last executing test programs: 3m49.151118366s ago: executing program 2 (id=47): poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x20, 0x70bd29, 0xef6, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050427f707215c6d2c143500", @ANYRES32=r8, @ANYBLOB="04000280"], 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000480)={@remote, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @private=0xa010100}}}}, &(0x7f0000000300)={0x1, 0x4, [0xe0c, 0x599, 0xbd3, 0xdee]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r10, 0x400455c8, 0x4) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000019080)=0x30) ioctl$TIOCSTI(r10, 0x5412, 0x0) r11 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$EVIOCGEFFECTS(r11, 0x80044584, &(0x7f00000001c0)=""/145) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r11, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x30, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x30}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x40, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r4, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 3m46.833721252s ago: executing program 2 (id=57): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) read$dsp(r0, &(0x7f0000000040)=""/196, 0xc4) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f00000001c0)=0xffff) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000200)={0xd, @pix_mp={0x8, 0x5, 0x41414270, 0x1, 0xc, [{0x10001, 0x7ff}, {0x80000000, 0x8001}, {0x8000, 0x7}, {0x2, 0x40}, {0x8, 0xf}, {0x401, 0x4}, {0x27, 0x3}, {0x7f}], 0xa, 0x3, 0x4, 0x0, 0x6}}) 3m46.784450761s ago: executing program 2 (id=58): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1d) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) poll(&(0x7f0000000100)=[{r0, 0x6826}], 0x1, 0xd57) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write(r2, &(0x7f0000000240)="94", 0x1) tee(r1, r5, 0x8f5, 0x100000000000000) write(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000a74000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x2, 0x1) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(0x0, 0x2, 0x0) getpid() syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 3m46.333321946s ago: executing program 2 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') chdir(&(0x7f0000000280)='./file0/../file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1}}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x17c, r4, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac}, 0x0, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}, @NL80211_ATTR_PROBE_RESP={0x103, 0x91, "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"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x17c}}, 0x0) r6 = gettid() syz_open_procfs(r6, &(0x7f0000000080)='oom_adj\x00') ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x400c4152, &(0x7f0000000100)={0x0, 0x0, 0x1}) 3m46.248778229s ago: executing program 2 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080), 0x84880) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "cb2891", 0x20, 0x2b, 0x0, @remote, @local, {[@fragment={0x33, 0x0, 0xf, 0x1, 0x0, 0x19, 0x65}], {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x401}}}}}}}, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) listxattr(0x0, &(0x7f0000001d00)=""/4096, 0x1000) semctl$GETALL(0x0, 0x0, 0xd, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x1, 0x0, 0x9, 0x7fff0800}]}) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x401, 0x12, r4, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/sync_on_suspend', 0x40, 0x0) sendfile(r4, r6, 0x0, 0xa4ae) shutdown(0xffffffffffffffff, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x24000000, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='net/packet\x00') ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000)) 3m45.998799189s ago: executing program 2 (id=62): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000000104010200080000000000000200000206000640000000000500010002000000"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto(r3, 0x0, 0x0, 0x4084080, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r4, 0x29, 0x10, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r4, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}, 0x5b4}], 0x1, 0x2004d890) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000002c0)={0x8cd, 0x3, 0xfffffffffffffffc}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x8008af83, &(0x7f0000003a40)) r6 = dup(r5) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r7, r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r6, 0x0, 0xffffffdb) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 3m45.732736716s ago: executing program 32 (id=62): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000000104010200080000000000000200000206000640000000000500010002000000"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto(r3, 0x0, 0x0, 0x4084080, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r4, 0x29, 0x10, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r4, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}, 0x5b4}], 0x1, 0x2004d890) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="07fcff00070000008f0f0000a04517f70c38caacf05dfd47b35d05e98a63eca64e5b965bd5abf37fce114f99611937c8b3c6af7c09abb5418983411fe281a011c7e8968ec4e8b338ccc8c9a031931592e3d39cab9861f11e24afc208613d7e7a3f3849f3fb129f9dceac88f52ea1bdeb0fcfa943a24f172f54e24b67e3cfe3347466c4c55ed65a77ddcc2474e221b4cdbc5b20c0e346263a577e4517d85c946e56756b2a245497b22267e7a9a517b37b552ca7aed27613ea45e0b2d09952ffec8b7bb04741e0db504f48916d9e409692c82f2ad2d014588316dbf0df2967ee8e112fad2860a8f98cb253da20c11c390106b4b4cba79f646201dbb4d0d14e3417c023ebfac05320bd8b4cbf4ed65995"]) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000002c0)={0x8cd, 0x3, 0xfffffffffffffffc}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x8008af83, &(0x7f0000003a40)) r6 = dup(r5) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r7, r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r6, 0x0, 0xffffffdb) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 3m20.92299209s ago: executing program 1 (id=201): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0f000000fcffffffba0700000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/34], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000800000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe2, 0x0) syz_open_dev$midi(&(0x7f0000000200), 0x101, 0x901) r4 = syz_open_procfs(0x0, &(0x7f0000000900)='smaps\x00') lseek(r4, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="14fd54ab72df87e6256c00000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) read$FUSE(r6, &(0x7f00000040c0)={0x2020}, 0x2020) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2410", @ANYRES16=r8, @ANYBLOB="01002cbd7000fcdbdf25090000000800030004000000080004006d0a0000"], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x4814) creat(0x0, 0xecf86c37d53048c5) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000180)='./file0\x00', 0x80000000) inotify_add_watch(r9, &(0x7f0000000180)='./file0\x00', 0x10000000) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r10, 0xc058534f, &(0x7f0000000080)={{0xf, 0x1}, 0x1, 0x2, 0x7fff, {0x0, 0xb}, 0x6, 0x6}) syz_usb_control_io$printer(r5, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) 3m17.833461194s ago: executing program 1 (id=208): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xc000000b}) signalfd4(r2, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0xaaa9, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x10, 0x4}, 0x94) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000100)={0x0, 'veth0_to_batadv\x00', {0x1}, 0x2a}) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x34}, r3}, 0x14) sendmsg$nl_route(r0, 0x0, 0x8000002) 3m16.954368168s ago: executing program 1 (id=210): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @empty}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd603a94350014060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b9d72852adcb63e9"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @random="7f9cc9043860", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "199646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x203}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$video(&(0x7f0000000000), 0x7fffffff, 0x1a3440) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0xfffffffe}, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) r6 = syz_clone(0xa000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ptrace(0x10, r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000007000000140001800500020001000000080006001a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c0000f3", @ANYRES16=r8, @ANYBLOB="00042bbd7000fbdbdf2503000000080002000700000048000180060001000200000014000400fe8000000000000000000000000000bb060001000a00000008000300ac1414bb08000700", @ANYRES32=r9, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r10, @ANYBLOB="08000600050000000800020003000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3m15.946465938s ago: executing program 1 (id=213): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x86dd}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0x2}) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000b00)={0x150001, 0x0, {[0xe, 0x4, 0x5, 0x836, 0x6, 0x2, 0x4, 0x4]}}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f0000000040)={r4, 0x42, 0x400, 0x772f}) ioctl$VIDIOC_DBG_G_CHIP_INFO(r10, 0xc0c85666, &(0x7f0000000100)={{0x1, @name="ca43edff93915b0c521def8faa909816cff9974244171a869bcdbec90556f0a3"}, "405efeb9cbb4563841b0254b5e7072507dc56b7880db5103f2cdbf581793eebe", 0x2}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3m15.493418832s ago: executing program 1 (id=219): r0 = openat$cdrom(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$DVD_WRITE_STRUCT(r0, 0x5390, &(0x7f00000003c0)=@type=0x3) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CDROM_LOCKDOOR(r0, 0x5329, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000c0}, 0x4000) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x602, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc01c5869, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140)='\'-)^\\^*-\x00', 0x2000, &(0x7f0000000180)={@align=0xf9, {0x3, 0x7, 0xb, 0x9000000000000000}}, 0xcc1, &(0x7f00000001c0), &(0x7f00000002c0)=0xfffffffe}) read$FUSE(r5, &(0x7f0000000c00)={0x2020}, 0x2020) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r6 = open(&(0x7f0000000100)='./file0\x00', 0x40040, 0x0) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)=0x10) link(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='./file0\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1010, r6, 0xfffff000) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 3m15.41642387s ago: executing program 1 (id=220): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x150) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_ep_read(r2, 0x80, 0x48, &(0x7f0000000000)=""/72) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="2000000037000701fefffffffedbdf25027c00000c00018008000100", @ANYRES32, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r8, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_setup(0x5, &(0x7f0000000100)) madvise(&(0x7f000011b000/0x1000)=nil, 0x1000, 0x9) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) ioctl$EVIOCGMASK(r10, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCGMASK(r3, 0x5b14, 0x0) 3m0.352312822s ago: executing program 33 (id=220): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x150) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_ep_read(r2, 0x80, 0x48, &(0x7f0000000000)=""/72) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="2000000037000701fefffffffedbdf25027c00000c00018008000100", @ANYRES32, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r8, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_setup(0x5, &(0x7f0000000100)) madvise(&(0x7f000011b000/0x1000)=nil, 0x1000, 0x9) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) ioctl$EVIOCGMASK(r10, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCGMASK(r3, 0x5b14, 0x0) 2m5.903497587s ago: executing program 5 (id=547): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = userfaultfd(0x80001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) madvise(&(0x7f0000b50000/0x3000)=nil, 0x3000, 0x4d) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, r5, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x0, 0x6e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) write$dsp(r6, &(0x7f0000000040)='F', 0x1) pselect6(0xa0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x80000000000300, 0x0, 0x0, 0x4, 0x80000000000}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0x10004) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000180)=[@decrefs], 0x0, 0x0, 0x0}) sendmsg$rds(0xffffffffffffffff, &(0x7f0000003400)={&(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000019c0)=[{&(0x7f00000003c0)=""/73, 0x49}, {&(0x7f00000004c0)=""/226, 0xe2}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/144, 0x90}], 0x4, &(0x7f0000003200)=[@mask_fadd={0x58, 0x114, 0x8, {{0x40, 0x2}, &(0x7f0000001a00)=0x8, &(0x7f0000001a40)=0x80000000, 0x3, 0x7f, 0x6, 0x4, 0x49, 0x4700}}, @mask_fadd={0x58, 0x114, 0x8, {{0x1, 0x200}, &(0x7f0000001a80)=0xb, &(0x7f0000001ac0)=0x5, 0x3, 0x1, 0x10, 0x4, 0x4, 0x6}}, @rdma_args={0x48, 0x114, 0x1, {{0x2, 0x6}, {&(0x7f0000001b00)=""/140, 0x8c}, &(0x7f0000001e40)=[{&(0x7f0000001bc0)=""/218, 0xda}, {&(0x7f0000001cc0)=""/248, 0xf8}, {&(0x7f0000001dc0)=""/86, 0x56}], 0x3, 0x8}}, @rdma_map={0x2c, 0x114, 0x3, {{&(0x7f0000001e80)=""/227, 0xe3}, &(0x7f0000001f80), 0xe}}, @rdma_map={0x2c, 0x114, 0x3, {{&(0x7f0000001fc0)=""/58, 0x3a}, &(0x7f0000002000), 0x10}}, @rdma_map={0x2c, 0x114, 0x3, {{&(0x7f0000002040)=""/36, 0x24}, &(0x7f0000002080), 0x4}}, @rdma_map={0x2c, 0x114, 0x3, {{&(0x7f00000020c0)=""/4096, 0x1000}, &(0x7f00000030c0), 0x8}}, @rdma_map={0x2c, 0x114, 0x3, {{&(0x7f0000003100)=""/169, 0xa9}, &(0x7f00000031c0), 0x48}}], 0x1d4, 0x4048c20}, 0x20000080) r7 = syz_open_dev$MSR(&(0x7f0000000000), 0x9, 0x0) read$msr(r7, &(0x7f0000000340)=""/123, 0x7b) 2m4.540599377s ago: executing program 5 (id=553): mkdir(&(0x7f00000003c0)='./file0\x00', 0x10) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042f"], 0x200) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002240)=ANY=[@ANYBLOB="34010000100013070000000000000000fe88000000000000000a01000000000000000000000800"/53, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000fc02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000480003006c7a6a6800"/236], 0x134}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f00000000c0)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRES32=r0]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) read$FUSE(r1, &(0x7f0000000600)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2m4.418275716s