLOCK *** [ 298.999407][T12838] [ 299.001911][T12838] 1 lock held by syz.6.2016/12838: [ 299.003541][T12838] #0: ffff88802acece18 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 299.006492][T12838] [ 299.006492][T12838] stack backtrace: [ 299.008843][T12838] CPU: 0 UID: 0 PID: 12838 Comm: syz.6.2016 Tainted: G L syzkaller #0 PREEMPT(full) [ 299.008869][T12838] Tainted: [L]=SOFTLOCKUP [ 299.008875][T12838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 299.008886][T12838] Call Trace: [ 299.008908][T12838] [ 299.008916][T12838] dump_stack_lvl+0x100/0x190 [ 299.008940][T12838] print_circular_bug.cold+0x178/0x1c7 [ 299.008969][T12838] check_noncircular+0x146/0x160 [ 299.009004][T12838] check_prev_add+0xeb/0xe60 [ 299.009029][T12838] __lock_acquire+0x136c/0x1a40 [ 299.009047][T12838] ? ksys_read+0x12a/0x250 [ 299.009064][T12838] lock_acquire+0x1b9/0x370 [ 299.009080][T12838] ? nvmf_dev_show+0x26/0x210 [ 299.009103][T12838] ? __pfx___might_resched+0x10/0x10 [ 299.009133][T12838] __mutex_lock+0x1a4/0x1bd0 [ 299.009156][T12838] ? nvmf_dev_show+0x26/0x210 [ 299.009178][T12838] ? nvmf_dev_show+0x26/0x210 [ 299.009202][T12838] ? __pfx___mutex_lock+0x10/0x10 [ 299.009225][T12838] ? __kasan_kmalloc+0xaa/0xb0 [ 299.009248][T12838] ? __kvmalloc_node_noprof+0x36d/0x970 [ 299.009272][T12838] ? nvmf_dev_show+0x26/0x210 [ 299.009292][T12838] nvmf_dev_show+0x26/0x210 [ 299.009316][T12838] seq_read_iter+0x32f/0x1270 [ 299.009346][T12838] seq_read+0x344/0x4d0 [ 299.009371][T12838] ? __pfx_seq_read+0x10/0x10 [ 299.009394][T12838] ? __pfx___might_resched+0x10/0x10 [ 299.009422][T12838] ? bpf_lsm_file_permission+0x9/0x10 [ 299.009456][T12838] ? security_file_permission+0x76/0x210 [ 299.009479][T12838] ? rw_verify_area+0xce/0x6d0 [ 299.009503][T12838] ? __pfx_seq_read+0x10/0x10 [ 299.009527][T12838] vfs_read+0x1e4/0xb40 [ 299.009543][T12838] ? __pfx_vfs_read+0x10/0x10 [ 299.009558][T12838] ? find_held_lock+0x2b/0x80 [ 299.009576][T12838] ? __fget_files+0x215/0x3d0 [ 299.009593][T12838] ? __fget_files+0x215/0x3d0 [ 299.009609][T12838] ? __fget_files+0x21f/0x3d0 [ 299.009627][T12838] ksys_read+0x12a/0x250 [ 299.009642][T12838] ? __pfx_ksys_read+0x10/0x10 [ 299.009660][T12838] __do_fast_syscall_32+0xe7/0x970 [ 299.009684][T12838] do_fast_syscall_32+0x32/0x70 [ 299.009706][T12838] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 299.009729][T12838] RIP: 0023:0xf705efec [ 299.009753][T12838] Code: Unable to access opcode bytes at 0xf705efc2. [ 299.009761][T12838] RSP: 002b:00000000f542c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 299.009776][T12838] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 299.009788][T12838] RDX: 00000000000000c2 RSI: 0000000000000000 RDI: 0000000000000000 [ 299.009797][T12838] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 299.009806][T12838] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 299.009817][T12838] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 299.009830][T12838] [ 299.020787][T12842] syzkaller0: entered promiscuous mode [ 299.117025][T12842] syzkaller0: entered allmulticast mode [ 301.384554][ T6155] vhci_hcd vhci_hcd.2: vhci_device speed not set