last executing test programs: 9m44.503482478s ago: executing program 32 (id=1656): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') prctl$PR_GET_NAME(0x25, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="0002"], 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='wchan\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x422) 4m49.049338039s ago: executing program 3 (id=3083): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000280012800c0001006d6163766c616e0018000280080003000300000008000100100000000400058008000500", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 4m48.712526854s ago: executing program 3 (id=3084): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x300, 0x0, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x18, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r4, r5}, 0xc) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x3, 0x20, 0x0, 0x0, 0x205a, 0x1ff, 0x0, 0x96c, 0x6, 0x0}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r7 = socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES8=r3, @ANYRESOCT=r4, @ANYRESOCT=r5], 0x40}}, 0x20000004) 4m46.925843092s ago: executing program 3 (id=3093): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x408d0}, 0x4000800) preadv2(0xffffffffffffffff, &(0x7f0000004140)=[{0x0}], 0x1, 0x33, 0x4, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x1) r4 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}}) io_uring_enter(r4, 0x3516, 0x3e000000, 0x0, 0x0, 0x0) 4m45.935054895s ago: executing program 3 (id=3097): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'erspan0\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff80, 0x1c000) socket$inet6(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x101000, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000140)=0x1000) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x9e0, @empty, 0xa09a}, {0xa, 0x4e22, 0x9, @mcast1, 0x9}, 0xffffffffffffffff, 0x7fff}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300), 0x111, 0x2}}, 0x20) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e24, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd29, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x0, 0xfffbfffd, 0x3, 0x4f, "0c4192efcc000700000000fcffffff00", 0x4, 0xfffffff7}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x8) 4m45.003215761s ago: executing program 3 (id=3098): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xd, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="851000000400000095000018000000000000000000000000000000950000000000000085100000fcffffff9500"/56], &(0x7f00000000c0)='GPL\x00'}, 0x90) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x1c) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00') r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@decl_tag={0x2, 0x0, 0x0, 0x11, 0x5, 0x9}, @var={0x7, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x2e, 0x2e, 0x5f]}}, &(0x7f00000004c0)=""/138, 0x3d, 0x8a, 0x0, 0x2}, 0x28) r5 = openat2(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x80280, 0x88, 0x2e}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$sr(0xffffff9c, &(0x7f0000000640), 0x4c03, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x17, 0x0, 0x4, 0x3, 0x63a80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f00000010c0)=0x1, 0x4) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x16, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000e00000000000000e1fc0000181100003cf5f9084926128e2ddfff4d1019d563ce50406fffea16cc6fe8c2ee63ef2ac194ac2b30fb79d59305758ac3b0ee03eb9dae60f7a6b3203837ef19d1c871be7d86d0e014a79f22ab6f67b627a876ec18711c7fee1464202fe36098e03c29f01277da66b3319844ce4d0ffd55b799f541e0795032b39f67ccf44ff60bbbf4fd294624c3d989ba0da93957ff3e76b4d2541e7d7ee4", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000faffffff18120000", @ANYRES32=r3, @ANYRESDEC=r3], &(0x7f0000000100)='syzkaller\x00', 0x8001, 0xc4, &(0x7f00000003c0)=""/196, 0x41000, 0xa, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000200)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x7, 0x10000, 0x6f}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000700)=[r5, r6, r7], &(0x7f0000000740)=[{0x2, 0x5, 0x4, 0x3}, {0x1, 0x1, 0x4, 0x4}, {0x1, 0x1, 0x8, 0x9}, {0x3, 0x4, 0x9, 0x8}, {0x4, 0x4, 0x5, 0xa}], 0x10, 0x4}, 0x94) 4m44.662636337s ago: executing program 3 (id=3102): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x300, 0x0, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x18, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r4, r5}, 0xc) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x3, 0x20, 0x0, 0x0, 0x205a, 0x1ff, 0x0, 0x96c, 0x6, 0x0}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r7 = socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES8=r3, @ANYRESOCT=r4, @ANYRESOCT=r5], 0x40}}, 0x20000004) 4m29.344895253s ago: executing program 33 (id=3102): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x300, 0x0, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x18, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r4, r5}, 0xc) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x3, 0x20, 0x0, 0x0, 0x205a, 0x1ff, 0x0, 0x96c, 0x6, 0x0}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r7 = socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES8=r3, @ANYRESOCT=r4, @ANYRESOCT=r5], 0x40}}, 0x20000004) 2m54.953139112s ago: executing program 1 (id=3667): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x400}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) setreuid(0xee00, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000006c0)) fchdir(r3) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x199, 0x0) r5 = syz_open_procfs(r2, &(0x7f0000000240)='smaps\x00') open$dir(&(0x7f0000000040)='./file0\x00', 0x8000, 0x100) keyctl$reject(0x13, 0x0, 0x8, 0x204, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x5}]}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f00000001c0)=0x26) close_range(r6, 0xffffffffffffffff, 0x0) 2m54.072717917s ago: executing program 1 (id=3670): r0 = inotify_init() ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1d, 0x10, &(0x7f0000000540)=ANY=[@ANYRES8=r0, @ANYRES16=r1, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x77, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r2}, 0x18) getsockname$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000880)=0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', r3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) syz_io_uring_setup(0x440b, &(0x7f0000000180)={0x0, 0x6615, 0x10000, 0x2, 0xb7}, &(0x7f0000000280)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000000020f000000040000f71205fee575ac8700f3baee66936b9e7300"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x18) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/140], 0x124}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$ndb(&(0x7f0000000500), 0x0, 0x46c0) ioctl$NBD_CLEAR_SOCK(r8, 0xab04) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = accept4$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14, 0x80800) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000680)={0x0, @loopback, @loopback}, &(0x7f00000007c0)=0xc) connect$packet(r10, &(0x7f0000000800)={0x11, 0xd, r11, 0x1, 0xf3, 0x6, @multicast}, 0x14) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008800}, 0x80) 2m53.832860103s ago: executing program 1 (id=3675): socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffff", 0xc) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') prctl$PR_GET_NAME(0x25, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="0002"], 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='wchan\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x422) (fail_nth: 1) 2m52.711951085s ago: executing program 1 (id=3679): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x1) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) writev(r1, &(0x7f0000000880)=[{&(0x7f0000000600)="18dff49858454fa491119b39f4ec02355402d69d02218513b580502ab73969fb7558b897e3b30d7d9c163303e86c133317f29d7e6e36c73e48253f01c272ec92fbc348244d10ce2c6bf23ea037d0557d84d20daea2bf3c058abfe432abbd8e9caa85ad0b8735520934a1d67b761b5dc37cf6e5f8c97d4bd70594b5a70a07775b2be008eed722b8555654b1c72c9847787cac29cbaa00434abf377f953fe1f06ff3cbe07550b6a7bde2bc7d5c5b68753a4d94bdeb60c704ec50fc674079ea876dfba754ac108a5b9c6ad9dfbf1b1349e3df787b38ca6398943f11669967824c3e4370e238708d7738c140b959ba9a5694b614843e", 0xf4}, {&(0x7f0000000d00)="845a6ee005638b2ad5dfa946f0633199a56cfa28b954f52ce3bc96ed1ffc361391d7d17045334ce9d5bce43aec5764594c6990570a911f8e19b67ac28237444f36db4d873eb720364e02738406b1db285123e01365ddb94decdbe7fb481edcddf8fc77a271c54201dd827c7283600fda09663bac7efb887e41cb330805bbba05cea8248bad80d8c3df57d2b83ce207239a2f0efd1c414d737315e3a650cd62caad58b3f1bb8b3732b3fa1ed3d38a9088490ba4a8c694e3c07f5953bdff4a145188e9c60155529b3ba1595fbce830268d5a21eec04c46e1950d2f167ff9fff49cd6111017294bf8c5d2", 0xe9}, {&(0x7f0000000200)="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", 0x1bb}, {&(0x7f0000000c40)="202bb0415639f0c1e98ad3c35ba126faa9e43e618c9679bae2c30304d1850473f4102215ea2a192d9901b0785473c381e7904a63aba8ed92e2c3d8daf88f68dd5f5d04804a0331ff16ba0ccb9c36956022c1f7656660e773c38b9cf90e3d684ca95b5283b1ff10efc0b8351d0fe7423a3e5158c1e0e4831ecc8df81a0f8827e5c49556cabf334789727d6414d056bd6fb1a1311c748dfdc72879c6091c30be23580eecd40e8c40713768764e450ab8d5d28c905d5b4dc64f1a", 0xb9}, {&(0x7f0000000e80)="94d1f2e1ab95afe67e299cbc47530ccadacb8ecabe3c73ac55d925a0d52a79ceedae83cf90a1789f07fbde8a75991d1e775ce7bdb15e59273429b52a246643318051f60e", 0x44}, {&(0x7f0000002300)="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", 0x2af}, {&(0x7f0000001040)="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", 0xf47}], 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x1, &(0x7f0000000180)={&(0x7f00000002c0)=""/48, 0x30}) prctl$PR_SET_PTRACER(0x59616d61, r2) 2m52.582542901s ago: executing program 1 (id=3681): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f000000b040)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000500)=""/69, 0x45}, {&(0x7f0000000680)=""/160, 0xa0}, {&(0x7f0000000740)=""/113, 0x71}, {&(0x7f0000000040)=""/57, 0x39}, {&(0x7f00000007c0)=""/156, 0x9c}, {&(0x7f0000000440)=""/6, 0x6}, {&(0x7f0000000880)=""/91, 0x5b}, {&(0x7f0000000900)=""/43, 0x2b}, {&(0x7f0000000940)=""/28, 0x1c}, {&(0x7f0000000980)=""/139, 0x8b}], 0xa, &(0x7f0000000ac0)=""/181, 0xb5}, 0x10000}, {{&(0x7f0000001fc0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000004200)=[{&(0x7f0000002040)=""/124, 0x7c}, {0x0}, {&(0x7f0000002180)=""/78, 0x4e}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4096, 0x1000}], 0x5}, 0x2}, {{0x0, 0x0, &(0x7f0000004940)=[{&(0x7f00000042c0)=""/181, 0xb5}, {&(0x7f0000004380)=""/90, 0x5a}, {&(0x7f0000004400)=""/217, 0xd9}, {&(0x7f0000004500)=""/118, 0x76}, {&(0x7f0000004580)=""/198, 0xc6}, {&(0x7f0000004680)=""/135, 0x87}, {&(0x7f0000004740)=""/216, 0xd8}, {&(0x7f0000004840)=""/246, 0xf6}], 0x8}, 0x1}, {{&(0x7f0000004980), 0x80, &(0x7f0000004e80)=[{&(0x7f0000004a00)=""/66, 0x42}, {&(0x7f0000004a80)=""/166, 0xa6}, {&(0x7f0000004b40)=""/208, 0xd0}, {0x0}, {&(0x7f0000004d00)=""/227, 0xe3}, {&(0x7f0000004e00)=""/69, 0x45}], 0x6}, 0x1}, {{0x0, 0x0, &(0x7f0000004f80)=[{&(0x7f0000004ec0)=""/82, 0x52}, {&(0x7f0000004f40)=""/50, 0x32}], 0x2}, 0x654}, {{0x0, 0x0, &(0x7f0000006500)=[{0x0}, {&(0x7f00000050c0)=""/139, 0x8b}, {&(0x7f0000005180)=""/24, 0x18}, {&(0x7f00000051c0)=""/45, 0x2d}, {&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000006200)=""/203, 0xcb}, {&(0x7f0000006300)=""/5, 0x5}, {&(0x7f0000006340)=""/178, 0xb2}, {&(0x7f0000006400)=""/253, 0xfd}], 0x9, &(0x7f0000006580)=""/255, 0xff}, 0xfffffff9}, {{&(0x7f0000006680)=@nfc, 0x80, &(0x7f00000098c0)=[{&(0x7f0000006700)=""/9, 0x9}, {&(0x7f0000006740)=""/189, 0xbd}, {&(0x7f0000007800)=""/162, 0xa2}, {&(0x7f00000078c0)=""/4096, 0x1000}, {&(0x7f00000088c0)=""/4096, 0x1000}], 0x5, &(0x7f000000b180)=""/118, 0x76}, 0x7}, {{&(0x7f0000009980)=@alg, 0x80, &(0x7f0000009c80)=[{&(0x7f0000009a00)=""/176, 0xb0}, {&(0x7f0000009ac0)=""/7, 0x7}, {&(0x7f0000009b00)=""/193, 0xc1}, {&(0x7f0000009c00)=""/76, 0x4c}], 0x4, &(0x7f0000009cc0)=""/76, 0x4c}, 0x5}, {{&(0x7f0000009d40)=@phonet, 0x80, &(0x7f000000afc0)=[{&(0x7f0000009dc0)=""/4096, 0x1000}, {&(0x7f000000adc0)=""/2, 0x2}, {&(0x7f000000ae00)=""/222, 0xde}, {&(0x7f000000af00)=""/136, 0x88}], 0x4, &(0x7f000000b000)=""/5, 0x5}, 0x7}], 0x9, 0x2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x48802, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000280)={0x0, 0xfffffffffffffffc, 0x0, 0x5, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x6, 0x21, 0x0, 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0xffff}, 0x20) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000754000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000088a000/0x1000)=nil) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000580)={&(0x7f0000d5e000/0x2000)=nil, &(0x7f0000c6d000/0x4000)=nil, 0x2000, 0x2}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYRES16=r3, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m52.203283087s ago: executing program 1 (id=3683): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x9, 0x2012, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') write$FUSE_BMAP(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x4, 0x92, 0xe, 0x2, 0x2, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x1, 0x100, 0x9}}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f00000005c0)={0x48}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@decl_tag={0x7, 0x0, 0x0, 0x11, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x1}}]}, {0x0, [0x30]}}, &(0x7f0000000240)=""/30, 0x43, 0x1e, 0x1, 0xfffffa12, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x9, '\x00', r2, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r4 = epoll_create1(0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r5, &(0x7f0000000100)=""/162, 0xa2) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000003300000000000005000000000000"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r6, 0x20, 0xfffffffffffffffe}, 0x8f) pread64(r5, &(0x7f00000002c0)=""/190, 0xbe, 0x200) epoll_pwait(r4, &(0x7f00000001c0)=[{}], 0x1, 0x7, 0x0, 0x0) r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$MON_IOCX_GET(r7, 0x400c9206, &(0x7f0000000140)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 2m52.110289788s ago: executing program 34 (id=3683): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x9, 0x2012, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') write$FUSE_BMAP(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x4, 0x92, 0xe, 0x2, 0x2, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x1, 0x100, 0x9}}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f00000005c0)={0x48}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@decl_tag={0x7, 0x0, 0x0, 0x11, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x1}}]}, {0x0, [0x30]}}, &(0x7f0000000240)=""/30, 0x43, 0x1e, 0x1, 0xfffffa12, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x9, '\x00', r2, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r4 = epoll_create1(0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r5, &(0x7f0000000100)=""/162, 0xa2) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000003300000000000005000000000000"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r6, 0x20, 0xfffffffffffffffe}, 0x8f) pread64(r5, &(0x7f00000002c0)=""/190, 0xbe, 0x200) epoll_pwait(r4, &(0x7f00000001c0)=[{}], 0x1, 0x7, 0x0, 0x0) r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$MON_IOCX_GET(r7, 0x400c9206, &(0x7f0000000140)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 2m49.83037606s ago: executing program 6 (id=3697): r0 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) bind$netrom(r0, &(0x7f00000000c0)={{0x3, @null}, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg$unix(r2, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f00000004c0)=""/112, 0x70}, {&(0x7f0000000680)=""/189, 0xbd}], 0x3, &(0x7f0000000740)=[@cred={{0x18}}, @rights={{0xc}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x4c}}, {{&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000840)=""/150, 0x96}, {&(0x7f0000000900)=""/205, 0xcd}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000ac0)=""/176, 0xb0}, {&(0x7f0000000b80)=""/244, 0xf4}, {&(0x7f0000000580)=""/7, 0x7}], 0x6, &(0x7f0000000cc0)=[@cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000000d80)=@abs, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000e00)=""/69, 0x45}, {&(0x7f0000000e80)=""/157, 0x9d}], 0x2}}, {{&(0x7f0000000f80)=@abs, 0x6e, &(0x7f0000003440)=[{&(0x7f0000001000)=""/13, 0xd}, {&(0x7f0000001040)=""/240, 0xf0}, {&(0x7f0000001140)=""/87, 0x57}, {&(0x7f00000011c0)=""/206, 0xce}, {&(0x7f00000012c0)}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/190, 0xbe}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/118, 0x76}], 0x9, &(0x7f00000034c0)=[@cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000003600)=@abs, 0x6e, &(0x7f0000003c40)=[{&(0x7f0000003680)=""/218, 0xda}, {&(0x7f0000003780)=""/170, 0xaa}, {&(0x7f0000003840)=""/233, 0xe9}, {&(0x7f0000003940)=""/123, 0x7b}, {&(0x7f00000039c0)=""/85, 0x55}, {&(0x7f0000003a40)=""/90, 0x5a}, {&(0x7f0000003ac0)=""/79, 0x4f}, {&(0x7f0000003b40)=""/240, 0xf0}], 0x8, &(0x7f0000003c80)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000003d40), 0x6e, &(0x7f0000004180)=[{&(0x7f0000003dc0)=""/143, 0x8f}, {&(0x7f0000003e80)=""/94, 0x5e}, {&(0x7f0000003f00)=""/255, 0xff}, {&(0x7f0000004000)=""/234, 0xea}, {&(0x7f0000004100)=""/128, 0x80}], 0x5, &(0x7f00000041c0)}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f0000005600)=[{&(0x7f0000004280)=""/4096, 0x1000}, {&(0x7f0000005280)=""/246, 0xf6}, {&(0x7f0000000380)=""/9, 0x9}, {&(0x7f00000053c0)=""/52, 0x34}, {&(0x7f0000005400)=""/115, 0x73}, {&(0x7f0000005480)=""/186, 0xba}, {&(0x7f0000005540)=""/179, 0xb3}], 0x7, &(0x7f0000005640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x24}}], 0x7, 0x20, &(0x7f0000005780)={0x0, 0x3938700}) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x4800, 0x0) ioctl$CDROMREADAUDIO(r4, 0x5392, &(0x7f0000000040)={@lba=0x3, 0x3, 0x0, 0x0}) dup3(0xffffffffffffffff, r3, 0x0) 2m49.501811639s ago: executing program 6 (id=3700): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004880}, 0x10) 2m49.413043562s ago: executing program 6 (id=3701): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x2, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000440)=[{0x4000800000000, 0x2, 0xffffffffffffffff}, {0x6, 0x7fff, 0x28ec}, {0x3, 0x0, 0xfff}], 0x3, 0xbfe, 0x19, 0x0, 0x2c, 0x20}) r0 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ptrace$ARCH_SHSTK_STATUS(0x1e, r1, &(0x7f0000000300), 0x5005) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) timer_create(0x3, 0x0, &(0x7f00000003c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe5e) timer_delete(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') close(r0) 2m46.323797898s ago: executing program 6 (id=3708): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, 0x0, 0x1) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) writev(r1, &(0x7f0000000880)=[{&(0x7f0000000600)="18dff49858454fa491119b39f4ec02355402d69d02218513b580502ab73969fb7558b897e3b30d7d9c163303e86c133317f29d7e6e36c73e48253f01c272ec92fbc348244d10ce2c6bf23ea037d0557d84d20daea2bf3c058abfe432abbd8e9caa85ad0b8735520934a1d67b761b5dc37cf6e5f8c97d4bd70594b5a70a07775b2be008eed722b8555654b1c72c9847787cac29cbaa00434abf377f953fe1f06ff3cbe07550b6a7bde2bc7d5c5b68753a4d94bdeb60c704ec50fc674079ea876dfba754ac108a5b9c6ad9dfbf1b1349e3df787b38ca6398943f11669967824c3e4370e238708d7738c140b959ba9a5694b614843e", 0xf4}, {&(0x7f0000000d00)="845a6ee005638b2ad5dfa946f0633199a56cfa28b954f52ce3bc96ed1ffc361391d7d17045334ce9d5bce43aec5764594c6990570a911f8e19b67ac28237444f36db4d873eb720364e02738406b1db285123e01365ddb94decdbe7fb481edcddf8fc77a271c54201dd827c7283600fda09663bac7efb887e41cb330805bbba05cea8248bad80d8c3df57d2b83ce207239a2f0efd1c414d737315e3a650cd62caad58b3f1bb8b3732b3fa1ed3d38a9088490ba4a8c694e3c07f5953bdff4a145188e9c60155529b3ba1595fbce830268d5a21eec04c46e1950d2f167ff9fff49cd6111017294bf8c5d2", 0xe9}, {&(0x7f0000000200)="f48ed488b79c19020b12c847a2b2bd6910d9e9dde186c648318dcc169dff39a3990286898efed16221dab719543a20fc028c0d910d5faa93e1681842fa9c6d5fe96a168e3320464326fbfd8a129db351f0d5f9a328a4358e5c0334de68436dd2b6c2502f45f248d2a7f0ebaafd021a8b306e63dd563b492896f4c09e6d5dc738b5bdc947bc7d209c1b04445155481e33fc1ef3329e34267522cae90ee707e7cbb9ca3065d53f2e86949582355a7b2cca99e1504cb2ff0c6ad674e7ceb632351c38ff3aacd22c389c43bcfeb4a4cbec9d41813f520700e7e54347a8dc9e44cd8687a97ce0ed8a2ced68318e8b8361db585ed78e80b2f7af86e42d9b8bf132a33d851ee5eec06237c34531a784a4fc9b45dc38aa57473c6f33caf8c0682e8cb3059e5d9ef3f964633bb0b67db83501545fc9912bb7db09f06039bcb1ee03455dbd4192e2ed1be842fe6ba0a22ba76cbbfd9bf5d76dbd84b5f7ff867bdd7c3c74fe15b7ecc089ed40474d9c55989d5f1ac309b1025d52faf96914f546ec68cac81bc79479e4ff43adeb7fc3a3414d3c732d2990852173eb4e9278076e4085bf621e0c4fd4c7357696fb5b44a2dadc6b0e1a876c7e50978386f4e32ca1", 0x1bb}, {&(0x7f0000000c40)="202bb0415639f0c1e98ad3c35ba126faa9e43e618c9679bae2c30304d1850473f4102215ea2a192d9901b0785473c381e7904a63aba8ed92e2c3d8daf88f68dd5f5d04804a0331ff16ba0ccb9c36956022c1f7656660e773c38b9cf90e3d684ca95b5283b1ff10efc0b8351d0fe7423a3e5158c1e0e4831ecc8df81a0f8827e5c49556cabf334789727d6414d056bd6fb1a1311c748dfdc72879c6091c30be23580eecd40e8c40713768764e450ab8d5d28c905d5b4dc64f1a", 0xb9}, {&(0x7f0000000e80)="94d1f2e1ab95afe67e299cbc47530ccadacb8ecabe3c73ac55d925a0d52a79ceedae83cf90a1789f07fbde8a75991d1e775ce7bdb15e59273429b52a246643318051f60e", 0x44}, {&(0x7f0000002300)="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", 0x2af}, {&(0x7f0000001040)="f26e712cdd6333b552ec96f7f5e1c1f649aa43792798c070c48bdd88b988e23956288b4f78bf1d4ec0bd6aeb5ab98268061194cbfce8f3affe9e743a9996a5ba3e89121e191e39e2c8477f4585c7bef00649e550fb38b52535f6b71f0d3cbdb3a3cdb9840967bf6640123e14d29a84770f98422adc82ad403d69e1dfcf68a321a66cdbaba496202cdf4ef471b1d00212ee1879a572b4260b5b1c3b47add1e37a85e00994db829ea3367ff80da2ca6e8b470a64f66633aa2bf1df4b0bb2313aef8d8f552637f0d133efe4827cc1cc23263506a7e400d28ea92b782578fdd38a896f2e6d1f74902529e35e2902ee9f3ed48f5585c2afe8d6079bde257f63f326eed14fdf1746467f311e56c1a41caa41278d786d79c9d438250bbf0701f0be2f48f16638a83250e2670e299161b4ad50780d9a5ee56aa7b0684a7a4b0d55d0ba7ee8f22426faecef21022c29076fa1e6bf02c0be395412bf38154e9cf0fc4f6413d410e5e87b88add21ab4c6961d3503f4da987105912d3ceeb82cf9b8ad2f56afae99854129ec97984f0212b9bc143dacb66f75bba74a7ff0c18cf448b2ad46c19da14d798e0987fd8d6a3bd0484937475f94a49f86a92f05d92105c88dfe134b8b4e907d01336b1c8d152c4d30aba3c06e281eed971220f51ff8bf90e95a53e5ccdfdbbbf78f57e828f8620fad8b060c05ad705c0a870765edf71f276c1dff0817f7a0472ee42fce7b430ed31601f5b3041732ed52ef804e56911431ea49741203c317fa6cd01b5bf026f1d7f9754187292a44ea4a6543528ff5e09284ca8cc91de1c6cfc2a87db52938a3f6ed65898962f71970ed2349809d42f7985e8c03d92e73ed9c9d87c71124ab4591d1bd45aebd18890c813bf8725df73d7f1fff6f5a1c66e8e9c5af7cfcac2217537230985dc0426482291c9c9636c33cac4f61ce7b36c98d8fd9e02d473740d17a0f709e4d0b83f249b1432ebdf34589480c05fcdb141919ad06460f6f181835d763127623e4ce796c00ae73a9866ef4fbb5d4cd492c4ad3c284b83eff43136a7061ec6d41fd46854d6f1e9ab305643f0fe190058ced0f414cdfa92a3de5e605c1f2daa946127bed077bd81020aec74fc00550f182435a3d69dd24227032d80dd5fd0e70a919aaa717ccfb7a47d4159feeaa84feb0b6974ab97b6f8e27b0b8f7cf31c29e1c1ea2a476b798af18934fb707e914535bd8410e5fb76c5567d65fe713429fb390519cecb671d5add3d12bad355000053614f5c0bc5c64a2079cef59f12d6f777cf47a4c52917517c676f7306d232dae8150e5685f6e183e9ec35fcbac4d3621d03cf402e1a298194296d431cdc97483725df06c6dd15f154972badca67e0ff9d773851fabdb4334c89b11d1e306b9c124bc6a0fa3599846c3ab9828b010f38083b9a1057a0d04a8ff8c385c1c1ea7ae0be34bbf1357f71c281d4034875919d8652191afc8f50faf045feaaf92c006253594a3f9ef3ae6f59d35db147f6ca8115fab6247d57cfe1a4268f169f73051f33d89f4669fa724e3a23f36254c7ab191045d26f4544183d57c1fcfe063ec30cbb613bfe9d25ae6672b5ca122ce08dfc758720b2e614e37baabf9ea91d15db7b1b753689659878c319dfac203a7ab91872e6159e00b21a0b632fc7d81ddbbba39945eba4a0efb0e2b41ff19ed1ed2adb6107869565583b799dce1baf82a38500f4f442a919f696aaa3deedc66028b0e22418be7fdeda9cad17341af3afba5ee69163d5c6ee55a573fe1ebb36444149f17826721ec39c0f52e7c87e8457711de6fb64c4631de5b3a4be0405db26c8cbcf4b98ed695715686b5106ea789408d56f4ec7f3a3fb60f057ec71c95c112a536290a030e0ff99dad907b0c29d6c95339f23daa7e24cc8dbafe5e56d262cae39d92f1830e42d6be41d8e9077e4606dd7f3d7f149f72d4fd6bc1ba632491d23d9676de3200c664ab6a0715f2ab62281ff9620bb3b0740c8671a8ed8407bf8fe0cd60cb62fb80635401d305b299b0ae2caa423ec6ab135c7bb0c866ebf44cb3a05ad65837023101a6aa26bf90b721d73226098e5286c80dc2d91f6f3bc8cd3bc9ebe161ec30e00275163d7b699b12b603904536374ba35a514cd16d629aa1676b1d6a5e9089afff5a711eb5d81b208871c3206768cf815b52fe94f1dc529592ad33afabab4f28d376747de2b4712b7be0102f52a9fa4466d06ccf27ca4a4d0850872d68719fe51bf943cd1ad8ed78c8cc675be57413b16991e4703b1434dae6bcd4bdabdfaff932d036ba8a96b2ef807292a9763c432199ceda6af52a3b069f1fb5e55f11c36867e3ad7020a412b751d863cb0b812bef004ba0083cf1072bced030590d6dfb85f10ba0b410dfedfeefe0d30ae9bfc89a278738a3123cd8e62a60bdafa064ba0054df502ce736cb5739e36b10e91720d58be80dd68261b38529b6f97f7b9a81e817457d84185acd9a2af27ba334c9828a688ea7b4373d6d43bd488bbfa7901857c5fb087ecdeae4775d21a4b1c818da97aa0d86b21dcfc639f33627d399d1bf250412ebda76abd57ccde3bd82f3d63def913d21b26cbe1a74b68a0251ba39a6e8ed30a1df11d70445f3f6b99d6bc4df8440723824b8ce3d328c67e4eac207614c715fc061f72459acecc52b8a0af2108e546d1c16fbe8481f7b3c664b374dd1b4771f83ead89db37c93f513a164995079776d61748cb566255c88026dce1a90258daedb1c1466c7d07e08c26e038b92c713ab09fe0ae341b7e28d73c48ef8019e58695f21ab9182dec3aa9e3cc340d78efec0a00b8f0bc79e95cf5a4942e9dd8580f6ef23c92ec3dba4231805322c0e8e6e89ed6a08201a5c7af7534605304ae6de6962ad67d1ee1b6f688ac98552a374d276c36e69c2379718b7f7fce8cb4adc3e55344543d4f09d6b193fb6261f9acce8de325b163f781046b9c41e6f24b63f65a87b9c1b07d1d07747cf398906dd013a39020f42ab796bb11060182ef473dfdfb191edfdd3eec6a34f884b529288bc9e6ff3b13d4ab9ec591f75d736591ae405c9ebfecb6d14c4ff8c6cb9f531913885e3efabb423eabbcc1a237b13037f6c72bb3a7c4d7a2d2ef2c3e3e7e2e2cbfab6711f17314840ae8d53c66e4eb384c5974a669495bdd2c12a7436ea01d2199a6c33d4554ce69722fe798ffd4d87a83f71ab30c1b0a2c31977f99b66ca6ed9ded021fe2c14d05a92acd57d25722db200990f3dfe4af61f0a3d4e023d05cdcb726d170d75e93fb7197b2d172b2d3f53f85423a2aba53519707b83c8e11409a0d6c44b2bb7a6f7591a536599bb50a708b11265624bb5e3daa202c15cf9e8f2ae1ece0c5cb2d9894b8e18030676caa15da2fc42b7d0fa2723d68d56c12931098c1dec6564aebdc40de2fdcb23211d12b88dcf8a4a6a5c12c786cf17a268ad7349ac21267b57bde5e1cb4e02dd27f29b1a7e6927c30083b969ddb286b88e40f388bfdeabe0f34a8bacba96d6aea6ef432e3c5976d2173b8af42d74b9ddd0605f41d932b361617ddddc4efe90c06e37d28791baf01dadf2ff622b18111bf4969e0020acd320bd7616c71fa179666a805b93668dac3d1292dca0d99b6f4481b004f4c5aba30e48e18bae0198b1129135076c24dbcd39b8066c1d7bc3196ada6c04ce51b8f52e31b76cd3af40d6cd0bcaf28f21ccb46ff4e56ad3fe3e6c6acbe75f35763b00d06b6bcf40559a5608612932d88d8831b9c384c8a4baf7a3cc8bc96d163018bfb1219231bf3b8e8553aaf57be6ca7220aba882ad6178fc3c824a41b7dea06b01e560a9d5230e409435118d64b3ae549cc2975f8fb659121d3c672dcf9c54b76b3605acfc251aed129ee782b3d267716f98ddc73952500a1e22013877ffcdac4d281062f5774e4ce991142a7b4347a21eb22cce91a2dcda6b49b5a0c80b0c75aa9bd2d0ddbb2f453b8d2ff8150a73dbe74f6d38a444bae38561484c4c564ad8acc36e5bd38b2e2c61dd923535ca8c101237a305b44dd876cf9b14644ea2d957b023859f9e8e1cf55316b862154440fde9b6ded47a864ba8db3d977aa4d06042cbe083c53ffc7fd4bb91ddf99960cf8678fe1a618ada7da39d930e2ff5a546a595a6a3023be120e70ecffacb1c656a53bb6a5657aca23abf566667b49551ab169ed7519fdcc7b5de95f8d3f14969f105ce4c9b43837826cf9d8d1d043c8382bbb14f9c20aa1ece5c189406088b7298966f3b312ccfd2b270af3ccff00fd1bfccd51e56a2d41b4f1c2e3f3f13f005cf57f7b88523297c4666ee523f887427656d1e757012b05cf0deb8923c51ba47743338ab1f8c39ba6db6fec9cd2280d5e91ebbda9af8e45fda90922b508c7a89afc1aac4fff95000ffe709323ef1760ffc407173b481e1024c69373dd2e6ebe05dc9755d158501c9a62d1047ad566235f0141da62cf59c9a28c40f46bef30d0a5d0c80de7360661898ee183d42e2ee5f0b7294c1e0a6108c722eb62fc8159b198013de4ead0f20b7a53a51e93bff9a6e1e6082ed21c32b5be3118c62315943b71d5f8593bdbc72db05224961df3327c0a4f1d53ab76b84d8137cd8ffb750dcc90cb37575d465c564157128a45d741ebb8b584791cd63eb0b6037c35a314ad6d944df787ea103044d178c9e7880f6f29171d03d57615a4637bcda9b00dfa43b227c0230b5d4ffc8096f0e1a1fc00bed0fffdf6a3d571bb153a88055e54b81f4e74659b799a1d34a3569f9b29364c88c4836fde9bb26f4709f4ce9781e5db935bdb21af39e424623bddcb8b2ecdd9bf2f8550765482df341310fe1bb4040c361d610d7648bded139567ead2558920a4957e20ad0ef3a46eb9444faccaa7278ac7a6f1daa38c694f3e80241caca9317b87470303663ed4c9d3dacf8510a4b5043da6c071661c19b497604bf4f24dcd52aa3f9e9400858fdb8f2afc1b3265a7893f6461df0ef9c4145017cb10fe62eacf5226ea25a18780f46e64c2341236f79d9890f46c29ee87a0626cab79d2b0ec79c81efe3b7c91d7dcbb92bac84726aca5fe3963f1cd89be5d26d075968b9041b27bdde2d52cdd67f1d976588a221274b7d86a56f1b9c6a27ee63c458bd25d65a53b4b41c770d3b75ef9a519838f2a655ce5ba02db56ede4f70b7053b3bb8a6d1e19a2bd09064b1f2a3149c944aef3d98e3662c8eb284d466aeafe80daa8962c0984bf5ccb2fe84c33014e610d975e40d93f8188dced0e98a47ea7c4e2c0b9ce887a9bae1915fb9a8974051397e9db17ef7153de68e4ce8ef15446abd40ff60ae8533ee8aae43565d35713a13050d17eae087b07ac8b368be1651e1c7fef60848d89f69dbded195accdb73032e0d8fccac676364cf0072799c6ec209e0c7c2209e8f8e99133e46113d6e9385719cf84527fb9e1747675859059d1db740d63a5918a03d56c79d4431fbee6e9e059200ae0e5337153a326329be432098e2cff95460608dfed00e9ff55334f9a88b2ef6fac3498932c9a19113fc30626f010b9e898e63f2bdd8417c8", 