ago: executing program 5 (id=555): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x803, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) io_uring_setup(0xf07, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)) dup3(r0, r0, 0x0) 2m3.511398308s ago: executing program 5 (id=558): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r0 = openat$nvram(0xffffff9c, &(0x7f0000000080), 0x28000, 0x0) r1 = getpgid(0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x203d) syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x7, 0xfffffffffffff3ce, 0x100, 0x0, {0x42, 0x0, 0xb, 0xfff9, 0x0, 0x1, 0x0, 0xfffff7ff, 0x120, 0x2000, 0xab, r3, r4, 0x501, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000019c0)='./file1/file0\x00', &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f0000001a80)={0xffffffffffffffff, 0x80000001, 0x5, 0x4}) pipe2$watch_queue(&(0x7f0000001ac0)={0xffffffffffffffff}, 0x80) r9 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001b00), 0x2, 0x0) r10 = fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000680)=0xe4) r12 = add_key$keyring(&(0x7f00000006c0), &(0x7f00000007c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_persistent(0x16, r11, r12) r13 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001b40)={0x0}, &(0x7f0000001b80)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001bc0)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000001cc0)=0xe4) sendmsg$unix(r0, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000007c0)="d4197af22a2d3267a0bc94ddd634ef69e4c6df4e3f09f897bc29de1cc5e7a7faec38507d2692973d433a6db9e02da39f0dd569e80544e1b7c626bc703a5772ce94ac724d291827a6b6a96a480e2ce2997d43cb973fbb0cbc34005202e01219027d69e2a254435bd3e24b60e7c71b9d1abd94a2efedab91997c935c1576fc5c825a664ef783d0e2490e9e42e8f49cea1c3bff5248a5f5d7dcd2b3cd719c663acd1a69d03076fa4e31eb7f02255c58b6c9fdf3c179ba8016ee07faadc788e32446e5e72ba702922241379d9a51950a78a8b2614d5e5503c67d58242d80fa50fbaaf0bdb61b6f4910ad4a8b95ea7eedca1dc339c3fe4031c48ef9f18cbf5d9c9d9d6315d7af02d817e64025e43644b9c43990cd7245b58bf57032166ca045397011307f2d1bc5ebc111ce66dd1d8f7a5d45ca7b31fc8ad0035b95219941514fd84e42ef9d1eb8c47c76dbb046def357979a974fad55742347b959878decd6c10ff84b9469c618ab61f8ad6d9d01656703b4f71f0fd46ff858c3bc04e6e7c57363e27e9d67ff041bdafa964db0399a04f2596371232aebd946f1ffb7d239a0c9725cd4204cebbbe38cea535a326092f2e8552d0f34e7875bcc4d08a254506cb96f19b7d8053397d8dc8f97c0eb65623873ebbaf18ad94477cfa88b05dc0fcb55c7f3aaacebd9dde139cfb987e6edf49e54faa7eae3a721c03264c588c616d0b723b7c1d9a400506f83003a92cb512f1791e0db0ce803270bae374e499706eea5f6cfde2a63023ad9c3cc7c89e6bd73f73cf6d7450f3ce475e01842bc22a198d6ae0981c52791619ac83a5d84dccf3631111428c80505a07ae1ea9de0322bcb49806cb31141d883a78be876ee646421c62bf3be2be2a8cf10421d228c8962e80c61efed489d356707369cfe2abec714681371b8e7856d43e6d3a12152beea910dd28606d5be4c421280fd9b6900e1658362ef9fa0b88ba6c8a0c0eba65d1273acf565bf0fb1882be32eae98698a1b6b09d42dad5ac7f2df28725923f4d56161bebbce5208e90da926c0dd47ceeed0abb57203f2fcf491ceb5be0b8387f983532f6c6e63781a59a16ff11ee4c7ad226e868121ab82535e81665d8afbe85a5335535d76c707b4ea96494de6d5e99a2d10674da8302b88b80500571cf1a909e10e6fa22db38e607f86f5222ba4d8a6a18f63f4724245c468c32628c22be9443a6cd3cf7529007808ddb7602110821677e58f83113a2556f6647818bdfee28fa99e92d75c72ec46a79491211184ffaa19dd46522c6a1e4528056a62cbbe976b0f17edb7556155053e32bf5dae516730b24128a76ad5b42b337089ccda842956d7a2747bad830866d03608c04d2d88a7c2797660ec85cee4218184a6ebb37e504f8fcfec52ca1559cc0eba2308a6d32d706653181e3f7632d4e7f018bf9519078e991e1247243fe7b0745ba01266b6e78c753c859a7e975fa2b46dbcfac038181adcde9f39f9b0b6ea375ef6f54be74dbc8ba83f186852e0f86265f1d8ebb1f86683d85af7541c05669a3fd011a4d896fe8063694a1797358140b959e8b36aee7758b31ab64ce74615d746276355f63b7352fdb3aa8112039f148cefaf6aa888051cdb5f613b9d2890cf27459546e4a003a1db88afa182292a1d74aa64cda7a143f08c4fd4f292b0a6c2cea5c0509a67a2412802df1e665aa6b913aafa8f8493fcfcc1955b7b168caedbfb7142c9e88d779dce683ad866b136e07926e2dab7eb90cfdb664d3522044b29b721a415714665b8a341a43950839cb2e25b445b64bebe7e38da1ff4fec275e668edb32995fb6c11fb0db1e7dcca8e78151b8bb8c4c95a386ba145aa30208b85e31c55644b548323b00b4d93c1a39513a9b71ae92148ae7b4677922151608a1f224238a7d981a41cf5dc4df449aed41c584b54989e5bea2eedd1ccc232f0d6f131d73eb0618d5dfddad4c5389f46c77c34d1224caf4a70c7b0747bb136fd99e96172c59805d5996c6a83908dc4562e912744373f50c6ae7243083c3d0101b02040a04e3c744830a6e4fe9219b6fa73cdeb91d1aa94d5d475109d2cdf966f385d1a35ba7da5fb788b7fd3cf81d20df027f4b96f2458922c09742ada261e0e45c8028aaae284d0c8d62107d16c7a4a0ab68c82df3c80815d526ff9a2f93f8fb55c0f91adac8c1600e725a3b0d41f3132feb24272dc7f6c9ee18da991ba4ead0196396348135f8743d1995727148e52a10f2cced0d4b59ae3531002d662ec8db14f37b25ded1692af029365b6085325477a38e2d852ae681bc22e3c008ddbf9232fbc6ab10a7f2ad127b387506421d4a544ad2c9877c87b693b9c13cd76ee8a7d2572291c09996bd61907c8dccd912f5fffdb3a5e76916c5972c762d8ac922af16d6238e80fd64f4611db8d20d3738341697a2853b92beba1e3c19a4a7a5fcbd1baf44fe6c7e50827d228bb1f3ee33683c44dcaa06305ab1754ebe00e6da962dd186d890054c55b33079124cb5d4f492bba7367585283c7c15426f6f9631c200dd85c4cd379a422c285544e170954e549c9070a2031408812c17d801ec760ce0c2e70f50b5b6af7096c49c782f86b858d7bbc1b3d00ffef561e37e68c4a18da7b5930d1e3411a1a538795b53c27e6894094ab7b0ec2acd510e7ddb359b4cbc80cb068eb0c6d4d1b7a17d0df24dd586971384b482275d3da623dc9f9318084ad5a89610291e3cb4c9f1947e9a68f19849d27dc8c133e5248e61d909ae92d2e1c4e824214e138f835884e4e1556215a674749b8b6d1866bc17e34e3a74f52c349747341b8d8b54688e97bb787d3eac02747068b179b951256d0d746a46c553c7d20e5371363a5399f1781d77b6ed2c4d7f4045ca4c9511b73cd770fce62cd5eff696b5ac2a3cd9bb46ea552b80fb05d90edf9692df6684f7898d323802eae788c4363fec287c62db91492954c02f0d451f600e8e01a63ed96017e9624eea006b04e900667fec1d0c7c6782608520795229108dc0f0d64c3776dc28038af7cb69be6502558289ad9acbd368a8d8779e6fec7bef2dac88bdaecfc07c0619a738a5900aa9b935c82fd16abfb95f00dc0d326bd865831d6467eaf9fb01c1d4c931ccad3d4da3a7a29d0014b7a8247a33d52769687641a6690a014f8b68b4ea2321b7d9603b46ac150b03de832bb340b7126698e21a0d92fa131afc3858f85fdc2743d4cba30a8203501e870d79f2372fe849b7cfb1f968af4119211dfe3b02700fdb544563d45b4a0a16285a8052fa1d550a069e494ae7bcfb93c972f409d326f7c2f4ae2494ff5dc70764ac18e42bf12e5fc51912e9e258d71440dff73a3baab53b16a638ae935dfbf219d93a362813dea326bc1f75eb98289911bec6e1f6b6f27a2fbed54af89b18786fcc110974103610064ed5a468a6922ec6e3ab7a954e848f32c38b3fe353383e45845cf425a06f818d5bcc6d8945b715335e3e2223a269a4f80ed573c73f161d13635655945321d5d5f7e50e8fd27ffe0e9282edcfc6e065f26ff727088b4ac1a2bc896b02cfa9c8cb5e14cd6df942b137ab22bedb4901f80f3ef2431bdfbedd1c90a6f351516461265294743e7737de70501728951a01ad31dbf1001ce832a9ae15ff43ad2826845fffc0d0ecb20611f9669505482651fc414aa9c6c64c157a2b84fb61488f396c435d6f9e4e50732404e9165fb98fb9005e189a491445e2c89c6e57ae1767f8248b6c708533a50538c98ad61052fdf3d549ec5839b2c5437f7376ea57ed0c9ff159c651a4b17d92a1f591f423f46ba90a46463afe20cb722367e0387b99a293a3ef31518cd6123ca8463ef69bde360b746a9db23c59a642238cc5beb3529cf482b575cfd64a13668ce93b66d14d5fcce03ad85d77982d6d3bc1674b5b555e26ccd1d18d93bfc62a1a822ec2a3023b7549c375075a859dcabd60f0fa238ad88b7dc064b20fb783caa8d81e628bcc932e11ae73f64c26db775c862884915c6a416b15a82d977916e9722506dae976cedffff49b366ce5f7c5d4a51519d5bc6a8ceade6b483cc0d95711b2747d5b4d7fd30e37f667f1a19e6efa318eeb5d7fa1d960d01011f2e8556f13e68aa95a1e27435c69ef30cbdf3dcb2d9359ddd02da7f80a6383273fe6ae591ce27780cd7ed4cf84af8e5b50f27885075e1e86201522cb7e1369202d5707efc3035f1a74164eedba4a27efe4ead204468180651eafbcd932208a03adc4823f63e243b7a57a450724418ac0b871628bc6590a44eae1737fc33f108cb61e2a5c241f6ce1e0a9e9dd69905d1160f6e8047f9eef12f84371bcf2958fe290904ca30e0b9f231dd5e47d737c95e8893ecda0ee0c2e63f6eeee68f4099372761e96c985ef090644583cc033cb0cdf3612c3e89c2ebe71ddb91097ab5e1958a46638a90d7fc7d3f52ebe529c29c0be641c7fb663a26977deaca1d0f960dc6a9668e97cef5a48b77067814f1b4cc1202edb1aff0d29e5de468244ab934c3ab02d8dd55fb494285f25f67f9449451d59fd8c0c287491edd8d94ca84112d21f2c99a1659c99e0646e4fbfce232986bda2346339c07c316b0d21dc1e636916cabd2399e00addd15790b80ca382231e88b3c67317f1b2eadc9b94b20a4660fa933f7236040481685d2e49569a8dc6096a1ead81905db41447e87b833d8dcc9ae1e9f78323805aae958ae12e5ee6279057cc4c36e2703fd3ba5275aada7732e93c7c329ca54a8a2972ffa156abcea3cc670b1aa38bd29afd3a645b928f09a20558a09f0c4cde6abaf15174092e5a5b206563ee3230e61a0e79fb5ecdaa3c2300ebd065e7d7188e7204f53461cac38f7d57189171e035f307deda03daa8ec54c37a689945c48d1403f4cf45155244902e82a7a61543ba04d9ae0e0b90836a72b48d5a1ad6d31deaf90f3926491fb679094a10de38006fde28cbc1ede1893ef34998a08a89c24db706dac52b592f6add5857868c61551d9e27bf37be6004adf5a645c8aa74cc24e42a7b9a1a79818ef5ef45e421eabb0b529ffe7d337c1208a12f298765a5616351132ecbfeba70e7d7e48ad6c4c9977a01db13b43a9e078106a1a40590ce665652738b6fcccab20eb8cdb9f4ed95287b93947e6de124c66efdc4491d2934ffbfe207df1b0e457fe89a0f26c9a77700cc7d59dde994f5c620ffeb02f6042ae54ef1a92197d1434b2da8b8e9651f3398c524bce60bd422dabedd12ffdd37384b76250c0e1332409adcb76192a07b5d2e50bbc275c28855acfd92a987271ddebe4139ccada32cc9f31f843362f1669a8d36b04460ede5d82a19274573d079b7a4ffba16d03c297f20a48bc469c78ba588df779cd521476ff4c2a71818751461b119a1c676d52e3e045df303003344a69d30b6c20344e6c2ba9461151bef85978754ebc70e3e3d01af3b9f5ec15dfaaf75ed94bc2050a80d2dda0ea2a1ae60b4d4654b696bcbc0de202a9f8f656a78a8b029313f1f1021c71122f95bfd2c2af1a9a9d3e0b2c7b48ba28c7867d2f6aeb982b3c439e04aae4bc33c837be92e4cdb075b6b02d4bf07e3dbfdb157a74f3cf69b1512bc0ba732abca7e16d5351bf1b48e12eea7bc87627fe18e8b341e0a80c30ad6636f7069b5b14a4ce2101231bcc83b991bbd23f9dba6b0081e081d65695ec4d84fa3c80c60d70616106003d8e94db31bb8c539a54fa09ba9868e6e055269fda7f798f0e416c25b8567f62cf30d4032ace36c6c2a3699a484e129bfbe9a581bb5f35fc48275b1987702805d2b0a17c48829c60b298e068", 0x1000}, {&(0x7f00000017c0)="b25ea279607557db788ec2fb6309275280f5be7cced3ce46f714ba9c777fb3256293e0fc5d2729cfaa12a3bc58c25d0e5581fef34cd9443bcc92999a35617024f302f06e60d0c49d26df633c68453bb91ff38ac001ce3c6f2f5ef051f23ab210e52bdf7e44519367eb70f5d1f74e2af556d381da34cfd989e2bc871f4aa833bc0ca22b12a2021b75d05adbc28eeef42d451373f7072ecde427a7ebf25a9e44c08d9b9b8bd84a8e2e996c8ff91c7bfe3210e21805e9db681713b995fac04aedef9d5230c7202d7c89ec11dc82a6f68bc765ba53d9dd022a405bc2", 0xda}, {&(0x7f00000018c0)="f12f70aa6a8503ba0ee6f693ee47fe397473e7850cd8d58a95", 0x19}, {&(0x7f0000001900)="2f15c68c12cba7571c3b5875e74cc9", 0xf}, {&(0x7f0000001940)="1b81fa089118b9f91cc85c17c4df3a", 0xf}], 0x5, &(0x7f0000001d00)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="200081000000000000000000", @ANYRES32=r6, @ANYRES32, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="180000000100000002000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r13, @ANYBLOB="180000000100000002000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=0xee01], 0x68, 0x40844}, 0x88c0) 2m2.601999221s ago: executing program 5 (id=562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x60000000, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m2.271622329s ago: executing program 5 (id=564): r0 = openat$fb0(0xffffff9c, &(0x7f0000000040), 0x80280, 0x0) fremovexattr(r0, &(0x7f00000007c0)=@known='user.incfs.size\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) openat$fb0(0xffffff9c, &(0x7f0000000040), 0x80280, 0x0) (async) fremovexattr(r0, &(0x7f00000007c0)=@known='user.incfs.size\x00') (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) (async) 2m1.752279234s ago: executing program 34 (id=564): r0 = openat$fb0(0xffffff9c, &(0x7f0000000040), 0x80280, 0x0) fremovexattr(r0, &(0x7f00000007c0)=@known='user.incfs.size\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) openat$fb0(0xffffff9c, &(0x7f0000000040), 0x80280, 0x0) (async) fremovexattr(r0, &(0x7f00000007c0)=@known='user.incfs.size\x00') (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) (async) 10.904148928s ago: executing program 0 (id=946): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a6ff}, 0x0) (async) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a6ff}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r4, 0x4, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) 10.646785174s ago: executing program 0 (id=948): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf500) 10.109021751s ago: executing program 0 (id=955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x2, &(0x7f0000000280)=[{0x0, 0xf8, 0x0, 0x2}, {0xe7, 0x3, 0x2, 0x4}]}) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x9}, @IFLA_GRE_TOS={0x5, 0x9, 0xc}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000600)={r1, r1, 0x9, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0xfffffffe, 'syz0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000010000000900010073797a3000000000140000001100010000000000070000000000000a"], 0x48}, 0x1, 0x0, 0x0, 0xf3021be2a65b013}, 0x0) 7.195798076s ago: executing program 0 (id=962): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'tunl0\x00'}) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0xc000, 0x1000007, 0x12, r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x8001, 0x3, 0x80000000008, 0x0, 0x2, 0x100006, 0xffdfffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x4000) r6 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPGRP(r7, 0x540f, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x2c4, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1fc, 0xffffffff, 0xffffffff, 0x1fc, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@unspec=@mac={{0x2c}, {@local, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0xffdd, 0x6, 0xcc1, 'syz0\x00', 'syz1\x00', {0x58}}}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24, '\x00', 0x7}}}}, 0x320) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000180)="0000000000000002ff69000000000001000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da888c7a56843a85f3a078c97d542ed1fbf069ca713670adf7d9fb6", 0x59, 0xffffffffffffffff) sendfile(r8, r8, 0x0, 0x200000) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x143483) readv(r0, 0x0, 0x0) 7.195016905s ago: executing program 3 (id=963): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000c80)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40001}], 0x1, 0x80) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) socket(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r5, @ANYRES32=r0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000a0000000000"], 0x3c}}, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) socket$nl_rdma(0x10, 0x3, 0x14) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000004000070100000000fc390edfa93285291916dbdf25047c0000040000000c00018008001600e0000001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x480) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) quotactl$Q_SETINFO(0xffffffff80000600, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 