0xf47}], 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x1, &(0x7f0000000180)={&(0x7f00000002c0)=""/48, 0x30}) prctl$PR_SET_PTRACER(0x59616d61, r2) 2m46.205472084s ago: executing program 6 (id=3709): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4004880}, 0x10) 2m45.912554482s ago: executing program 6 (id=3710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c0000800800034000000002140000001100"], 0xb0}}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x808, 0x3ff}, 0x0) ptrace$ARCH_SET_CPUID(0x1e, 0x0, 0x0, 0x1012) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000001a0000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffccb}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) 2m45.832114188s ago: executing program 35 (id=3710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c0000800800034000000002140000001100"], 0xb0}}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x808, 0x3ff}, 0x0) ptrace$ARCH_SET_CPUID(0x1e, 0x0, 0x0, 0x1012) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000001a0000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffccb}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) 1m44.492553382s ago: executing program 7 (id=4016): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syslog(0x2, &(0x7f0000001500)=""/43, 0x2b) 1m43.551331749s ago: executing program 7 (id=4019): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x40004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) r3 = openat$apparmor_thread_exec(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000440)="5f6e81936367293cfa0c8e81856587dffb47c75bc6ddb166debce4a61d01c77238108d338789999f0b46f5d3a5e3c92c5b2eaae746474befe0121f464015849be069887dbdee36244a796a5c6a87f1a6ce1aa33de720f7", 0x57}], 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1m42.689581939s ago: executing program 7 (id=4025): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, &(0x7f00000003c0), 0x4003) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000001f40)=[{{&(0x7f0000000500)=@in6={0xa, 0x4e20, 0x41a62727, @local, 0xd3c8}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)="def6d0136c39b9a21e0caacebd5742576f71078019eae863f24a455c8495b03d30bf809704ce489b766dba31867c8e9d7283273c182cead8e9a561a221d367845061ba3254543bac188cee971c6902ebc3d9e1a9dfb9d4c7529abbcc10e19f6956aa128e880e5096cacb7bdc3de179e625db6dc46265b19e1450cb28fb94fd831fc8ebe44f5266fb37c9e20f65fcc509593d0fc23f20676f59030b4540130a89ae77f82b98aec876668cbcd8e8f79ef1876c2ded466efff9b2c1a7e717d374c35afb0ea998a14a55cc1a35c2a9f899797a12a348fd939c3e0f949f7abebf3a3a", 0xe0}, {&(0x7f0000000440)="ff89836ae0c3cf591ed8d4b5ddefd4df231458098151", 0x16}], 0x2, &(0x7f0000000880)=[{0x2c, 0x119, 0x5, "701bf26d72195bdf55a51ad9fb52903b07ced76d714cc236167a792f08672575"}, {0x34, 0x1, 0x3, "3887f061ecbde53dd73bb21393fa8a8bbe666b61a780bea0014d5964ec86d730d871b734fe3fbe67"}, {0x100, 0x117, 0x6, "218415172da7747e7f2f4d5f445f2c37a2265e915ed894181fcec371bd28b2bd2e0d29ce06e9ce227acc0ea7cde6661a55d0f6ab4d5a916efc7b6e4ada5221f7106357c30bd334351a37ec1ccb2622e2be79b8705ef53daf5abbd8caecaf53ceb097156eb33492cab4ed666fc31c73a26d2be90bbb7458bec78ba195d67e22f98cf22c199a56a7dbdf107cbdaa8819aa9673c15dbba401e6f2dfeb9875d26f88a4f358960b267be23ec59794213d0ded96160c16accbad3f7defdb58b80156c977314138510824909edc5dec95afdfa3310530e923f7d0d1cc69d1b5c240787bb6bd6f35b6c3d31832e7feb8d99e9b65646a"}, {0x7c, 0x311, 0x9, "ac131f745514cf5a73b23c24bcafefcef6482d75d3189419c3e45423b59252ebaed6559d9518b28a7128bc35a7cb2dc8da213aa2c76d5ce4436ac49459c05450f3ba0cf5be62fd138f1bb4d39e70e1ffaa543572798944344c9bd7b7968096458e4f14046dc4e8e097aec98f4dd3"}, {0xd8, 0x0, 0x81, "1b21701dc720c8b058169f8969e5f5385fda69b2658e8874e94237e221fc007e35a39ba0d7794b1985bb406e8157b4ff7e22faf0a698c0a63eb9de5742633142d856c447b9f8027fa0b694f20786c6e0b20fc85fcb0bd174ec1f334a83f4d48a07fbcc85afbc3eb1d9d79981fc08f4736e9d110b34431e47bc63c20b8057d7750e9590ff0a4711560f2a7f7160eb43b2f5cfb2d4b097009dd6d188ee68526b89ab98ea1282872296f72fd01dd6bfd579579a200736488ddd776c3dc1fe3d98702b7275169a935105f9b393f1"}, {0xd0, 0x113, 0x4, "ec4e857fac2e7ad47a2bba039a3303eccf255ed78bd799d81ba20ce1b3f7855af1546d400c43119692eeca65d1435b5b7b8338bb2cc4aa94514227ac8f6d99366ba303790dafecc1a8000c931083e951ab539b0b25f65bda6c5e737253f65baf4338c8d88af10697c5683410ecaede0d0784c2b25c4c822c6eecb630148bd25a8dd9fec2af21e4349f60365aeba86f47c97cfd06c9c9bd4451902f08e1be659a54b383485f3d75559eff9aea8050d0ccd84085c95059218d6d8341bcd50eefe59f"}], 0x384}}, {{&(0x7f0000000700)=@hci={0x1f, 0x3, 0x3}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000780)="b9f3993b8e817c6ab67b543ce4d76faa86db45f48c3c2ab252ef3401667b12d1a22b0132d222d4d7a24ef651eb4a6344a6c7176eba970a6d4df64d309861a5f401424a2eedddf62856e3f2bac66e8c4c5eef2df1de876104688ad845a02bc2dda25bc4210416879b780f892456a5735df4310778", 0x74}, {&(0x7f0000000c40)="40e92eee865e5d0f6fcb12ead4381cc067aef3cb5156a7d07e9e80a00eb9f94b29e976f1f4d187dcddf7b6ee785c16fd9f3982935f5c97328cfaf177f8890d274edcac9b0be5ef9e4c1906da6dff3ba00d5037f7bcb3be35e8eac6bec28734cba9b838b1b4d96ec4b7e1952a551c2194da27e8917216fa642193bc52cf46da05038e06f2644080ec58fb7d6982d7a584792c5c838370b58000f7adc82442894e021a72b90515bb70f0a78ed0b963294e35e7950d7cbdc93e1d52f902764168b2d4e1ea604c6016cad4a5920aca648a49de1de5f7eb066aea935c54aed4da86c708aadd0688b2f53eaa221e", 0xeb}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000000800)="328d815cdf7875c53322fb4af573d790d5052be675c2f6dc3968e7c5383182a34c0b59", 0x23}, {&(0x7f0000001d40)="cd2905455dc1660b0bee3537ee9924c41a3e13cd0b2321ab11d673b471f7037732d5111681175984eac9aa3d2c365fba91246dfc350c41cd5b0a670f71a05a11961b25c7b86bd053368625ed2064b9c02faaf0934a70324046ca7a96a360a1d928dc1aadc7bdcabe2edf47f486dd2de3dfe9a5aea386f250f71393496a9f15fb66f9a1a75af7f65b7fe0198225ec1ca8475924a9182e01b2f7dd3722af44d712ac078479e85b4065859a48d81d026bdd7a1d51be", 0xb4}], 0x5, &(0x7f0000001e40)=[{0x84, 0x0, 0x101, "a541747f8ce3389bf9c1e9c65bbe6c2b76d31743f03da7bfc4cdd4fa7cd63d734ae401a3e9c4dccc2caa061709a546e76caf4040ced0e8c8499f4d91fd605fd11f7e348631cdbcbe90e1b86f810b7bbc482b08f394375f0e3f531e8a7b65cb25e18d5b7f024265f297d5e1ec8bab0efae3edaf36cd"}, {0x50, 0xff, 0x3, "b247c7deb8400726d869958d1fe6b0c74a321bedda9fadc39b5a791867496b73ff68848c5bae80f1cb4db8d86a8afb7339c65081c47c8da72f2b0d2e85db7b538fa1"}], 0xd4}}], 0x2, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000180), &(0x7f0000000400)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) prlimit64(r3, 0x3, &(0x7f00000000c0)={0x2, 0x7fffffff}, &(0x7f0000000340)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10) socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000580)={'wg0\x00'}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x900, 0x12) 1m41.80023352s ago: executing program 7 (id=4034): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) (async) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) (async) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000040)='./file0/file0\x00', 0x0) 1m41.712196426s ago: executing program 7 (id=4035): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_usb_connect$uac1(0x5, 0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000206b1d01014000010203010902780003010000060904000000010100000a24010200000201020a240803040040000000090401"], 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {0x4}, @raw32}], 0x1c) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) statx(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x1000, 0x1, &(0x7f0000002000)) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r5 = openat$ptp1(0xffffff9c, &(0x7f0000002100), 0x4000, 0x0) ioctl$PTP_CLOCK_GETCAPS(r5, 0x80503d01, &(0x7f0000000540)) openat$vimc0(0xffffff9c, &(0x7f0000002140), 0x2, 0x0) stat(&(0x7f0000002180)='./file0\x00', &(0x7f00000021c0)) getresgid(0x0, &(0x7f0000002280), &(0x7f00000022c0)) sendmmsg$unix(r2, &(0x7f0000000300), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='xprtrdma_frwr_maperr\x00', r6, 0xffffffe4}, 0x18) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 1m40.122206846s ago: executing program 7 (id=4039): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3}) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = syz_clone(0x24008000, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000e85000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) 1m39.979303173s ago: executing program 36 (id=4039): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3}) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = syz_clone(0x24008000, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000e85000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) 1m6.077888728s ago: executing program 4 (id=4201): bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x40086602, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040a"], 0xd) 1m5.989631738s ago: executing program 4 (id=4203): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) r1 = socket$nl_crypto(0x10, 0x3, 0x15) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x10000006, 0x2, 0x87, 0xffffffff, 0x40}) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 1m5.211881861s ago: executing program 4 (id=4205): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}]}, &(0x7f0000000140)=0xc) shutdown(r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0x10, 0x12) openat$uinput(0xffffff9c, &(0x7f0000000000), 0x802, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x8, 0x8208, 0x80, 0x1000000, 0x80000000, 0x6, 0x8000, r1}, &(0x7f00000000c0)=0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r5, &(0x7f0000000300)={0xa, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x3}, 0xf4ce, 0x3}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0x4, 0x4, 0x3d8, 0xffffffff, 0xf0, 0x200, 0xf0, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1e}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffffff], [0x3648ad5bcceede51], 'wg2\x00', 'ipvlan1\x00', {0xff}, {}, 0x1, 0x0, 0x7, 0x2}, 0x2f2, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@ecn={{0x24}, {0x1, 0x8, 0x2, 0x1}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x7ff}}}, {{@uncond, 0x0, 0xa4, 0x110}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x9, 0x45, 0x8, 0x1, 0x0, "23c3cead9629fcde62c54136d6ce61cd3242c5f4c03fe26a2f5b31d9c7edb2b2aedb07b6c701a2090959d0fefb5bb90748f642781d07f3d9ba7af8422e76dbcf"}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@common=@dst={{0x48}, {0x5, 0x1, 0x0, [0xed, 0x900, 0x1, 0x92e7, 0x1ff, 0x2, 0x6, 0x5, 0x9, 0x5, 0xa9, 0x9, 0x1004, 0x1000, 0x7, 0xcf], 0xa}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x434) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4d0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) r7 = fcntl$getown(r0, 0x9) r8 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAH\x06r\xac\xb77F\xdf\x1c\xcb\xd6\xce\x88\xf2\x01\xb8\xdd\xb5+\x9c:\x91\x98\xbe\x8e\xc1\x80L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad', 0x40, 0x0, 0x0) mq_getsetattr(r8, &(0x7f0000000000)={0x800, 0x4, 0x9, 0x9a}, 0x0) get_robust_list(r7, &(0x7f0000000240)=&(0x7f0000000200)={&(0x7f0000000040), 0x0, &(0x7f00000001c0)={&(0x7f0000000180)}}, &(0x7f00000002c0)=0xc) 1m4.242139122s ago: executing program 4 (id=4209): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) execve(0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@getqdisc={0x0, 0x26, 0x20, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x9, 0x9}, {0x8}, {0xc75263fd203ee0d2, 0xf}}, [{}, {}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000640)={0x8, {{0xa, 0x0, 0x7, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1, 0x2}}}, 0x104) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x110) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r3, 0x0, 0xd1, &(0x7f0000000000)=0xfd, 0x4) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1000810, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, 0x0, 0x0}}, 0x10) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000080)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x29, 0x81, &(0x7f00000002c0)=""/129}, &(0x7f0000000140)="2a36b60bfad6", 0x0, 0x9, 0x10000, 0x10000001, 0x0}) syz_open_dev$loop(&(0x7f0000000040), 0x34d, 0x101000) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r7, 0x400c4152, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r1, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 1m3.910071906s ago: executing program 4 (id=4214): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x1) write(r0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x0, 0x2, 0x3, 0x1, 0x6, 0x95}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x15}}) 1m3.433962239s ago: executing program 4 (id=4216): socket(0x10, 0x3, 0xc) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x8, 0x9bc6, 0x8, 0x4, 0x9], 0x1c, 0x0, 0x0, [{}]}, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x41, 0x0, 0x10820, 0x400}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}]}, 0x34}}, 0x4084) r4 = socket(0x10, 0x80002, 0x0) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x1, 0x2, 0x1, {0xa, 0x4e22, 0x5, @loopback, 0x4}}}, 0x3a) syz_emit_ethernet(0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600a843500140600fe9400000004000000000000000000bb068178b631915ba5000000000000000000000000c2238b0d3029436804ccd3d0eff24000000000000000ad986ee1ba46dd1f4cabb579", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x300}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x8) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x24082}, 0xa800) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000000080), 0x12) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000700)={'bond0\x00'}) 1m2.950879295s ago: executing program 37 (id=4216): socket(0x10, 0x3, 0xc) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x8, 0x9bc6, 0x8, 0x4, 0x9], 0x1c, 0x0, 0x0, [{}]}, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x41, 0x0, 0x10820, 0x400}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}]}, 0x34}}, 0x4084) r4 = socket(0x10, 0x80002, 0x0) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x1, 0x2, 0x1, {0xa, 0x4e22, 0x5, @loopback, 0x4}}}, 0x3a) syz_emit_ethernet(0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600a843500140600fe9400000004000000000000000000bb068178b631915ba5000000000000000000000000c2238b0d3029436804ccd3d0eff24000000000000000ad986ee1ba46dd1f4cabb579", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x300}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x8) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x24082}, 0xa800) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000000080), 0x12) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000700)={'bond0\x00'}) 28.081411868s ago: executing program 8 (id=4449): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x20004800) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x5000, 0x3, @mcast2, 0x3}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000190c0)={0x0}}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x2, 0x63d}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x5800, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) sendmmsg$inet_sctp(r3, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 26.901463594s ago: executing program 8 (id=4454): r0 = fsopen(&(0x7f0000000280)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='source0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@getchain={0x4c, 0x66, 0x4, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {}, {0x8, 0x8}, {0xd, 0x9}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x80000001}, {0x8, 0xb, 0xf232}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 24.648152433s ago: executing program 8 (id=4464): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04221f"], 0x22) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @empty, 0x3}, 0x1c) 9.810200319s ago: executing program 5 (id=4539): setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@local, @private=0xa010101}, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) ioctl$PPPIOCGUNIT(r1, 0x80047456, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='tlb_flush\x00', r3}, 0x18) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r6 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r6, 0x1000006) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x3, 0x2000, @private2}, @in={0x2, 0x4e23, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r8, 0x84, 0x65, &(0x7f0000000ac0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}], 0x10) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000580)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @ioapic={0x4000, 0x9c43, 0x3, 0x8, 0x0, [{0x4, 0x1, 0x5, '\x00', 0x3}, {0x80, 0xc7, 0x7, '\x00', 0x8}, {0x7, 0x7, 0x20}, {0x7, 0x1, 0xfd, '\x00', 0xc}, {0x5, 0xe2, 0x5, '\x00', 0x7}, {0x2, 0x7, 0x5, '\x00', 0x4}, {0x3, 0x0, 0x7, '\x00', 0x1}, {0x45, 0x5, 0x50, '\x00', 0x8}, {0xd, 0x7, 0x5, '\x00', 0xd}, {0x8, 0x2, 0x42, '\x00', 0x7}, {0x80, 0x0, 0x9, '\x00', 0x4}, {0x5, 0xff, 0x2c, '\x00', 0xe1}, {0x4, 0x2, 0x3, '\x00', 0x4}, {0x5, 0xce, 0x3, '\x00', 0xc}, {0xa, 0x9, 0xf, '\x00', 0x4}, {0x3, 0x3, 0x6, '\x00', 0x2}, {0xb, 0xbc, 0x1, '\x00', 0x48}, {0x0, 0x11, 0x0, '\x00', 0x3}, {0x1, 0x2, 0x2, '\x00', 0xa}, {0x8, 0x0, 0x2, '\x00', 0x7}, {0x5, 0xe9, 0x4, '\x00', 0x7}, {0x9, 0x8, 0x1, '\x00', 0xc1}, {0x9, 0x0, 0xb, '\x00', 0x5}, {0x6d, 0x9, 0xb7}]}}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000009c0)={0x0, 0x0, @pic={0x6, 0xf7, 0x62, 0x4, 0x78, 0x7, 0x0, 0x1, 0x2, 0xfe, 0x64, 0x2, 0xb6, 0x6, 0x8, 0x1}}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x64043, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000040)=0xfffffffffffffffe, 0x4) 9.082322482s ago: executing program 38 (id=4464): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04221f"], 0x22) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @empty, 0x3}, 0x1c) 9.041288452s ago: executing program 5 (id=4541): syz_pidfd_open(0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x402c4580, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback}, 0x20088) 8.121146758s ago: executing program 5 (id=4545): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x2, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000440)=[{0x4000800000000, 0x2, 0xffffffffffffffff}, {0x6, 0x7fff, 0x28ec}, {0x3, 0x0, 0xfff}], 0x3, 0xbfe, 0x19, 0x0, 0x2c, 0x20}) r0 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r1, &(0x7f0000000300), 0x5005) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) timer_create(0x3, 0x0, &(0x7f00000003c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) timer_delete(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') close(r0) 4.6452338s ago: executing program 5 (id=4559): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000680)='cmdline\x00') r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r3, 0x0) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000040)=""/3, 0x3}, {0x0, 0x3}], 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0}) mkdirat(r2, &(0x7f00000003c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000000701030000000000000003000000010c00064000000000000080"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x24, 0xf, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x45}, 0x800) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r8, 0x1}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000140)={r4}) r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r9, 0x0, 0x0) 4.069719935s ago: executing program 9 (id=4562): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x23e69000) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0xfff7}}], 0x400000000000172, 0x4001c00) 3.811000687s ago: executing program 9 (id=4563): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r4 = memfd_create(0x0, 0x7) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000000)={0x0, 0x2, 0xfffffffffffffffe, 0x4, 0x4000}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400120010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000200028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, 0x0, 0x0) r6 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000", @ANYBLOB], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xa9af, 0x10100, 0xfffffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f00009b3000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r12, 0x4010ae42, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r8, 0x8000156b, 0x4000, 0x2, 0x0, 0x0) syz_usb_disconnect(r6) recvmmsg(r5, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f00000028c0)=""/91, 0x5b}], 0x1}, 0x6}], 0x1, 0x14002, 0x0) bind(r5, &(0x7f0000000080)=@ieee802154={0x24, @short={0x2, 0x3, 0xfffe}}, 0x80) 3.664389506s ago: executing program 2 (id=4564): rename(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0004000500000000000072000000000000000000", 0x39}], 0x1) 3.656091386s ago: executing program 0 (id=4565): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}]}, &(0x7f0000000140)=0xc) shutdown(r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0x10, 0x12) openat$uinput(0xffffff9c, &(0x7f0000000000), 0x802, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x8, 0x8208, 0x80, 0x1000000, 0x80000000, 0x6, 0x8000, r1}, &(0x7f00000000c0)=0x20) r4 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r4, &(0x7f0000000300)={0xa, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x3}, 0xf4ce, 0x3}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0x4, 0x4, 0x3d8, 0xffffffff, 0xf0, 0x200, 0xf0, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1e}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffffff], [0x3648ad5bcceede51], 'wg2\x00', 'ipvlan1\x00', {0xff}, {}, 0x1, 0x0, 0x7, 0x2}, 0x2f2, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@ecn={{0x24}, {0x1, 0x8, 0x2, 0x1}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x7ff}}}, {{@uncond, 0x0, 0xa4, 0x110}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x9, 0x45, 0x8, 0x1, 0x0, "23c3cead9629fcde62c54136d6ce61cd3242c5f4c03fe26a2f5b31d9c7edb2b2aedb07b6c701a2090959d0fefb5bb90748f642781d07f3d9ba7af8422e76dbcf"}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@common=@dst={{0x48}, {0x5, 0x1, 0x0, [0xed, 0x900, 0x1, 0x92e7, 0x1ff, 0x2, 0x6, 0x5, 0x9, 0x5, 0xa9, 0x9, 0x1004, 0x1000, 0x7, 0xcf], 0xa}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x434) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4d0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) r7 = fcntl$getown(r0, 0x9) r8 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAH\x06r\xac\xb77F\xdf\x1c\xcb\xd6\xce\x88\xf2\x01\xb8\xdd\xb5+\x9c:\x91\x98\xbe\x8e\xc1\x80L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad', 0x40, 0x0, 0x0) mq_getsetattr(r8, &(0x7f0000000000)={0x800, 0x4, 0x9, 0x9a}, 0x0) get_robust_list(r7, &(0x7f0000000240)=&(0x7f0000000200)={&(0x7f0000000040), 0x0, &(0x7f00000001c0)={&(0x7f0000000180)}}, &(0x7f00000002c0)=0xc) 3.60648779s ago: executing program 2 (id=4566): socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$alg(0x26, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0xa00, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 3.577440837s ago: executing program 5 (id=4567): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x2, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000440)=[{0x4000800000000, 0x2, 0xffffffffffffffff}, {0x6, 0x7fff, 0x28ec}, {0x3, 0x0, 0xfff}], 0x3, 0xbfe, 0x19, 0x0, 0x2c, 0x20}) r0 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) syz_usbip_server_init(0x6) ptrace$ARCH_SHSTK_STATUS(0x1e, r1, &(0x7f0000000300), 0x5005) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) timer_create(0x3, 0x0, &(0x7f00000003c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) timer_delete(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') close(r0) 2.751360821s ago: executing program 0 (id=4568): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x20, 0x70bd26, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) (async) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000100)) (async) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000140), 0x486902, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000180), 0x4) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000005, 0x2010, r1, 0x0) (async) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)={0x43c, 0x3f3, 0x800, 0x70bd28, 0x25dfdbfd, {0x2, 0x2, 0x22, [0x7fff, 0x2, 0x6, 0x8, 0xff, 0x1000, 0x2, 0x40, 0x5, 0xa6, 0x9, 0x1, 0x46, 0x2, 0x1, 0x9046, 0x5, 0xca9, 0xac, 0x9, 0x400, 0x6f9d, 0x4, 0xda5, 0x3, 0x8, 0xb, 0x3, 0x0, 0x5, 0x2, 0x4ab, 0x1, 0x5, 0x8, 0x4, 0x5c5a, 0x7, 0x5, 0x7fff, 0xdc05, 0xfffffffd, 0x40, 0x3, 0x6, 0x2, 0x6, 0x1, 0xaa64b01, 0x10, 0xfffffff7, 0x5e7, 0x3, 0xffffffff, 0x4, 0x58e, 0x5, 0x7, 0x6, 0x1, 0x4, 0x8, 0x8, 0x9], [0xd, 0x2, 0xa94, 0xfaa, 0xa, 0x401, 0x2, 0xbca, 0x8, 0x10, 0x9, 0x6, 0x10, 0x0, 0x4, 0xfff, 0xfff, 0x4, 0x0, 0x7, 0xfffffffb, 0xafc, 0x0, 0x1, 0xa38, 0x10001, 0x1, 0x8, 0x5, 0x80, 0x7595, 0xe68e, 0x2, 0xfffffffc, 0x3, 0x5, 0xf9d, 0x1ff, 0x1f, 0xffffffff, 0x2, 0x5, 0xd, 0x40, 0x2, 0x4c99, 0x7, 0x4, 