5.505496539s ago: executing program 6 (id=966): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b0f492dc5571711ef520550321081cfb0000050000000000000000000000000000100800010001000009"], 0x1c}}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x105842, 0x8d) syz_fuse_handle_req(r1, &(0x7f0000004200)="4e7417f7f0afaa93ec1feb61e6ecf74becf5b64c4498ace47170e3439f9db3344aceab3d192ddef8789f7f826a9732df1f1165a989ed666ec2a96eb78b40d1fdd5d53d8c6d56a19efc82066d026cbaa27ee8352b2ab989070bacd96deb903134a387cf0cd7fa82de91ca1193f7ccbd5fb2bf8398e9e5e1bace8f81486378b42f308d9a55d3c14c642591f333cc6a6aae7abffd8de21e569c4cd0219c7b72b44c6b43a5c9b11226ac8cdb1760e405121fbe45ad7349b581cdf811c2cce1585a72ca327313353579454c3bad2460f16ba64d86984d8fd0d61be6902f1d5c92a4b1aa8ffbf256793899af036634d15895e11bbd29c1ce6f9a1114d48f9fcd624db25507c962549a97d4d21619202e112c08e486d7acc55d5ab8e591ed2da9b7e325fca61855a511c7170100f023a048978e5711eea42caa20405f64a5861b2f57e81644750a0eb3498c5ca76105ac6ab2c5c50e4f9b1ff72fcc6f3a01f98119cb4e8dafcf9e35426300018b8cc649c17fcf87999e0d6d1a4c501e9d92934f912b6740d191d9ca4c142b7782f83d3f4862989633eb043b21563a8360c47298fdbc3ce7ba271a5c317c9c66b6a535e2bfa7d7ae54c1ede664560b58e5d4de9cafb2d43cee207612e632cbab64c99b24363d2a57d064be77f0846d003dfcd2d26138a5f9b94205570e1137d5b72919551f25fcd73a5c612e4affc15a868413241eef86b65d0405de5a47384e51810784293333777efe59b8312e59f3bde54ca8a521932103473dce1d2db1f4fff7d338f98fe1243027acc019709d9eef6af6f8fcaa1b7bd6e5048955cfe725a9682bd3f5361057360fe4c163175606d89b380b295a0139dd06404aca8b1beb5a9be7e57964b74344fb1336e126d570e5cf2b64fdf6ca9d33d7b73b4c13c4ef9d1ffd2b82714a78a57b1bc630bbd6d4e63a847e1146376ed4c0585adcc053bd8acdc6df529f3b251de651d3e6398749402391c613f34a5f7e6099e76842e8d66a78cbaa590f6593bf87095bf4a1015a2cad2c13d8656db8f226387fc355a9fff471c93c3c10b265f7472523aeaa5d08f753a48b096b913f7c030d7355f68c9d71e66919373daecc64d14dba60283f49101d6360df9cfe65ea91338e31767b94a1e1463e134b6f19ba51d70da4391341231d5466dcaa39711f227d25f9b320a004243b4f8edec5d8a498b3732466e3bbb548368d20a78c172099647f5938ea6c1ff8c94a37313e871189cb9da58271add887459fc89e615e5c99a125fef828d661096f74fb8b4edb8cd703615b8c732995243b2c826b888eeeb089cf10bc187d36ece6ee30d60c46bd6fe0508aa8308dbf834fe0aaa12deaf4bb1b9337e63b13d6076c5245e27be4fd8cceb433b9608569fdc85dd6c04f37259851566f1f1983536aed757671fca1a3f6615ad5fed80ac36609c6f879f86d8c11a357a04a1113ae2d356433e11ae50169ea71ca614f7171508319cc0b7a9decdae434ed2bd3a313ab41999d09f3cfcaa80924129f77b89173b3a877b845285cbfa9e51fdc0fca6a3c72748cd88173cd8150c825bb0da72518485a3e159422dda9770dba5cb4343dbccc5fc1541e0a157a5295adb32ba7526ca16e6bca5342ce4e58e9cb567670a5acc03e2eaac39185085aba969c97174057026c1e170625c09061583142b21c91c0f8306392c2be9ed372ede666c3f1186ef70f493110e94cfebaaadba5938a29a669c94562e571e607f2fdba0c5721e2026b6a490f80afbbb5c71ac7f8a9fea566284bce2039f5b2405f811145f4ffbdd7e8febcaedfd162fc503e1a29bb63d88a465c66339f1553dde48991289451363ff349587e4099469a5052b4b337baea3cfadc28319e3a24f635d8d5ee8500503fbf1aff0bc1e6f50227cd79bc9e6c2a5ab0f0b92a1e3c6f81e3578f7ce5071e0fc77cdf1d18fe77dbf4a6bfb2587f8e8e317f98ede1f8f32a64d736f9a5c451a01cacfcc0b9099c4808840c2948cd8998abb4badbe30d93a55cfc23df97998efa139ce8681be3b4032e536db63d9c3b7ca6904ae3f0abbd740385be14fe6764c74e19d8efa9e3580252cb25d0d3e2eae1b82f4187b92173189b5f2d4d536c126e453267a6c0410b872cf0f6e2e2b82a527667f598eb0c87bf1723a63a213e22e093abb757af27a53c0f6f3e29c32aeca4c619d5c8f49d41424ddae64ab67ae7286af0fd931e93d06f711b70cc3c6a58a392392bd4623d25144e840c1539a0b8b29ad19d7768c4d2764ca5f8ee72d96a3eb5358bfcad65dc575cfdcb52c662d33321a96ab197aa4d13d984a2a18f94345373fb5dfa031967614dbf070e24c9cf11a8fe8a128aced2d75e5203099db970933abab5ef8f84b1a56c1b2384e2d9413d41226dff043fcd3d8b7bd833aa02d6016e9f756adce96405cb530e7b5d62b483d6e4a5df06cd553581bee273483c243127106df7fabf5daa98007f5178254f8b5024f994c98770cb0267b6a3bdf819d2ac74dd2b38464a6542c28c8ef9220f2dbe947efcbdac9ce81748665957b2ff1b11f73e79154dfb1729f6d6011adb99e4b30f4ae6b1409bfbed29807ad5e02150f1af53e305049ac26c2b28c8ee1f6cc40ddc48ac8318f3ed2e157cb513de06e1fe69f1d66d1a0432f75eebedee30b0523d71e36bcd0f622d95772687b59fec199087dd09c7eb88329d6aad37f3c6d4289dcb799d9349b4b8b401723ec90e06caedd02f294cafc508b03440890aeef82fae39c677d58586d973e5d8c2f00c34f12efa4c8b3b73c1b0941bf8be3ac8119e7d4ebc8e6853c459ab8a0567fbebf1e6036ed187d7f9f7ba0cb8b887389adc41dd23d027009707662ea429c71f01bdfa3f0bffdda25d2dcdc725464e3d4cf32c6f95dcf90eec4978b9af79c92a359fb5bd08776fa77b20a06ed65c64c0bb7a4e34e9e6e85d6e4f4ee34fc7a9e404bd5213f49704082558375b1a76d4e6e84e678358561425108bc7b3630d0a801971e32c037434b80add0a10d5509ef436bf9a8cb5c0a0fe125614a23688ae18dad4766b1339d7080e51af087cc2dd029dc757098d1bfb9c975af94e0d37e9a24c6a6661c99fdcdbb95d023dc016abdf81c1a09b8b4897ed1f2512aea923b362752cad64393673dcb2dce3d63e379f25c340559a98abe43589879a3537bc88526f1c8499db48bfa8d0b51118b3992930cbfc99e48d815c56aad1560c0fc25540a82e17fb931360abb23d748152280ba1603fff1cac0a041c6f9ab949a059f050144e61cbe5ffb8e272f115cbc82bd62cdfb9759a63e77d3cfdb0a25e504aa5a1e4eda15fa2e1e1a7bb18e74e62a13fce33900d760d89608c79f05b9e11be34cdffbafbdc60838f5a6f76cd8a3ff1072d90462f77abff31e054f3f552772ea750f451d091cb2fd6eef92a800a7837a28ab1be8885b6f9eb18a3093fd989f697bd23edb8075c7120ff375ac72576d625080e107843aa7523fbcea78c18b9762a89e562bf098d61b5b2f2521d709a9611e312c7691f47a503823fdf715afcc6ed3e11dcd0dd77a272cfbdbc2405e26eaf4e2698b9501279dc095c8869128af162383795ea6a14b6cd0b1cb3828b4d98cc4439d8dc51c20ae9e5328bb05a59151818d6526df969384678dd202fd4415f94b861b2ccaf8873680ca6cb9d9fd12f26c11dc6bce36cebbf7734b7bc5a16d882407e26cac42fc9e178af21478c782ac0418c2ecf1876ea2cbeb946b881e460fb81c02c2a91b859927bc1e72f7d03091b3dcc460438ee1aa7ac00f561ccafdbef63ca4286ba78b38c443d470dcfd2211ca74703d27d1cba021071da6559505ddd7f0c8b71115d7196318bff0d2a3381573f79f23c7cb8de2d2dd8d9b86268586a614880ef74c92e5fc80906f453f949afecb888337d591fad11d4efe7ed1cdac88a0569e65ef9733f0a2ab70a323ccb10fbb98df982f0ee5596665ec52a2935d0e3f9d83175b2aca4ed312e622bae00fa4171e73c168735e79bc21561ef91f83adc582bec05a44d6dcfff78556690c9b104d5e64ba7f8481c38c1b7e35038fb60f2beb7ab4a64c9426a498ac3cc1c6c192b6e95215dd8907593b523a399b583cc21808b4b7c237a069c59728f58dad4b00fcf21f70f91713b056db9b3f8a9da36fbf641e1681f6c56a45da353b116547cd4506ca1289b595b475c2596707111f05037557adf077d467b01cc787717842add3a0767d195edcb05a7598a4d1b3baee786a969e87beabf8221ce2b2f9010a85eb31911baa39f1c59f289116d8b9cd360ab400eea764537511b13c871e4b497ec78be7043cf1a737764f2dc810862d41f0c32d0a3f713e9243df3777fa053bfb646b8e1bfd6675e96404e9ffcc2bfe30d09db0684bb8ab8267a34705eb57f374cb8280964a8171c2b8b237d38d44018d79c8e375e21d55178c12bc96e429b339887a821bf0132d55e1ecb161165e9b152034ae6e468c175a71e657dfdafce9ca273ed84b4b469f2e4bd8847d0b86e8d12c19bd18083f97ee1d00b588427d09b54c1b3254e53dfe48b5c19fd6a899994fafa1b31d1f17dd20a69a3b20e9b31527c7e076ef1c9333c00c1b94d5dd71305eb096498202a276870ecd7d68e5737787b2e8ae158022397bf77829adb0b807473a139d4896e30e35aa10059e38fa8431b647dbd2ba57855a82b816d19cec134a378e9cfceb4654bfe77721c10025fa24e1149ae89822441c2fdf655e0d70bb50836352cabed3630689c35a2984671ab9c963d5860a3689c8c1562228d397d0a3cb59e8602d7e72247e29656ba04e53cd2659511274d766cb8d78755f2a3127e2c70b91dd46ba520068d80f6c4115f2b223a3f606d194f5c37bd80550ff5e9aaf4ce5ff329012239f25c12efd79a697362f90d42cac99f323f99b45b918088c2590b6cfe8a1795492d1520e51ad7a2c403901c7809616710872d0c3d67926752d308ca84916bcfcf9573501227318822d40d00742992662cd629a0cf7f688d326fbd10f201c459c7f463cb34b12f8854c4df436170e3c97840803771caf57ff87b70de5cc4a8ecf45775a4f8849df99e6eabe0bb64bb7f6af35701bf384bb04728f87a31297341a662912925e5f0806a682148efd04b099022f1aea22e3419d157dca427cea5dbbab7a0ded30641d16a83fa26e1551d4a5e8639bf175e1dd80448043539083a379aa9ab4e07f54662c9c4e45178f43cca3c61552c7db984f56d35fd41c41cf8d176d76b2ddf0a8e2c36621cd7c49b411e4dc516da4bc418b2410ff1306c639f1a17f36a62229d2cb32049022d2cffbdecf467f82c314a0388f5c74d7600e1cad70e2fedab09ec362e09c5c18d7e38fb5eb48c1dba21ca96bf9ae470de81f7231048fde18225f64f04e1f322e25e45e0a8e4240d6035bd4ac4824edf111553edb5d3e1e432460cfc48fc7783dfcf26f7e4edb510c201d097a3e4a7d24400e68c24ef57ca2e90176fc32c76b2d9d2334c0a011de42c04306664f40ba1f6d25d002e6331234b9131d6783536d49acfcd47fb83e5380df7a2c87574e26ccaf595ba6849d6f855cf19bebf271592b2bfbc2d7bf998a0012edf01fc6b00f911fd662b6c33d896f7c5c32a2f91037255a16785945e8c3a8dba19889969ec01a3da9c836365305b6c944fa95484a6a50257b9da0bd3ef7bc055c6b0abe09003200298a5ddf381e8eff042aa2eaa2f07aee41a30260fcbb042baffd6e022d725b4b7805a3550109f0d92bb33092294f2b2a84a965550e1b23d13a57f125eed60206d75db2ad5fa44f37a0d600fc7136b581a76bafd3c01ed229ad8734e1b044107713bf6c779600622ea3358ba78f1a8476d934cb9fb19f799aef8a4a232e986a5da978d14fe64e918dd34b8ba29d44f0366b527786fe469941587b0cef4a515315e78b93b52f88a3191959b66e320c2272fb115255ca0d7b88e1bca06e71f90c3dc32fdd3dd8bc1c5e71f606b648c49e9e1486fbb8f24873826faddfc876ea79a2446423f4cfe6b0e94fceaf21c6412e2f9f8e7e2ea9fef73cbb227ad9d89dcde0b92f075b57f3d82b69c297a70c4e27c143e62e13e48ae65a874381763a870cbcbddeba6fe7bf9904c492c0d433fafea50f89ea8fa66ebead1ab6e751914c45e164865ae49bb44d5db40589f5c601b8c202a62cf91ce26753e7e9656d7158a6b39e44ec92d2aacf60fd0077d14dc92bf406c99aa54971b28ed81f3f39fe8d0293e90a494b6dd9b1c90fefc859655cce4eabb4071380cc41ed628f83b0909e56456536afa595316afa012cfad467884e558565ca6f162bb8c012939800eb664c30ebbd5057c26cf67cffedef77c9af863f7293dfef1c2b7c5f54d84547606831b47e177d3edb370196afc7312325b0877676b41c625850b62b05c715fd4892e0878b36130b8e3f5bf8d8a714fc32f3b9b9b380dea0d55806c62b798947b6ad5dfe240aa95bad5407329d2a4ca1ad6fd1233507149333809b4a9d5e295f944e38a86d45c04d856d280397afff31bbe161b18f153389ec47b999b8ceb38305f801d25c60856517abd16b8e9ac4185dec46e856a0b5d95dd6d67f6e5b12a543a91493f9aa2eabbf3a5aee4218a1687919b7974d5e6f576691aafc10f105a73f676395ac6e5166b7d003f2c3737c04e7461ffda1151a7fc4776b1881460eab2877ff6204e1ed607f785a5c05ae4b171b7fed2575a75d11f73bf7d6074a011e0023fd3fa843e3c63dadb95f9ae07ad29c509e9d06e59e6b7564786a01acb67b8488d66ef21a793bfafb69df84cc2557f97b15db98ed8bdd1909c83da5890596e53f218cd980ceb75ce1b678bc222fd21c453b72852fc3aba410d666e07cf2b38c2702158768fbd489e469db093c7fefa0c27dc826db746a3c8c99e3261279c7cf79d21ae096609b8db473136c5065cfd13db955b87a7479effdf668bf10110e9f6aa8f4b711109d98e6dbab022f2f4690424e241de429c50a6de76595296a42a4bf0b2c1d9842fb0ba3ef6ef1aaf6cbb8e839764bd9677e491f23fbdc28d0ed5d9e09be429da7ed1a93e85828f9175c74446bf62baf9726e23207226b34d839a42e13c63fbef2caeba904f7b5dfa3667ade62a8e3bf5764828f9b2bdf2ea11b70e2a603d3a69b33ace06e8986fc811e03d2de5bd4bc898f67a3cb8c731ccd10ce45abf198e9455e3a0f86b81b94f0cf367b6ea410b97feae2d9411b410179903a4df9a989f25e9ed2b5a7763e11a01874039bbb85c2e73480d95f7f922f29c8729149f90e39d6f2998875728a3b0eaccb793385abbf3735f3948aae9cf5982c6d3f3bdd5061d611cdf7209392fbb1ce6e709dedfbdbb4442e243178f93b8ec384d8fabb69de31bf3232618f05945b162406708a3151222f42c54d982db53e0cb3baba85d6c13e7f1a2a8ab296a0313ed9a476605ef876f5c3f10346a33b9e6af598d865a04a5b46613d10494b1c9d51435bb551249f06595c96a525f8cb76d2ddde641f0745161f3496726e9f4b33886180e05718ee265fab07f8ffcf95a7a985f334e33db22d0907c1ffc12abe33e880ab6b1198f5fb3c9a21e58e021ca300f333ab16e7f47fad98ac28ebfbcbe405f0d8eaf08f286dd4035b1fb922f48d34914a628fa342efb64f9f1f943bc7772333887cd2e69a16f00c51c62afb8fd1f3ebecf61d166a769427aa0d36c0ccc7b461a8a1b10d241d8a32a46e010085bf3de570861546f7b03e2887ff3aa5692b2f8602912186de386e3bcc2597a18f6c2a9ff6215110a1fcbfe3b5e8a9e893750f3a7d1063004b3b2e6d109339c2a7aed0a972993d717f960fecaf9c1565d2823ead43ccf659da1f65b45892b562a55f32005e87d2f9678a01fd3bf596c0ef873fbb0754bfe87eb36f3e68925e97602881166b4f22e4b0cb40f3835011e8d6e22bedf1f96092c4e91f3b0ef46af602e7e80694719ad08bb0e6d59f29ab5da5832ddf55dc9ec64f68f22d33c7f81a9cd754e896dcbea71a5c0ab471d496b5a40281077f96374c2cd2475a0b2b82b0f8d84568df8a05cc2be840ff8319d1bfec5f086f4a9116c68645597d78b55e483a5cf1f25b423ba35bb2e03fea1aac22a0ae233182f96fb9023be57e47f79169df21adb0c00b9f6b6dd0d1f6a14eafc2b03c27a3c38bdd1057d7e0446e64759f80bfe23e765a70d4e66cf9159da4263574761d413760951935b3b4241e188550f4a61707a7ff26c48b8941a825d7a849cdcb834880d8b9241b96dcd73ad4235bfefc4aea659d2b7116eddd99c92b290ed89ef2359cdb9e2b6ba68f3206ca035d8731e7c4b667a9baee1b4a4c5b483f7793543b33cbf59629d6e51d7d7ab52266d478510c4374e3d3ec6ead98af9257434e2548e5d8ede59ccd7a0712bd61a43c5d4d98844c52d3f97925da0959dc5640f4e168e0c3f1130bc7587272e5011bfe62ed423c0a61790b3633ee059654b12a2c405dcaed5bd154113fc63b5f934d90bfd54f6d94029cb298c88b849ddc3358e0f255362da2e229725ddd33bcdc3a3f94a4181499d0924786fc0f8a41a525326735218ae0275794e260af9d83aea4bbe4a25b8dd74ca78cc973ec4c2358cdfe7c242c19a8c986050cf9b51dcdbd8937a5f85b8979e1f95b10cb7a92bfd4ccc6d0fe36b80ad89d76bc454aee3d02edd0ada94874deda4d1db16b933ece2c3fe5dfc5ef3b81acc173da43cf92ef00bad4d6d56489bb9eef0db3e8d24973118601ee04235850f35d52975b9d062afe29c77bdf4ba424fbd2a6681e7d8a72df5a7b1e893b9a8dbce598d28860e8fdb4c25928dce80d626ec1aeccae3e11ac805ec17180cca8189927c874385111cd9e6f4e018138e4a79c02fbb01bf4381ff648f19340ecbf03db5ec984e02296a0209d2c31266b34b0336f0e11b35d504d9e8c268ead0362a5b0a7289ce069784fafed6f9f69377ccd1bdab347c2a089b82fc1555a07e3ee873705b9c8bef22443b4b2ad2019e4fc153834e3e5eef0665c6d803963dd9c2f0546f25133011fe8f725744d86b33cad127bad73e3b55ae88253386246cafa7fd563e382c1659fa147537d348bf6cd973ab8715d0d1bebf57a975a88905a1df56274b30aa480b00d2da67d750e28fe98f57c64743064f56631540cf2666e04e87fc3173e5cf7407454763ce1bd064de2023767c3b41cd4cc312d3c65bd6410a3f2f898a883da2bb8d6cee72339c28d001cfc7d142711c100a424e1bd734a6701d28d38d075b73eb1a9b422a64f3bc52901d7d4c7ff6ef97c62f661820d9a173f35c34f266694363261698cef03d0e91dc42ecbdd5c7ae60fdcf0ca19afed2414d8ae7febe31e0df02d05b0713a996587f123f9ae8254338000770d939f8540129ef761a741c312bd3286ad14dd8be2360fa78e895d328b618e1c67db72a83e2cd46a009fe48342ee87371f1d14a248c1cc8cf0bcf6bda1c2fa1551e958b8006650b0bd8e56b239b9a2f3cf0070ebd397d76bdfd3d62f236fe1ea6d4e7334e0f96182f320b98b4322691f24baabaee2d3b2ccd0c899e0261e90946c1ca7ac41cf9ec3bb321783bfb3ccec02033b11fdcc32e2064c815623aeca5cd0d5376d2aedf37a5f047fc427fc0eddec5d8cbeee8bfda52390eee341a180f43f413f7ac652e5f770a7506057e731355f9a6ef597799df7720bd494b5d2c2b02b0e7fc078f1a6fbe73005bd8cb3ae3c4edb9ae8d1dba0eb9a2007e7462de675f753b2174869534fed8e9ea4eae3a09da34eca0ab9f0560e05736aaf13504bbead2bc1e0ee97e6a6c01b79b6bacb017b8bf744aa250b38af2d4862951d0b0e588c6924f880d008d246b96be8d1e577acb271f33da415ae85a4a36d47288617232d32de0d1ae8eed9cd02d4e6081a956627e3f1bfd1f3651f06d6d61473d58591816b75961ec837a65f923e39816d620dc8e80375337c781020b85e03792a4b2774926d59075040f5ecaadd4163414547d1df0e2606106a67fe9f69652a59400bc042cb81a76e4f14d380882f579627cdd5fc478d5cd89a4dbb24c4252c89146d9b0cfe7fa99a72269ff5d5f04d8c91a9e354d10cd095fe24101e51d6be20d89fe9b21601eab458d9bc0fe73698efd2192c368f87405a413817ecfd88214dea122fb0d8d139efb395246c0790e174c9d8adb10caafeb2b6a2742c966fc687cbdb853be478befda9b89b106660854a00ced9c7028a7071f40280d91daf78d26c854051f73340431d003ce66680045b1cc4480abec0331a807d631a4560478626fd41aa8c3fdcb66d75aefb6a29030b0c94be961dce67db553863464feffc8b72c3e7219003eb942d359e777a87bd2c2e1a27f58e30e0eecc10d9b2c9f0b1552ba2965503ef2f77a35d88b82abc97837874b67bf1ae656a3b2fed7d60be4de83a83da8d98994cfb9c458fd2b883d8e9751670c62eec4bec7c7873215bf99f17e9628f1ac1fbeac4004d288fe279d2bcfeb4ed7671048de8598c7a9ae328e829e4115a5ba155ea2641b1df684d457f527339ac8ea6705ac7e73590f900bd73a434e4d72d8175aca5beade289da131374c40aa72014c6446fd943e8a2f7ac9e7bb008128bde5af3d3c1e1811f7df88329700fd40a5cb12396412283978589d04019c9e019ebad5829b15098ecd0f03b5901b2f48644a13b15558abe018087240153990dd38e9e9e60ad9bf1df3f21d574383535ea5f44298a29c1e90bce931dd45f5b4d06029929dfc88923bea8c20b56bb43868804e5e28486aa345ecc9e821d24f9e02c120066ad008ab22bb6f22bbff6036bddf2dc05c50bbcfdedd621be2410f9b8de2f364c8cd259234072bf3ad45fcb418d40c81c553bfedc91f50cd322c8cf07a8f81862dd0d3d0d02ca4acf0fe7ca0da1d90e3e74740ce6a38d69de93c01e46aafe400accfe872b76f94e4a055e1849a82a520b9ac9cebc34609843fc04bdccbd220f7a9d499553cfd9809c6084ec3ea2132ea5350bd9ce7ea7af466d3bafb0aceb86a0e72b658e8b3866fe9a28c78afcb4da501ecc357d2f4c9787f72486eee8ff03aed4ddf09b247215c134c02d50106dff1082732e750f7eb804320978873d1daf87369a56b84f8bc2fe2a98a755fbd645b3ba4d2ba3691ef05832540cfe12c7e19c5ffa35a59e77cf999eb1d38ffdea79ebcbd573d1020bb37dae73ed250be1de70230aaa346865835ddc3e38ef371f102518adbc1bfd4124146686e610457c603fcfa2c4a6f74e8c904b977f4af9475d72adfceaba7db108330983b247a63b2609daba03df9f27665343ba40e475873a2c774561a8776088663377dd330ba415261bd7e25e9ebe435542a0e2243dc1bfe7d429b43036f8c1aa8081df47e007fd54f6f6eb420bc416f1c9a6d82e572d365e881ccc6e8f48ac1b338effe51c6251801ebcbecf5732601c4bf1dbb703af33738828b69392d10091813ce2b93e6b51d2d263f44de2f7f1d17441dd72d3ee4135d8591dfe4dc96c1317f488b141a92e6f750ad60874694a4959f5488342c3f306f1eab8472615abd0fd27cfa71e9c88ea9957c7431033e127a5d3a9c774500b6899f4e3b5f2fb7367ad2", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x90, 