0x0, 0x1000, 0x8, 0x0, 0xffffffff, 0x200, 0x5, 0x8, 0x88, 0xb, 0x2, 0x0, 0x0, 0x80, 0x4, 0x5], [0xda, 0x8, 0x6bf5, 0x0, 0x7, 0x72d3, 0x3, 0x96, 0x8, 0xffffffff, 0x669a, 0xfffffffe, 0x7b58, 0xa, 0x7, 0x1, 0x9, 0x9, 0xd, 0x3, 0x8, 0x0, 0x67, 0x7fffffff, 0x3, 0x4, 0x5, 0x2, 0xc38b, 0x5, 0x1ff, 0xfffffff7, 0xffff, 0x8, 0x10, 0x95b8, 0x6, 0x6, 0x33, 0x9, 0x8, 0x1, 0x5, 0x1, 0x1, 0x7, 0x12000000, 0x5, 0x5, 0x7, 0x2, 0x1, 0x3, 0x0, 0x71bd, 0x1, 0x2f30, 0x8, 0x2, 0xd1d, 0x7, 0x8, 0x2, 0x7fff], [0x3b2, 0x5, 0x800, 0x0, 0xfc3, 0xda, 0x7, 0x1, 0x80, 0x5, 0xfffffffc, 0x2, 0x4, 0x6, 0xf33, 0x1, 0x9, 0x7, 0x8, 0x6, 0x10001, 0xffffffff, 0x0, 0x432, 0x56, 0x5, 0x4, 0xf, 0x36c0, 0x2, 0x9, 0x0, 0x8, 0x7fff, 0x10000, 0x4, 0x3, 0x5, 0x1ff, 0x100, 0x8, 0x5, 0x1, 0x4, 0x7, 0x0, 0x1ff, 0x8e, 0x6, 0x800, 0x3, 0x5, 0x3, 0x0, 0x2, 0x101, 0xf, 0xe, 0x80000000, 0xb, 0x6, 0x2, 0x5, 0x94], 0x1c, ['/dev/vcsa\x00', '\x00', ']-\x00', '/dev/vcsa\x00', '\x99\x00', '\x00', '\x00']}, ["", "", "", "", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0x810}, 0x84) (async) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0}, &(0x7f0000000780)=0xc) sched_setaffinity(r3, 0x8, &(0x7f00000007c0)=0x10001) (async) sendmsg$nl_generic(r1, &(0x7f0000001940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001900)={&(0x7f0000000840)={0x10a4, 0x22, 0x200, 0x70bd25, 0x25dfdbff, {0x10}, [@nested={0xc, 0xb0, 0x0, 0x1, [@nested={0x4, 0x1c}, @nested={0x4, 0x13b}]}, @generic="66c9972547d73ef576d06658269681e602ab55d1baa7f95930ea371968dea037d091686df2c63031b24372e31d400beb80cfc36fe67f5cceeea51cf4e6a4c3c5ec61f9150ef2ba143232dfdeb9cd0b3132c0746bda34a777a248fe616f9ce3d9ba5fd744c7c85c1e5d66a8db8a2c3f82817550e36a053f725fa86a7ef9be320d51", @generic="08efe4cf67f2b2a3d051c70540558d4544d490d255e9ad2a1db675d92a1c2425b52e431e8371578e881a7e4819e272d21143890a09805f7eab2d2b4731ea182276d3142f83ed7a6519775a0f4cc5a4bdcf31b56e34d2e53cace585a732964c1c155b90ed961210db4c1773f30989ddc87706add183a7ec8c86e39d22c838a7da791d7d504167c3cd004384fca285a51b804bdd0a5e3fb37dd9cb6f36bd261cfd349b58da7e7d1c89d8c33102f85c33c342ed4508d3a07dcf5a066addc3ad176377dba41842229eb331793131789bb1802a55c1f9824df13d603bb56c2f7a662268c75540d54d2684b37e0b4be4666e8188c9308fb8af900b22a42279540eb71f80b6f1e8cf1f89d6349cbb7bcfb3d6dd8d92700bd005a09381f5db7a4363c08ed0218e7561f1a9be5fe89bdf829b4395a6886ba8161d28065e1cf5929754c751189ee0a4276f4cb34b0c7ae2b28f60576961cbccf2386268aeffb5819e06c71597f3f246220656e44a7e9aca6a9fdfd7cb984658e74762bf71468fffbbd4e1744411cbac78146b9c55ccc6d83ae6a1e75a976d61bc412df89149cc415b763b71c764af1b860d9d9104055a1911588b52eb4c65e2677033570f0d38e72c679d351e6492960b95815c1d224226f0511b03ba19218a6e04ea9052a9fb98fa10c0f958684a38cae8a617d4e221b718844c21ca6121862b0d678e6354b6dbdc4cd46048b9fbe3d22b92ad4c2e90a348177d9e9fdc85df8deb14707af762a8dcc8c8e4cf48a7a23eafe459618d260d3bb7cf9ac2779931bd6052185b42c1553f5adf0b5d02a6c90fbef8b2339e9f7708e73831575710404d91ee46727d1accf7eddd68474e3032bea5dc32ba7504f5d72c4b0ce927c5482fd030749bc058c4e68fc495060eb7cac93fd6eadaef8ea9e22da6f2b8ce1cd52dd79316c98114f7c3530818ba6fc6f14e36a7466feb59180700330ba37cd3e3ee6b494a7789ac8daf5d74a0ae7b3afcf4784b806f830042700a2f143ccb35163ef721073fbb440b5e982b9521386962f131d1ebd3d6a59e1da02b41443572a9787d6680e24418dfde348180bc223ca004479640529556ae381010174d8dc2cf8350faedb4b60b5451607bf57943f5c8012c9f46eaac29da438e49f23a914229f02fed459516fa5588a2da376218b86e7fe3e50696668da5bcaddc68d58e915e789fca1b575617f385c007b8e8483fe05fd66722e22df9e980cdca6bfbb75901385e395e2796f0475897ba1c2e789d2739d88f8f5c36a0da5f2a246a1d71b7cde7f1463406d08125fda97ebf9198724344798bde224463c78723ab7279863bb92ab09f5645246cf81ecf16cbfe95c2f5e9455094c91154172c8f353f39f5d321445638bdc6ff83bb16517e74260878ad2aa99477d406937ff1007f862c8f9926a41e2a63359f1801145811f2a5f351f9b6160f6a863d5d2a376a866ccd2205a410389fa64d8b7c8215d5452e7bdf24cd6404ac180ff7ddfca56d64350e9acd63ccecbcf2efe64424ea0487a25b85c90c129746c128b7ce12d9d4c3a499849fe37be772495a4c426af2900d2421d07164890b4c1649e7f9600b025ea6956d27cdcc7447e21a44d5d6b249b29ab4a35a98b01db89aec4ea42bff28327d94c7a95a888cf1ead21d8cdf353f36826dc33bc68ce0a479d3a5478a0d35dbd516a2d9c0d432bffd5b3d115bb5648cf2c0aab9fa5f06e359cc491a43246adb00f2c3ddf1c51ab9ec5521d63aa7f1243b4ef1bf9c611a4112ad54a865e8bd44364242dda585bdbf5df8e8fd56d3fa193af5f380e85c4c64994e8eb81f024864b46e78d74065006087f433cb0d87ac0b35e8071ff91c5cb80f2a4ecded8c45ea82fab0f662c5860cecd354023b94d102866e78fdbf959ed790c8958461c41545cbd8cd2e428a781829054197ac465a5480c7d524a42b1227c5deb0fb7b7a03a75bb1e3a0f4b484f800cd553b4bc186f8d7ea8a3529f96cbb318e431f1964fc3cec2cf6cc4bc79d624eb1e6a32ccdd95f94964c36293e6d9287515fc3498c11a80b10ff22b36556fbfbcfea99cc4a14eec31e568338973c54a12b5426922980d087aa1aabf15998650bf0bc9173dbdf8609798fea16ca54aa1523f5fc3665cb5b41ac05bea68ea74f47e32f7aa60e677cd6cfb585221e119be2a25cb084797e6c92c031acaa98fca3aabebb87d7ee1914624a316ec185b6942a99484bf79cbcec442abb29634f55197e0ead09e43f0bb9108a725e200c59fde0f267d3f43c14572e15079ea1ddbf010c30e19799bad608ebbf29c7e5589ae39e67636bce16cdc722a3cc7a34dccab875505b331050c032223bd5b104f9619c07f8aa52e0b826bc0671b7ee0216b55eaa17d367091deb9e9772f503dfe30d5f8a057ff87c01917ef8193530b210b1b7ecd494cab5d99a35cadc8163acbeb26d45e3c94ba4cfa8bb833145234fadde1f6ee6002bd9dbdb1a842b05b25c0e1232515994e8919b0e5c1bd123ea73a3bb3f7c33afd531769b4ec905e7cb4a86332123ed2ab988dce93d9378a8755a54dd0ff71fb3b765e905712c3d792b0bb17c566ff3d9feab41ca190626282334db3fa2e94b6f82f2e8c1f83a35e9588a7e9068c6d3b712f2a28442fb536717e4ddcbb7f5c9efbda6ee554f4d2195f0fbee42594f9be80099e11f8a776496692de5b821d7d13271f37b2102af29c3c5969194d9e2c31e48bf553b422cd33137778a054d705bfae6e7b1baac2a7f6f7783a0ee4627409b352c1f62b67665a0388e57fb3765cc9c2c3ed7561146ce3dda5bc43877959dcf0f44b981f6e6ae7c761830b6b33a9b1e140c2bc77fa50e676f1cbc680faeb205198fd518c8467bf75079fa7160e437fdc0b66bfaa2f267084c29e0354390dcf6f862421ea65ec8289b30a1822ff00d87f7039dcaad5be9fbe10c97a97f3a4c4645e0e5b98d1b46e96b84a31687462c854cda8bc8d49296113eed888654c5de47a6e7be4403a53ff48fe732ced84bf54e5d215a1e5a11b1d98936f579ae5952797437245be70f7ece4088f791ec180a23bfefb2f681d5a8d257efe379e2ba1f1c2a0db067662c6b532615ecaa13e88fcc0388cb0e4ccc9e315143d087e640d72fef22fc08e9c2321d105442a1fa7608d734ef02274d76a02d8590283a999ec8376b430c9f78b5124872b6267dadc8f0d0df6005eba431bb5f81707acdbeabe5eefecc33e7cef15dfc6985d21a1327811a0f367a74af3a3c7fd6338759fc66632f79c147eaf3bc2898bb5cdb97221724a7acd2fc77e883e02cd45ae20ec812ba592cc7ab584edea10c4b8feab618663a771f21bc003eb820f8457997d668e0da1517e7e8e7e3a5b58184e2a9c8038875b4791c830c0e088d0a3f161a53f1c676aed6390b97b2d2ba2633de140470ce0d09de5e3d96872589aad9f2044d00e0f109cf01baccfca8fdcb06332e86622e2aa20f13cfa8a19c15c4dda5a65471e69fa2bfa50c0d0a9f33b6162f0f887daf2f95d5de774b550b572219fe979cf0965e0971160f8d9eb10c0a5a6a494a116bd1392ae6650e4fa278d8df034b006070e73990359b47177763f3d60c75c83e1aa5cbd5b087df114e60d47f0973184153c2b6462e9931eb15db740d2e2ebebfc803906e51175930c2f902f47f95522dbfe733eb6553f35e96005745051196496430ce66578f2bfe5c45102907f7fa64cb6c5406f5398546b9b071723febf7baa0dd9acb82e28bda4bae02ab6517ed58df7f6e16bb3b2a6bd730283be0994943ff4d6eb27304b8f39bce9c33ca88933ebc1452eac418cab1ce0ef42f7d088c932d663de35aca8e5e93ba3cb98fb9834c4176d08acd57d24de191a5ab0f737fa06735fdc419c4661fbb78bdec0ba9bee1cf28a4ccfa395f5bd4d998ab109084b4fbb91ef8230c9062478464fa3de42c053188fb47da4dcc3bbaf59feeccae5fe8f03deac15b44e814b6a9b537a7945b08154a95edd1b971a1446c7129c2aa6e8f492bf7a64856e7a88b4261053669c85d88ff6ed47af18f0f430a6bb91afd421a1e90c794f151f8251af681c7bfd2d0412e522f9a993f5e1c5b59ae96fc210b21e6e57b8b8169e9c0833887a5f999e75d1ecf575c136cd64702e4695f86fd39057d862b40133323ad4b0305821eef625bfd587a365dcb539695a71a2b1e81a1fa79343474a7c45683d2c7536ec654716c6d427d25cc41ad3314153e1e6357bc0bc1f5efed0dda66dbdaecd0bcc663644517160b37cfb17639d9e2ac9b0010198ceed907030990c184e47eb38aaf5e9165a504881fb2f009395f138b9728c4465a2fd3970e1783ef68507fd34495211f468792fc90ce694f87486dbfe4472f120b38aa2073641c0f7cf9668570c05f9b05ed529c0eb5d6f599b5969ccb4e817b332ec12a5539894032871bea6f051a5db2015821fc2f39696f880ecd8e3d8811eae7f927e0227950ac7d30d8b80915635fe49d2caa24b354fe9bf846b6d4b858b061ae3ea9736d9c984105d8e9f4d92af9ecb17291940692baaea2490a93b438c68cccbed1c588c9b0dca5d1212318e66c66ce3a29ae2c0b10344439935abd0e114a080eff08581bf9e216c0a33550b09c8a300cab2837453d0c0227b1550fa6639385c87e3b87a4110876157723944fd6a141c4cb1bd4428f92d9ad31933cf1becbe3e8e2e9414f9df39bcc1a51ac1088d0ff5e6566e9d0d0f9f62ae3b814c1867b8457155434880b00055acb8d0511e134dc771aadc377e35692119500451396bf0b4bc01b46383c1d1990dab07a86acbc290905a305c4fb27270ab61d64024defec1a7c41184d20193d457422999026347ce6f999931a9518ee599b6378a4ad8adc4375010c5be041fcfd7c1f9d16e0b0cf82b89b037ce0a3acbff3e636f44989b44563e38c2bacb0306a09dd63f66718bc67581123a525098b3ccd432e3acc52e259bc9297ed8e49bbe9332d411b2de1a264216cde9f1ede4b7547a16f552e23b6701fdf4be59041118546a1b86ba4bc0dbc254a8f1e39b922a134f8c48fc90ad5b56b9071581557e647738604a85f014809b524977564b232ba2f720db8d27ebfec6b3fccc4aabccab2f0461c5ad99c86bb26c7cb6e62edada05adca792ffbb3cdf81ab6e485c610a1cc1f491aab99b482bfeb025809850a8b1b99ef6d5b58053382088926e157afb6b9fd73caa8ae0ec7ce8e690a0958dd9228da434a4c8d154f04b16a81014fb9d5e1afafe7d920027eaf94bf7a51076ddc84bfd9ad044a2da25bc42db3604fb8d1bc40d44e8f5a1aab1759d4cfcb4ba7dbea791ee4edd60409c89d162cf2255e24346e3a78e1e697e8d7e6fe79688878f71beec85f27cdc1f4cd88f0976e124b6346a20cc6842e095480525710693338a1b19fbda7ef8707bdf81ae1440fbdf8b44c54ddf31f69745fe64989b828c59907aa1319416f3680f48110d4091577a73d5ef7f23aa43028a6b15a38409d1ade47b0800ed80ed5f6505f7ae6bdc76d80325c4ef2b7e33407f07fa56eefedb350f3cb0fde54f759d832b154000c273341cc30265af7fa5b5deb89e0a5862680ba5de24b399c3260f3701d11d6e9ca09be7a4b092b516d9a4486f9d0f8d8b66a60d335f5f0e953c9d4ce806408334c22907b878c684478c6eacdfc8c206d75d2b064338291091d8e2bc27f28dea6d15f100f2e140211583594739351decf7e811af7da7be875419faadf38e8acac7d885840c915b0266a24c5fd8e7dc0be9198de3a91ba01415f2f625f92b91511db6c3"]}, 0x10a4}}, 0x180) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001a00)={'erspan0\x00', &(0x7f00000019c0)={'ip_vti0\x00', 0x0, 0x40, 0x10, 0xf43, 0x3e, {{0x7, 0x4, 0x2, 0x4, 0x1c, 0x66, 0x0, 0x5, 0x2f, 0x0, @multicast1, @empty, {[@rr={0x7, 0x7, 0x97, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000001b00)={&(0x7f0000001980), 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)=@bridge_newneigh={0x50, 0x1c, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x8, 0xa9, 0x3}, [@NDA_PORT={0x6, 0x6, 0x4e24}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x5}]}, @NDA_LINK_NETNSID={0x8, 0xa, 0xfb5}, @NDA_MASTER={0x8, 0x9, 0x2}, @NDA_PROBES={0x8, 0x4, 0x9}, @NDA_SRC_VNI={0x8, 0xb, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x200000c0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000001b40)=0x3, 0x0, 0x4) write$uinput_user_dev(r1, &(0x7f0000001b80)={'syz0\x00', {0x7ff, 0x5, 0xfff, 0x581}, 0x41, [0x4, 0x8639, 0x6, 0x74, 0x4, 0x0, 0x7, 0x1, 0x7fffffff, 0x2, 0x9, 0x6f2c, 0x3, 0x1, 0x8000, 0x1da5e6f7, 0xc97, 0xfffffffb, 0xfffffff3, 0x9361, 0x400, 0x1, 0x9c, 0x8, 0x2, 0xc, 0x8000, 0x9, 0x4, 0x6, 0x5, 0x6, 0x4, 0x0, 0x4, 0x80000000, 0x4, 0x8000, 0xb566, 0x8, 0x40, 0x2, 0x2, 0xfffff840, 0x5, 0xe, 0x8, 0xffff, 0xffff8000, 0x3ff, 0x4000000, 0x200, 0x6, 0x1, 0x8, 0x7, 0x5, 0x400, 0xfffffffa, 0x4, 0x8, 0x4, 0x7, 0x7f5], [0x3ff, 0x1000, 0xfc4d, 0x9, 0x0, 0x4, 0x7, 0x970, 0x4, 0xc, 0xffffffff, 0xfffffffe, 0x9, 0x5eaa, 0x8, 0x8000, 0x8, 0x4, 0x7, 0x4, 0x2, 0xa39, 0x0, 0x7, 0xf, 0x8, 0x4, 0x80000000, 0x8, 0x3, 0x3, 0x9, 0x4, 0x10001, 0x6f6d18e, 0x26, 0x1ff, 0x5a5, 0xd347, 0x2, 0x6, 0x5, 0x80, 0xfffffffe, 0x0, 0x1, 0x6, 0xfff, 0x5, 0x2, 0x9, 0x80, 0xc6, 0x7ff, 0x91f8, 0x5d61, 0x100, 0x7bbb7319, 0x2, 0x1, 0x1, 0x7, 0x401, 0x7], [0x3, 0x4, 0x7ff, 0x2, 0x2, 0x4, 0x3, 0x8000, 0x6, 0x62d67474, 0x8, 0x5, 0xce14, 0x7fffffff, 0x8001, 0x7, 0x8, 0xfffffff9, 0xfffffff2, 0xad, 0x2, 0x3, 0x4, 0x4, 0xf091, 0xf, 0x81, 0x7ff, 0xae9, 0x400, 0x1, 0x2, 0x100, 0x100, 0xdc9, 0x555d, 0x4, 0x5, 0x5988, 0x450b, 0x6df4, 0xff, 0x8, 0x8, 0x3, 0x6, 0x81, 0x9, 0xa, 0x5, 0x4d, 0xbe6, 0x2, 0xd2c, 0x8, 0x4, 0x9, 0xfffffff9, 0x7, 0x81, 0xee7, 0x80000001, 0x3, 0x7], [0x4, 0x400, 0x9, 0x8, 0x8000, 0x9, 0x3, 0x5, 0xbfc, 0x4, 0x0, 0x1000, 0x0, 0x10001, 0x8364, 0x6, 0xc3a, 0x436f1564, 0x1000, 0x10000, 0xc8c2, 0x8, 0x1, 0x5, 0x80000001, 0x2, 0x7c3, 0x5c7, 0x0, 0x7, 0x7, 0x5, 0xfffffff7, 0x7, 0x8, 0x40000, 0x2, 0x9, 0x7, 0x6, 0x9, 0x317c, 0x1, 0x0, 0x100, 0xbb, 0x0, 0x4, 0x80000000, 0x3, 0x5, 0x40, 0x47a, 0x401, 0x2, 0x1, 0x0, 0x2, 0x1, 0x1, 0x7ff, 0x6, 0x8, 0x7ff]}, 0x45c) (async) recvfrom$inet_nvme(r1, &(0x7f0000002000)=""/6, 0x6, 0x100, 0x0, 0x0) (async) recvfrom$inet(r1, &(0x7f0000002040)=""/145, 0x91, 0x3, &(0x7f0000002100)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) (async) ioctl$SNDCTL_TMR_STOP(r1, 0x5403) r6 = socket$netlink(0x10, 0x3, 0x8) (async) ioctl$SNDCTL_TMR_METRONOME(r1, 0x40045407) (async) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000002140)={0x4, {0x4, 0x2, 0x4, 0x3, 0x2, 0x6}}) r7 = syz_io_uring_complete(r2) openat$audio(0xffffff9c, &(0x7f0000002180), 0x2, 0x0) (async) connect$pppl2tp(r7, &(0x7f00000021c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x4, 0x2, 0x0, 0x0, {0xa, 0x4e21, 0x3, @empty, 0xa}}}, 0x3a) (async) ioctl$KVM_GET_EMULATED_CPUID(r7, 0xc008ae09, &(0x7f0000002200)={0x2, 0x0, [{0xc0000000, 0x10001, 0x5, 0x866, 0x8, 0x4a8b, 0x80000000}, {0xa, 0x400, 0x0, 0x800, 0xc, 0x7c308ad5, 0x3}]}) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000002280)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000022c0)=0x28) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDDELIO(r8, 0x4b35, 0xfff) (async) quotactl_fd$Q_GETNEXTQUOTA(r8, 0xffffffff80000900, r4, &(0x7f0000002300)) (async) ioctl$SNDCTL_SEQ_NRMIDIS(r1, 0x8004510b, &(0x7f0000002380)) 2.746700119s ago: executing program 0 (id=4569): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0xc044) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x1000000) 2.632297437s ago: executing program 2 (id=4570): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x18, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x48840}, 0x0) syz_io_uring_setup(0x5f35, &(0x7f0000000100)={0x0, 0xd08f, 0x20, 0x2, 0x40}, &(0x7f0000000080), &(0x7f0000000180)) 2.531253027s ago: executing program 0 (id=4571): r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x3, 0x7fff, 0x21, @mcast1, @local, 0x700, 0x700, 0x560, 0x1e4}}) (rerun: 64) bind$packet(r0, &(0x7f0000000540)={0x11, 0x1c, r1, 0x1, 0x8}, 0x14) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000580)=@gcm_256={{0x303}, "3585557e1ef954d5", "6c43980b534feb5e0271336d34be2c470efa1d12171d408bb630c119a32413d2", "9db9c8a8", "1c3f5549a41ad4dc"}, 0x38) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) ptrace$setregs(0xf, r2, 0xa419, &(0x7f0000000040)="f25d0003ca2171465716") (async, rerun: 32) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) (async, rerun: 32) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async, rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0xc048aec8, &(0x7f0000000180)={0x20000083, 0xffffffffffffffff, 0xfffffffe}) (async, rerun: 32) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r10, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async, rerun: 64) sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x704214}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1476e5006b415d1fe90776cce6080b8718e8b27e9baef2d3a49fef8b347ab6eb20a16580e7bbba960b26fab6c6857800c6cd105d5f75f0357015e9d525bfad4c9b441b926ac903bf3fed29d10f6ae566839b1256324c7ec1853dce0d172ebc44209bba8fc922a051840f00000000000000ab535319730c718d664ff6a3cc5469ea0ea3507683fc169e849546f522bf2ebf6133023cd724f6c43207887dd49945492a79e090a196bdaea5db129e5bb6624024305ac3947d37d2d02e56871a407205ebe3cb634dbd588c72566e38de1b2aa3a3", @ANYRES16=r9, @ANYBLOB="000228bd7000fcdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x80) (rerun: 64) openat$comedi(0xffffffffffffff9c, 0x0, 0x401, 0x0) (async) mkdir(0x0, 0x0) (async) write$fb(0xffffffffffffffff, &(0x7f0000000440)="bba35ed6cde14b3a5436b204a0751393483fd2648f28ca068c2bcf136fc443c78faffd4b778db160b8c91a27e6b099dac754419b66b5f99ddab939a72270f4c2f7e2005340e3b7b3dd76ea936318970ecf91b3e39791782f671d34dc7093c818907364e4c8c492642d97bc8a05f920fb4171e292e66b638206fda6b7da2fb31da5064185f8561b97e2105f63b1f2fa0bad3568009c94d6426084219172d4ccaf5101df1a12c942f89cb29d3014bc94c58ed2d46f96cf4d76439e3a26dd8c3099caa2a441648b47fed159796a20b00e6c2073f7ba5511d3eabb45430f07e8", 0xde) 2.530737851s ago: executing program 2 (id=4572): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x1ff, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000080ff010000000000000009000000000a14000000000a010200000000000000000100000014000000100001c202000000000000000000000a"], 0x3c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000001}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x128, 0x1403, 0x4, 0x70bd2c, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'tunl0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'erspan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_bridge\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg0\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000091}, 0x4080) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r3, &(0x7f0000004400), 0x3fffffffffffff2, 0x6000000, 0x0) 2.268319728s ago: executing program 0 (id=4573): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000c78000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f00000003c0)) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x268, 0x1d4, 0x268, 0x140, 0x1d4, 0x2fc, 0x2fc, 0x2fc, 0x2fc, 0x2fc, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@remote, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xac}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0xffff0001, 0x751, @ipv4=@local, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@local, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x1}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @ECN={0x24, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24, '\x00', 0x0, 0xfffff000}}}}, 0x3ec) syz_open_dev$sg(&(0x7f00000008c0), 0x3, 0x280) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) r7 = openat$hwrng(0xffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$EVIOCGPROP(r7, 0x80404509, &(0x7f0000000a40)=""/221) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0xffffffffffffff0e) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r9}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x80400, 0x2, 0x1, 0x2ff}, &(0x7f0000000140), &(0x7f0000000280)) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f00000000c0)={0x80}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81e8943c, &(0x7f0000000580)) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)={0x2c, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x8e, 0x0, 0x1, [@nested={0x4, 0xe9}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c0000000206010006000006021c0000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c000280080001400000021c0c0001800800014000000a00080006400004000000000500020000000500010006000000"], 0x6c}}, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000b40)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0xc, 'gretap0\x00'}) 2.129915005s ago: executing program 0 (id=4574): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036812e0ff64000200475400f6", 0xe, 0x20000000, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006d41a010000190581"], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r5, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xfdfffffffffffffc, 0x7, 0x0, 0x7}) ioctl$SNDRV_PCM_IOCTL_XRUN(r5, 0x4148, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d04, 0x0, 0xe446}]}) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') read$FUSE(r8, &(0x7f00000095c0)={0x2020}, 0x2020) ioctl$TUNGETVNETLE(r8, 0x800454dd, &(0x7f00000001c0)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[], 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r9, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) 1.980263962s ago: executing program 9 (id=4575): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000", @ANYRES16=0x0, @ANYRESDEC], 0x34}}, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000050) r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x7, 0x0, &(0x7f0000000340)) read$char_usb(r1, &(0x7f0000000100)=""/162, 0xa2) epoll_pwait(r0, &(0x7f00000001c0)=[{}], 0x1, 0x7, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001a00010000000000fbdb5f250a808000000000000000000005001b000600000008001900", @ANYRES32=0x0, @ANYBLOB="9b210efbd813b94ec1c7945cb6a00b0eb7d03f02c6f913c2433b23a2713e8db9e9ec13a3819df2670ee3cb67fcca83edfa3c21e93f7836d2731a5b0e4a38ed06078314a6a6"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000280)={r6, r6, 0x1, 0x2, &(0x7f0000000100)="8d83", 0x9, 0x8, 0x2, 0x5508, 0xc338, 0x1, 0x7, 'syz0\x00'}) r7 = socket$inet6(0xa, 0x2, 0xffffffff) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@multicast, @random="bdfec6d04adb", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2e, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 1.729014685s ago: executing program 9 (id=4576): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}]}, &(0x7f0000000140)=0xc) shutdown(r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0x10, 0x12) openat$uinput(0xffffff9c, &(0x7f0000000000), 0x802, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x8, 0x8208, 0x80, 0x1000000, 0x80000000, 0x6, 0x8000, r1}, &(0x7f00000000c0)=0x20) r4 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r4, &(0x7f0000000300)={0xa, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x3}, 0xf4ce, 0x3}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0x4, 0x4, 0x3d8, 0xffffffff, 0xf0, 0x200, 0xf0, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1e}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffffff], [0x3648ad5bcceede51], 'wg2\x00', 'ipvlan1\x00', {0xff}, {}, 0x1, 0x0, 0x7, 0x2}, 0x2f2, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@ecn={{0x24}, {0x1, 0x8, 0x2, 0x1}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x7ff}}}, {{@uncond, 0x0, 0xa4, 0x110}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x9, 0x45, 0x8, 0x1, 0x0, "23c3cead9629fcde62c54136d6ce61cd3242c5f4c03fe26a2f5b31d9c7edb2b2aedb07b6c701a2090959d0fefb5bb90748f642781d07f3d9ba7af8422e76dbcf"}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@common=@dst={{0x48}, {0x5, 0x1, 0x0, [0xed, 0x900, 0x1, 0x92e7, 0x1ff, 0x2, 0x6, 0x5, 0x9, 0x5, 0xa9, 0x9, 0x1004, 0x1000, 0x7, 0xcf], 0xa}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x434) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4d0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) r7 = fcntl$getown(r0, 0x9) r8 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAH\x06r\xac\xb77F\xdf\x1c\xcb\xd6\xce\x88\xf2\x01\xb8\xdd\xb5+\x9c:\x91\x98\xbe\x8e\xc1\x80L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad', 0x40, 0x0, 0x0) mq_getsetattr(r8, &(0x7f0000000000)={0x800, 0x4, 0x9, 0x9a}, 0x0) get_robust_list(r7, &(0x7f0000000240)=&(0x7f0000000200)={&(0x7f0000000040), 0x0, &(0x7f00000001c0)={&(0x7f0000000180)}}, &(0x7f00000002c0)=0xc) 840.977772ms ago: executing program 9 (id=4577): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, &(0x7f00000003c0), 0x4003) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000001f40)=[{{&(0x7f0000000500)=@in6={0xa, 0x4e20, 0x41a62727, @local, 0xd3c8}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)="def6d0136c39b9a21e0caacebd5742576f71078019eae863f24a455c8495b03d30bf809704ce489b766dba31867c8e9d7283273c182cead8e9a561a221d367845061ba3254543bac188cee971c6902ebc3d9e1a9dfb9d4c7529abbcc10e19f6956aa128e880e5096cacb7bdc3de179e625db6dc46265b19e1450cb28fb94fd831fc8ebe44f5266fb37c9e20f65fcc509593d0fc23f20676f59030b4540130a89ae77f82b98aec876668cbcd8e8f79ef1876c2ded466efff9b2c1a7e717d374c35afb0ea998a14a55cc1a35c2a9f899797a12a348fd939c3e0f949f7abebf3a3a", 0xe0}, {&(0x7f0000000440)="ff89836ae0c3cf591ed8d4b5ddefd4df231458098151", 0x16}], 0x2, &(0x7f0000000880)=[{0x30, 0x119, 0x5, "701bf26d72195bdf55a51ad9fb52903b07ced76d714cc236167a792f08672575cef3fd57"}, {0x34, 0x1, 0x3, "3887f061ecbde53dd73bb21393fa8a8bbe666b61a780bea0014d5964ec86d730d871b734fe3fbe67"}, {0x100, 0x117, 0x6, "218415172da7747e7f2f4d5f445f2c37a2265e915ed894181fcec371bd28b2bd2e0d29ce06e9ce227acc0ea7cde6661a55d0f6ab4d5a916efc7b6e4ada5221f7106357c30bd334351a37ec1ccb2622e2be79b8705ef53daf5abbd8caecaf53ceb097156eb33492cab4ed666fc31c73a26d2be90bbb7458bec78ba195d67e22f98cf22c199a56a7dbdf107cbdaa8819aa9673c15dbba401e6f2dfeb9875d26f88a4f358960b267be23ec59794213d0ded96160c16accbad3f7defdb58b80156c977314138510824909edc5dec95afdfa3310530e923f7d0d1cc69d1b5c240787bb6bd6f35b6c3d31832e7feb8d99e9b65646a"}, {0x7c, 0x311, 0x9, "ac131f745514cf5a73b23c24bcafefcef6482d75d3189419c3e45423b59252ebaed6559d9518b28a7128bc35a7cb2dc8da213aa2c76d5ce4436ac49459c05450f3ba0cf5be62fd138f1bb4d39e70e1ffaa543572798944344c9bd7b7968096458e4f14046dc4e8e097aec98f4dd3"}, {0xd8, 0x0, 0x81, "1b21701dc720c8b058169f8969e5f5385fda69b2658e8874e94237e221fc007e35a39ba0d7794b1985bb406e8157b4ff7e22faf0a698c0a63eb9de5742633142d856c447b9f8027fa0b694f20786c6e0b20fc85fcb0bd174ec1f334a83f4d48a07fbcc85afbc3eb1d9d79981fc08f4736e9d110b34431e47bc63c20b8057d7750e9590ff0a4711560f2a7f7160eb43b2f5cfb2d4b097009dd6d188ee68526b89ab98ea1282872296f72fd01dd6bfd579579a200736488ddd776c3dc1fe3d98702b7275169a935105f9b393f1"}, {0xd0, 0x113, 0x4, "ec4e857fac2e7ad47a2bba039a3303eccf255ed78bd799d81ba20ce1b3f7855af1546d400c43119692eeca65d1435b5b7b8338bb2cc4aa94514227ac8f6d99366ba303790dafecc1a8000c931083e951ab539b0b25f65bda6c5e737253f65baf4338c8d88af10697c5683410ecaede0d0784c2b25c4c822c6eecb630148bd25a8dd9fec2af21e4349f60365aeba86f47c97cfd06c9c9bd4451902f08e1be659a54b383485f3d75559eff9aea8050d0ccd84085c95059218d6d8341bcd50eefe59f"}], 0x388}}, {{&(0x7f0000000700)=@hci={0x1f, 0x3, 0x3}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000780)="b9f3993b8e817c6ab67b543ce4d76faa86db45f48c3c2ab252ef3401667b12d1a22b0132d222d4d7a24ef651eb4a6344a6c7176eba970a6d4df64d309861a5f401424a2eedddf62856e3f2bac66e8c4c5eef2df1de876104688ad845a02bc2dda25bc4210416879b780f892456a5735df4310778", 0x74}, {&(0x7f0000000c40)="40e92eee865e5d0f6fcb12ead4381cc067aef3cb5156a7d07e9e80a00eb9f94b29e976f1f4d187dcddf7b6ee785c16fd9f3982935f5c97328cfaf177f8890d274edcac9b0be5ef9e4c1906da6dff3ba00d5037f7bcb3be35e8eac6bec28734cba9b838b1b4d96ec4b7e1952a551c2194da27e8917216fa642193bc52cf46da05038e06f2644080ec58fb7d6982d7a584792c5c838370b58000f7adc82442894e021a72b90515bb70f0a78ed0b963294e35e7950d7cbdc93e1d52f902764168b2d4e1ea604c6016cad4a5920aca648a49de1de5f7eb066aea935c54aed4da86c708aadd0688b2f53eaa221e", 0xeb}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000000800)="328d815cdf7875c53322fb4af573d790d5052be675c2f6dc3968e7c5383182a34c0b59", 0x23}, {&(0x7f0000001d40)="cd2905455dc1660b0bee3537ee9924c41a3e13cd0b2321ab11d673b471f7037732d5111681175984eac9aa3d2c365fba91246dfc350c41cd5b0a670f71a05a11961b25c7b86bd053368625ed2064b9c02faaf0934a70324046ca7a96a360a1d928dc1aadc7bdcabe2edf47f486dd2de3dfe9a5aea386f250f71393496a9f15fb66f9a1a75af7f65b7fe0198225ec1ca8475924a9182e01b2f7dd3722af44d712ac078479e85b4065859a48d81d026bdd7a1d51be", 0xb4}], 0x5, &(0x7f0000001e40)=[{0x84, 0x0, 0x101, "a541747f8ce3389bf9c1e9c65bbe6c2b76d31743f03da7bfc4cdd4fa7cd63d734ae401a3e9c4dccc2caa061709a546e76caf4040ced0e8c8499f4d91fd605fd11f7e348631cdbcbe90e1b86f810b7bbc482b08f394375f0e3f531e8a7b65cb25e18d5b7f024265f297d5e1ec8bab0efae3edaf36cd"}, {0x50, 0xff, 0x3, "b247c7deb8400726d869958d1fe6b0c74a321bedda9fadc39b5a791867496b73ff68848c5bae80f1cb4db8d86a8afb7339c65081c47c8da72f2b0d2e85db7b538fa1"}], 0xd4}}], 0x2, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000180), &(0x7f0000000400)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x1, 0x0) prlimit64(r3, 0x3, &(0x7f00000000c0)={0x2, 0x7fffffff}, &(0x7f0000000340)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10) socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000580)={'wg0\x00'}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x900, 0x12) 471.402517ms ago: executing program 2 (id=4578): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000000000000000000000000800003c8001000000000095000000000000008924c4fe2a8cb7fa6cec0b927bebe07e409eb0a70c76ce7c"], &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100}, 0x90) 470.69051ms ago: executing program 5 (id=4579): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002dc0)={0x18, 0x3, &(0x7f0000002cc0)=ANY=[@ANYRESHEX], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = socket(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000300)={0x1d, r6, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r5, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) getpid() syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000070961c40e90f55dbfb690102c9030902120001000000000904"], 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x7, 0x1, 0x3, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x14, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x0, 0x0, 0x0, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x9, 0x4, 0xff}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x9, 0xfd, 0x1, 0xff, 0xd}, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="f2ff40000514100481124b92d2a9bde3a568038464ad0f0c0d0a10030202000276002103100b10100a0e21000000000000fc30c1ff000a100300010009f70800"], 0x8, [{0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="300316fac2799e0a41d12a8e2f2d544ada873679112c5cefdbd7a068f4a52637ed4bec000000007fffffffc611b499c80f1ce12ccca036a3762fba53bdf37924c4ccfdb3563d3c2198001cef68b8d244792e5e8e7acbc3b0c130fca6c53f0e5a3c33cb365f6cc7231775fd632e9068eef00f1296c8f6a51f3b25476faf5a93252b977986537cbcc5e498661fbc5ce7a7d61b4cfe7ac4cdcc7022e3c3771d9c9720836640ae2e703f"]}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x449}}, {0x4b, &(0x7f0000000680)=ANY=[@ANYBLOB="4b03bc2b69cf4b1bb02abfa4d429a55e88ac0463c299f9d2dc90a2ab078c2a61bf46902efdc885c3d23f60e0246ca8add4bce27a49f0bbdf1c464a20b0b93fa4d3d4716c4c89f3a1413b49"]}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0xc7, &(0x7f0000000880)=@string={0xc7, 0x3, "af02588d9bec48ed4236e5ea265739a53b1397fdb7a47ecd6c440a3ce921cd7f9711cea9351be8cdf76a2d8cf6ad1f2d92b179b69b737f959419c945d425d94cf0a4fbc126bd7fd3b5bc5166a849f4d7e7303dcb104e2284e575dbbba7e3c45d8bc18a23c6b34f3ba8c9598049038986de35220ea54f0e28c259908485acdd6068c9f7d56834e606457a1bed5894351021868060c3942d75483e457bfc0daec12f6c0826f92db62afe4ea220a6d444324019cf005d492ac0f3aba2467a562e1d4bf16ab8c6"}}, {0x96, &(0x7f0000000a80)=@string={0x96, 0x3, "baa19a851675722a02e6c6774ed48fef59c088a4fe79ca627b82c8b7392297587c8f4d502c669923d66cf98b2f56793461c69fa6cb8b77ecfd44d5f0b2a9ef04223e80f48c7c87031e28662514a2ccec7ccafac85bfd7042a98969e5afb669356c362914ff7008c11205872a827478adad1bd5496541bc57131f84d0804a0c175e077493b9ec978277a97f0963e8553a20ff76b5"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x446}}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 470.524464ms ago: executing program 2 (id=4580): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0xffffffff, 0x1, 0x800001, 0x0, 0x0, 0xfffffffd) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'veth0_to_bond\x00'}) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r1, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f00000004c0)="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", 0xffffffffffffff94, 0x400401e, 0x0, 0x14) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000140)=0x3e, 0x4) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x2000000, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES8=r0, @ANYBLOB="6f803fb88de591d643d8cb2164bdadf0632f312402aa1730ff3e4ece88cf47c2c32e69a1adabd67ce6859956011e8d9c0e11f2112e15234a5331d0d8b2bd9b50b1fe9ccf4c4bc84014e81441cdbecc17ba07c241837ba9acca1df777b4dd58cf9ae44eb0ab2b221bcd907b929db732ac6fffbce5c3dd249f427e3ec5bb7cbc52503407d81798926a29ba446ffe09b6cff3b6ba09ab6175b120ceebff76cb55e654cecb891bfed49d4281f4fca2decec31f99d341163493013c72bf2f6fa1d414845c4bb7a8fddcea917c34d850fed0765bfab8", @ANYRES8=r3], 0x17) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, 0x0, 0xfffffffffffffd71) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) 0s ago: executing program 9 (id=4581): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x40) openat$uinput(0xffffff9c, &(0x7f0000000180), 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x80002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') ioprio_get$pid(0x3, 0x0) setpgid(r1, r1) setpgid(0x0, r1) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x3c, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x3c}}, 0x4004) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1f00, 0x12) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) kernel console output (not intermixed with test programs): ? __pfx___sys_sendmsg+0x10/0x10 [ 902.363278][T30859] ? fput+0x70/0xf0 [ 902.363292][T30859] __do_fast_syscall_32+0xe8/0x680 [ 902.363311][T30859] do_fast_syscall_32+0x32/0x80 [ 902.363328][T30859] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 902.363342][T30859] RIP: 0023:0xf705d579 [ 902.363352][T30859] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 902.363363][T30859] RSP: 002b:00000000f544d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 902.363373][T30859] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800004c0 [ 902.363380][T30859] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 902.363387][T30859] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 902.363393][T30859] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 902.363399][T30859] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 902.363413][T30859] [ 902.620136][T30871] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3888'. [ 903.199889][T30893] overlay: Unknown parameter '/' [ 904.207028][ T34] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 905.153743][T30935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3905'. [ 905.254821][T30935] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 905.257483][T30935] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 905.260069][T30935] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 905.794165][T13719] bridge_slave_1: left allmulticast mode [ 905.797115][T13719] bridge_slave_1: left promiscuous mode [ 905.800250][T13719] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.805240][T13719] bridge_slave_0: left allmulticast mode [ 905.807971][T13719] bridge_slave_0: left promiscuous mode [ 905.810770][T13719] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.042903][T30954] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3911'. [ 906.177222][T13719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 906.187153][T13719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 906.191875][T13719] bond0 (unregistering): Released all slaves [ 906.417764][ C0] sd 0:0:0:0: [sda] tag#13 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 906.422500][ C0] sd 0:0:0:0: [sda] tag#13 CDB: Test Unit Ready [ 907.078303][T30996] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 907.081261][T30996] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 907.085472][T30996] vhci_hcd vhci_hcd.0: Device attached [ 907.173903][T13719] hsr_slave_0: left promiscuous mode [ 907.177490][T13719] hsr_slave_1: left promiscuous mode [ 907.179897][T13719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.183253][T13719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 907.256595][T29010] Bluetooth: hci2: command 0x0c1a tx timeout [ 907.336732][ T5300] Bluetooth: hci3: command 0x0c1a tx timeout [ 907.346364][T29010] Bluetooth: hci1: command 0x0c1a tx timeout [ 907.363938][T28666] usb 38-1: SetAddress Request (66) to port 0 [ 907.366856][T28666] usb 38-1: new SuperSpeed USB device number 66 using vhci_hcd [ 907.716197][T13719] team0 (unregistering): Port device team_slave_1 removed [ 907.768168][T13719] team0 (unregistering): Port device team_slave_0 removed [ 908.186768][T13719] lo (unregistering): left allmulticast mode [ 908.427621][T31017] xt_policy: neither incoming nor outgoing policy selected [ 908.456323][T31019] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 908.459282][T31019] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 908.464157][T31019] vhci_hcd vhci_hcd.0: Device attached [ 908.574609][T31011] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 908.586727][T31020] vhci_hcd: connection closed [ 908.588271][T30571] vhci_hcd vhci_hcd.5: stop threads [ 908.592023][T30571] vhci_hcd vhci_hcd.5: release socket [ 908.595096][T30571] vhci_hcd vhci_hcd.5: disconnect device [ 908.656711][T28130] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 910.045152][T13719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.050827][T30997] vhci_hcd: connection reset by peer [ 910.118479][ T1140] vhci_hcd vhci_hcd.0: stop threads [ 910.120460][ T1140] vhci_hcd vhci_hcd.0: release socket [ 910.122322][ T1140] vhci_hcd vhci_hcd.0: disconnect device [ 910.126567][T13719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.334339][T31054] hsr0: entered promiscuous mode [ 910.336394][T31054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3934'. [ 910.341526][T31054] hsr_slave_0: left promiscuous mode [ 910.356977][T31054] hsr_slave_1: left promiscuous mode [ 910.406831][ C3] vxcan1: j1939_tp_rxtimer: 0xffff88804daa1000: rx timeout, send abort [ 910.411953][ C3] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804daa1000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 910.466915][T31060] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 910.499599][T31054] hsr0 (unregistering): left promiscuous mode [ 910.574242][T31061] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 910.576747][T31061] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 910.587593][T31061] vhci_hcd vhci_hcd.0: Device attached [ 910.836767][ T1333] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 910.988976][T31062] vhci_hcd: connection reset by peer [ 910.994566][ T1140] vhci_hcd vhci_hcd.4: stop threads [ 910.997353][ T1140] vhci_hcd vhci_hcd.4: release socket [ 911.000211][ T1140] vhci_hcd vhci_hcd.4: disconnect device [ 911.457919][T31079] netlink: 'syz.0.3941': attribute type 1 has an invalid length. [ 911.485492][T31079] gretap1: entered allmulticast mode [ 911.491331][T31079] bond0: (slave gretap1): making interface the new active one [ 911.494383][T31079] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 911.598402][T31088] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 911.601024][T31088] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 911.603969][T31088] vhci_hcd vhci_hcd.0: Device attached [ 911.710885][T31096] ip6_vti0 speed is unknown, defaulting to 1000 [ 911.817421][T31101] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 911.823152][T31101] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 911.831475][T31102] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3946'. [ 911.881809][T31096] lo speed is unknown, defaulting to 1000 [ 911.897594][ T75] usb 52-1: SetAddress Request (14) to port 0 [ 911.899960][ T75] usb 52-1: new SuperSpeed USB device number 14 using vhci_hcd [ 912.456687][T28666] usb 38-1: device descriptor read/8, error -110 [ 912.551115][T31108] FAULT_INJECTION: forcing a failure. [ 912.551115][T31108] name failslab, interval 1, probability 0, space 0, times 0 [ 912.556869][T31108] CPU: 0 UID: 0 PID: 31108 Comm: syz.0.3948 Tainted: G L syzkaller #0 PREEMPT(full) [ 912.556900][T31108] Tainted: [L]=SOFTLOCKUP [ 912.556907][T31108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 912.556917][T31108] Call Trace: [ 912.556923][T31108] [ 912.556930][T31108] dump_stack_lvl+0x16c/0x1f0 [ 912.556977][T31108] should_fail_ex+0x512/0x640 [ 912.557002][T31108] ? __kmalloc_node_noprof+0xcd/0x930 [ 912.557029][T31108] should_failslab+0xc2/0x120 [ 912.557059][T31108] __kmalloc_node_noprof+0xee/0x930 [ 912.557081][T31108] ? __get_vm_area_node+0x1dc/0x330 [ 912.557109][T31108] ? __vmalloc_node_range_noprof+0x405/0x16b0 [ 912.557134][T31108] ? __vmalloc_node_range_noprof+0x405/0x16b0 [ 912.557151][T31108] __vmalloc_node_range_noprof+0x405/0x16b0 [ 912.557172][T31108] ? __pfx___might_resched+0x10/0x10 [ 912.557201][T31108] ? rcu_is_watching+0x12/0xc0 [ 912.557228][T31108] ? xt_compat_init_offsets+0xe6/0x1f0 [ 912.557254][T31108] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 912.557275][T31108] ? __pfx___mutex_lock+0x10/0x10 [ 912.557303][T31108] ? do_ip6t_set_ctl+0x5ed/0xbc0 [ 912.557320][T31108] ? nf_setsockopt+0x8d/0xf0 [ 912.557348][T31108] ? ipv6_setsockopt+0x135/0x170 [ 912.557368][T31108] ? __sys_setsockopt+0x120/0x1a0 [ 912.557388][T31108] ? __ia32_sys_setsockopt+0xbc/0x160 [ 912.557412][T31108] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 912.557438][T31108] ? xt_compat_init_offsets+0xe6/0x1f0 [ 912.557457][T31108] __vmalloc_node_noprof+0xad/0xf0 [ 912.557477][T31108] ? xt_compat_init_offsets+0xe6/0x1f0 [ 912.557496][T31108] xt_compat_init_offsets+0xe6/0x1f0 [ 912.557515][T31108] translate_compat_table+0x1f3/0x18d0 [ 912.557547][T31108] ? __pfx_translate_compat_table+0x10/0x10 [ 912.557585][T31108] compat_do_replace+0x272/0x520 [ 912.557609][T31108] ? __pfx_compat_do_replace+0x10/0x10 [ 912.557644][T31108] ? sockopt_release_sock+0x52/0x60 [ 912.557669][T31108] ? __local_bh_enable_ip+0xa4/0x120 [ 912.557705][T31108] ? bpf_lsm_capable+0x9/0x10 [ 912.557731][T31108] ? security_capable+0x7e/0x260 [ 912.557762][T31108] do_ip6t_set_ctl+0x5ed/0xbc0 [ 912.557786][T31108] ? find_held_lock+0x2b/0x80 [ 912.557812][T31108] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 912.557842][T31108] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 912.557869][T31108] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 912.557900][T31108] ? __pfx___might_resched+0x10/0x10 [ 912.557934][T31108] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 912.557964][T31108] nf_setsockopt+0x8d/0xf0 [ 912.557996][T31108] ipv6_setsockopt+0x135/0x170 [ 912.558015][T31108] tcp_setsockopt+0xa7/0x100 [ 912.558039][T31108] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 912.558069][T31108] do_sock_setsockopt+0xf3/0x1d0 [ 912.558098][T31108] __sys_setsockopt+0x120/0x1a0 [ 912.558126][T31108] __ia32_sys_setsockopt+0xbc/0x160 [ 912.558146][T31108] ? __do_fast_syscall_32+0x9a/0x680 [ 912.558174][T31108] ? lockdep_hardirqs_on+0x7c/0x110 [ 912.558202][T31108] __do_fast_syscall_32+0xe8/0x680 [ 912.558230][T31108] do_fast_syscall_32+0x32/0x80 [ 912.558260][T31108] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 912.558281][T31108] RIP: 0023:0xf7fd4579 [ 912.558296][T31108] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 912.558316][T31108] RSP: 002b:00000000f54c655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 912.558335][T31108] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000029 [ 912.558345][T31108] RDX: 0000000000000040 RSI: 0000000080000000 RDI: 0000000000000248 [ 912.558356][T31108] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 912.558373][T31108] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 912.558385][T31108] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 912.558409][T31108] [ 912.558514][T31108] syz.0.3948: vmalloc error: size 65536, failed to allocated page array size 128, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 912.717581][T31108] CPU: 0 UID: 0 PID: 31108 Comm: syz.0.3948 Tainted: G L syzkaller #0 PREEMPT(full) [ 912.717609][T31108] Tainted: [L]=SOFTLOCKUP [ 912.717641][T31108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 912.717654][T31108] Call Trace: [ 912.717661][T31108] [ 912.717668][T31108] dump_stack_lvl+0x16c/0x1f0 [ 912.717701][T31108] warn_alloc+0x248/0x3a0 [ 912.717725][T31108] ? __pfx_warn_alloc+0x10/0x10 [ 912.717744][T31108] ? dump_stack_lvl+0x1a3/0x1f0 [ 912.717789][T31108] ? should_fail_ex+0x354/0x640 [ 912.717810][T31108] ? rcu_is_watching+0x12/0xc0 [ 912.717831][T31108] ? trace_kmalloc+0x2b/0xb0 [ 912.717852][T31108] ? __kmalloc_node_noprof+0x372/0x930 [ 912.717871][T31108] ? __get_vm_area_node+0x1dc/0x330 [ 912.717893][T31108] ? __vmalloc_node_range_noprof+0x405/0x16b0 [ 912.717912][T31108] __vmalloc_node_range_noprof+0x1309/0x16b0 [ 912.717929][T31108] ? __pfx___might_resched+0x10/0x10 [ 912.717951][T31108] ? rcu_is_watching+0x12/0xc0 [ 912.717971][T31108] ? xt_compat_init_offsets+0xe6/0x1f0 [ 912.717992][T31108] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 912.718008][T31108] ? __pfx___mutex_lock+0x10/0x10 [ 912.718029][T31108] ? do_ip6t_set_ctl+0x5ed/0xbc0 [ 912.718045][T31108] ? nf_setsockopt+0x8d/0xf0 [ 912.718066][T31108] ? ipv6_setsockopt+0x135/0x170 [ 912.718080][T31108] ? __sys_setsockopt+0x120/0x1a0 [ 912.718097][T31108] ? __ia32_sys_setsockopt+0xbc/0x160 [ 912.718114][T31108] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 912.718135][T31108] ? xt_compat_init_offsets+0xe6/0x1f0 [ 912.718149][T31108] __vmalloc_node_noprof+0xad/0xf0 [ 912.718163][T31108] ? xt_compat_init_offsets+0xe6/0x1f0 [ 912.718179][T31108] xt_compat_init_offsets+0xe6/0x1f0 [ 912.718194][T31108] translate_compat_table+0x1f3/0x18d0 [ 912.718219][T31108] ? __pfx_translate_compat_table+0x10/0x10 [ 912.718250][T31108] compat_do_replace+0x272/0x520 [ 912.718267][T31108] ? __pfx_compat_do_replace+0x10/0x10 [ 912.718284][T31108] ? sockopt_release_sock+0x52/0x60 [ 912.718303][T31108] ? __local_bh_enable_ip+0xa4/0x120 [ 912.718332][T31108] ? bpf_lsm_capable+0x9/0x10 [ 912.718353][T31108] ? security_capable+0x7e/0x260 [ 912.718379][T31108] do_ip6t_set_ctl+0x5ed/0xbc0 [ 912.718394][T31108] ? find_held_lock+0x2b/0x80 [ 912.718413][T31108] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 912.718438][T31108] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 912.718457][T31108] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 912.718482][T31108] ? __pfx___might_resched+0x10/0x10 [ 912.718508][T31108] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 912.718534][T31108] nf_setsockopt+0x8d/0xf0 [ 912.718558][T31108] ipv6_setsockopt+0x135/0x170 [ 912.718575][T31108] tcp_setsockopt+0xa7/0x100 [ 912.718594][T31108] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 912.718617][T31108] do_sock_setsockopt+0xf3/0x1d0 [ 912.718641][T31108] __sys_setsockopt+0x120/0x1a0 [ 912.718662][T31108] __ia32_sys_setsockopt+0xbc/0x160 [ 912.718679][T31108] ? __do_fast_syscall_32+0x9a/0x680 [ 912.718702][T31108] ? lockdep_hardirqs_on+0x7c/0x110 [ 912.718724][T31108] __do_fast_syscall_32+0xe8/0x680 [ 912.718752][T31108] do_fast_syscall_32+0x32/0x80 [ 912.718775][T31108] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 912.718793][T31108] RIP: 0023:0xf7fd4579 [ 912.718805][T31108] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 912.718819][T31108] RSP: 002b:00000000f54c655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 912.718834][T31108] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000029 [ 912.718845][T31108] RDX: 0000000000000040 RSI: 0000000080000000 RDI: 0000000000000248 [ 912.718854][T31108] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 912.718862][T31108] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 912.718871][T31108] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 912.718891][T31108] [ 912.718981][T31108] Mem-Info: [ 912.848441][T28666] usb usb38-port1: attempt power cycle [ 912.849290][T31108] active_anon:5588 inactive_anon:1666 isolated_anon:0 [ 912.849290][T31108] active_file:2616 inactive_file:6944 isolated_file:0 [ 912.849290][T31108] unevictable:1768 dirty:115 writeback:0 [ 912.849290][T31108] slab_reclaimable:7117 slab_unreclaimable:64125 [ 912.849290][T31108] mapped:25720 shmem:5476 pagetables:1971 [ 912.849290][T31108] sec_pagetables:326 bounce:0 [ 912.849290][T31108] kernel_misc_reclaimable:0 [ 912.849290][T31108] free:67924 free_pcp:15148 free_cma:0 [ 912.876573][T31108] Node 0 active_anon:756kB inactive_anon:0kB active_file:472kB inactive_file:4kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:0kB writeback:0kB shmem:3544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9856kB pagetables:1876kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB [ 912.886699][T31108] Node 1 active_anon:18296kB inactive_anon:6664kB active_file:9992kB inactive_file:27772kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:102860kB dirty:460kB writeback:0kB shmem:15160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5188kB pagetables:6008kB sec_pagetables:172kB all_unreclaimable? no Balloon:0kB [ 912.897229][T31108] Node 0 DMA free:2648kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 912.907412][T31108] lowmem_reserve[]: 0 289 289 289 289 [ 912.909428][T31108] Node 0 DMA32 free:24560kB boost:8192kB min:21524kB low:24856kB high:28188kB reserved_highatomic:0KB free_highatomic:0KB active_anon:756kB inactive_anon:0kB active_file:472kB inactive_file:4kB unevictable:3536kB writepending:0kB zspages:784kB present:1032196kB managed:296820kB mlocked:0kB bounce:0kB free_pcp:6228kB local_pcp:280kB free_cma:0kB [ 912.920436][T31108] lowmem_reserve[]: 0 0 0 0 0 [ 912.922096][T31108] Node 1 DMA32 free:244488kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18296kB inactive_anon:6664kB active_file:9992kB inactive_file:27772kB unevictable:3536kB writepending:468kB zspages:6304kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:58568kB local_pcp:12684kB free_cma:0kB [ 912.933206][T31108] lowmem_reserve[]: 0 0 0 0 0 [ 912.934884][T31108] Node 0 DMA: 34*4kB (U) 20*8kB (U) 13*16kB (UE) 11*32kB (UE) 4*64kB (UE) 0*128kB 0*256kB 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 2648kB [ 912.942837][T31108] Node 0 DMA32: 274*4kB (UME) 549*8kB (UME) 302*16kB (UME) 201*32kB (UME) 64*64kB (UME) 19*128kB (UM) 3*256kB (UME) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 24560kB [ 912.948613][T31108] Node 1 DMA32: 1704*4kB (UME) 3208*8kB (UM) 3249*16kB (UME) 110*32kB (UME) 262*64kB (UME) 220*128kB (UME) 135*256kB (UME) 81*512kB (UM) 35*1024kB (UE) 0*2048kB 0*4096kB = 244784kB [ 912.954710][T31108] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 912.958467][T31108] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 912.961603][T31108] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 912.964830][T31108] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 912.968259][T31108] 14882 total pagecache pages [ 912.969922][T31108] 650 pages in swap cache [ 912.971416][T31108] Free swap = 99464kB [ 912.972867][T31108] Total swap = 124996kB [ 912.974350][T31108] 524155 pages RAM [ 912.975729][T31108] 0 pages HighMem/MovableOnly [ 912.977780][T31108] 209057 pages reserved [ 912.979237][T31108] 0 pages cma reserved [ 913.073961][T31115] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 913.076224][T31115] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 913.086737][T31115] vhci_hcd vhci_hcd.0: Device attached [ 913.112599][T31116] vhci_hcd: connection closed [ 913.114073][ T4787] vhci_hcd vhci_hcd.0: stop threads [ 913.117955][ T4787] vhci_hcd vhci_hcd.0: release socket [ 913.126575][ T4787] vhci_hcd vhci_hcd.0: disconnect device [ 913.251749][T31122] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 913.253937][T31122] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 913.257552][T31122] vhci_hcd vhci_hcd.0: Device attached [ 913.408803][T28666] usb usb38-port1: unable to enumerate USB device [ 913.506700][T28130] usb 47-1: new low-speed USB device number 8 using vhci_hcd [ 913.797251][T31132] fuse: Bad value for 'fd' [ 913.838977][T31123] vhci_hcd: connection reset by peer [ 913.841508][T13331] vhci_hcd vhci_hcd.5: stop threads [ 913.843496][T13331] vhci_hcd vhci_hcd.5: release socket [ 913.845487][T13331] vhci_hcd vhci_hcd.5: disconnect device [ 914.091421][T29010] Bluetooth: hci1: unexpected event for opcode 0x0c0d [ 914.162815][T31139] FAULT_INJECTION: forcing a failure. [ 914.162815][T31139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 914.168873][T31139] CPU: 2 UID: 0 PID: 31139 Comm: syz.4.3956 Tainted: G L syzkaller #0 PREEMPT(full) [ 914.168891][T31139] Tainted: [L]=SOFTLOCKUP [ 914.168895][T31139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 914.168903][T31139] Call Trace: [ 914.168911][T31139] [ 914.168915][T31139] dump_stack_lvl+0x16c/0x1f0 [ 914.168936][T31139] should_fail_ex+0x512/0x640 [ 914.168951][T31139] _copy_from_iter+0x2a4/0x16c0 [ 914.168966][T31139] ? __alloc_skb+0x220/0x410 [ 914.168977][T31139] ? __alloc_skb+0x35d/0x410 [ 914.168989][T31139] ? __pfx__copy_from_iter+0x10/0x10 [ 914.169001][T31139] ? netlink_autobind.isra.0+0x158/0x370 [ 914.169022][T31139] netlink_sendmsg+0x820/0xdd0 [ 914.169040][T31139] ? __pfx_netlink_sendmsg+0x10/0x10 [ 914.169058][T31139] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 914.169078][T31139] ____sys_sendmsg+0xa5d/0xc30 [ 914.169097][T31139] ? __pfx_____sys_sendmsg+0x10/0x10 [ 914.169113][T31139] ? get_compat_msghdr+0x11a/0x170 [ 914.169133][T31139] ___sys_sendmsg+0x134/0x1d0 [ 914.169148][T31139] ? __pfx____sys_sendmsg+0x10/0x10 [ 914.169167][T31139] ? find_held_lock+0x2b/0x80 [ 914.169190][T31139] __sys_sendmsg+0x16d/0x220 [ 914.169204][T31139] ? __pfx___sys_sendmsg+0x10/0x10 [ 914.169226][T31139] __do_fast_syscall_32+0xe8/0x680 [ 914.169245][T31139] do_fast_syscall_32+0x32/0x80 [ 914.169262][T31139] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 914.169276][T31139] RIP: 0023:0xf7f22579 [ 914.169285][T31139] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 914.169297][T31139] RSP: 002b:00000000f541655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 914.169307][T31139] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000540 [ 914.169314][T31139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 914.169321][T31139] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 914.169327][T31139] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 914.169333][T31139] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 914.169346][T31139] [ 915.486639][T31090] vhci_hcd: connection reset by peer [ 915.489469][ T4787] vhci_hcd vhci_hcd.7: stop threads [ 915.491869][ T4787] vhci_hcd vhci_hcd.7: release socket [ 915.493867][ T4787] vhci_hcd vhci_hcd.7: disconnect device [ 915.976631][ T1333] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 916.490467][T31163] netlink: 63 bytes leftover after parsing attributes in process `syz.0.3963'. [ 916.751420][T31175] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 916.753762][T31175] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 916.756425][T31175] vhci_hcd vhci_hcd.0: Device attached [ 916.902967][T31187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3971'. [ 