0x0, 0x2, {0x1, 0x3, 0xbd16, 0x5, 0x5, 0x7f, {0x1, 0x5, 0xb, 0x6, 0x3, 0xf, 0xa736, 0x200, 0x7, 0x6000, 0xff, r3, r4, 0xffff0000, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = openat$vicodec0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0185648, &(0x7f0000000100)={0x0, 0x400, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90b, 0x6, '\x00', @value64=0x4ad}}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x3fffffffffffff, 0x200000000000000}, 0xfffffffe}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) 5.424680198s ago: executing program 3 (id=967): fsopen(&(0x7f00000005c0)='cramfs\x00', 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a0, 0x3f8, 0x3f8, 0x2b8, 0xc8, 0x3f8, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast1, @local, [0x0, 0xff], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xfe, 0x1d, "a459ae9219ba8fc556fd8157057c848f07e377990d4f4a32e458bde7de8b"}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0x11c, 0x158, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d4], 0x2, 0x8, 0x2}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x1}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5fc) socket$inet_tcp(0x2, 0x1, 0x0) ptrace$ARCH_SET_GS(0x1e, r3, 0x0, 0x1001) r7 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_G_FMT(r7, 0xc0cc5604, &(0x7f00000003c0)={0x7, @vbi={0xfffffffe, 0x3, 0x1, 0x35303553, [0x4, 0x800], [0x6, 0x6], 0x13a}}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x3c) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0xf4) creat(&(0x7f00000000c0)='./file0\x00', 0x181) 4.991540621s ago: executing program 0 (id=968): r0 = socket$netlink(0x10, 0x3, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) getpid() r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010200000000000000000100fffe0900010073797a3000000000400000001c0a01000000000000000000010000000900010073797a3000000000090002"], 0x22c}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r4 = syz_usbip_server_init(0x5) writev(r4, &(0x7f0000000000), 0x0) openat(r1, &(0x7f0000019080)='./file0\x00', 0xc0, 0x80) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000840) 4.947563754s ago: executing program 6 (id=969): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xc000000b}) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0xaaa9, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x10, 0x4}, 0x94) fsetxattr$trusted_overlay_redirect(r6, 0x0, 0x0, 0x0, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'veth0_to_batadv\x00', {0x1}, 0x2a}) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x34}, r2}, 0x14) sendmsg$nl_route(r0, 0x0, 0x8000002) 3.837610398s ago: executing program 6 (id=970): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x149040, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x28, r3, 0x1, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7ff0}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) fcntl$notify(r0, 0x402, 0x80000008) 3.440808646s ago: executing program 3 (id=971): r0 = socket$netlink(0x10, 0x3, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) getpid() r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r3 = syz_usbip_server_init(0x5) writev(r3, &(0x7f0000000000), 0x0) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x97}, 0xfffffdef}], 0x4000095, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x20000840) 2.213856356s ago: executing program 3 (id=973): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e20, 0xe40, @private2, 0x4}}, 0x0, 0x0, 0x1d, 0x0, "0bee84a0d6b8edc96c0d7e487f86ab23307066bcf140ddd3d1c838ca4d53ca64534c6302d618caa5ba02000000b3e8a6bd7055dc50689c5d81b60f4fb2494bb0ca8a7cd3f6fccfd90000000000004000"}, 0xd8) (async) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @local, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2, 0x0, 0xe7}}}}}}, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x90) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=ANY=[@ANYRES64=r1, @ANYRES64=r0, @ANYRESHEX=r1, @ANYRES8, @ANYBLOB="17f9fdf2880164fb776454cdd46ed90325a70404a2e70bb145a6babc82d11597d14dab2b0471c2b625c7cd955a0b5961de3918641b225da2649abd1399472e877e78ab34cf0d53233fc234f1fd882a6d360a25d916743aadbc0268f8f4b2f711ea29631cde090438f3006754ef56cc0ca869fd8f54a02ed31de45a98a8ffb83c7cf7e1ed23447c2be329be4ca2f988ee30a688c677e24faead2f2399288f50e4ffd08a24066f89316ef31a01d615388fb348489fcb5f8ff7a504a4412d9876a01193d3ebe0dd0ba0605b7d37c9d5ac2a1693e085242af4334a38af7c857b1e3e7d", @ANYBLOB="bb65ee8eb4aee488152cf078ed6e03bb1814f7822364a69780b32ac01cd97383fbb46066d92febf55e2bc7ac53bd4c8e43cc678313e937cf59919d6592c88daf99ae34b9f475bc8c54480769823b1b49544aaf35e86c285e7dfa5ddc1d0240d12244425bd80c711a0c9098172fea1e016cef08db65169a307671aa587dfc27ccd773c9c4200cbb0a4295446456734e4948e67d3ab5c21bcca45eaa89db32518fc21c0c7db2414b5dbca15f7c134c8e4e8577017a72c2a234ef435f52b2b7942d0d070e461a3b934a5ea023b7d0398c289ddf77cbab1f0116a5135931c37e1ff97c5a7accda388c3cd8480bd81e18fccc33a115bdf9db568155470826b5c40df425fc7f29fdaa1ac3379cb7705942aae6f6c2c82914ddccb7fbc63d8c0be22c9c295515e7625b90c969ec0cac408d32d100ec756650e128e5cf2a8dccdb479d09555269b69fd88e72e768eeea7b786fdc8217326eada02822c6f08767fb82e035a4fc2c891264d4c7a4cef98fa21eb474e52e0f5960b2d2e8d57e7502102798d638b72057c1a5e40c664ec3116e052a26c9be93831c277b7be6ca7570ef98a3f8769162eab2ae04d718c1e7f6b861e0afc14beedde51f8b872641c9e90f44bb44d01f5aa3e5a245c4e73708dd9186341597e41bf93cb57564eff88970245a369b3a3e5035b33494b41d932be2b2c3d4cb4f75e2890f37a71c0c49132542b169ed51e3b9a4835e70542878f2a2a9e8b2969d3c28c8ff9f0219574c463cbf25c5b8665bc4970dc834ce4012b59e4f2894db4dee08477a3c03795e33d9a79b19c884e74ed916530f06c7def3338c4d32bba9081825c79a75634f70281e30eb721f2b4170a6e61d91293d4eb66874d5ff3ef94a9c7f50edb9fb547ace8f156816a1b0294695e8894ca730149c2bc8bf5cb6dca2a03a3441f9753e9e04b355dafcb4c4d4fe7887f8d8b3d0c3ee33f8ac0ae2f84325c74b57da0c82d2769d04f9f83202f303a7c7ea573a9717bf58f9d42e462734d8fabfb97fd3bb35918f85dab8530b8960a93c05f7bfb7fa335ddfe473a37e82b77906f8ce013812c81c0614035297e75cf294ca5a9563be6cc62772d100ee65535e2c6725935f9888cba4593d16c09dab83420493ea60ba7b0317754c4e6397de276fb60edfdae19944791c6e221135c7bae2800678dbc26a0bf8bf98e5fb25fc0cd3f1aa905c0fe71ae9515b27e1a588412272b4399aec27997873965915ed099abac3e94824048c437357029c684f6083e1ab7d826541877bcfa29be8a29c9face5cab131775ba26907105d660b2f0c56d90ccf6c5da78dee2fce49d837db066c262720fa7ac04a562f7b8d4087f56faed9af2ba2b050cb064023ad6d1831035d087abc3f10168cc169206d047fdf5430bc659e8c3a0af9a3fe8a04de1cca1ce4c5648173a6816fa44c78886c1a10e4a22bb4fca51af9fabed467f4b214e3d639d8b455e1bca48856d66c2d16d00dbff643cfacea7b97a0665d2b8e53ada5b8a4bff87af7d95843eb2871ace888a1e714daa44bc2fc6d0d7cf63df13a72861750c91a27228525d68f4eaa298537dedfa18f3162feb9d40189c3d203f1c41ece5140c274cd90e73264599e384ec071b2a1a783f8b78936ba2a929cecdde95657a8fe1daef7e1981b2e16e96a1fd0f175b500f5d178106b8f2eb739cb066f2454d4f04f701fdc85c6bdd9a2ed7519a782ed8ab7515e493028bf2c2eba868a2374c09c92aa7f1d7fdfe06e56c55d965ec6ece65421ed54ac425580c6d749a71f198871b5dadd2a3ebe4f7dfa3fc8b31a43a4dc9d17513695b56850565a80af3fd72ff906c17f779196ffb7cc9af6a6188a9e242fefedf87bfd812b04b3554aa9077fb0c3a268200d262540157e99dc0e4ef5aab7b832f10db522d09b152b6a401aee0da9a683d5c4891490fa8f8921ce79ac1b23b08ae0f2ebfd021faa17ea8a3c0c08b5c5c19641a0a6e300e8c48e70a11155d3acd4880cea4adaa6ed9be59e982158b662d299227b334701bffd12b1103a2805968ab94ba413eeaecf6545ccfd48a7aa862d87f785787f1360adacf8657746a5890b0b041f3f306ffb026322423cb173007563d6749c162ecb22d5eba7556c1a1510c1a4faae83093f67fa350bacb797869949f6164965dd2ce278b476f39541213784b72ced1dc7d276a4ba8769ccfd98921281ece4e4de97e1751feeb1de24a871cf4397d7226539b228aa769318e06fff04853d66a1980933359fd9c3e54e4fdc7319b025b044f49b64f9f214592b2a5eb461b1029a58072f3b4ee246a20a4ec07cd0835d7c84aca46cf808516071056c2f6948c16a30357a25aa8180dbb59f415937a7fdd27153966947146109cfcb852dcbf713bb868e763dcdb373c6a3785f3fa69e7270383b31832a02d9554f271bb090dbf2be17340644246e8d7a09a93f028981494b830525cb7a49a639ba7319f23d6879dd69bdbb7415c4eabfa92b89ac1d000639030bb5782d93a5721a11f7a8dcd31097ee290f586feb0ba188109604d824ce8330e49b06cd8866420660fdbd4a74068f0a3ceb1e26a811201d5be2c23a4018139e652205e9df8a4489a4c5f1ae24052ee7c2d011ef975ce73acec3ac46dabd2c78e2b0524e284b79c02c7a1b31682d1ff00ca8b6a79dcfb2717c61f469ca0258f5d8b76f137edb4c6489c65113d03b2a167b53bdf7962c81505efee72cea74c51d8680242d2a31437e1ec04e805ce813500b30a4b83cbf19c101bd92e2eec8aed1b1f8b658bbc01c6c264e24c8bb2f6c00c25d00fcd61dfd05da080d9b8ddd12682f1f918131774240cb3f81a230644a344793956d8b9f79e68ffb25dc87421fcb04a35a0d371ca0227bc4ac28514808f9001d668868bbaa08a5cb424cf0c1bf66546edc56b892b627b5988d8a50a4e1e3de90936c45ce0ccc116b02dd89a5768b0da00e616359842192bfb837d75746dec03a0dac3f4ba45a99666aeb5da70f6d4fbc061c9b4ef46ed317b9c2903f9b585b5b64c842be8c9af8b031481e85f5f167b1633d1069cc4a038ee2e04daee0f0d74ed65dc45c00f4d6580ae9eaf3a064c9a3fe338aaf0df04f638324928b0cce50bb20fdf00f7f935b91d9ffa50d2c07ec6f2a96cc96ea4320b51f44e48920b600ed47999e5eca6b2ca31fa82637b419a52e55094e378e02710971565cf70d48e355c912010d2de281247628a002d59ecab1dba9ce956e456cbcc61df043c9ad4142700e80fdc01982bb6b4b9ac281432b84486962be0ad224555b1e3faed9f46d98924be3339c5f67b8220ed39c28e608a90bdd127f897fe603a96a56670f344781b5d24c2202b0aa3fdcb93d115b51933968a052b266b65142423dfcf596387da82cf1283dd60504d7efde90137080f46128ec2f85c4ed98b6fba64eae9031dd85d70b4f3186272dc5c923f8604c4512dc38b5e709e6a5bac7062eef18db6334db93959072e9dcb3fbaa5ee2bf04ef7fa30948496acfac0d77c3422dc4fd39b0a216c7657e0767a4141fe9463d7ef96d6f00c575eac253327eb7efe3514d2f6c6326ec35cf87ed0059365bca221593c80782f443458b4ba2cfa4d311b353e1cf6e691868e7567002fe9fb4e59f147aa6f89a2cce9d69e668a683267a06c243a12b811e875fc4e5db32f1e9fb51170913fe19c4c22573679fe85b52731dd06f7a9d16977c8c65187a0be031ad753214d7a28eecefec457e7456672e01460b5b6ff9c1d15cfcba0c82948f33febb5ceaa659fee584df658c9e9262408272f74e1088cd6dbb3b51d5589a93854cc43a9dd2ebe73a64d35219e6e5fca17b3e3e0d80208877018c63800b24b264d6fe862a203bf82fe385e0bdf36dbd3b9e7e17604ae36b4c07d605c75c3fbfe1c822b664ea13df273132c90af587f56d97272e554744cdc52275df98ac3c68a1e283b517d36b96b19b43bfd651837ec8e7d7f0664fe9057303c3d9e7dd7cce49e13dbb3f50f90536ae532b76262243833d06551568ee91388b9908968a874eaa5d2e1f6872f635cf56166136ee4d884de1099afa5edd111bd1ef08f58c1611fb5549bc9a215547e52cebd1d1d44029d0757623745648b00feaaf05c739e0a101f0828a36dfb763248f66cfdf61ddb2cfe2d8b0c98239a4e118203ecc45c0a135ddaa58fff81c65e0ed44ba37d80105eaec5bf8811e87be335d6783fc59c39e3ab3d690d146e9c1db296742b5c24e61ae596c3703d24c2c206cba8ae595e34b4e4e0ffe0cc172d09bd1cbc39d7d58e60d90585493eac21e2e58b75af6d0bfaaeecee46c403280fab4ce091b9a5fb36a57babde6eaf266002724851f73d2fce26087ecc66f0959324eddd26fe75ea0befc0ddf766be266c06bb5b5bad08b460b89c1bcffc38568b406234dec3b15417732fcab5e8ccb98e26a9fde03618f24a9536ff69d6202e0d154615d3baac530ea22aea92a8b098b6eb0cd825cd4d073f50f6f89f1ca6cf0757fac53966e6dbd071b07b2c52b6260d6ea83544baa1153c7ae21f9e1c3c89cfe66078c88ddb4a0131453ad1ad29d0eb3e16c525d3443b833b25f1f6fd024ad74ae20a2e5f853c0f19f80be31ffcb08bb1dd8e474c4495282606ab556de5cd032b0ffd1472878f724cec0465d0f948fe08cd722a01b3811dd32d2caf5267fd2fd8302abd140dccd61252c0df1ed61bbf7fb40328926bf1117415640e80725ea95e4ac054313e0903780de9f4c105375a53925e29acc271d82861ec343617fc28df19d7fbfb05781b3a3b0ef124707522dd67c03e699777de35ab5b1c331f7624a7ead5fb555e50ded912b605cec4b0754d4183b441826937acb5f69e97a840ec11c03f8f983f613f73315c59f59b8fd290018b4ea21f6bc68654a261b372197302c00e48a3af89aa0a8b8bbf440a1dab8cf56108114f4c59b685d10483c28e4f3e0cc3e2432756c89a8298393c518d5bc5e5d256a1fd9f4c2e2220af410b62e2c4b84a7c4d6a2fc2164381a7fd91801b24bd13e9e8ce9192d01791846562bf96fced19159791d3dfbca8eca4c14ae3e055aea86a82a047a0714fbbdde38d72296216383e74c7520c071ad8e44ba53520b029f37ebd8f62cde868fddac0e8324107604e88018250d2a12df72572e239df0e6a9f7768f70016f81871d3044c70207fcdf979d464ce2d59e189c9cb698f8896f04cdd28751c86e757df1d065457e5631a78822a3b9e59088aad6d5cbe1457976d1bec985c9029db9ef158825c26c044d4e05efff626dee6411a8b2e6d00402cf0a0446195fa1ee109f561ef621722f1a2c91ba4644dee74a11879b52c79695c0622812f4a66a7cf8321a4d00b68e5468b2f494d7dce010c995e73657718c18af9fcf52d62969aa425e1ade48751668bad7591c522cfc2e80af93ebe364dfdbdc202ec69d3250f05beafd9a71c122ec25fdd07ffbebf61a88d22cbcaa40923f6e06d747319ef7812a27036ca08b86030bd4e66063d01bfa9fccedec409e64b0e799a504b8290340fcddd598d6002021f3917a38525cd1279c8e790b9100bffd472f69be5c5863232bdf00a3c2a02edc367447e0b31788484c15ca0224dbebb77b1342544ac03b6cae4cee37548d6e3616f6916e20067ca54da8025d9077f0438150359e677d46c8a416d4d9aa481b83af2ebf592c274d321970fb426afe7547475571aae1dabfaa47b4fa021f6089b299b95cab09089e9e92bdd17406fee08e6d1d9d158a9444455af0b01f58eea1b91994290a4b70c91162fd525b7f222ee5", @ANYRESOCT=r1, @ANYRESHEX=r2], 