917.051935][T31197] FAULT_INJECTION: forcing a failure. [ 917.051935][T31197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 917.057521][T31197] CPU: 3 UID: 0 PID: 31197 Comm: syz.0.3975 Tainted: G L syzkaller #0 PREEMPT(full) [ 917.057549][T31197] Tainted: [L]=SOFTLOCKUP [ 917.057555][T31197] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 917.057565][T31197] Call Trace: [ 917.057575][T31197] [ 917.057582][T31197] dump_stack_lvl+0x16c/0x1f0 [ 917.057612][T31197] should_fail_ex+0x512/0x640 [ 917.057635][T31197] __fpu_restore_sig+0xfe/0x1370 [ 917.057662][T31197] ? __lock_acquire+0x436/0x2890 [ 917.057678][T31197] ? __pfx___fpu_restore_sig+0x10/0x10 [ 917.057710][T31197] ? find_held_lock+0x2b/0x80 [ 917.057745][T31197] ? __might_fault+0xe3/0x190 [ 917.057765][T31197] ? __might_fault+0x13b/0x190 [ 917.057789][T31197] fpu__restore_sig+0x151/0x190 [ 917.057822][T31197] ia32_restore_sigcontext+0x44a/0x630 [ 917.057841][T31197] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 917.057865][T31197] ? rcu_is_watching+0x12/0xc0 [ 917.057887][T31197] ? _raw_spin_unlock_irq+0x23/0x50 [ 917.057910][T31197] ? lockdep_hardirqs_on+0x7c/0x110 [ 917.057938][T31197] __do_compat_sys_rt_sigreturn+0x18c/0x270 [ 917.057958][T31197] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 917.057978][T31197] ? rcu_is_watching+0x12/0xc0 [ 917.058026][T31197] do_int80_emulation+0x104/0x480 [ 917.058058][T31197] asm_int80_emulation+0x1a/0x20 [ 917.058076][T31197] RIP: 0023:0xf7fd4577 [ 917.058090][T31197] Code: 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 [ 917.058108][T31197] RSP: 002b:00000000f54c655c EFLAGS: 00000296 [ 917.058124][T31197] RAX: 00000000000000ef RBX: 0000000000000005 RCX: 0000000000000003 [ 917.058136][T31197] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 917.058147][T31197] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 917.058159][T31197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 917.058170][T31197] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 917.058192][T31197] [ 917.059239][T31199] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 917.147505][T31199] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 917.148232][T31199] vhci_hcd vhci_hcd.0: Device attached [ 917.332515][ T1333] libceph: connect (1)[c::]:6789 error -101 [ 917.335498][ T1333] libceph: mon0 (1)[c::]:6789 connect error [ 917.396702][T28666] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 917.577918][T31177] vhci_hcd: connection reset by peer [ 917.580599][ T4787] vhci_hcd vhci_hcd.7: stop threads [ 917.582544][ T4787] vhci_hcd vhci_hcd.7: release socket [ 917.584747][ T4787] vhci_hcd vhci_hcd.7: disconnect device [ 917.584796][ T75] usb 52-1: device descriptor read/8, error -110 [ 917.590915][T31200] vhci_hcd: connection reset by peer [ 917.593813][ T4787] vhci_hcd vhci_hcd.4: stop threads [ 917.595694][ T4787] vhci_hcd vhci_hcd.4: release socket [ 917.597942][ T4787] vhci_hcd vhci_hcd.4: disconnect device [ 917.607127][ T1333] libceph: connect (1)[c::]:6789 error -101 [ 917.609939][ T1333] libceph: mon0 (1)[c::]:6789 connect error [ 917.826819][T31194] ceph: No mds server is up or the cluster is laggy [ 917.987116][ T75] usb usb52-port1: attempt power cycle [ 918.228405][T31235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3981'. [ 918.557355][ T75] usb usb52-port1: unable to enumerate USB device [ 918.606732][T28130] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 918.771373][T31246] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 918.782486][ T75] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 918.859573][ T75] hid-generic 0000:0000:0000.0013: hidraw1: HID v0.00 Device [syz1] on syz0 [ 918.929280][T31251] fido_id[31251]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 919.005957][T31262] netlink: 'syz.5.3986': attribute type 11 has an invalid length. [ 919.009713][T31262] netlink: 448 bytes leftover after parsing attributes in process `syz.5.3986'. [ 919.257358][T31274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3991'. [ 919.276602][ T142] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 919.453083][ T142] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 919.459731][ T142] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.463403][ T142] usb 10-1: Product: syz [ 919.468018][ T142] usb 10-1: Manufacturer: syz [ 919.471738][ T142] usb 10-1: SerialNumber: syz [ 919.482894][ T142] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 919.577112][ T142] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 919.587055][T31279] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 919.589288][T31279] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 919.611709][T31279] vhci_hcd vhci_hcd.0: Device attached [ 919.811684][ T75] usb 10-1: USB disconnect, device number 4 [ 919.817730][ C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 919.856618][ T1333] usb 37-1: new low-speed USB device number 29 using vhci_hcd [ 919.909357][T31280] vhci_hcd: connection reset by peer [ 919.915540][ T90] vhci_hcd vhci_hcd.0: stop threads [ 919.925524][ T90] vhci_hcd vhci_hcd.0: release socket [ 919.927512][ T90] vhci_hcd vhci_hcd.0: disconnect device [ 919.961651][T31290] 9pnet_virtio: no channels available for device syz [ 919.972627][T31289] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 920.616732][ T142] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 920.619469][ T142] ath9k_htc: Failed to initialize the device [ 920.624168][ T75] usb 10-1: ath9k_htc: USB layer deinitialized [ 921.244991][T31308] netlink: 'syz.7.4002': attribute type 10 has an invalid length. [ 921.264189][T31308] 8021q: adding VLAN 0 to HW filter on device team0 [ 921.268857][T31308] bond0: (slave team0): Enslaving as an active interface with an up link [ 921.281781][T31308] netlink: 'syz.7.4002': attribute type 10 has an invalid length. [ 921.323428][T31308] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 921.338311][T31308] siw: device registration error -23 [ 921.699512][T31328] syzkaller0: entered promiscuous mode [ 921.701998][T31328] syzkaller0: entered allmulticast mode [ 922.507721][T31331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4010'. [ 922.546714][T28666] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 923.170858][T31340] No control pipe specified [ 923.263632][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 923.263647][ T40] audit: type=1326 audit(1766989096.117:4987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31341 comm="syz.5.4014" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d598 code=0x7ffc0000 [ 923.281914][ T40] audit: type=1326 audit(1766989096.127:4988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31341 comm="syz.5.4014" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d598 code=0x7ffc0000 [ 923.292327][ T40] audit: type=1326 audit(1766989096.127:4989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31341 comm="syz.5.4014" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 923.308685][ T40] audit: type=1326 audit(1766989096.127:4990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31341 comm="syz.5.4014" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 923.315772][ T40] audit: type=1326 audit(1766989096.127:4991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31341 comm="syz.5.4014" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 923.322809][ T40] audit: type=1326 audit(1766989096.127:4992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31341 comm="syz.5.4014" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 923.330944][ T40] audit: type=1326 audit(1766989096.127:4993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31341 comm="syz.5.4014" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 923.338396][ T40] audit: type=1326 audit(1766989096.127:4994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31341 comm="syz.5.4014" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 923.345392][ T40] audit: type=1326 audit(1766989096.127:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31341 comm="syz.5.4014" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 923.352567][ T40] audit: type=1326 audit(1766989096.127:4996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31341 comm="syz.5.4014" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 924.374466][T31358] netlink: 'syz.7.4019': attribute type 27 has an invalid length. [ 924.704531][T31358] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.708325][T31358] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.709852][T31361] 9pnet_fd: p9_fd_create_tcp (31361): problem connecting socket to 127.0.0.1 [ 924.735550][T31361] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4020'. [ 924.888323][T31358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 924.899099][T31358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 925.006748][ T1333] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 925.096003][T31359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.099853][T31359] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.104129][T31359] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 925.117559][T13331] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.120676][T13331] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.124246][T13331] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.137364][T13331] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.224355][ T5300] Bluetooth: hci1: connection err: -111 [ 925.915524][T31388] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4029'. [ 926.339963][T30729] bond0: (slave syz_tun): Releasing backup interface [ 926.867583][ T5300] Bluetooth: hci1: command 0x0c1a tx timeout [ 927.038485][T31421] mkiss: ax0: crc mode is auto. [ 927.971559][T31420] comedi comedi2: reset error (fatal) [ 928.095667][ T5952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 928.101289][ T5952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 928.106075][ T5952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 928.111240][ T5952] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 928.124434][ T5952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 928.147669][T31430] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4042'. [ 928.151493][T31430] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4042'. [ 928.153996][T31426] ip6_vti0 speed is unknown, defaulting to 1000 [ 928.255901][T31426] lo speed is unknown, defaulting to 1000 [ 928.369003][ T46] bridge_slave_1: left allmulticast mode [ 928.371002][ T46] bridge_slave_1: left promiscuous mode [ 928.372999][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.381643][ T46] bridge_slave_0: left allmulticast mode [ 928.384199][ T46] bridge_slave_0: left promiscuous mode [ 928.388714][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.532893][T31437] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 928.535182][T31437] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 928.553768][T31437] vhci_hcd vhci_hcd.0: Device attached [ 928.794923][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 928.799716][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 928.803702][ T46] bond0 (unregistering): (slave team0): Releasing backup interface [ 928.807862][ T46] bond0 (unregistering): Released all slaves [ 928.836758][T28130] usb 48-1: SetAddress Request (34) to port 0 [ 928.839396][T28130] usb 48-1: new SuperSpeed USB device number 34 using vhci_hcd [ 928.870876][T31426] chnl_net:caif_netlink_parms(): no params data found [ 928.936662][ T5952] Bluetooth: hci1: command 0x0c1a tx timeout [ 928.984590][T31426] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.988209][T31426] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.991413][T31426] bridge_slave_0: entered allmulticast mode [ 928.995427][T31426] bridge_slave_0: entered promiscuous mode [ 929.000868][T31426] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.004085][T31426] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.007886][T31426] bridge_slave_1: entered allmulticast mode [ 929.011949][T31426] bridge_slave_1: entered promiscuous mode [ 929.042712][T31426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 929.062756][T31426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 929.079478][T31426] team0: Port device team_slave_0 added [ 929.083081][T31426] team0: Port device team_slave_1 added [ 929.120356][T31426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 929.122864][T31426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 929.166548][T31426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 929.207052][T31426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 929.209626][T31426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 929.218213][T31426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 929.287214][ T46] hsr_slave_0: left promiscuous mode [ 929.289812][ T46] hsr_slave_1: left promiscuous mode [ 929.291947][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 929.295963][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 929.640479][ T46] team0 (unregistering): Port device team_slave_1 removed [ 929.668356][ T46] team0 (unregistering): Port device team_slave_0 removed [ 929.978054][T31426] hsr_slave_0: entered promiscuous mode [ 929.980386][T31426] hsr_slave_1: entered promiscuous mode [ 930.129760][T31426] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 930.141469][T31426] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 930.148106][T31426] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 930.153116][T31426] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 930.228181][ T5952] Bluetooth: hci0: command tx timeout [ 930.243957][T31426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 930.264858][T31426] 8021q: adding VLAN 0 to HW filter on device team0 [ 930.274167][T14972] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.277572][T14972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 930.289907][T14972] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.292933][T14972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 930.456412][T31426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 930.495316][T31474] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.684262][T31426] veth0_vlan: entered promiscuous mode [ 930.700490][T31426] veth1_vlan: entered promiscuous mode [ 930.716389][T31426] veth0_macvtap: entered promiscuous mode [ 930.721715][T31426] veth1_macvtap: entered promiscuous mode [ 930.729975][T31426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 930.739257][T31426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 930.748249][ T90] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.751274][ T90] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.754727][ T90] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.758785][ T90] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.806380][T14972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.813868][T14972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.844785][ T4787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.850541][ T4787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.941424][T31495] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 931.376297][T31508] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 931.378474][T31508] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 931.387075][T31508] vhci_hcd vhci_hcd.0: Device attached [ 931.626668][T28666] usb 53-1: new low-speed USB device number 2 using vhci_hcd [ 931.641047][T31438] vhci_hcd: connection reset by peer [ 931.691914][ T4787] vhci_hcd vhci_hcd.5: stop threads [ 931.693958][ T4787] vhci_hcd vhci_hcd.5: release socket [ 931.697690][ T4787] vhci_hcd vhci_hcd.5: disconnect device [ 931.726953][T31519] netlink: 'syz.0.4049': attribute type 13 has an invalid length. [ 931.729519][T31519] netlink: 'syz.0.4049': attribute type 17 has an invalid length. [ 931.912182][T31509] vhci_hcd: connection reset by peer [ 931.918919][ T4787] vhci_hcd vhci_hcd.8: stop threads [ 931.921185][ T4787] vhci_hcd vhci_hcd.8: release socket [ 931.923921][ T4787] vhci_hcd vhci_hcd.8: disconnect device [ 932.306844][ T5952] Bluetooth: hci0: command tx timeout [ 933.696613][ T1333] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 933.896763][T28130] usb 48-1: device descriptor read/8, error -110 [ 933.937961][ T1333] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 933.940978][ T1333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 933.945414][ T1333] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 933.948888][ T1333] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 933.951721][ T1333] usb 5-1: Manufacturer: syz [ 933.954880][ T1333] usb 5-1: config 0 descriptor?? [ 934.006769][ T1333] rc_core: IR keymap rc-hauppauge not found [ 934.009127][ T1333] Registered IR keymap rc-empty [ 934.011839][ T1333] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 934.017451][ T1333] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input43 [ 934.167149][T28162] usb 5-1: USB disconnect, device number 25 [ 934.298535][T28130] usb usb48-port1: attempt power cycle [ 934.376742][ T5952] Bluetooth: hci0: command tx timeout [ 934.940237][T28130] usb usb48-port1: unable to enumerate USB device [ 935.168431][T31566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4060'. [ 936.229462][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.231686][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.321535][T31582] nvme_fabrics: missing parameter 'transport=%s' [ 936.325171][T31582] nvme_fabrics: missing parameter 'nqn=%s' [ 936.333487][ C2] vcan0: j1939_tp_rxtimer: 0xffff88804a6f9c00: rx timeout, send abort [ 936.526650][ T5952] Bluetooth: hci0: command tx timeout [ 936.786689][T28666] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 936.834001][ C2] vcan0: j1939_tp_rxtimer: 0xffff88804a6f8800: rx timeout, send abort [ 936.837514][ C2] vcan0: j1939_tp_rxtimer: 0xffff88804a6f9c00: abort rx timeout. Force session deactivation [ 936.938251][T31598] ip6_vti0 speed is unknown, defaulting to 1000 [ 937.109407][T31598] lo speed is unknown, defaulting to 1000 [ 937.293261][T31604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4070'. [ 937.296947][T31604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4070'. [ 937.336821][ C2] vcan0: j1939_tp_rxtimer: 0xffff88804a6f8800: abort rx timeout. Force session deactivation [ 938.180377][T31598] netlink: 'syz.8.4068': attribute type 1 has an invalid length. [ 938.194436][T31598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.207212][T31598] bond0: (slave geneve0): making interface the new active one [ 938.211891][T31598] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 938.448975][T30571] bond0 (unregistering): (slave geneve0): Releasing active interface [ 938.623404][T30571] bond0 (unregistering): Released all slaves [ 939.181127][T31627] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 939.183285][T31627] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 939.186647][T31627] vhci_hcd vhci_hcd.0: Device attached [ 939.227915][T31627] random: crng reseeded on system resumption [ 939.427020][T31627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 939.486478][ T1333] usb 54-1: SetAddress Request (2) to port 0 [ 939.501122][ T1333] usb 54-1: new SuperSpeed USB device number 2 using vhci_hcd [ 940.118709][T31628] vhci_hcd: connection reset by peer [ 940.122950][ T1140] vhci_hcd vhci_hcd.8: stop threads [ 940.125270][ T1140] vhci_hcd vhci_hcd.8: release socket [ 940.127911][ T1140] vhci_hcd vhci_hcd.8: disconnect device [ 940.629348][T31647] FAULT_INJECTION: forcing a failure. [ 940.629348][T31647] name failslab, interval 1, probability 0, space 0, times 0 [ 940.640077][T31647] CPU: 3 UID: 0 PID: 31647 Comm: syz.0.4078 Tainted: G L syzkaller #0 PREEMPT(full) [ 940.640097][T31647] Tainted: [L]=SOFTLOCKUP [ 940.640101][T31647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 940.640108][T31647] Call Trace: [ 940.640123][T31647] [ 940.640130][T31647] dump_stack_lvl+0x16c/0x1f0 [ 940.640151][T31647] should_fail_ex+0x512/0x640 [ 940.640164][T31647] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 940.640180][T31647] should_failslab+0xc2/0x120 [ 940.640197][T31647] kmem_cache_alloc_node_noprof+0x86/0x800 [ 940.640210][T31647] ? __alloc_skb+0x156/0x410 [ 940.640226][T31647] ? __alloc_skb+0x156/0x410 [ 940.640237][T31647] __alloc_skb+0x156/0x410 [ 940.640248][T31647] ? __alloc_skb+0x35d/0x410 [ 940.640259][T31647] ? __pfx___alloc_skb+0x10/0x10 [ 940.640271][T31647] ? netlink_autobind.isra.0+0x158/0x370 [ 940.640291][T31647] netlink_alloc_large_skb+0x69/0x140 [ 940.640308][T31647] netlink_sendmsg+0x698/0xdd0 [ 940.640326][T31647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 940.640344][T31647] ? ____sys_sendmsg+0x871/0xc30 [ 940.640363][T31647] ____sys_sendmsg+0xa5d/0xc30 [ 940.640381][T31647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 940.640397][T31647] ? get_compat_msghdr+0x11a/0x170 [ 940.640423][T31647] ___sys_sendmsg+0x134/0x1d0 [ 940.640444][T31647] ? __pfx____sys_sendmsg+0x10/0x10 [ 940.640471][T31647] ? find_held_lock+0x2b/0x80 [ 940.640503][T31647] __sys_sendmsg+0x16d/0x220 [ 940.640527][T31647] ? __pfx___sys_sendmsg+0x10/0x10 [ 940.640559][T31647] __do_fast_syscall_32+0xe8/0x680 [ 940.640589][T31647] do_fast_syscall_32+0x32/0x80 [ 940.640616][T31647] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 940.640632][T31647] RIP: 0023:0xf7fd4579 [ 940.640641][T31647] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 940.640653][T31647] RSP: 002b:00000000f54c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 940.640664][T31647] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 940.640672][T31647] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 940.640678][T31647] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 940.640685][T31647] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 940.640691][T31647] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 940.640704][T31647] [ 941.457199][T31661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4082'. [ 941.605256][T31666] mkiss: ax0: crc mode is auto. [ 941.842409][ T5952] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 942.287300][ T5952] Bluetooth: hci3: connection err: -111 [ 942.677293][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 942.677303][ T40] audit: type=1326 audit(1766989115.537:5000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31686 comm="syz.5.4087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 942.711824][ T40] audit: type=1326 audit(1766989115.557:5001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31686 comm="syz.5.4087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 942.733942][ T40] audit: type=1326 audit(1766989115.557:5002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31686 comm="syz.5.4087" exe="/syz-executor" sig=0 arch=40000003 syscall=274 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 942.746584][ T40] audit: type=1326 audit(1766989115.557:5003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31686 comm="syz.5.4087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 942.812036][ T40] audit: type=1326 audit(1766989115.557:5004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31686 comm="syz.5.4087" exe="/syz-executor" sig=0 arch=40000003 syscall=450 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 942.826843][ T40] audit: type=1326 audit(1766989115.557:5005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31686 comm="syz.5.4087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 942.856949][ T40] audit: type=1326 audit(1766989115.557:5006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31686 comm="syz.5.4087" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 942.885037][ T40] audit: type=1326 audit(1766989115.557:5007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31686 comm="syz.5.4087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 942.905370][ T40] audit: type=1326 audit(1766989115.557:5008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31686 comm="syz.5.4087" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 942.916571][ T40] audit: type=1326 audit(1766989115.557:5009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31686 comm="syz.5.4087" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 943.430853][T31719] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4090'. [ 944.536721][ T1333] usb 54-1: device descriptor read/8, error -110 [ 944.773122][ T5952] Bluetooth: hci3: connection err: -111 [ 944.948581][ T1333] usb usb54-port1: attempt power cycle [ 944.956114][T31744] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4097'. [ 944.961041][T31744] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4097'. [ 945.294131][T31752] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 945.296396][T31752] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 945.313126][T31752] vhci_hcd vhci_hcd.0: Device attached [ 945.522224][T31762] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 945.524458][T31762] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 945.528261][T31762] vhci_hcd vhci_hcd.0: Device attached [ 945.586647][ T1333] usb 54-1: SetAddress Request (5) to port 0 [ 945.589433][ T1333] usb 54-1: new SuperSpeed USB device number 5 using vhci_hcd [ 945.597045][T31538] usb 48-1: SetAddress Request (38) to port 0 [ 945.599667][T31538] usb 48-1: new SuperSpeed USB device number 38 using vhci_hcd [ 946.687298][ T5952] Bluetooth: hci1: connection err: -111 [ 946.746429][T31781] random: crng reseeded on system resumption [ 947.944711][ T5300] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 947.950655][ T5300] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 947.955348][ T5300] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 947.961929][ T5300] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 947.966340][ T5300] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 948.030458][T31796] ip6_vti0 speed is unknown, defaulting to 1000 [ 948.092759][T31753] vhci_hcd: connection reset by peer [ 948.096107][T15012] vhci_hcd vhci_hcd.5: stop threads [ 948.100381][T15012] vhci_hcd vhci_hcd.5: release socket [ 948.102914][T15012] vhci_hcd vhci_hcd.5: disconnect device [ 948.191104][T31763] vhci_hcd: connection reset by peer [ 948.193901][ T46] vhci_hcd vhci_hcd.8: stop threads [ 948.196947][ T46] vhci_hcd vhci_hcd.8: release socket [ 948.199461][ T46] vhci_hcd vhci_hcd.8: disconnect device [ 948.282725][ T4787] bridge_slave_1: left allmulticast mode [ 948.285185][ T4787] bridge_slave_1: left promiscuous mode [ 948.288475][ T4787] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.301062][ T4787] bridge_slave_0: left allmulticast mode [ 948.305644][ T4787] bridge_slave_0: left promiscuous mode [ 948.318710][ T4787] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.345581][T31801] Bluetooth: MGMT ver 1.23 [ 948.650053][T31796] lo speed is unknown, defaulting to 1000 [ 948.750511][T31796] chnl_net:caif_netlink_parms(): no params data found [ 949.038744][T31796] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.041177][T31796] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.043919][T31796] bridge_slave_0: entered