0x50) (async) socket$netlink(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x7}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="140000001600010a0200000000000000fbff0000"], 0x14}}, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) ioctl$SIOCGIFHWADDR(r5, 0x8927, &(0x7f0000000000)={'dvmrp1\x00'}) (async, rerun: 32) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x400) (rerun: 32) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x20, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r4) (async) r7 = socket$packet(0x11, 0x3, 0x300) dup(r7) (async) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) 2.123413101s ago: executing program 3 (id=974): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x42d, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) r2 = memfd_secret(0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r2}, &(0x7f00000002c0), &(0x7f00000005c0)='%+9llu \x00'}, 0x1c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000680)=0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) r5 = socket(0x2a, 0x2, 0x87) sendfile(r5, r4, 0x0, 0x9) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x7, 0x8, 0x0, 0x28000, 0xffffffffffffffff, 0x3, '\x00', r3, r4, 0x3, 0x4, 0x2, 0x0, @value=r2}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xe}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r6}, 0xc) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@getnexthop={0x20, 0x76, 0xb0d, 0x20, 0x25dfdbff, {0x3}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8084}, 0x80) fallocate(0xffffffffffffffff, 0x20, 0x2, 0xa) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000180)={0x0, "f1ffffffffff63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee04200", 0xffffffffffffffff}) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000200)={0x80000000}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000080)=0xc) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000340)=@req={0x2, 0x1000, 0x3, 0x1}, 0x10) sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x7, 0x6, 0x201, 0xf000000, 0x0, {0x7, 0x0, 0x4003}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x200000d}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x24004810) 2.013526787s ago: executing program 6 (id=975): r0 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), &(0x7f0000000040)={'U-', 0x100000001}, 0x16, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r3, &(0x7f0000000100)=""/83, 0x53) getdents(r3, &(0x7f0000000340)=""/70, 0x46) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf256c00000008000300", @ANYRES32=r1, @ANYBLOB="c9e58158b5dabfa00a5302ca9e755a73fb429b6b8e06b53f036fa04fb6281299784c70375d56be65b2203169b880e63ede9dfd9217edddf4c1a1c8dd276c0670e3426e0dee35472f05212a5f4af329c655dad33e0b0022ec0e7c65e33af3b237484d12a22eb840a76b673956b09bb2632c9c71d41d50f8c4ca3783b0136312c38e47cfada45d95"], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x44010) 2.013124015s ago: executing program 6 (id=976): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0x32}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x3}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f000000fc40)=[{{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000440)="fb54254f7e4e1cc3c596bd3b07bf020888e44537726ce2df0d6870d9d0e9b2735b0670a8ac6e8e47b5d4725daedfd64b7cc860352f0aa389d10b0d1e5dfcb46e66f60146c6093e44ca8f6a2658f0f28d7936eb1fdb43d79711f81a0d4003545df25c407f", 0x64}, {&(0x7f00000004c0)="73122748104e106def", 0x9}], 0x2, &(0x7f0000002bc0)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {r0}}}], 0x60, 0x20000840}}, {{&(0x7f000000e280)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f000000f540)=[{&(0x7f000000e300)="5cc276293fc66836a66d09572722641d9a71b93a4a2bb6be10dfc53d62e2f0757164e577d492d83494e30b7d6e30312abdb21d6a879b5da156e11b910337e4a31f7d2b3a1d65a8d3cf81ebb415481b947700661ce16f", 0x56}, {&(0x7f0000000540)="c97d7f4cf42e35f6c464052e1010e86225c7fe310b95f759f38ef0387c5d8f310dfb9673b1b9d9eb6d3ae5293eddd723a89da71d622f2f1b34fbb22241289dcbf0aa7d097a6e28dc5a37262c74046869af35502101588309f356cfea4ab3b08e8587193e8efee885f411949de582613738a88667a4ddd8ddc256cdb3cc15112899b3fa8a48da0095f260f6bdaaf80efd12420bcc0d02a7c41dfbb04de14306378d5f014b0985b8a2c6951aa73890f6099d12c07f85", 0xb5}, {&(0x7f000000e440)="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", 0x1000}, {&(0x7f0000000600)="7077d83b50f6396d8bfd5dd2e33da51b811b19028a29c7c295b7f37a6725874a02ee52be3875917f71c4ef60db99abc56cdbbcfce7820d9f21257e740fe3fba621a358d78bc2dc7573f5ba4f3b41a0cbbecb40935e10187d32d003b62716387e0f175eb185d93497773b8ed1365c4d9a1cb23cb45b4e0a0293ec3728f180aeb33a6236b135588a62ee29e6b4ab33f38113216e9f50eed67b0d60d0bbe56caeeedd6854b61760df55ed3d781ae16d8e9b76994e151960d0ef3745aa9d1672e83b20e0074034b87a9c6f4fcb97088cf1", 0xcf}], 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRESOCT=r2, @ANYBLOB="180020000110000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000bff51f2ef92f48cb46c3f2b96b0da5fb0eccd4c882d8c09696b4195741bd1f6f95c698e7210b5cc09b1f09a8bad30a9d8bfaa71833d490f3ad840384aad7718d0d322e430d13f908e8c3952f3e0f3910cd23280cf485e2", @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r2, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="2c0000000100d4fd01000002", @ANYRES32=r2, @ANYRES8=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18717f1f72649a9768867b48", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xffffffffffffff60, 0x40010}}, {{&(0x7f000000f780)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f000000f900)=[{&(0x7f000000f800)="fdae3d1b7d29d0fedcbf1f719b30901b41b763fee236088e92281e68cde70eca0174bf", 0x23}, {&(0x7f000000f840)="ad49f77ac8bfd565468e8af173c7d047b203dc492d06419572fe672f382422d7982f2d8ece52aee057b7fafa78019fce5f06be11cacd208b8847d415b8e64f60e55d6ae1f6635bf8e84417dcd75e2d0226d20e1e5fdfb454ef6d7e6efaffabd101fd2298f283d43c66ccea97c1cbbd84fe512860eda82ea9bf1d255ae5c27579d1209e29eeaf84f023a4733013865013680970c01c842317fdd5136bca9d60094469f88109ec37084a1c955bbe88cecfeb7fe9aad5beb119bb47f41e9907db0c", 0xc0}], 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000100000001000000", @ANYRESDEC, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x34, 0xc810}}, {{&(0x7f000000f980)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f000000fa00), 0x0, &(0x7f0000000540), 0x0, 0xc011}}], 0x4, 0x769753aff069fb5) r3 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x109340) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f0000000000)={0xa, 0x3, 0x4, {0x80000004, 0x1, 0x2, 0x8800001}}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180), 0x0) capset(0x0, &(0x7f0000000140)={0x0, 0x40000000, 0x80000804, 0x81, 0xfffffffb, 0xffffffff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x20) ioctl$TCSETAF(r5, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dff, 0x15}) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000340)=0x1) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000200)=0x17) openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x8442, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10010, 0xffffffffffffffff, 0x13074000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x111, 0x4b4, 0x1ac, 0xd4feffff, 0x2b8, 0x20a, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffff00, 0xffffff00], [0x0, 0xff000000, 0x0, 0xffffffff], 'ipvlan0\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0xe}, 0x0, 0x188, 0x1ac, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x7b}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'hsr0\x00', 'pim6reg1\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x1, 0xfffffffe, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3dc) 2.012578923s ago: executing program 4 (id=977): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x105842, 0x8d) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x90, 0x0, 0x2, {0x1, 0x3, 0xbd16, 0x5, 0x5, 0x7f, {0x1, 0x5, 0xb, 0x6, 0x3, 0xf, 0xa736, 0x200, 0x7, 0x6000, 0xff, r3, r4, 0xffff0000, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = openat$vicodec0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0185648, &(0x7f0000000100)={0x0, 0x400, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90b, 0x6, '\x00', @value64=0x4ad}}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x3fffffffffffff, 0x200000000000000}, 0xfffffffe}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) 1.812852085s ago: executing program 3 (id=978): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES64], 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x14) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000f40)=ANY=[@ANYBLOB="aa7b5cbe910dfcc202d98ff5538388c001cfd9083fcb533ed0602649addc2f889b48b3de30064c247f494c92ee12e794ec35c46ae600952f592a19c6249d0b6fcd38c0b548597a1db5603f233f072880a4b525c27b6aacf60c80937609db67fefa9085319152d496e2beae3be560c55e66a12bdec44ef011fcea6aba9ec95fbf9afa1fcdbd0c958b278176674636a647478c8024892be360d2aab4319eb5d6097646678b804cac5c72210fe45a53b8b6b10ea13d27b84d7bf13e07fbb03ada1b385fcd9f8bd4c9e16c409ed6f3797796b09c007acd30bc83de9547066e92b0a61b69", @ANYRES64=r0, @ANYRESOCT=r3, @ANYRES32=r3, @ANYRESDEC, @ANYRESOCT=r3, @ANYRES8=r1, @ANYRES16=r1, @ANYRES16=r2], &(0x7f0000000000)='GPL\x00', 0x205, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3b}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(r4, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xf2bfd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) r7 = accept4(r1, &(0x7f0000000480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, &(0x7f00000003c0)=0x80, 0x80800) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000440)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xf, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGCHAN(r9, 0x80047437, &(0x7f0000001f00)) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, 0x0) sendmmsg(r9, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="4b12b1bf3d90058d3dcb824a532dafbc4aaf2e56ca6715b0d887b2c59c89d3d6f57560d2c0f21f67bf540356cf9836685302d1b1", 0x34}, {&(0x7f0000000600)="1904bd80ba99f48be030f407ff63f5259c93511bed0e8a09acd7e92a96e9e9164828de6bb8ca5b21c16ba45e916c204efd7da175302e1a95b123f5ef3c09b6c1418e98418ea17681848d39f39e584ee94604ff89d202b87cfac87d3be1efc0e0eed62f45d764fcecbdde455636d220997964a9d8b7ea0148bd279e9e35cee598e4de1b6efb058e", 0x87}, {&(0x7f00000006c0)="4c8998c4b668c6ec1b849194294d3bf58482df087f9fcf6a520700e31ce92fa6df7e8f4a2a49254512248de0d1fd88241e800cf693dd6da06e2eed14a83850cc2162a024cfae8836", 0x48}, {&(0x7f00000007c0)="1dff12a4aba140498f7d92851b105823677dcc680b033f7472fb944bbc2663b11430bf9588629728ec0f5fbce88f9779816df7bf78e1146b42173f35338770d61b46ba94a382fae8687088dc32f853f955e1bfd7b9a1d3d04721c7f54f0eb6e972b17ac385be902a2c5f8b5f4e1ba99eade0d3e0529e9617d7493ce824468b2998bf5e9df1e83729851c5d8ca65e795d0c03f965b5bd966061d589af86bc2ac7859936199104827d07eb30e3434f4c55578c6a8e76a426d4a6c79ede0b0d59b54a9463ee3925792c637e57a701a1646b8c20d085db62c426035be0dfbd33c837dfb435295c5cf785ed863b652fcf4dd843ce6283cb", 0xf5}, {&(0x7f00000008c0)="b2bc5cee31f9a60dabc63415ca6316e36e540902a47e5a1958eb6bbb8f4ae40ab20c1a9d4d215ae7a5f451f30965b4a2fb349b1ec0132a5a03045003419de465775f9d995e4483de163999c5aa92bfaa6756dbd3dc7ea7a708ba7a05a6544138796dfec5a7b543a627049d0a86e8f89e375cd19f7d02d3537246877038e590501d4cc64ab452717836e44927e224508a5d5e6341a5a401241e249f8e92f9e79b1fabb8f1dec24c87e815b0d04fe0547f49781eb28df175f522a75ba1bdef96ee9d56e9ad85b8807b70ec3e8d8465e02f8b67082d764c9bfa2ccc", 0xda}, {&(0x7f00000009c0)="2dc4d27a4cc55ba78b746623081b98021643b3e6e449b60f020b2c34cb72136eb293caa58700a0", 0x27}], 0x6, &(0x7f0000000b40)=[{0xcc, 0x29, 0x2, "4ba03b0aa0f5ac9c45877c6253fbdb99d61af51e2910ee42a627603f1229ec8a51db85ef54223e048e23f7d388f5ffcc445ae030e4a10b2c018d7521c2aadbf954cd3d078c3297874f8965e70c32e37916de12ac5174c4a71a5e26a7e79ed1b50bf31ad600d8ab24f36da90ec55c6b9acca88ec5e0b3e88431db0fd3d00e7c5f7d08afda4ccbf2e52da3c109f68f92a29c9497c8167b1c6bd8b842118de2500ca887ebea31bba168a7ec6a7223b09ba0106d6ec044dae8a69c6ae0604d1ac3"}], 0xcc}}, {{&(0x7f0000000c40)=@generic={0x3, "cd902c1a7db879c84f2d74017633b98a6a0bda5f5749eed8d96bba20e8806a1c6ed1569877a5897093d07339c991c66ae50418f12f9ab6d56a43ef5b5ddec4441a022e473e81645e29ab4863553f41ff33c1a1dc805f5af07e1c9782949d0f122b02c303382d476a3099b9b88c02f339b87f54ca0ee28608a989b07ebde4"}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000cc0)="ef9c5c975642ff36ae99de5ebc6453c8fef0a13883188391076a", 0x1a}, {&(0x7f0000000d00)="d5ee708bf250ded0a9403b31e77e9f75e777", 0x12}, {&(0x7f0000000d40)="58a035ea68a1ef3bb7edd5351dadb73585dcfc1666f45d2ae22c7ef34d53c8a0f7e97e7070156fbd83d7e5de5f9753c55bbd0b6e2fa02dd7e2a506b273526bc1e8f872afea7094984d2e2e0da3c6f09d371014746a893aa68c11a56bafb57da5da16dd09f4d17526", 0x68}, {&(0x7f0000000dc0)="19fd04c1fb77f4a7c9b72d06a8d0961bedbdb1aa18c01da82320c1e82eeb38210ca2f4afdfcdf09f82f0fb70d7cdcb03d29e680f77cae86c8c9ff8e35d810c5af15bef66aefbab1f4c26a70ce9b8a62aab2d1907b71f1191", 0x58}, {&(0x7f0000000e40)="c4e5c0ce664d2731e795b36986a8b89138b697706519a5c2f68c5ca838914ca02b5a3523e538c7a7c4d98978527936aca2f6ad72d77314009a787da1b95599955d70eb0dc36cba0003c2349cfa161b4d43fb67b97b4a56df57932fdaaa3a1ef226f4b231b5e4da5a85ac1a0dc8901dc18a33649e360c854635257b67b025442f79d9fbd613b0c039afd65cb4a10075cb247d1c7f093de073d46dfd", 0x9b}], 0x2a, &(0x7f0000001f40)=[{0x1c, 0x84, 0xb, "4877aa74d20a4d92916d109b2a8ae611"}, {0x70, 0x109, 0x9, "46b8d18b16e4659cd0d588a2026cf00e732df6a6d64b1f529d33129893feb9e6c7f093389900a16e17170c7765ccbb46af9dd3858b07478f8d53d514fb02c690ac4090a46194796555ac2ab36a651861814b88d4c99814ee177adb8a6847ed0177"}, {0x100c, 0x101, 0xc64, "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"}, {0x28, 0x111, 0x4, "2bc06affee529fd36f31940036e2fa2f91f3d2dbf7f4b7de5e96"}, {0x98, 0x109, 0x1, "ba75d8b23482e40ee1faaaad4ac767bdcb43ae290189601481db075259a39bdb34d5f6c8baed8d11459d8ad002288421ee033c6d191caea6f6fff6fe6da8ffa769ccf36673871ce2be71109995f468260e22f58517d5a45b6bd87e467608426cf333cf4d30609d8aaac7090eb076419e843f6beb9edb0f3720935c4cb790d195b81c1602c824935d4085"}, {0x100c, 0xb550e4f142b0b012, 0x6, "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"}, {0x14, 0x101, 0x3, "d3e4852f5d4f"}, {0x108, 0x112, 0x7fffffff, "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"}], 0x2280}}], 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, r7) 1.79828014s ago: executing program 4 (id=979): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x1003, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = userfaultfd(0x80801) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x84) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x300ce4d, 0x10) write$binfmt_script(r2, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') read$FUSE(r3, &(0x7f0000000d80)={0x2020}, 0x2020) timerfd_gettime(r3, &(0x7f0000000040)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000001040)={0x608}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r1, r3}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x30}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBLED(r4, 0x4b65, 0x8) ioctl$XFS_IOC_GETBMAPA(0xffffffffffffffff, 0xc020582c, &(0x7f0000000100)={0x1, 0xeb5, 0xf, 0x4, 0x3}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 1.560231361s ago: executing program 0 (id=980): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) getpriority(0x0, r2) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x118f}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x200, 0x0, 0x1}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000400)={0x5, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e23, @empty}}}, 0x104) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f00000012c0)=0x2) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) io_setup(0x2007, &(0x7f0000000980)) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x100}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) fcntl$lock(r3, 0x25, &(0x7f0000000140)={0x0, 0x4, 0x80000001, 0x207, r2}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000054000010008000010c000008000100", @ANYRES32=r9, @ANYBLOB="4c00088048000080200004000a004e2100000000000000000000000000000000000000010000000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c"], 0x68}}, 0x0) 1.318731758s ago: executing program 4 (id=981): prctl$PR_SET_IO_FLUSHER(0x41, 0x3) (async) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x100, 0x80000000, 0x2, 0xc, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x89, 0xca9f, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x103002) (async) epoll_create1(0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r2, &(0x7f0000000340)="08000200010000", 0x7) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0x3, 0x0, 0x0, 0x40003}}) (async) close_range(r1, r1, 0x400000000000000) mprotect(&(0x7f00003b6000/0x2000)=nil, 0x2000, 0xd) 1.019405639s ago: executing program 4 (id=982): r0 = socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000600)={0x0, 0x0, {0x1, 0x2, 0x0, 0x0, 0x100000}, 0x1009}) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r9, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r10) ptrace(0x8, r10) ptrace$ARCH_GET_FS(0x1e, r10, &(0x7f0000000300), 0x1003) ptrace(0x4207, r10) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@gettaction={0x50, 0x32, 0x3a0e8471cbbdcafa, 0x70bd2b, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x5d, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1010, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x2000804) 735.449206ms ago: executing program 4 (id=983): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f00000001c0)) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @empty, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000002900000004000000000000000000000018"], 0x30}, 0x440e0) read$FUSE(r0, &(0x7f00000059c0)={0x2020}, 0x2020) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x2711, @hyper}, 0x10) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000340)) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000cdbba62f2bf83b5731d57c648df425570b267321b0c2d55c31e46faf770e3bb88ee1dada8597fd0c3272eddcf6acc2f8ad4da125192ecb79acebc596cc24f85110442735c3c1eb2a7efcd7dc", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) read$FUSE(r0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_procfs(0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) 64.893887ms ago: executing program 6 (id=984): set_mempolicy(0x2, &(0x7f0000000080)=0x3, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x1cbf8000) socket(0x21, 0x4, 0x5) 0s ago: executing program 4 (id=985): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0x1000, 0xb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1}, {0x0, 0x60000, 0x3, 0x0, 0x0, 0x17, 0xf9, 0x6, 0x0, 0x0, 0x0, 0x42}, {0x1000, 0x6000, 0x13, 0x3, 0x3, 0x0, 0x81, 0x0, 0x4, 0x6, 0x1, 0x3}, {0x4000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {0xc000, 0x1000, 0x3, 0x0, 0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x1a}, {0xe000, 0xd000, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x84}, {0x4, 0x5000, 0x11, 0x4, 0x3, 0x0, 0x0, 0x0, 0x3}, {0x1, 0x100000, 0x10, 0xf9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {0x70000}, {0x1, 0xfffe}, 0x0, 0x0, 0x6000, 0x0, 0x1, 0x1, 0x900, [0xfffffffffffffffc, 0x0, 0x0, 0x3]}) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0xc044) syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') r5 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000280)={'pimreg1\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x39, 0x5, [0x0, 0x0, 0xd1, 0x8b, 0xc]}}) r6 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) write$uinput_user_dev(r6, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac1f}, 0x40, [0x3, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0xf08e, 0xfffffe5d, 0x0, 0x8001, 0x1, 0xfffffffd, 0x8000, 0x4, 0xffffffff, 0x2, 0x6, 0x3, 0x4, 0x6a90, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x0, 0x2, 0x0, 0xe, 0x8000, 0x1, 0x9d, 0x10000080, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x7, 0x7, 0x2, 0x7, 0x8001, 0xff, 0x7, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x9, 0x4, 0x8, 0xfffff7fb, 0x4, 0x100, 0x5, 0x800000b], [0x7, 0x9d2, 0x7fffffff, 0x800, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x6, 0x8, 0x80001005, 0x6, 0x0, 0xd, 0xfffffff7, 0x7fffffff, 0x100000, 0x800, 0x2, 0x3, 0x7, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xd, 0x1, 0x4, 0x100, 0x3, 0x7f, 0x3, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0xfffffffc, 0x1, 0xe8, 0x0, 0x2, 0xb, 0x4, 0x6, 0xbdc, 0x3e6, 0x9, 0x9, 0x0, 0x20008, 0x80000001, 0x6], [0x1, 0xd, 0x7, 0x590, 0xfffffff, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x9, 0x7, 0x7, 0x410003, 0x4, 0xe, 0x8001, 0xfffffffe, 0x0, 0xffff, 0x200, 0x0, 0x79fc, 0x8, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x2, 0x2, 0x8000, 0x10, 0x5, 0x3, 0x1, 0x10, 0xb4, 0x6, 0x80000001, 0x8001, 0x3, 0x1b9, 0x8a8, 0x1, 0x8, 0x3, 0x1, 0x1, 0x4, 0x5, 0x74da, 0xec9, 0x140, 0x5, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x0, 0x9, 0x80000000, 0xffff, 0xb7, 0x6, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0x9, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x4, 0x2170, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x400, 0x6, 0x6, 0x5, 0x5, 0x20, 0x4, 0xd, 0x6, 0x1, 0x6, 0x2, 0x2, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0xfffffffb]}, 0x45c) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) kernel console output (not intermixed with test programs): v2 capabilities in a way that may be insecure [ 162.153989][ T7434] binder: BINDER_SET_CONTEXT_MGR already set [ 162.156130][ T7434] binder: 7433:7434 ioctl 4018620d 80004a80 returned -16 [ 162.210621][ T9] usb 9-1: USB disconnect, device number 7 [ 162.252871][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.391'. [ 162.345796][ T7441] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 162.381436][ T7441] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 162.499398][ T7446] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 162.836827][ T5847] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 163.016974][ T5847] usb 10-1: Using ep0 maxpacket: 8 [ 163.026433][ T5847] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 163.034064][ T5847] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 163.042106][ T5847] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 163.051397][ T5847] usb 10-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 163.056906][ T5847] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 163.063462][ T5847] usb 10-1: config 168 interface 0 has no altsetting 0 [ 163.071111][ T5847] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 163.084334][ T5847] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 163.097235][ T5847] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 163.102256][ T5847] usb 10-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 163.108784][ T5847] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 163.114351][ T5847] usb 10-1: config 168 interface 0 has no altsetting 0 [ 163.119580][ T5847] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 163.123630][ T5847] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 163.128558][ T5847] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 163.133441][ T5847] usb 10-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 163.138562][ T5847] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 163.145307][ T5847] usb 10-1: config 168 interface 0 has no altsetting 0 [ 163.163604][ T5847] usb 10-1: string descriptor 0 read error: -22 [ 163.169148][ T5847] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 163.178588][ T5847] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.209865][ T5847] adutux 10-1:168.0: interrupt endpoints not found [ 164.781168][ T7494] netlink: 20 bytes leftover after parsing attributes in process `syz.0.402'. [ 164.795729][ T7494] netlink: 20 bytes leftover after parsing attributes in process `syz.0.402'. [ 165.646604][ T7505] netlink: 28 bytes leftover after parsing attributes in process `syz.3.404'. [ 165.835065][ T5847] usb 10-1: USB disconnect, device number 4 [ 166.281314][ T7517] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 166.606631][ T5829] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 166.668332][ T40] audit: type=1326 audit(1778600006.484:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.3.409" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 166.668381][ T40] audit: type=1326 audit(1778600006.484:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.3.409" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 166.668404][ T40] audit: type=1326 audit(1778600006.484:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.3.409" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 166.668424][ T40] audit: type=1326 audit(1778600006.484:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.3.409" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 166.699657][ T40] audit: type=1326 audit(1778600006.494:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.3.409" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 166.708104][ T40] audit: type=1326 audit(1778600006.494:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.3.409" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 166.716435][ T40] audit: type=1326 audit(1778600006.494:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.3.409" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 166.724250][ T40] audit: type=1326 audit(1778600006.494:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.3.409" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 166.732260][ T40] audit: type=1326 audit(1778600006.494:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.3.409" exe="/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf71a94d0 code=0x7ffc0000 [ 166.740362][ T40] audit: type=1326 audit(1778600006.494:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.3.409" exe="/syz-executor" sig=0 arch=40000003 syscall=311 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 166.767152][ T5829] usb 10-1: Using ep0 maxpacket: 8 [ 166.775692][ T5829] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 166.775723][ T5829] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 166.775777][ T5829] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 166.775800][ T5829] usb 10-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 166.775816][ T5829] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 166.775838][ T5829] usb 10-1: config 168 interface 0 has no altsetting 0 [ 166.797486][ T5829] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 166.797560][ T5829] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 166.797616][ T5829] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 166.797639][ T5829] usb 10-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 166.797654][ T5829] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 166.797677][ T5829] usb 10-1: config 168 interface 0 has no altsetting 0 [ 166.801428][ T5829] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 166.801459][ T5829] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 166.801489][ T5829] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 166.801510][ T5829] usb 10-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 166.801528][ T5829] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 166.801550][ T5829] usb 10-1: config 168 interface 0 has no altsetting 0 [ 166.809492][ T5829] usb 10-1: string descriptor 0 read error: -22 [ 166.809614][ T5829] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 166.809634][ T5829] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.835471][ T5829] adutux 10-1:168.0: interrupt endpoints not found [ 167.113664][ T7532] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 167.330448][ T7541] overlay: ./file0 is not a directory [ 168.185922][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'. [ 168.196684][ T7551] netlink: 72 bytes leftover after parsing attributes in process `syz.0.418'. [ 169.040825][ T7567] xt_SECMARK: invalid mode: 0 [ 169.056695][ T7567] overlayfs: statfs failed on './file0' [ 169.386913][ T7576] overlayfs: failed to resolve './bus': -2 [ 169.512014][ T7578] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 169.670694][ T7580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.427'. [ 170.001508][ T1039] usb 10-1: USB disconnect, device number 5 [ 170.252127][ T1039] libceph: connect (1)[c::]:6789 error -101 [ 170.255142][ T1039] libceph: mon0 (1)[c::]:6789 connect error [ 170.400349][ T7594] ceph: No mds server is up or the cluster is laggy [ 170.686624][ T7603] process 'syz.5.430' launched './file1' with NULL argv: empty string added [ 170.737017][ T7608] input: syz1 as /devices/virtual/input/input21 [ 171.007456][ T7612] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 172.540869][ T7635] comedi comedi1: dt2817: I/O base address or length out of range [ 172.634585][ T7632] ptrace attach of ""[7633] was attempted by "/syz-executor exec"[7632] [ 173.001123][ T7641] input: syz1 as /devices/virtual/input/input22 [ 173.323269][ T7646] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 173.740786][ T7651] bridge0: entered promiscuous mode [ 173.758105][ T7651] dummy0: entered promiscuous mode [ 173.774267][ T7651] debugfs: 'hsr1' already exists in 'hsr' [ 173.780533][ T7651] Cannot create hsr debugfs directory [ 174.134344][ T7664] syzkaller0: entered promiscuous mode [ 174.136216][ T7664] syzkaller0: entered allmulticast mode [ 174.317798][ T7667] netlink: 'syz.0.447': attribute type 3 