allmulticast mode [ 949.047071][T31796] bridge_slave_0: entered promiscuous mode [ 949.050342][T31796] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.052753][T31796] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.055288][T31796] bridge_slave_1: entered allmulticast mode [ 949.058304][T31796] bridge_slave_1: entered promiscuous mode [ 949.091046][T31796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.115928][T31796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 949.144072][T31796] team0: Port device team_slave_0 added [ 949.149268][T31796] team0: Port device team_slave_1 added [ 949.152237][T31823] ip6_vti0 speed is unknown, defaulting to 1000 [ 949.173375][T31796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 949.177777][T31796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 949.187770][T31796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 949.214486][T31796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 949.219315][T31796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 949.240241][T31796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 949.430924][T31796] hsr_slave_0: entered promiscuous mode [ 949.434218][T31796] hsr_slave_1: entered promiscuous mode [ 949.438164][T31796] debugfs: 'hsr0' already exists in 'hsr' [ 949.440644][T31796] Cannot create hsr debugfs directory [ 949.463273][T31823] lo speed is unknown, defaulting to 1000 [ 949.648124][ T4787] hsr_slave_0: left promiscuous mode [ 949.655821][ T4787] hsr_slave_1: left promiscuous mode [ 949.667492][ T4787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 949.676971][ T4787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 950.066761][ T5300] Bluetooth: hci1: command tx timeout [ 950.167986][ T4787] team0 (unregistering): Port device team_slave_1 removed [ 950.217138][ T4787] team0 (unregistering): Port device team_slave_0 removed [ 950.421451][T31849] FAULT_INJECTION: forcing a failure. [ 950.421451][T31849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 950.426054][T31849] CPU: 3 UID: 0 PID: 31849 Comm: syz.8.4117 Tainted: G L syzkaller #0 PREEMPT(full) [ 950.426082][T31849] Tainted: [L]=SOFTLOCKUP [ 950.426088][T31849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 950.426099][T31849] Call Trace: [ 950.426108][T31849] [ 950.426116][T31849] dump_stack_lvl+0x16c/0x1f0 [ 950.426142][T31849] should_fail_ex+0x512/0x640 [ 950.426158][T31849] _copy_from_user+0x2e/0xd0 [ 950.426171][T31849] get_compat_msghdr+0xa7/0x170 [ 950.426186][T31849] ? __pfx_get_compat_msghdr+0x10/0x10 [ 950.426205][T31849] ___sys_sendmsg+0x1ae/0x1d0 [ 950.426220][T31849] ? __pfx____sys_sendmsg+0x10/0x10 [ 950.426240][T31849] ? find_held_lock+0x2b/0x80 [ 950.426262][T31849] __sys_sendmsg+0x16d/0x220 [ 950.426277][T31849] ? __pfx___sys_sendmsg+0x10/0x10 [ 950.426296][T31849] ? do_user_addr_fault+0x843/0x1370 [ 950.426313][T31849] __do_fast_syscall_32+0xe8/0x680 [ 950.426332][T31849] do_fast_syscall_32+0x32/0x80 [ 950.426349][T31849] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 950.426364][T31849] RIP: 0023:0xf705d579 [ 950.426374][T31849] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 950.426385][T31849] RSP: 002b:00000000f542c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 950.426396][T31849] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40 [ 950.426403][T31849] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 950.426410][T31849] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 950.426416][T31849] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 950.426422][T31849] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 950.426435][T31849] [ 950.696723][T31538] usb 48-1: device descriptor read/8, error -110 [ 950.699659][ T1333] usb 54-1: device descriptor read/8, error -110 [ 950.811778][ T1333] usb usb54-port1: unable to enumerate USB device [ 950.848384][T31858] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 950.850589][T31858] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 950.853410][T31858] vhci_hcd vhci_hcd.0: Device attached [ 950.874095][T31851] binder: Binderfs stats mode cannot be changed during a remount [ 951.111746][T31538] usb usb48-port1: attempt power cycle [ 951.126808][ T6023] usb 38-1: SetAddress Request (70) to port 0 [ 951.129444][ T6023] usb 38-1: new SuperSpeed USB device number 70 using vhci_hcd [ 951.462309][T31860] vhci_hcd: connection reset by peer [ 951.464920][ T4787] vhci_hcd vhci_hcd.0: stop threads [ 951.471238][ T4787] vhci_hcd vhci_hcd.0: release socket [ 951.476693][ T4787] vhci_hcd vhci_hcd.0: disconnect device [ 951.535749][T31796] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 951.545817][T31796] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 951.554847][T31796] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 951.562414][T31796] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 951.610669][T31796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.620463][T31796] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.626204][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.628801][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.635644][T13719] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.638418][T13719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.697648][T31538] usb usb48-port1: unable to enumerate USB device [ 951.799250][T31796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 951.973062][T31796] veth0_vlan: entered promiscuous mode [ 951.978048][T31796] veth1_vlan: entered promiscuous mode [ 952.008865][T31796] veth0_macvtap: entered promiscuous mode [ 952.019780][T31796] veth1_macvtap: entered promiscuous mode [ 952.040992][T31796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 952.061323][T31796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 952.070233][ T61] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.073238][ T61] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.077097][ T61] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.080225][ T61] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.136829][ T5300] Bluetooth: hci1: command tx timeout [ 952.138996][ T4787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.142234][ T4787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.169884][T13719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.173235][T13719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.225617][T31919] binder: BINDER_SET_CONTEXT_MGR already set [ 952.231959][T31917] syzkaller0: entered promiscuous mode [ 952.233941][T31917] syzkaller0: entered allmulticast mode [ 952.236597][T31919] binder: 31918:31919 ioctl 4018620d 80000100 returned -16 [ 952.239660][T31920] binder: 31918:31920 ioctl c0306201 80000480 returned -22 [ 952.422320][T31928] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4127'. [ 952.550353][T31935] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4130'. [ 952.554447][T31935] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4130'. [ 953.135245][T31953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4135'. [ 953.602236][T31959] @: renamed from vlan0 (while UP) [ 953.688943][ T5300] Bluetooth: hci0: connection err: -111 [ 954.105256][T31972] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 954.126810][T31974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 954.216733][ T5300] Bluetooth: hci1: command tx timeout [ 955.479004][ T5300] Bluetooth: hci3: connection err: -111 [ 955.724881][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 955.724896][ T40] audit: type=1326 audit(1766989128.577:5035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32003 comm="syz.8.4153" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 955.741447][ T40] audit: type=1326 audit(1766989128.577:5036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32003 comm="syz.8.4153" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 955.751160][ T40] audit: type=1326 audit(1766989128.577:5037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32003 comm="syz.8.4153" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 955.760297][ T40] audit: type=1326 audit(1766989128.577:5038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32003 comm="syz.8.4153" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 955.768871][ T40] audit: type=1326 audit(1766989128.577:5039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32003 comm="syz.8.4153" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 955.778686][ T40] audit: type=1326 audit(1766989128.577:5040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32003 comm="syz.8.4153" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 955.799997][ T40] audit: type=1326 audit(1766989128.597:5041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32003 comm="syz.8.4153" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 955.831404][T32006] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 955.833605][T32006] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 955.849838][T32006] vhci_hcd vhci_hcd.0: Device attached [ 956.140493][T32016] loop6: detected capacity change from 0 to 7 [ 956.145953][T32016] Dev loop6: unable to read RDB block 7 [ 956.149101][T32016] loop6: AHDI p3 p4 [ 956.150873][T32016] loop6: partition table partially beyond EOD, truncated [ 956.154102][T32016] loop6: p3 start 1886353253 is beyond EOD, truncated [ 956.306682][ T5300] Bluetooth: hci1: command tx timeout [ 956.556694][ T5300] Bluetooth: hci3: connection err: -111 [ 956.636474][T32031] ip6_vti0 speed is unknown, defaulting to 1000 [ 956.763762][T32031] lo speed is unknown, defaulting to 1000 [ 956.795422][T32035] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4162'. [ 956.995785][T32039] nftables ruleset with unbound set [ 957.000322][T32039] overlayfs: conflicting lowerdir path [ 957.076986][T32041] sctp: [Deprecated]: syz.5.4165 (pid 32041) Use of struct sctp_assoc_value in delayed_ack socket option. [ 957.076986][T32041] Use struct sctp_sack_info instead [ 957.084813][T32041] openvswitch: netlink: Missing key (keys=40, expected=80) [ 957.577923][ T40] audit: type=1326 audit(1766989130.437:5042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32049 comm="syz.8.4167" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 957.584503][ T40] audit: type=1326 audit(1766989130.437:5043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32049 comm="syz.8.4167" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 957.626774][ T40] audit: type=1326 audit(1766989130.437:5044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32049 comm="syz.8.4167" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 957.946602][T30664] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 958.097861][T30664] usb 13-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 958.102916][T30664] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 958.106133][T30664] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.108914][T30664] usb 13-1: Product: 믮휁챒啶㕡ሔ搯젮╂及⃟䅪爮㿹䲕裴ᰝ苵㈮敚궈頠剗罭꯸@趧䒅褟 [ 958.112757][T30664] usb 13-1: Manufacturer: 蕤铫⒀䋐羓내큪藴嶂涊ೣ婔䘽ꤹ迀ꙥ핐詿㞸䋄ꃙ굿瑩䖢嵐 [ 958.116794][T30664] usb 13-1: SerialNumber: ᥪ㽘ᥛ籪䴸鯨攐䷡ﾭဓ藻ꀤㇸ [ 958.325389][T32068] netlink: 'syz.5.4174': attribute type 1 has an invalid length. [ 958.457154][T32074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4176'. [ 958.534102][T30664] cdc_ncm 13-1:1.0: bind() failure [ 958.542848][T32007] vhci_hcd: connection reset by peer [ 958.544655][T30664] cdc_ncm 13-1:1.1: CDC Union missing and no IAD found [ 958.547675][ T13] vhci_hcd vhci_hcd.0: stop threads [ 958.549359][ T13] vhci_hcd vhci_hcd.0: release socket [ 958.551241][ T6023] usb 38-1: device descriptor read/8, error -110 [ 958.551396][T30664] cdc_ncm 13-1:1.1: bind() failure [ 958.554766][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 958.577904][T30664] usb 13-1: USB disconnect, device number 2 [ 958.967486][ T6023] usb usb38-port1: attempt power cycle [ 959.506148][T32103] kernel profiling enabled (shift: 17) [ 959.547050][ T6023] usb usb38-port1: unable to enumerate USB device [ 960.419760][ T5300] Bluetooth: hci2: connection err: -111 [ 961.907208][ T5300] Bluetooth: hci1: connection err: -111 [ 961.962285][T32158] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4203'. [ 962.166779][T32162] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 962.168913][T32162] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 962.172026][T32162] vhci_hcd vhci_hcd.0: Device attached [ 962.436856][T13840] usb 38-1: SetAddress Request (74) to port 0 [ 962.439010][T13840] usb 38-1: new SuperSpeed USB device number 74 using vhci_hcd [ 962.479987][T32167] IPVS: Error connecting to the multicast addr [ 962.800479][T32163] vhci_hcd: connection reset by peer [ 962.806529][ T46] vhci_hcd vhci_hcd.0: stop threads [ 962.808620][ T46] vhci_hcd vhci_hcd.0: release socket [ 962.810439][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 964.380454][T32193] netlink: 'syz.5.4213': attribute type 1 has an invalid length. [ 964.385838][T32201] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 964.388509][T32201] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 964.391892][T32201] vhci_hcd vhci_hcd.0: Device attached [ 964.662891][ T90] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.669157][T28666] usb 54-1: SetAddress Request (6) to port 0 [ 964.671816][T28666] usb 54-1: new SuperSpeed USB device number 6 using vhci_hcd [ 964.775700][ T90] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.844776][ T90] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.925509][ T90] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.086927][ T90] bridge_slave_1: left allmulticast mode [ 965.097312][ T90] bridge_slave_1: left promiscuous mode [ 965.100022][ T90] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.106015][ T90] bridge_slave_0: left allmulticast mode [ 965.112276][ T90] bridge_slave_0: left promiscuous mode [ 965.116929][ T90] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.140327][T29010] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 965.157987][T29010] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 965.161850][T29010] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 965.166083][T29010] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 965.172729][T29010] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 965.518903][ T90] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 965.527680][ T90] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 965.531875][ T90] bond0 (unregistering): Released all slaves [ 965.569095][T32213] ip6_vti0 speed is unknown, defaulting to 1000 [ 965.609423][T32218] afs: Unknown parameter 'floco' [ 965.702442][T32213] lo speed is unknown, defaulting to 1000 [ 965.991015][T32213] chnl_net:caif_netlink_parms(): no params data found [ 966.170589][ T90] hsr_slave_0: left promiscuous mode [ 966.173132][ T90] hsr_slave_1: left promiscuous mode [ 966.175564][ T90] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 966.178089][ T90] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 966.181660][ T90] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 966.184784][ T90] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 966.213026][ T90] veth1_macvtap: left promiscuous mode [ 966.215495][ T90] veth0_macvtap: left promiscuous mode [ 966.218150][ T90] veth1_vlan: left promiscuous mode [ 966.220423][ T90] veth0_vlan: left promiscuous mode [ 966.666822][T32234] overlayfs: conflicting lowerdir path [ 966.755336][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 966.755348][ T40] audit: type=1804 audit(1766989139.607:5049): pid=32234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4221" name="/newroot/256/bus/bus" dev="tmpfs" ino=1362 res=1 errno=0 [ 966.927788][ T90] team0 (unregistering): Port device team_slave_1 removed [ 966.985498][ T90] team0 (unregistering): Port device team_slave_0 removed [ 967.173416][T32204] vhci_hcd: connection reset by peer [ 967.175520][T28165] vhci_hcd vhci_hcd.8: stop threads [ 967.179368][T28165] vhci_hcd vhci_hcd.8: release socket [ 967.181351][T28165] vhci_hcd vhci_hcd.8: disconnect device [ 967.256671][ T5300] Bluetooth: hci1: command tx timeout [ 967.496650][T13840] usb 38-1: device descriptor read/8, error -110 [ 967.726382][T32213] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.729800][T32213] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.733085][T32213] bridge_slave_0: entered allmulticast mode [ 967.736213][T32213] bridge_slave_0: entered promiscuous mode [ 967.739654][T32213] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.742384][T32213] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.745392][T32213] bridge_slave_1: entered allmulticast mode [ 967.765799][T32213] bridge_slave_1: entered promiscuous mode [ 967.815469][T32213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 967.827559][T32213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 967.855450][T32213] team0: Port device team_slave_0 added [ 967.875281][T32213] team0: Port device team_slave_1 added [ 967.898183][T13840] usb usb38-port1: attempt power cycle [ 967.909677][T32213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 967.913785][T32213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.918880][T32259] netfs: Couldn't get user pages (rc=-14) [ 967.923353][T32213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.925498][T32259] netfs: Zero-sized read [R=19d] [ 967.929417][T32213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 967.931794][T32213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.940883][T32213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 968.002682][T32213] hsr_slave_0: entered promiscuous mode [ 968.006073][T32213] hsr_slave_1: entered promiscuous mode [ 968.009384][T32213] debugfs: 'hsr0' already exists in 'hsr' [ 968.011778][T32213] Cannot create hsr debugfs directory [ 968.146410][T32213] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 968.150871][T32213] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 968.155096][T32213] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 968.159796][T32213] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 968.178904][T32213] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.182009][T32213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 968.185303][T32213] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.188356][T32213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 968.232816][T32213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 968.240916][T28165] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.244659][T28165] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.260649][T32213] 8021q: adding VLAN 0 to HW filter on device team0 [ 968.269275][T15012] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.271702][T15012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 968.285727][T13331] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.288337][T13331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 968.448455][T32213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 968.471491][T13840] usb usb38-port1: unable to enumerate USB device [ 968.668151][T32213] veth0_vlan: entered promiscuous mode [ 968.683920][T32213] veth1_vlan: entered promiscuous mode [ 968.710974][T32213] veth0_macvtap: entered promiscuous mode [ 968.715112][T32213] veth1_macvtap: entered promiscuous mode [ 968.727893][T32213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 968.744776][T32213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 968.757375][T14072] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.760195][T14072] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.763708][T14072] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.769004][T14072] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.816309][T15012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.821435][T15012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.865160][T32285] ip6_vti0 speed is unknown, defaulting to 1000 [ 968.873000][T28165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.876350][T28165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.893385][T32292] IPVS: Error connecting to the multicast addr [ 969.346661][ T5300] Bluetooth: hci1: command tx timeout [ 969.510429][T32285] lo speed is unknown, defaulting to 1000 [ 969.736795][T28666] usb 54-1: device descriptor read/8, error -110 [ 970.137439][T28666] usb usb54-port1: attempt power cycle [ 970.226219][T32344] fuse: Bad value for 'fd' [ 970.727027][T28666] usb usb54-port1: unable to enumerate USB device [ 971.230648][T32367] netlink: 'syz.9.4246': attribute type 1 has an invalid length. [ 971.234109][T32367] netlink: 2108 bytes leftover after parsing attributes in process `syz.9.4246'. [ 971.416624][ T5300] Bluetooth: hci1: command tx timeout [ 971.850852][T32373] ip6_vti0 speed is unknown, defaulting to 1000 [ 971.929518][T32373] lo speed is unknown, defaulting to 1000 [ 972.146780][T32381] qnx6: unable to read the first superblock [ 972.149388][T32381] qnx6: unable to read the first superblock [ 972.151355][T32381] qnx6: unable to read the first superblock [ 972.169334][T32381] tmpfs: Bad value for 'mpol' [ 973.496660][ T5300] Bluetooth: hci1: command tx timeout [ 974.385184][T32445] FAULT_INJECTION: forcing a failure. [ 974.385184][T32445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 974.395349][T32445] CPU: 2 UID: 0 PID: 32445 Comm: syz.9.4268 Tainted: G L syzkaller #0 PREEMPT(full) [ 974.395380][T32445] Tainted: [L]=SOFTLOCKUP [ 974.395388][T32445] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 974.395400][T32445] Call Trace: [ 974.395407][T32445] [ 974.395415][T32445] dump_stack_lvl+0x16c/0x1f0 [ 974.395472][T32445] should_fail_ex+0x512/0x640 [ 974.395511][T32445] _copy_from_user+0x2e/0xd0 [ 974.395533][T32445] get_compat_insn+0x97/0x230 [ 974.395559][T32445] ? __pfx_get_compat_insn+0x10/0x10 [ 974.395603][T32445] ? comedi_compat_ioctl+0x3ec/0xda0 [ 974.395624][T32445] comedi_compat_ioctl+0x45c/0xda0 [ 974.395643][T32445] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 974.395661][T32445] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 974.395688][T32445] ? do_vfs_ioctl+0x128/0x14f0 [ 974.395709][T32445] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 974.395736][T32445] ? find_held_lock+0x2b/0x80 [ 974.395757][T32445] ? hook_file_ioctl_common+0x144/0x410 [ 974.395783][T32445] ? __fget_files+0x20e/0x3c0 [ 974.395805][T32445] ? __fput_deferred+0x430/0x480 [ 974.395826][T32445] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 974.395843][T32445] __ia32_compat_sys_ioctl+0x242/0x370 [ 974.395866][T32445] __do_fast_syscall_32+0xe8/0x680 [ 974.395894][T32445] do_fast_syscall_32+0x32/0x80 [ 974.395920][T32445] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 974.395941][T32445] RIP: 0023:0xf7fe2579 [ 974.395956][T32445] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 974.395972][T32445] RSP: 002b:00000000f54d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 974.395989][T32445] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000008008640b [ 974.396000][T32445] RDX: 0000000080113800 RSI: 0000000000000000 RDI: 0000000000000000 [ 974.396009][T32445] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 974.396018][T32445] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 974.396028][T32445] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 974.396051][T32445] [ 974.693926][T28666] IPVS: starting estimator thread 0... [ 974.806844][T32449] IPVS: using max 27 ests per chain, 64800 per kthread [ 975.582487][T32482] ip6_vti0 speed is unknown, defaulting to 1000 [ 975.622575][T32483] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 975.711881][T32482] lo speed is unknown, defaulting to 1000 [ 976.409013][T32500] ip6_vti0 speed is unknown, defaulting to 1000 [ 976.475330][T32505] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4286'. [ 976.572384][T32507] syzkaller1: entered promiscuous mode [ 976.574799][T32507] syzkaller1: entered allmulticast mode [ 976.625971][T32500] lo speed is unknown, defaulting to 1000 [ 976.626319][T32501] ip6_vti0 speed is unknown, defaulting to 1000 [ 976.696688][ T6006] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 976.857249][T28718] libceph: connect (1)[c::]:6789 error -101 [ 976.860024][T28718] libceph: mon0 (1)[c::]:6789 connect error [ 976.866598][ T6006] usb 5-1: Using ep0 maxpacket: 32 [ 976.870582][ T6006] usb 5-1: config 0 has an invalid interface number: 209 but max is 0 [ 976.873398][ T6006] usb 5-1: config 0 has no interface number 0 [ 976.875662][ T6006] usb 5-1: config 0 interface 209 has no altsetting 0 [ 976.881800][ T6006] usb 5-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 976.885012][ T6006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.888315][ T6006] usb 5-1: Product: syz [ 976.889849][ T6006] usb 5-1: Manufacturer: syz [ 976.891556][ T6006] usb 5-1: SerialNumber: syz [ 976.898375][ T6006] usb 5-1: config 0 descriptor?? [ 976.910195][T11415] libceph: connect (1)[c::]:6789 error -101 [ 976.913961][T11415] libceph: mon0 (1)[c::]:6789 connect error [ 976.965652][T32501] lo speed is unknown, defaulting to 1000 [ 976.967823][T32503] ip6_vti0 speed is unknown, defaulting to 1000 [ 977.117039][T28718] libceph: connect (1)[c::]:6789 error -101 [ 977.119908][T28718] libceph: mon0 (1)[c::]:6789 connect error [ 977.179712][T11415] libceph: connect (1)[c::]:6789 error -101 [ 977.182236][T11415] libceph: mon0 (1)[c::]:6789 connect error [ 977.195690][ T6006] usb 5-1: USB disconnect, device number 26 [ 977.420713][T32503] lo speed is unknown, defaulting to 1000 [ 977.627315][T28718] libceph: connect (1)[c::]:6789 error -101 [ 977.630063][T28718] libceph: mon0 (1)[c::]:6789 connect error [ 977.667808][T32518] ceph: No mds server is up or the cluster is laggy [ 977.667886][T32521] ceph: No mds server is up or the cluster is laggy [ 977.687919][T11415] libceph: connect (1)[c::]:6789 error -101 [ 977.700810][T11415] libceph: mon0 (1)[c::]:6789 connect error [ 978.050255][T32545] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 978.052577][T32545] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 978.055993][T32545] vhci_hcd vhci_hcd.0: Device attached [ 978.217620][T32550] l2tp_ppp: sess 2/0: no socket in recv [ 978.366618][T28718] usb 38-1: SetAddress Request (78) to port 0 [ 978.369510][T28718] usb 38-1: new SuperSpeed USB device number 78 using vhci_hcd [ 978.670612][T32563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 978.674862][T32563] batadv_slave_0: entered promiscuous mode [ 978.759692][T32570] input: syz0 as /devices/virtual/input/input46 [ 979.057771][ T5300] Bluetooth: hci3: connection err: -111 [ 979.105145][T32579] overlayfs: missing 'lowerdir' [ 979.763953][ T5300] Bluetooth: hci1: connection err: -111 [ 980.386269][T32637] comedi comedi0: rti800: I/O port conflict (0x3,16) [ 980.500645][ T5300] Bluetooth: hci0: connection err: -111 [ 980.971526][T32546] vhci_hcd: connection reset by peer [ 980.974338][ T13] vhci_hcd vhci_hcd.0: stop threads [ 980.985045][ T13] vhci_hcd vhci_hcd.0: release socket [ 980.993776][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 981.408602][T32676] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 981.410756][T32676] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 981.414754][T32676] vhci_hcd vhci_hcd.0: Device attached [ 981.696705][T11415] usb 48-1: SetAddress Request (42) to port 0 [ 981.699838][T11415] usb 48-1: new SuperSpeed USB device number 42 using vhci_hcd [ 982.060584][T32677] vhci_hcd: connection reset by peer [ 982.075382][ T1182] vhci_hcd vhci_hcd.5: stop threads [ 982.084588][ T1182] vhci_hcd vhci_hcd.5: release socket [ 982.094797][ T1182] vhci_hcd vhci_hcd.5: disconnect device [ 982.519704][T32705] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 983.437457][T28718] usb 38-1: device descriptor read/8, error -110 [ 983.827857][T28718] usb usb38-port1: attempt power cycle [ 984.397748][T28718] usb usb38-port1: unable to enumerate USB device [ 984.472432][T32749] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 984.474748][T32749] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 984.477948][T32749] vhci_hcd vhci_hcd.0: Device attached [ 984.757530][T28718] usb 56-1: SetAddress Request (2) to port 0 [ 984.759722][T28718] usb 56-1: new SuperSpeed USB device number 2 using vhci_hcd [ 984.973537][T32755] netlink: 160 bytes leftover after parsing attributes in process `syz.5.4354'. [ 985.255180][ T5300] Bluetooth: hci0: unexpected event for opcode 0x2019 [ 985.265699][T32750] vhci_hcd: connection reset by peer [ 985.273355][T30571] vhci_hcd vhci_hcd.9: stop threads [ 985.275436][T30571] vhci_hcd vhci_hcd.9: release socket [ 985.278703][T30571] vhci_hcd vhci_hcd.9: disconnect device [ 986.761497][ T303] netlink: 'syz.9.4359': attribute type 1 has an invalid length. [ 986.781550][ T303] bond1: entered promiscuous mode [ 986.783655][ T303] bond1: entered allmulticast mode [ 986.785883][ T303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 986.788271][T11415] usb 48-1: device descriptor read/8, error -110 [ 987.190354][T11415] usb usb48-port1: attempt power cycle [ 987.786978][T11415] usb usb48-port1: unable to enumerate USB device [ 987.870828][ T332] netlink: 'syz.5.4369': attribute type 33 has an invalid length. [ 987.874142][ T332] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4369'. [ 987.900338][ T329] binder: 328:329 ioctl 89e3 80000000 returned -22 [ 988.480007][ T350] F2FS-fs: Conflicting test_dummy_encryption options [ 989.816648][T28718] usb 56-1: device descriptor read/8, error -110 [ 990.181932][ T400] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4386'. [ 990.217732][T28718] usb usb56-port1: attempt power cycle [ 990.245132][ T400] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.248543][ T400] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.576565][T30350] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 990.695993][ T400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 990.705880][ T400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 990.726642][T30350] usb 13-1: Using ep0 maxpacket: 8 [ 990.729770][T30350] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 990.733281][T30350] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 990.736629][T30350] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 990.740643][T30350] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 990.744481][T30350] usb 13-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 990.750735][T30350] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.763707][T30350] hub 13-1:1.0: bad descriptor, ignoring hub [ 990.773345][T30350] hub 13-1:1.0: probe with driver hub failed with error -5 [ 990.789695][T28718] usb usb56-port1: unable to enumerate USB device [ 990.791478][T30350] cdc_wdm 13-1:1.0: skipping garbage [ 990.793650][T30350] cdc_wdm 13-1:1.0: skipping garbage [ 990.806284][T30350] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 990.808667][T30350] cdc_wdm 13-1:1.0: Unknown control protocol [ 990.872869][ T400] vlan3: left promiscuous mode [ 990.875329][ T400] vlan3: left allmulticast mode [ 990.885362][ T400] hsr_slave_1: left allmulticast mode [ 990.889446][ T400] bridge1: left allmulticast mode [ 990.893789][ T400] bond1: left promiscuous mode [ 990.895975][ T400] gre1: left promiscuous mode [ 990.916763][T11415] lo speed is unknown, defaulting to 1000 [ 990.921755][T30571] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.925117][T30571] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.926743][T11415] s{z2: Port: 1 Link DOWN [ 990.928163][T30571] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.933468][T30571] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.026351][ T421] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4392'. [ 991.089437][ T425] random: crng reseeded on system resumption [ 992.081175][ T447] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 992.084118][ T447] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 992.088275][ T447] vhci_hcd vhci_hcd.0: Device attached [ 992.099151][ T449] vhci_hcd: connection closed [ 992.100003][T14972] vhci_hcd vhci_hcd.9: stop threads [ 992.103866][T14972] vhci_hcd vhci_hcd.9: release socket [ 992.105718][T14972] vhci_hcd vhci_hcd.9: disconnect device [ 992.209296][ T40] audit: type=1800 audit(1766989165.057:5050): pid=443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4402" name="/" dev="fuse" ino=9 res=0 errno=0 [ 993.893400][ T491] syzkaller1: entered promiscuous mode [ 993.895907][ T491] syzkaller1: entered allmulticast mode [ 993.902788][ T491] wg1: entered promiscuous mode [ 993.905047][ T491] wg1: entered allmulticast mode [ 994.491700][T30350] usb 13-1: USB disconnect, device number 3 [ 994.696881][T29010] Bluetooth: hci1: command 0x0405 tx timeout [ 994.768476][ T40] audit: type=1326 audit(1766989167.627:5051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=507 comm="syz.8.4415" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 994.786797][ T40] audit: type=1326 audit(1766989167.637:5052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=507 comm="syz.8.4415" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 994.797362][ T511] tmpfs: Bad value for 'nr_inodes' [ 994.802287][ T40] audit: type=1326 audit(1766989167.637:5053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=507 comm="syz.8.4415" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 994.821382][ T40] audit: type=1326 audit(1766989167.637:5054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=507 comm="syz.8.4415" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 994.900818][ T518] FAULT_INJECTION: forcing a failure. [ 994.900818][ T518] name failslab, interval 1, probability 0, space 0, times 0 [ 994.908422][ T518] CPU: 0 UID: 0 PID: 518 Comm: syz.9.4419 Tainted: G L syzkaller #0 PREEMPT(full) [ 994.908454][ T518] Tainted: [L]=SOFTLOCKUP [ 994.908462][ T518] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 994.908473][ T518] Call Trace: [ 994.908481][ T518] [ 994.908489][ T518] dump_stack_lvl+0x16c/0x1f0 [ 994.908523][ T518] should_fail_ex+0x512/0x640 [ 994.908546][ T518] ? fs_reclaim_acquire+0xae/0x150 [ 994.908579][ T518] should_failslab+0xc2/0x120 [ 994.908634][ T518] __kmalloc_noprof+0xeb/0x910 [ 994.908662][ T518] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 994.908693][ T518] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 994.908718][ T518] tomoyo_realpath_from_path+0xc2/0x6e0 [ 994.908742][ T518] ? tomoyo_profile+0x47/0x60 [ 994.908769][ T518] tomoyo_path_number_perm+0x245/0x580 [ 994.908787][ T518] ? tomoyo_path_number_perm+0x237/0x580 [ 994.908809][ T518] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 994.908858][ T518] ? find_held_lock+0x2b/0x80 [ 994.908882][ T518] ? hook_file_ioctl_common+0x144/0x410 [ 994.908910][ T518] ? __fget_files+0x20e/0x3c0 [ 994.908935][ T518] ? __fput_deferred+0x430/0x480 [ 994.908960][ T518] security_file_ioctl_compat+0x9b/0x240 [ 994.908986][ T518] __ia32_compat_sys_ioctl+0xc3/0x370 [ 994.909014][ T518] __do_fast_syscall_32+0xe8/0x680 [ 994.909056][ T518] do_fast_syscall_32+0x32/0x80 [ 994.909086][ T518] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 994.909111][ T518] RIP: 0023:0xf7fe2579 [ 994.909125][ T518] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 994.909144][ T518] RSP: 002b:00000000f54d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 994.909162][ T518] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c040565f [ 994.909174][ T518] RDX: 0000000080000940 RSI: 0000000000000000 RDI: 0000000000000000 [ 994.909184][ T518] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 994.909192][ T518] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 994.909199][ T518] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 994.909214][ T518] [ 994.909256][ T518] ERROR: Out of memory at tomoyo_realpath_from_path. [ 995.164473][ T40] audit: type=1326 audit(1766989167.637:5055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=507 comm="syz.8.4415" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 995.183692][ T40] audit: type=1326 audit(1766989167.637:5056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=507 comm="syz.8.4415" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 995.202810][ T40] audit: type=1326 audit(1766989167.637:5057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=507 comm="syz.8.4415" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 995.863975][ T530] overlay: ./file1 is not a directory [ 996.134113][ T541] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4425'. [ 996.363384][ T547] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 996.365713][ T547] overlayfs: failed to set xattr on upper [ 996.367824][ T547] overlayfs: ...falling back to redirect_dir=nofollow. [ 996.370095][ T547] overlayfs: ...falling back to index=off. [ 996.372044][ T547] overlayfs: ...falling back to uuid=null. [ 996.708429][ T550] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 997.111499][ T559] binder_alloc: 558: binder_alloc_buf, no vma [ 997.445337][ T568] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4434'. [ 997.448786][ T568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4434'. [ 997.658961][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.046092][ T578] [U] : [ 998.047346][ T578] [U] [ 998.048437][ T578] [U] [ 998.049437][ T578] [U] [ 998.051024][ T578] [U] [ 998.052220][ T578] [U] [ 998.053210][ T578] [U] [ 998.054204][ T578] [U] [ 998.055343][ T578] [U] [ 998.056393][ T578] [U] [ 998.057507][ T578] [U] [ 998.058722][ T578] [U] [ 998.061510][ T578] [U] [ 998.062760][ T578] [U] [ 998.064000][ T578] [U] [ 998.064992][ T578] [U] [ 998.066076][ T578] [U] [ 998.067127][ T578] [U] [ 998.068173][ T578] [U] [ 998.069161][ T578] [U] [ 998.070811][ T578] [U] [ 998.071827][ T578] [U] [ 998.072805][ T578] [U] [ 998.073779][ T578] [U] [ 998.074896][ T578] [U] [ 998.075912][ T578] [U] [ 998.076877][ T578] [U] [ 998.077871][ T578] [U] [ 998.079503][ T578] [U] [ 998.080511][ T578] [U] [ 998.081558][ T578] [U] [ 998.082635][ T578] [U] [ 998.083874][ T578] [U] [ 998.084856][ T578] [U] [ 998.085845][ T578] [U] [ 998.086840][ T578] [U] [ 998.088534][ T578] [U] [ 998.089553][ T578] [U] [ 998.090554][ T578] [U] [ 998.091555][ T578] [U] [ 998.092624][ T578] [U] [ 998.093596][ T578] [U] [ 998.094632][ T578] [U] [ 998.095648][ T578] [U] [ 998.097308][ T578] [U] [ 998.098279][ T578] [U] [ 998.099303][ T578] [U] [ 998.100388][ T578] [U] [ 998.101850][ T578] [U] [ 998.103143][ T578] [U] [ 998.104393][ T578] [U] [ 998.105629][ T578] [U] [ 998.107928][ T578] [U] [ 998.109225][ T578] [U] [ 998.110462][ T578] [U] [ 998.111736][ T578] [U] [ 998.113234][ T578] [U] [ 998.114519][ T578] [U] [ 998.115811][ T578] [U] [ 998.117073][ T578] [U] [ 998.121894][ T578] [U] [ 998.123125][ T578] [U] [ 998.124405][ T578] [U] [ 998.125568][ T578] [U] [ 998.127536][ T578] [U] [ 998.128541][ T578] [U] [ 998.129508][ T578] [U] [ 998.130472][ T578] [U] [ 998.131621][ T578] [U] [ 998.132819][ T578] [U] [ 998.134033][ T578] [U] [ 998.135296][ T578] [U] [ 998.136935][ T578] [U] [ 998.137952][ T578] [U] [ 998.138955][ T578] [U] [ 998.139914][ T578] [U] [ 998.141030][ T578] [U] [ 998.142026][ T578] [U] [ 998.143074][ T578] [U] [ 998.144089][ T578] [U] [ 998.145548][ T578] [U] [ 998.146793][ T578] [U] [ 998.148042][ T578] [U] [ 998.149277][ T578] [U] [ 998.150984][ T578] [U] [ 998.151997][ T578] [U] [ 998.152983][ T578] [U] [ 998.154035][ T578] [U] [ 998.155290][ T578] [U] [ 998.156293][ T578] [U] [ 998.157255][ T578] [U] [ 998.158261][ T578] [U] [ 998.159461][ T578] [U] [ 998.160465][ T578] [U] [ 998.161421][ T578] [U] [ 998.162404][ T578] [U] [ 998.163577][ T578] [U] [ 998.164693][ T578] [U] [ 998.165708][ T578] [U] [ 998.166673][ T578] [U] [ 998.167888][ T578] [U] [ 998.168863][ T578] [U] [ 998.169845][ T578] [U] [ 998.170820][ T578] [U] [ 998.171965][ T578] [U] [ 998.172942][ T578] [U] [ 998.173919][ T578] [U] [ 998.175046][ T578] [U] [ 998.176197][ T578] [U] [ 998.177223][ T578] [U] [ 998.178231][ T578] [U] [ 998.179230][ T578] [U] [ 998.180496][ T578] [U] [ 998.181495][ T578] [U] [ 998.182479][ T578] [U] [ 998.183479][ T578] [U] [ 998.184611][ T578] [U] [ 998.185699][ T578] [U] [ 998.186683][ T578] [U] [ 998.187691][ T578] [U] [ 998.188856][ T578] [U] [ 998.189861][ T578] [U] [ 998.190934][ T578] [U] [ 998.191995][ T578] [U] [ 998.193102][ T578] [U] [ 998.194117][ T578] [U] [ 998.195130][ T578] [U] [ 998.201706][ T577] [U] [ 1000.970670][ T641] FAULT_INJECTION: forcing a failure. [ 1000.970670][ T641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1000.975005][ T641] CPU: 1 UID: 0 PID: 641 Comm: syz.5.4452 Tainted: G L syzkaller #0 PREEMPT(full) [ 1000.975034][ T641] Tainted: [L]=SOFTLOCKUP [ 1000.975038][ T641] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1000.975046][ T641] Call Trace: [ 1000.975052][ T641] [ 1000.975058][ T641] dump_stack_lvl+0x16c/0x1f0 [ 1000.975078][ T641] should_fail_ex+0x512/0x640 [ 1000.975093][ T641] _copy_from_user+0x2e/0xd0 [ 1000.975106][ T641] __sys_bpf+0x248/0x4980 [ 1000.975117][ T641] ? lock_acquire+0x179/0x330 [ 1000.975130][ T641] ? __pfx___sys_bpf+0x10/0x10 [ 1000.975139][ T641] ? finish_task_switch.isra.0+0x202/0xbd0 [ 1000.975155][ T641] ? rcu_is_watching+0x12/0xc0 [ 1000.975172][ T641] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1000.975186][ T641] ? lockdep_hardirqs_on+0x7c/0x110 [ 1000.975207][ T641] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1000.975224][ T641] ? rcu_is_watching+0x12/0xc0 [ 1000.975239][ T641] ? __schedule+0x10b9/0x6150 [ 1000.975253][ T641] ? __schedule+0x114c/0x6150 [ 1000.975277][ T641] ? fput+0x70/0xf0 [ 1000.975290][ T641] ? rcu_is_watching+0x12/0xc0 [ 1000.975307][ T641] __ia32_sys_bpf+0x76/0xe0 [ 1000.975317][ T641] ? lockdep_hardirqs_on+0x7c/0x110 [ 1000.975333][ T641] __do_fast_syscall_32+0xe8/0x680 [ 1000.975351][ T641] do_fast_syscall_32+0x32/0x80 [ 1000.975369][ T641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1000.975383][ T641] RIP: 0023:0xf705d579 [ 1000.975392][ T641] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1000.975403][ T641] RSP: 002b:00000000f540b55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1000.975413][ T641] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800054c0 [ 1000.975420][ T641] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 1000.975427][ T641] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1000.975433][ T641] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1000.975439][ T641] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1000.975453][ T641] [ 1001.640091][ T658] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 1001.642260][ T658] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1001.647810][ T658] vhci_hcd vhci_hcd.0: Device attached [ 1001.655765][ T658] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4457'. [ 1001.916612][T32360] usb 48-1: SetAddress Request (46) to port 0 [ 1001.918750][T32360] usb 48-1: new SuperSpeed USB device number 46 using vhci_hcd [ 1002.208367][ T659] vhci_hcd: connection reset by peer [ 1002.212720][ T1140] vhci_hcd vhci_hcd.5: stop threads [ 1002.215332][ T1140] vhci_hcd vhci_hcd.5: release socket [ 1002.218773][ T1140] vhci_hcd vhci_hcd.5: disconnect device [ 1002.346895][ T667] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1002.349836][ T667] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1002.353862][ T667] vhci_hcd vhci_hcd.0: Device attached [ 1002.656939][ T6006] usb 38-1: SetAddress Request (82) to port 0 [ 1002.659118][ T6006] usb 38-1: new SuperSpeed USB device number 82 using vhci_hcd [ 1002.956574][ T668] vhci_hcd: connection reset by peer [ 1002.959228][T28165] vhci_hcd vhci_hcd.0: stop threads [ 1002.968060][T28165] vhci_hcd vhci_hcd.0: release socket [ 1002.976657][T28165] vhci_hcd vhci_hcd.0: disconnect device [ 1003.102011][ T675] bridge_slave_0: left allmulticast mode [ 1003.104055][ T675] bridge_slave_0: left promiscuous mode [ 1003.106384][ T675] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.124709][ T675] bridge_slave_1: left allmulticast mode [ 1003.126899][ T675] bridge_slave_1: left promiscuous mode [ 1003.128995][ T675] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.148173][ T675] bond0: (slave bond_slave_0): Releasing backup interface [ 1003.154084][ T675] team0: Port device team_slave_0 removed [ 1003.158672][ T675] team0: Port device team_slave_1 removed [ 1003.161681][ T675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1003.165784][ T675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1003.169823][ T675] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1003.204807][ T674] overlayfs: missing 'lowerdir' [ 1003.536446][ T682] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4465'. [ 1003.540304][ T682] netlink: 'syz.0.4465': attribute type 1 has an invalid length. [ 1003.543571][ T682] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4465'. [ 1005.028900][ T5300] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1005.058732][ T719] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4478'. [ 1005.061803][ T719] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4478'. [ 1005.065600][ T719] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4478'. [ 1005.515390][ T722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4479'. [ 1006.153583][ T734] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1006.155900][ T734] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1006.159255][ T734] vhci_hcd vhci_hcd.0: Device attached [ 1006.236418][ T739] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1006.239472][ T739] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1006.243000][ T739] vhci_hcd vhci_hcd.0: Device attached [ 1006.426672][T30350] usb 56-1: SetAddress Request (6) to port 0 [ 1006.429456][T30350] usb 56-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1006.704348][ T743] syzkaller0: entered promiscuous mode [ 1006.706249][ T743] syzkaller0: entered allmulticast mode [ 1007.742096][ T6006] usb 38-1: device descriptor read/8, error -110 [ 1008.145860][ T6006] usb usb38-port1: attempt power cycle [ 1008.357570][ T749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4488'. [ 1008.771049][ T6006] usb usb38-port1: unable to enumerate USB device [ 1008.894268][ T737] vhci_hcd: connection reset by peer [ 1008.896755][T14972] vhci_hcd vhci_hcd.9: stop threads [ 1008.899008][T14972] vhci_hcd vhci_hcd.9: release socket [ 1008.900883][T14972] vhci_hcd vhci_hcd.9: disconnect device [ 1008.949914][ T740] vhci_hcd: connection reset by peer [ 1008.956813][T14072] vhci_hcd vhci_hcd.5: stop threads [ 1008.958620][T14072] vhci_hcd vhci_hcd.5: release socket [ 1008.960493][T32360] usb 48-1: device descriptor read/8, error -110 [ 1008.965055][T14072] vhci_hcd vhci_hcd.5: disconnect device [ 1008.974941][ T757] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4490'. [ 1009.351408][T32360] usb usb48-port1: attempt power cycle [ 1009.917049][T32360] usb usb48-port1: unable to enumerate USB device [ 1011.496581][T30350] usb 56-1: device descriptor read/8, error -110 [ 1011.889573][T30350] usb usb56-port1: attempt power cycle [ 1012.183707][ T815] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4508'. [ 1012.448842][T30350] usb usb56-port1: unable to enumerate USB device [ 1012.568845][ T819] tipc: Enabling of bearer rejected, failed to enable media [ 1012.666639][ T827] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4512'. [ 1012.704905][ T828] 9p: Could not find request transport: xen [ 1012.752938][ T831] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4514'. [ 1013.891371][ T857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1013.896937][T28718] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 1014.056661][T28718] usb 14-1: Using ep0 maxpacket: 32 [ 1014.236115][T28718] usb 14-1: unable to get BOS descriptor or descriptor too short [ 1014.247134][T28718] usb 14-1: too many configurations: 65, using maximum allowed: 8 [ 1014.250479][T28718] usb 14-1: unable to read config index 0 descriptor/start: -71 [ 1014.254395][T28718] usb 14-1: can't read configurations, error -71 [ 1014.263396][ T40] audit: type=1326 audit(1766989187.117:5058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=848 comm="syz.0.4519" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x0 [ 1014.365246][ T863] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1014.372883][ T863] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4519'. [ 1014.985006][T11415] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1015.166670][T11415] usb 5-1: Using ep0 maxpacket: 16 [ 1015.169995][T11415] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1015.173285][T11415] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1015.176566][T11415] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1015.180789][T11415] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1015.189373][T11415] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1015.194319][T11415] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.198780][T11415] usb 5-1: Product: syz [ 1015.201188][T11415] usb 5-1: Manufacturer: syz [ 1015.203744][T11415] usb 5-1: SerialNumber: syz [ 1015.414146][T11415] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1015.435044][T28718] usb 5-1: USB disconnect, device number 27 [ 1015.450296][T28718] usblp0: removed [ 1016.139535][ T896] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1016.143592][ T896] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1016.147160][ T896] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1016.149558][ T896] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1016.155672][ T896] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1016.748531][ T910] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 1016.750795][ T910] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1016.753421][ T910] vhci_hcd vhci_hcd.0: Device attached [ 1016.926852][ T6005] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1016.986698][ T6005] usb 37-1: new full-speed USB device number 30 using vhci_hcd [ 1017.573961][ T911] vhci_hcd: connection reset by peer [ 1017.576259][T28165] vhci_hcd vhci_hcd.0: stop threads [ 1017.578799][T28165] vhci_hcd vhci_hcd.0: release socket [ 1017.581454][T28165] vhci_hcd vhci_hcd.0: disconnect device [ 1018.056732][ T5300] Bluetooth: hci2: command 0x0c1a tx timeout [ 1018.216714][T29010] Bluetooth: hci3: command 0x0c1a tx timeout [ 1018.218871][ T5300] Bluetooth: hci1: command 0x0405 tx timeout [ 1018.352389][ T921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1018.993975][T29010] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1019.000842][T29010] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1019.005013][T29010] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1019.010632][T29010] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1019.014521][T29010] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1019.061367][ T928] ip6_vti0 speed is unknown, defaulting to 1000 [ 1019.175695][ T930] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 1019.177950][ T930] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1019.180653][ T928] lo speed is unknown, defaulting to 1000 [ 1019.193012][ T932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4543'. [ 1019.196290][ T930] vhci_hcd vhci_hcd.0: Device attached [ 1019.261863][ T928] chnl_net:caif_netlink_parms(): no params data found [ 1019.347676][ T928] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.350235][ T928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.357141][ T928] bridge_slave_0: entered allmulticast mode [ 1019.360512][ T928] bridge_slave_0: entered promiscuous mode [ 1019.368068][ T928] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.370586][ T928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.373435][ T928] bridge_slave_1: entered allmulticast mode [ 1019.388253][ T928] bridge_slave_1: entered promiscuous mode [ 1019.414145][ T928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1019.419884][ T928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1019.436205][ T928] team0: Port device team_slave_0 added [ 1019.439809][ T928] team0: Port device team_slave_1 added [ 1019.459231][ T928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1019.461567][ T928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1019.466627][T28718] usb 56-1: SetAddress Request (10) to port 0 [ 1019.470411][ T928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1019.473095][T28718] usb 56-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1019.478092][ T928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1019.482178][ T928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1019.491299][ T928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1019.515670][ T928] hsr_slave_0: entered promiscuous mode [ 1019.518412][ T928] hsr_slave_1: entered promiscuous mode [ 1019.521109][ T928] debugfs: 'hsr0' already exists in 'hsr' [ 1019.523389][ T928] Cannot create hsr debugfs directory [ 1019.806142][ T933] vhci_hcd: connection reset by peer [ 1019.814570][ T13] vhci_hcd vhci_hcd.9: stop threads [ 1019.820261][ T13] vhci_hcd vhci_hcd.9: release socket [ 1019.822094][ T13] vhci_hcd vhci_hcd.9: disconnect device [ 1020.223281][ T928] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1020.229729][ T928] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1020.235581][ T928] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1020.246446][ T928] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1020.294858][ T928] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.296687][T29010] Bluetooth: hci1: command 0x0405 tx timeout [ 1020.297991][ T928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.303620][ T928] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.306379][ T928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.314256][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.343366][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.401681][ T1007] netlink: 'syz.0.4547': attribute type 1 has an invalid length. [ 1020.495454][ T928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.523976][ T928] 8021q: adding VLAN 0 to HW filter on device team0 [ 1020.535963][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.538926][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.572878][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.575758][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.612331][ T1007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4547'. [ 1020.879976][ T1027] FAULT_INJECTION: forcing a failure. [ 1020.879976][ T1027] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.884701][ T1027] CPU: 2 UID: 0 PID: 1027 Comm: syz.9.4548 Tainted: G L syzkaller #0 PREEMPT(full) [ 1020.884719][ T1027] Tainted: [L]=SOFTLOCKUP [ 1020.884723][ T1027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1020.884731][ T1027] Call Trace: [ 1020.884735][ T1027] [ 1020.884740][ T1027] dump_stack_lvl+0x16c/0x1f0 [ 1020.884761][ T1027] should_fail_ex+0x512/0x640 [ 1020.884775][ T1027] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1020.884790][ T1027] should_failslab+0xc2/0x120 [ 1020.884813][ T1027] kmem_cache_alloc_noprof+0x83/0x770 [ 1020.884826][ T1027] ? __kvm_mmu_topup_memory_cache+0x455/0x600 [ 1020.884844][ T1027] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 1020.884865][ T1027] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 1020.884882][ T1027] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 1020.884909][ T1027] mmu_topup_memory_caches+0x25/0x170 [ 1020.884924][ T1027] kvm_mmu_load+0xd6/0x2390 [ 1020.884937][ T1027] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 1020.884953][ T1027] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 1020.884971][ T1027] ? __pfx_kvm_mmu_load+0x10/0x10 [ 1020.884983][ T1027] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 1020.885001][ T1027] ? kvm_check_and_inject_events+0x63d/0x1050 [ 1020.885018][ T1027] vcpu_run+0x39d2/0x5a80 [ 1020.885030][ T1027] ? find_held_lock+0x2b/0x80 [ 1020.885044][ T1027] ? vmx_vcpu_load_vmcs+0x222/0x770 [ 1020.885065][ T1027] ? __pfx_vcpu_run+0x10/0x10 [ 1020.885086][ T1027] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 1020.885099][ T1027] kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 1020.885116][ T1027] kvm_vcpu_ioctl+0x76d/0x16d0 [ 1020.885135][ T1027] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1020.885152][ T1027] ? tomoyo_path_number_perm+0x18d/0x580 [ 1020.885167][ T1027] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1020.885184][ T1027] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1020.885202][ T1027] ? do_vfs_ioctl+0x128/0x14f0 [ 1020.885216][ T1027] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1020.885235][ T1027] kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 1020.885256][ T1027] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1020.885274][ T1027] ? __fget_files+0x20e/0x3c0 [ 1020.885289][ T1027] ? __fput_deferred+0x430/0x480 [ 1020.885303][ T1027] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1020.885326][ T1027] __ia32_compat_sys_ioctl+0x242/0x370 [ 1020.885341][ T1027] __do_fast_syscall_32+0xe8/0x680 [ 1020.885360][ T1027] do_fast_syscall_32+0x32/0x80 [ 1020.885378][ T1027] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1020.885392][ T1027] RIP: 0023:0xf7fe2579 [ 1020.885402][ T1027] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1020.885413][ T1027] RSP: 002b:00000000f54d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1020.885424][ T1027] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 1020.885432][ T1027] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1020.885438][ T1027] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1020.885444][ T1027] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1020.885451][ T1027] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1020.885464][ T1027] [ 1020.933967][ T928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1021.116824][T29010] Bluetooth: hci4: command tx timeout [ 1021.134145][ T928] veth0_vlan: entered promiscuous mode [ 1021.150435][ T928] veth1_vlan: entered promiscuous mode [ 1021.193905][ T928] veth0_macvtap: entered promiscuous mode [ 1021.203646][ T928] veth1_macvtap: entered promiscuous mode [ 1021.224457][ T928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1021.237500][ T928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1021.251386][T14072] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.254886][T14072] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.259028][T14072] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.261927][T14072] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.385864][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1021.393832][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1021.446716][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1021.450126][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1022.126798][ T6005] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1022.376870][T29010] Bluetooth: hci1: command 0x0405 tx timeout [ 1022.552948][ T1094] netlink: 'syz.2.4554': attribute type 21 has an invalid length. [ 1022.556389][ T1094] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4554'. [ 1022.562489][ T1094] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4554'. [ 1022.846960][ T1105] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4558'. [ 1022.853374][ T1105] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4558'. [ 1022.858371][ T1105] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4558'. [ 1023.206778][T29010] Bluetooth: hci4: command tx timeout [ 1023.802877][ T1124] fuse: Bad value for 'fd' [ 1023.810950][ T1128] binder: 1123:1128 ioctl c018937b 800026c0 returned -22 [ 1024.310398][ T1141] tunl0: entered promiscuous mode [ 1024.314358][ T1141] netlink: 'syz.2.4564': attribute type 4 has an invalid length. [ 1024.317635][ T1141] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4564'. [ 1024.346779][ T6006] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 1024.536836][T28718] usb 56-1: device descriptor read/8, error -110 [ 1024.585130][ T1148] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1024.587310][ T1148] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1024.590475][ T1148] vhci_hcd vhci_hcd.0: Device attached [ 1024.654482][ T6006] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1024.857268][ T6005] usb 48-1: SetAddress Request (50) to port 0 [ 1024.860443][ T6005] usb 48-1: new SuperSpeed USB device number 50 using vhci_hcd [ 1024.878093][ T6006] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.888848][ T6006] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1024.892648][ T6006] usb 14-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1024.900574][ T6006] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1024.904552][ T6006] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1024.908027][ T6006] usb 14-1: Product: syz [ 1024.909956][ T6006] usb 14-1: Manufacturer: syz [ 1024.919933][ T6006] cdc_wdm 14-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1024.927426][T28718] usb usb56-port1: attempt power cycle [ 1025.127927][ T6006] usb 14-1: USB disconnect, device number 4 [ 1025.237535][ T40] audit: type=1326 audit(1766989198.097:5059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1162 comm="syz.0.4569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1025.244809][ T40] audit: type=1326 audit(1766989198.097:5060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1162 comm="syz.0.4569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1025.252450][ T40] audit: type=1326 audit(1766989198.107:5061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1162 comm="syz.0.4569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1025.256712][T29010] Bluetooth: hci4: command tx timeout [ 1025.261676][ T40] audit: type=1326 audit(1766989198.107:5062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1162 comm="syz.0.4569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1025.273209][ T40] audit: type=1326 audit(1766989198.107:5063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1162 comm="syz.0.4569" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1025.283128][ T40] audit: type=1326 audit(1766989198.107:5064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1162 comm="syz.0.4569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1025.291203][ T40] audit: type=1326 audit(1766989198.107:5065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1162 comm="syz.0.4569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1025.299043][ T40] audit: type=1326 audit(1766989198.117:5066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1162 comm="syz.0.4569" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1025.306087][ T40] audit: type=1326 audit(1766989198.117:5067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1162 comm="syz.0.4569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1025.314182][ T40] audit: type=1326 audit(1766989198.117:5068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1162 comm="syz.0.4569" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 1025.488389][T28718] usb usb56-port1: unable to enumerate USB device [ 1025.658282][ T1179] netlink: 'syz.0.4573': attribute type 1 has an invalid length. [ 1025.696012][ T1179] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4573'. [ 1026.067079][ T5985] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1026.090926][T28718] hid-generic 0005:0002:5508.0014: hidraw1: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1026.212094][ T1190] fido_id[1190]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 1026.229956][ T5985] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.236343][ T5985] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1026.245789][ T5985] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1026.251540][ T5985] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1026.255600][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.262195][ T1185] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1026.272744][ T5985] hub 5-1:1.0: bad descriptor, ignoring hub [ 1026.275371][ T5985] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1026.287493][ T5985] cdc_wdm 5-1:1.0: skipping garbage [ 1026.289879][ T5985] cdc_wdm 5-1:1.0: skipping garbage [ 1026.298527][ T5985] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1026.301107][ T5985] cdc_wdm 5-1:1.0: Unknown control protocol [ 1027.197267][ T1185] usb 5-1: reset full-speed USB device number 28 using dummy_hcd [ 1027.336901][T29010] Bluetooth: hci4: command tx timeout [ 1027.361146][ T1194] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1027.430471][ T1153] vhci_hcd: connection reset by peer [ 1027.440677][ T1182] vhci_hcd vhci_hcd.5: stop threads [ 1027.443030][ T1182] vhci_hcd vhci_hcd.5: release socket [ 1027.448240][ T1182] vhci_hcd vhci_hcd.5: disconnect device [ 1027.702942][ T1206] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1027.705754][ T1206] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1027.714021][ T1206] vhci_hcd vhci_hcd.0: Device attached [ 1027.807015][ T6006] usb 5-1: USB disconnect, device number 28 [ 1027.966829][ T6006] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1028.091402][ T1213] [ 1028.092669][ T1213] ====================================================== [ 1028.095671][ T1213] WARNING: possible circular locking dependency detected [ 1028.098657][ T1213] syzkaller #0 Tainted: G L [ 1028.101564][ T1213] ------------------------------------------------------ [ 1028.104600][ T1213] syz.9.4581/1213 is trying to acquire lock: [ 1028.107223][ T1213] ffff8880594d0948 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 1028.111317][ T1213] [ 1028.111317][ T1213] but task is already holding lock: [ 1028.114497][ T1213] ffff8880137e7c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 1028.118464][ T1213] [ 1028.118464][ T1213] which lock already depends on the new lock. [ 1028.118464][ T1213] [ 1028.122762][ T1213] [ 1028.122762][ T1213] the existing dependency chain (in reverse order) is: [ 1028.126354][ T6006] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1028.126773][ T1213] [ 1028.126773][ T1213] -> #3 (&of->mutex){+.+.}-{4:4}: [ 1028.126809][ T1213] __mutex_lock+0x1aa/0x1ca0 [ 1028.126843][ T1213] kernfs_seq_start+0x4f/0x2a0 [ 1028.130169][ T6006] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1028.133081][ T1213] seq_read_iter+0x2c1/0x12d0 [ 1028.133115][ T1213] kernfs_fop_read_iter+0x46c/0x610 [ 1028.134872][ T6006] usb 10-1: Product: syz [ 1028.137064][ T1213] copy_splice_read+0x618/0xc20 [ 1028.137096][ T1213] do_splice_read+0x285/0x370 [ 1028.137122][ T1213] splice_file_to_pipe+0x109/0x120 [ 1028.137147][ T1213] do_sendfile+0x400/0xe50 [ 1028.137170][ T1213] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 1028.137188][ T1213] __do_fast_syscall_32+0xe8/0x680 [ 1028.137216][ T1213] do_fast_syscall_32+0x32/0x80 [ 1028.137244][ T1213] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1028.137268][ T1213] [ 1028.137268][ T1213] -> #2 (&p->lock){+.+.}-{4:4}: [ 1028.137297][ T1213] __mutex_lock+0x1aa/0x1ca0 [ 1028.137325][ T1213] seq_read_iter+0xe1/0x12d0 [ 1028.141046][ T6006] usb 10-1: Manufacturer: syz [ 1028.142473][ T1213] kernfs_fop_read_iter+0x46c/0x610 [ 1028.144562][ T6006] usb 10-1: SerialNumber: syz [ 1028.146372][ T1213] copy_splice_read+0x618/0xc20 [ 1028.149217][ T6006] usb 10-1: config 0 descriptor?? [ 1028.150423][ T1213] do_splice_read+0x285/0x370 [ 1028.157682][ T6006] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1028.159473][ T1213] splice_file_to_pipe+0x109/0x120 [ 1028.161299][ T6006] dvb-usb: bulk message failed: -22 (2/0) [ 1028.164322][ T1213] do_sendfile+0x400/0xe50 [ 1028.194028][ T1213] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 1028.196650][ T1213] __do_fast_syscall_32+0xe8/0x680 [ 1028.199004][ T1213] do_fast_syscall_32+0x32/0x80 [ 1028.201319][ T1213] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1028.204385][ T1213] [ 1028.204385][ T1213] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 1028.207595][ T1213] __mutex_lock+0x1aa/0x1ca0 [ 1028.209795][ T1213] anon_pipe_write+0x15d/0x1bd0 [ 1028.212097][ T1213] __kernel_write_iter+0x720/0xb10 [ 1028.214289][ T1213] __kernel_write+0xf5/0x140 [ 1028.216262][ T1213] autofs_notify_daemon+0x4db/0xd60 [ 1028.218541][ T1213] autofs_wait+0x10f3/0x1ac0 [ 1028.220672][ T1213] autofs_mount_wait+0x132/0x3c0 [ 1028.223034][ T1213] autofs_d_automount+0x4b2/0x960 [ 1028.225456][ T1213] __traverse_mounts+0x1b9/0x830 [ 1028.227784][ T1213] step_into_slowpath+0x772/0xf50 [ 1028.230118][ T1213] path_openat+0x10db/0x3140 [ 1028.232300][ T1213] do_filp_open+0x20b/0x470 [ 1028.234424][ T1213] do_sys_openat2+0x121/0x290 [ 1028.236672][ T1213] __ia32_compat_sys_openat+0x16d/0x210 [ 1028.239273][ T1213] __do_fast_syscall_32+0xe8/0x680 [ 1028.241643][ T1213] do_fast_syscall_32+0x32/0x80 [ 1028.243949][ T1213] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1028.246880][ T1213] [ 1028.246880][ T1213] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 1028.250077][ T1213] __lock_acquire+0x1669/0x2890 [ 1028.252404][ T1213] lock_acquire+0x179/0x330 [ 1028.254594][ T1213] __mutex_lock+0x1aa/0x1ca0 [ 1028.256770][ T1213] autofs_notify_daemon+0x4a6/0xd60 [ 1028.259246][ T1213] autofs_wait+0x10f3/0x1ac0 [ 1028.261326][ T1213] autofs_mount_wait+0x132/0x3c0 [ 1028.263533][ T1213] autofs_d_automount+0x4b2/0x960 [ 1028.265862][ T1213] __traverse_mounts+0x1b9/0x830 [ 1028.268211][ T1213] step_into_slowpath+0x772/0xf50 [ 1028.270577][ T1213] path_lookupat+0x627/0xc40 [ 1028.272753][ T1213] filename_lookup+0x224/0x5f0 [ 1028.275021][ T1213] kern_path+0x35/0x50 [ 1028.277010][ T1213] lookup_bdev+0xd8/0x280 [ 1028.279099][ T1213] resume_store+0x1d6/0x490 [ 1028.281210][ T1213] kobj_attr_store+0x58/0x80 [ 1028.283349][ T1213] sysfs_kf_write+0xf2/0x150 [ 1028.285788][ T1213] kernfs_fop_write_iter+0x3af/0x570 [ 1028.288516][ T1213] vfs_write+0x7d3/0x11d0 [ 1028.290726][ T1213] ksys_write+0x12a/0x250 [ 1028.292925][ T1213] __do_fast_syscall_32+0xe8/0x680 [ 1028.295464][ T1213] do_fast_syscall_32+0x32/0x80 [ 1028.297763][ T1213] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1028.300672][ T1213] [ 1028.300672][ T1213] other info that might help us debug this: [ 1028.300672][ T1213] [ 1028.304936][ T1213] Chain exists of: [ 1028.304936][ T1213] &sbi->pipe_mutex --> &p->lock --> &of->mutex [ 1028.304936][ T1213] [ 1028.309894][ T1213] Possible unsafe locking scenario: [ 1028.309894][ T1213] [ 1028.312973][ T1213] CPU0 CPU1 [ 1028.315222][ T1213] ---- ---- [ 1028.317388][ T1213] lock(&of->mutex); [ 1028.319138][ T1213] lock(&p->lock); [ 1028.321882][ T1213] lock(&of->mutex); [ 1028.324657][ T1213] lock(&sbi->pipe_mutex); [ 1028.326649][ T1213] [ 1028.326649][ T1213] *** DEADLOCK *** [ 1028.326649][ T1213] [ 1028.330045][ T1213] 4 locks held by syz.9.4581/1213: [ 1028.332243][ T1213] #0: ffff888024c53978 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 1028.336170][ T1213] #1: ffff88802482e420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1028.339952][ T1213] #2: ffff8880137e7c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 1028.344012][ T1213] #3: ffff88801c3b20f8 (kn->active#64){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 1028.348189][ T1213] [ 1028.348189][ T1213] stack backtrace: [ 1028.350687][ T1213] CPU: 3 UID: 0 PID: 1213 Comm: syz.9.4581 Tainted: G L syzkaller #0 PREEMPT(full) [ 1028.350716][ T1213] Tainted: [L]=SOFTLOCKUP [ 1028.350723][ T1213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1028.350736][ T1213] Call Trace: [ 1028.350744][ T1213] [ 1028.350752][ T1213] dump_stack_lvl+0x116/0x1f0 [ 1028.350782][ T1213] print_circular_bug+0x275/0x340 [ 1028.350814][ T1213] check_noncircular+0x146/0x160 [ 1028.350845][ T1213] __lock_acquire+0x1669/0x2890 [ 1028.350867][ T1213] lock_acquire+0x179/0x330 [ 1028.350883][ T1213] ? autofs_notify_daemon+0x4a6/0xd60 [ 1028.350906][ T1213] ? __pfx___might_resched+0x10/0x10 [ 1028.350934][ T1213] __mutex_lock+0x1aa/0x1ca0 [ 1028.350967][ T1213] ? autofs_notify_daemon+0x4a6/0xd60 [ 1028.350988][ T1213] ? find_held_lock+0x2b/0x80 [ 1028.351011][ T1213] ? autofs_notify_daemon+0x4a6/0xd60 [ 1028.351031][ T1213] ? autofs_notify_daemon+0x45a/0xd60 [ 1028.351053][ T1213] ? __pfx___mutex_lock+0x10/0x10 [ 1028.351082][ T1213] ? __mutex_unlock_slowpath+0x161/0x790 [ 1028.351112][ T1213] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1028.351143][ T1213] ? from_kgid_munged+0xab/0x130 [ 1028.351174][ T1213] ? autofs_notify_daemon+0x4a6/0xd60 [ 1028.351195][ T1213] autofs_notify_daemon+0x4a6/0xd60 [ 1028.351216][ T1213] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 1028.351237][ T1213] ? kernfs_fop_write_iter+0x3af/0x570 [ 1028.351264][ T1213] ? vfs_write+0x7d3/0x11d0 [ 1028.351289][ T1213] ? ksys_write+0x12a/0x250 [ 1028.351320][ T1213] ? lockdep_init_map_type+0x5c/0x270 [ 1028.351339][ T1213] ? lockdep_init_map_type+0x5c/0x270 [ 1028.351359][ T1213] autofs_wait+0x10f3/0x1ac0 [ 1028.351382][ T1213] ? __pfx_autofs_wait+0x10/0x10 [ 1028.351402][ T1213] ? __pfx___schedule+0x10/0x10 [ 1028.351426][ T1213] ? find_held_lock+0x2b/0x80 [ 1028.351449][ T1213] ? path_has_submounts+0xcf/0x120 [ 1028.351472][ T1213] ? preempt_schedule_thunk+0x16/0x30 [ 1028.351490][ T1213] ? preempt_schedule_common+0x44/0xc0 [ 1028.351518][ T1213] autofs_mount_wait+0x132/0x3c0 [ 1028.351538][ T1213] autofs_d_automount+0x4b2/0x960 [ 1028.351559][ T1213] __traverse_mounts+0x1b9/0x830 [ 1028.351581][ T1213] step_into_slowpath+0x772/0xf50 [ 1028.351605][ T1213] ? __up_read+0x2d1/0x700 [ 1028.351625][ T1213] ? __pfx_step_into_slowpath+0x10/0x10 [ 1028.351649][ T1213] ? __lookup_slow+0x3d0/0x460 [ 1028.351672][ T1213] path_lookupat+0x627/0xc40 [ 1028.351697][ T1213] filename_lookup+0x224/0x5f0 [ 1028.351722][ T1213] ? __pfx_filename_lookup+0x10/0x10 [ 1028.351754][ T1213] ? getname_kernel+0x52/0x370 [ 1028.351772][ T1213] ? __asan_memcpy+0x3c/0x60 [ 1028.351796][ T1213] kern_path+0x35/0x50 [ 1028.351818][ T1213] lookup_bdev+0xd8/0x280 [ 1028.351837][ T1213] ? __pfx_lookup_bdev+0x10/0x10 [ 1028.351854][ T1213] ? __asan_memcpy+0x3c/0x60 [ 1028.351878][ T1213] resume_store+0x1d6/0x490 [ 1028.351900][ T1213] ? __pfx_resume_store+0x10/0x10 [ 1028.351921][ T1213] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1028.351947][ T1213] ? lockdep_hardirqs_on+0x7c/0x110 [ 1028.351977][ T1213] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1028.352003][ T1213] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 1028.352029][ T1213] ? __pfx_resume_store+0x10/0x10 [ 1028.352050][ T1213] kobj_attr_store+0x58/0x80 [ 1028.352079][ T1213] ? __pfx_kobj_attr_store+0x10/0x10 [ 1028.352106][ T1213] sysfs_kf_write+0xf2/0x150 [ 1028.352125][ T1213] kernfs_fop_write_iter+0x3af/0x570 [ 1028.352152][ T1213] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1028.352172][ T1213] vfs_write+0x7d3/0x11d0 [ 1028.352197][ T1213] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1028.352226][ T1213] ? __pfx_vfs_write+0x10/0x10 [ 1028.352250][ T1213] ? find_held_lock+0x2b/0x80 [ 1028.352280][ T1213] ksys_write+0x12a/0x250 [ 1028.352306][ T1213] ? __pfx_ksys_write+0x10/0x10 [ 1028.352334][ T1213] __do_fast_syscall_32+0xe8/0x680 [ 1028.352365][ T1213] do_fast_syscall_32+0x32/0x80 [ 1028.352394][ T1213] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1028.352417][ T1213] RIP: 0023:0xf7fe2579 [ 1028.352431][ T1213] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1028.352451][ T1213] RSP: 002b:00000000f54b555c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1028.352469][ T1213] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000040 [ 1028.352481][ T1213] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 1028.352492][ T1213] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1028.352503][ T1213] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1028.352515][ T1213] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1028.352532][ T1213] [ 1028.356164][ T6006] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1028.389589][ T1213] PM: Image not found (code -22) [ 1028.394759][ T6006] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1028.534131][ T1206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.538612][ T1206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.543290][ T6006] usb 10-1: media controller created [ 1028.545389][ T1220] bridge2: entered allmulticast mode [ 1028.551690][ T6006] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1028.732960][ T6006] cxusb: set interface failed [ 1028.734842][ T6006] dvb-usb: bulk message failed: -22 (1/0) [ 1028.750027][ T1208] vhci_hcd: connection closed [ 1028.750332][ T61] vhci_hcd vhci_hcd.5: stop threads [ 1028.754076][ T61] vhci_hcd vhci_hcd.5: release socket [ 1028.756141][ T61] vhci_hcd vhci_hcd.5: disconnect device [ 1028.821701][ T6006] DVB: Unable to find symbol mt352_attach() [ 1028.824246][ T6006] dvb-usb: bulk message failed: -22 (5/0) [ 1028.828739][ T6006] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1028.831636][ T6006] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1028.906677][ T6006] rc_core: IR keymap rc-dvico-mce not found [ 1028.908661][ T6006] Registered IR keymap rc-empty [ 1028.910787][ T6006] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 1028.915734][ T6006] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input48 [ 1028.928543][ T6006] dvb-usb: schedule remote query interval to 100 msecs. [ 1028.931652][ T6006] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1028.948125][ T6006] usb 10-1: USB disconnect, device number 5 [ 1029.037731][ T6006] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1029.863099][ T46] bond1 (unregistering): (slave gre1): Releasing backup interface [ 1029.906706][ T6005] usb 48-1: device descriptor read/8, error -110 [ 1030.052541][ T46] bond0 (unregistering): Released all slaves [ 1030.151629][ T46] bond1 (unregistering): Released all slaves [ 1030.155420][ T46] bond2 (unregistering): Released all slaves [ 1030.248367][ T46] IPVS: stopping master sync thread 28462 ... [ 1030.307242][ T6005] usb usb48-port1: attempt power cycle [ 1030.508182][ T46] hsr_slave_0: left promiscuous mode [ 1030.511141][ T46] hsr_slave_1: left promiscuous mode [ 1030.867265][ T6005] usb usb48-port1: unable to enumerate USB device [ 1031.473898][ T46] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.532904][ T46] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.611741][ T46] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.689568][ T46] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.761965][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.823831][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.870900][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.940686][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.003543][ T46] bridge_slave_1: left allmulticast mode [ 1032.006037][ T46] bridge_slave_1: left promiscuous mode [ 1032.009354][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.012832][ T46] bridge_slave_0: left allmulticast mode [ 1032.015309][ T46] bridge_slave_0: left promiscuous mode [ 1032.018281][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.024036][ T46] bridge_slave_1: left allmulticast mode [ 1032.026400][ T46] bridge_slave_1: left promiscuous mode [ 1032.029014][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.033071][ T46] bridge_slave_0: left allmulticast mode [ 1032.035465][ T46] bridge_slave_0: left promiscuous mode [ 1032.038266][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.152818][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1032.158159][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1032.162695][ T46] bond0 (unregistering): Released all slaves [ 1032.272059][ T46] bond1 (unregistering): Released all slaves [ 1032.382065][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1032.387340][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1032.391917][ T46] bond0 (unregistering): Released all slaves [ 1032.865606][ T46] hsr_slave_0: left promiscuous mode [ 1032.868278][ T46] hsr_slave_1: left promiscuous mode [ 1032.870922][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1032.873798][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1032.887028][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1032.889417][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1032.894722][ T46] hsr_slave_0: left promiscuous mode [ 1032.905954][ T46] hsr_slave_1: left promiscuous mode [ 1032.908075][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1032.910383][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1032.913173][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1032.915620][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1032.921554][ T46] veth1_macvtap: left promiscuous mode [ 1032.923304][ T46] veth0_macvtap: left promiscuous mode [ 1032.925075][ T46] veth1_vlan: left promiscuous mode [ 1032.926878][ T46] veth0_vlan: left promiscuous mode [ 1032.929227][ T46] veth1_macvtap: left promiscuous mode [ 1032.930936][ T46] veth0_macvtap: left promiscuous mode [ 1032.932653][ T46] veth1_vlan: left promiscuous mode [ 1032.934301][ T46] veth0_vlan: left promiscuous mode [ 1033.094994][ T46] team0 (unregistering): Port device team_slave_1 removed [ 1033.111780][ T46] team0 (unregistering): Port device team_slave_0 removed [ 1033.260585][ T46] team0 (unregistering): Port device team_slave_1 removed [ 1033.285363][ T46] team0 (unregistering): Port device team_slave_0 removed [ 1033.875092][ T46] IPVS: stop unused estimator thread 0...