has an invalid length. [ 174.346840][ T5839] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 174.526672][ T5839] usb 9-1: Using ep0 maxpacket: 8 [ 174.532613][ T5839] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 174.546850][ T5839] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.550249][ T5839] usb 9-1: Product: syz [ 174.552031][ T5839] usb 9-1: Manufacturer: syz [ 174.553994][ T5839] usb 9-1: SerialNumber: syz [ 174.568355][ T5839] usb 9-1: config 0 descriptor?? [ 174.579440][ T5839] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 174.593770][ T5839] dvb-usb: bulk message failed: -22 (2/0) [ 174.628404][ T5839] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 174.645215][ T5839] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 174.649324][ T5839] usb 9-1: media controller created [ 174.680057][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.916088][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.455'. [ 176.256648][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 176.406679][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 176.410042][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 176.412908][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 176.416020][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 176.419236][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 176.422364][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.426612][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 176.429581][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.637208][ T9] usb 5-1: usb_control_msg returned -32 [ 176.640969][ T9] usbtmc 5-1:16.0: can't read capabilities [ 176.788822][ T7713] input: syz1 as /devices/virtual/input/input23 [ 176.808620][ T7713] syzkaller0: entered promiscuous mode [ 176.810480][ T7713] syzkaller0: entered allmulticast mode [ 177.012530][ T7716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.016300][ T7716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.022008][ T7716] loop2: detected capacity change from 0 to 7 [ 177.027092][ T7716] Dev loop2: unable to read RDB block 7 [ 177.028902][ T7716] loop2: AHDI p1 p2 p3 [ 177.030466][ T7716] loop2: partition table partially beyond EOD, truncated [ 177.033401][ T7716] loop2: p1 start 1601398130 is beyond EOD, truncated [ 177.036099][ T7716] loop2: p2 start 1702059890 is beyond EOD, truncated [ 177.154139][ T5839] cxusb: set interface failed [ 177.155718][ T5839] dvb-usb: bulk message failed: -22 (1/0) [ 177.199624][ T5839] DVB: Unable to find symbol mt352_attach() [ 177.202756][ T5839] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 177.266654][ T5839] rc_core: IR keymap rc-dvico-portable not found [ 177.274018][ T5839] Registered IR keymap rc-empty [ 177.282686][ T5839] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 177.284547][ T7726] netlink: 24 bytes leftover after parsing attributes in process `syz.4.463'. [ 177.290002][ T5839] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input24 [ 177.290436][ T7726] FAULT_INJECTION: forcing a failure. [ 177.290436][ T7726] name failslab, interval 1, probability 0, space 0, times 0 [ 177.299916][ T7726] CPU: 3 UID: 0 PID: 7726 Comm: syz.4.463 Not tainted syzkaller #0 PREEMPT(full) [ 177.299932][ T7726] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.299939][ T7726] Call Trace: [ 177.299944][ T7726] [ 177.299948][ T7726] dump_stack_lvl+0x100/0x190 [ 177.299974][ T7726] should_fail_ex.cold+0x5/0xa [ 177.299989][ T7726] should_failslab+0xc2/0x120 [ 177.300003][ T7726] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 177.300020][ T7726] ? skb_clone+0x190/0x400 [ 177.300038][ T7726] skb_clone+0x190/0x400 [ 177.300051][ T7726] netlink_deliver_tap+0xaed/0xcc0 [ 177.300070][ T7726] netlink_unicast+0x6a5/0x850 [ 177.300088][ T7726] ? __pfx_netlink_unicast+0x10/0x10 [ 177.300103][ T7726] ? genl_rcv_msg+0x4be/0x800 [ 177.300124][ T7726] netlink_ack+0x655/0xb80 [ 177.300144][ T7726] netlink_rcv_skb+0x333/0x420 [ 177.300160][ T7726] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.300178][ T7726] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.300200][ T7726] ? netlink_deliver_tap+0x1ae/0xcc0 [ 177.300217][ T7726] genl_rcv+0x28/0x40 [ 177.300233][ T7726] netlink_unicast+0x585/0x850 [ 177.300250][ T7726] ? __pfx_netlink_unicast+0x10/0x10 [ 177.300270][ T7726] netlink_sendmsg+0x8b0/0xda0 [ 177.300288][ T7726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.300306][ T7726] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 177.300335][ T7726] ____sys_sendmsg+0x9e1/0xb70 [ 177.300350][ T7726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.300367][ T7726] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.300389][ T7726] ___sys_sendmsg+0x190/0x1e0 [ 177.300417][ T7726] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.300444][ T7726] ? find_held_lock+0x2b/0x80 [ 177.300468][ T7726] __sys_sendmsg+0x170/0x220 [ 177.300481][ T7726] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.300492][ T7726] ? __fget_files+0x21f/0x3d0 [ 177.300510][ T7726] ? ksys_write+0x1ac/0x250 [ 177.300524][ T7726] ? rcu_is_watching+0x12/0xc0 [ 177.300539][ T7726] __do_fast_syscall_32+0xe7/0x950 [ 177.300563][ T7726] ? lockdep_hardirqs_on+0x78/0x100 [ 177.300580][ T7726] do_fast_syscall_32+0x32/0x70 [ 177.300597][ T7726] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.300611][ T7726] RIP: 0023:0xf7f23fcc [ 177.300621][ T7726] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 177.300632][ T7726] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 177.300643][ T7726] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 177.300650][ T7726] RDX: 0000000000004804 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.300656][ T7726] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.300662][ T7726] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 177.300668][ T7726] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.300683][ T7726] [ 177.303424][ T5839] dvb-usb: schedule remote query interval to 100 msecs. [ 177.340763][ T7730] 9pnet_virtio: no channels available for device syz [ 177.341558][ T5839] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 177.426772][ T5839] usb 9-1: USB disconnect, device number 8 [ 177.476292][ T5839] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 177.721280][ T7743] netlink: 'syz.5.466': attribute type 1 has an invalid length. [ 177.748938][ T7743] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.814645][ T7743] bond1: (slave gretap1): making interface the new active one [ 177.820171][ T7743] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 177.902641][ T7743] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 179.113632][ T5839] usb 5-1: USB disconnect, device number 17 [ 179.330905][ T7770] lo speed is unknown, defaulting to 1000 [ 179.847171][ T1039] hid-generic 0000:0001:0000.0003: unknown main item tag 0x0 [ 179.851036][ T1039] hid-generic 0000:0001:0000.0003: unknown main item tag 0x0 [ 179.864451][ T1039] hid-generic 0000:0001:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz0 [ 179.874115][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.481'. [ 179.880551][ T7790] tipc: Started in network mode [ 179.882777][ T7790] tipc: Node identity ac14140f, cluster identity 4711 [ 179.887791][ T7790] tipc: Enabled bearer , priority 10 [ 179.891741][ T7790] IPv6: NLM_F_REPLACE set, but no existing node found! [ 179.932718][ T7794] fido_id[7794]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 180.000832][ T1039] IPVS: starting estimator thread 0... [ 180.059763][ T7804] IPVS: set_ctl: invalid protocol: 4 10.1.1.2:20001 [ 180.064840][ T7804] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20004 [ 180.069378][ T7804] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 180.106628][ T7802] IPVS: using max 42 ests per chain, 100800 per kthread [ 180.998512][ T5839] tipc: Node number set to 2886997007 [ 181.117296][ T7815] input: syz1 as /devices/virtual/input/input25 [ 181.146755][ T7816] usb 1-1: USB disconnect, device number 2 [ 181.263464][ T7815] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 181.278132][ T7820] input: syz1 as /devices/virtual/input/input26 [ 181.340772][ T5839] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 181.550032][ T5839] usb 9-1: Using ep0 maxpacket: 8 [ 181.651813][ T5839] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 181.669320][ T5839] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 181.702465][ T5839] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 181.718746][ T5839] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 181.762146][ T5839] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.810623][ T5839] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 181.816049][ T5839] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.120417][ T5839] usb 9-1: usb_control_msg returned -32 [ 182.122585][ T5839] usbtmc 9-1:16.0: can't read capabilities [ 182.692295][ T7826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.744469][ T7826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.799961][ T57] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 182.813063][ T7826] loop2: detected capacity change from 0 to 7 [ 182.935556][ T7826] Dev loop2: unable to read RDB block 7 [ 182.949914][ T7826] loop2: AHDI p1 p2 p3 [ 182.956196][ T7826] loop2: partition table partially beyond EOD, truncated [ 182.984627][ T7826] loop2: p1 start 1601398130 is beyond EOD, truncated [ 182.995162][ T7826] loop2: p2 start 1702059890 is beyond EOD, truncated [ 183.838280][ T7821] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 184.376173][ T7836] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 184.393201][ T7838] syzkaller0: entered promiscuous mode [ 184.395687][ T7838] syzkaller0: entered allmulticast mode [ 184.436395][ T7836] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 184.559475][ T40] kauditd_printk_skb: 201 callbacks suppressed [ 184.559492][ T40] audit: type=1326 audit(1778600024.374:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7856 comm="syz.3.497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 184.571388][ T40] audit: type=1326 audit(1778600024.374:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7856 comm="syz.3.497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 184.580197][ T40] audit: type=1326 audit(1778600024.374:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7856 comm="syz.3.497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 184.589194][ T40] audit: type=1326 audit(1778600024.374:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7856 comm="syz.3.497" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 184.598222][ T40] audit: type=1326 audit(1778600024.374:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7856 comm="syz.3.497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 184.607101][ T40] audit: type=1326 audit(1778600024.374:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7856 comm="syz.3.497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 184.615463][ T40] audit: type=1326 audit(1778600024.374:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7856 comm="syz.3.497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 184.624510][ T40] audit: type=1326 audit(1778600024.374:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7856 comm="syz.3.497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 184.633811][ T40] audit: type=1326 audit(1778600024.374:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7856 comm="syz.3.497" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 184.641271][ T40] audit: type=1326 audit(1778600024.374:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7856 comm="syz.3.497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efcc code=0x7ffc0000 [ 184.899280][ T7866] input: syz1 as /devices/virtual/input/input27 [ 184.978400][ T7866] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 185.578088][ T5146] Dev loop2: unable to read RDB block 7 [ 185.580642][ T5146] loop2: AHDI p1 p2 p3 [ 185.583817][ T5146] loop2: partition table partially beyond EOD, truncated [ 185.587672][ T5146] loop2: p1 start 1601398130 is beyond EOD, truncated [ 185.590649][ T5146] loop2: p2 start 1702059890 is beyond EOD, truncated [ 185.669787][ T5839] usb 9-1: USB disconnect, device number 9 [ 186.722546][ T7899] netlink: 232 bytes leftover after parsing attributes in process `syz.4.510'. [ 186.726436][ T7899] netlink: 228 bytes leftover after parsing attributes in process `syz.4.510'. [ 187.796703][ T5839] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 187.871777][ T7923] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 187.967044][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 187.975797][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.986886][ T5839] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 187.999083][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.016837][ T5839] usb 5-1: config 0 descriptor?? [ 188.186660][ T1039] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 188.205494][ T7935] dlm: no local IP address has been set [ 188.226800][ T7935] dlm: cannot start dlm midcomms -107 [ 188.326964][ T1039] usb 9-1: device descriptor read/64, error -71 [ 188.581883][ T1039] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 188.593123][ T5839] usbhid 5-1:0.0: can't add hid device: -71 [ 188.600847][ T5839] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 188.610803][ T5839] usb 5-1: USB disconnect, device number 18 [ 188.855604][ T1039] usb 9-1: device descriptor read/64, error -71 [ 188.967965][ T1039] usb usb9-port1: attempt power cycle [ 189.367017][ T1039] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 189.439659][ T1039] usb 9-1: device descriptor read/8, error -71 [ 189.469195][ T5846] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 189.628363][ T5846] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 189.633383][ T5846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 189.638537][ T5846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 189.643302][ T5846] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 189.649035][ T5846] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 189.652799][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.662765][ T5846] usb 5-1: config 0 descriptor?? [ 189.668372][ T7959] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 189.894349][ T7959] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 189.896638][ T7959] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 189.902099][ T7959] vhci_hcd vhci_hcd.0: Device attached [ 190.029677][ T1039] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 190.200268][ T39] usb 38-1: SetAddress Request (2) to port 0 [ 190.200398][ T39] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 190.290640][ T1039] usb 9-1: device descriptor read/8, error -71 [ 190.296595][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 190.407647][ T1039] usb usb9-port1: unable to enumerate USB device [ 190.547574][ T7960] vhci_hcd: connection closed [ 190.552821][ T230] vhci_hcd vhci_hcd.0: stop threads [ 190.556182][ T5846] usbhid 5-1:0.0: can't add hid device: -71 [ 190.558263][ T5846] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 190.561994][ T230] vhci_hcd vhci_hcd.0: release socket [ 190.566096][ T230] vhci_hcd vhci_hcd.0: disconnect device [ 190.569064][ T5846] usb 5-1: USB disconnect, device number 19 [ 191.251616][ T7979] netlink: 16 bytes leftover after parsing attributes in process `syz.4.533'. [ 191.641119][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 191.644463][ T7987] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 191.644463][ T7987] Please contact the netfilter-devel mailing list or update your nftables rules. [ 191.966051][ T40] kauditd_printk_skb: 136 callbacks suppressed [ 191.966069][ T40] audit: type=1326 audit(1778600031.774:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.4.539" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fcc code=0x7ffc0000 [ 191.979875][ T40] audit: type=1326 audit(1778600031.774:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.4.539" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fcc code=0x7ffc0000 [ 191.987988][ T8003] netlink: 16 bytes leftover after parsing attributes in process `syz.3.540'. [ 191.992758][ T40] audit: type=1326 audit(1778600031.784:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.4.539" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fcc code=0x7ffc0000 [ 192.077977][ T40] audit: type=1326 audit(1778600031.784:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.4.539" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fcc code=0x7ffc0000 [ 192.100826][ T40] audit: type=1326 audit(1778600031.784:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.4.539" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f23fcc code=0x7ffc0000 [ 192.120558][ T40] audit: type=1326 audit(1778600031.784:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.4.539" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fcc code=0x7ffc0000 [ 192.134798][ T40] audit: type=1326 audit(1778600031.784:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.4.539" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fcc code=0x7ffc0000 [ 192.146824][ T40] audit: type=1326 audit(1778600031.784:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.4.539" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fcc code=0x7ffc0000 [ 192.154196][ T40] audit: type=1326 audit(1778600031.784:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.4.539" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fcc code=0x7ffc0000 [ 192.162449][ T40] audit: type=1326 audit(1778600031.784:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.4.539" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f23fcc code=0x7ffc0000 [ 192.234541][ T8009] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 192.558225][ T57] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 192.708675][ T57] usb 5-1: Using ep0 maxpacket: 8 [ 192.713396][ T57] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 192.717967][ T57] usb 5-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 192.722543][ T57] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 192.726406][ T57] usb 5-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 192.731213][ T57] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 192.735139][ T57] usb 5-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 192.744497][ T57] usb 5-1: string descriptor 0 read error: -22 [ 192.747538][ T57] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 192.751033][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.756195][ T57] usb 5-1: rejected 3 configurations due to insufficient available bus power [ 192.759978][ T57] usb 5-1: no configuration chosen from 3 choices [ 192.992593][ T8019] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 193.060144][ T8019] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 193.100964][ T8022] netlink: 16 bytes leftover after parsing attributes in process `syz.4.545'. [ 193.913699][ T8041] tmpfs: Bad value for 'mpol' [ 194.957829][ T8034] syz.5.547 (8034) used greatest stack depth: 18968 bytes left [ 195.043129][ T5847] usb 5-1: USB disconnect, device number 20 [ 195.134344][ T8061] binder: 8060:8061 ioctl c0306201 80000240 returned -14 [ 195.147711][ T8061] netlink: 36 bytes leftover after parsing attributes in process `'. [ 195.165161][ T8063] netlink: 72 bytes leftover after parsing attributes in process `syz.5.553'. [ 195.169367][ T8063] tmpfs: Bad value for 'nr_blocks' [ 195.171471][ T5741] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 195.251729][ T5741] block nbd3: Receive control failed (result -32) [ 195.294186][ T39] usb 38-1: device descriptor read/8, error -110 [ 196.131603][ T8072] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 196.244785][ T8082] overlayfs: failed lookup in lower (newroot/67, name='file1', err=-40): overlapping layers [ 196.308700][ T39] usb usb38-port1: attempt power cycle [ 196.478305][ T5847] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 196.726670][ T5847] usb 5-1: device descriptor read/64, error -71 [ 196.855718][ T8089] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 196.868103][ T39] usb usb38-port1: unable to enumerate USB device [ 196.900711][ T8089] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 196.976984][ T5847] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 197.049538][ T6970] overlayfs: failed lookup in lower (newroot/67, name='bus', err=-40): overlapping layers [ 197.054712][ T6970] overlayfs: failed lookup in lower (newroot/67, name='bus', err=-40): overlapping layers [ 197.116685][ T5847] usb 5-1: device descriptor read/64, error -71 [ 197.226906][ T5847] usb usb5-port1: attempt power cycle [ 197.381347][ T8095] warning: `syz.3.563' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 197.583562][ T5847] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 197.588229][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.627548][ T5847] usb 5-1: device descriptor read/8, error -71 [ 197.724204][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.897260][ T5847] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 197.903052][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.917465][ T5847] usb 5-1: device descriptor read/8, error -71 [ 198.029185][ T5847] usb usb5-port1: unable to enumerate USB device [ 198.222153][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.273320][ T5098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 198.280843][ T5098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 198.287151][ T5098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 198.290894][ T5098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 198.294523][ T5098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 198.445845][ T8106] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 198.485955][ T8103] IPVS: stopping master sync thread 8106 ... [ 198.494332][ T12] bridge_slave_1: left allmulticast mode [ 198.497304][ T12] bridge_slave_1: left promiscuous mode [ 198.501569][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.504670][ T8103] netlink: 40 bytes leftover after parsing attributes in process `syz.4.567'. [ 198.677650][ T12] bond1 (unregistering): (slave gretap1): Releasing active interface [ 198.685008][ T5846] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 198.688467][ T5846] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 198.690853][ T5846] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 198.693374][ T5846] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 198.695772][ T5846] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 198.699011][ T5846] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 198.702287][ T5846] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 198.705169][ T5846] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 198.708188][ T5846] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 198.711378][ T5846] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 198.735919][ T5846] hid-generic 0005:00B6:0009.0004: hidraw0: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 198.784706][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.791400][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.798566][ T12] bond0 (unregistering): Released all slaves [ 198.808689][ T12] bond1 (unregistering): Released all slaves [ 199.014306][ T8133] input: syz1 as /devices/virtual/input/input28 [ 199.032685][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.107512][ T5449] 8021q: adding VLAN 0 to HW filter on device eth10 [ 199.132685][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.259516][ T8133] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 199.317391][ T8097] lo speed is unknown, defaulting to 1000 [ 199.607631][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 199.975680][ T5449] 8021q: adding VLAN 0 to HW filter on device eth11 [ 200.127604][ T12] hsr_slave_0: left promiscuous mode [ 200.129854][ T12] hsr_slave_1: left promiscuous mode [ 200.134077][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.136496][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.141857][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.144403][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.154527][ T12] veth1_macvtap: left promiscuous mode [ 200.156473][ T12] veth0_macvtap: left promiscuous mode [ 200.158473][ T12] veth1_vlan: left promiscuous mode [ 200.162489][ T12] veth0_vlan: left promiscuous mode [ 200.376791][ T5741] Bluetooth: hci1: command tx timeout [ 200.479651][ T12] team0 (unregistering): Port device team_slave_1 removed [ 200.491191][ T12] team0 (unregistering): Port device team_slave_0 removed [ 200.587229][ T8160] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 200.596512][ T8161] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 200.718471][ T8097] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.721747][ T8097] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.725147][ T8097] bridge_slave_0: entered allmulticast mode [ 200.729407][ T8097] bridge_slave_0: entered promiscuous mode [ 200.734590][ T8097] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.737911][ T8097] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.741107][ T8097] bridge_slave_1: entered allmulticast mode [ 200.745401][ T8097] bridge_slave_1: entered promiscuous mode [ 200.780164][ T8097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.787363][ T8097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.815256][ T5449] 8021q: adding VLAN 0 to HW filter on device eth12 [ 200.883517][ T8097] team0: Port device team_slave_0 added [ 200.890253][ T8097] team0: Port device team_slave_1 added [ 200.913644][ T8097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.915934][ T8097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.926683][ T8097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.934653][ T8097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.937422][ T8097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.947163][ T8097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.961822][ T12] IPVS: stop unused estimator thread 0... [ 200.988323][ T8097] hsr_slave_0: entered promiscuous mode [ 200.990950][ T8097] hsr_slave_1: entered promiscuous mode [ 200.993270][ T8097] debugfs: 'hsr0' already exists in 'hsr' [ 200.995391][ T8097] Cannot create hsr debugfs directory [ 201.097591][ T5741] Bluetooth: hci2: command 0x0406 tx timeout [ 201.100576][ T8185] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3952. macoff=96 [ 201.163156][ T8097] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 201.168465][ T8097] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 201.171309][ T8097] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 201.175643][ T8097] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 201.178486][ T8097] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 201.182964][ T8097] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 201.184530][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.578'. [ 201.185776][ T8097] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 201.193027][ T8097] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 201.196291][ T8194] FAULT_INJECTION: forcing a failure. [ 201.196291][ T8194] name failslab, interval 1, probability 0, space 0, times 0 [ 201.200795][ T5449] 8021q: adding VLAN 0 to HW filter on device eth13 [ 201.200971][ T8194] CPU: 3 UID: 0 PID: 8194 Comm: syz.0.578 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.200988][ T8194] Tainted: [L]=SOFTLOCKUP [ 201.200992][ T8194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.200999][ T8194] Call Trace: [ 201.201003][ T8194] [ 201.201007][ T8194] dump_stack_lvl+0x100/0x190 [ 201.201023][ T8194] should_fail_ex.cold+0x5/0xa [ 201.201039][ T8194] should_failslab+0xc2/0x120 [ 201.201052][ T8194] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 201.201069][ T8194] ? skb_clone+0x190/0x400 [ 201.201084][ T8194] skb_clone+0x190/0x400 [ 201.201096][ T8194] netlink_deliver_tap+0xaed/0xcc0 [ 201.201115][ T8194] netlink_unicast+0x6a5/0x850 [ 201.201132][ T8194] ? __pfx_netlink_unicast+0x10/0x10 [ 201.201147][ T8194] ? genl_rcv_msg+0x4be/0x800 [ 201.201168][ T8194] netlink_ack+0x655/0xb80 [ 201.201188][ T8194] netlink_rcv_skb+0x333/0x420 [ 201.201203][ T8194] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.201221][ T8194] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 201.201243][ T8194] ? netlink_deliver_tap+0x1ae/0xcc0 [ 201.201260][ T8194] genl_rcv+0x28/0x40 [ 201.201276][ T8194] netlink_unicast+0x585/0x850 [ 201.201293][ T8194] ? __pfx_netlink_unicast+0x10/0x10 [ 201.201313][ T8194] netlink_sendmsg+0x8b0/0xda0 [ 201.201331][ T8194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.201349][ T8194] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 201.201369][ T8194] ____sys_sendmsg+0x9e1/0xb70 [ 201.201384][ T8194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.201400][ T8194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.201422][ T8194] ___sys_sendmsg+0x190/0x1e0 [ 201.201440][ T8194] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.201463][ T8194] ? find_held_lock+0x2b/0x80 [ 201.201487][ T8194] __sys_sendmsg+0x170/0x220 [ 201.201500][ T8194] ? __pfx___sys_sendmsg+0x10/0x10 [ 201.201511][ T8194] ? __fget_files+0x21f/0x3d0 [ 201.201528][ T8194] ? ksys_write+0x1ac/0x250 [ 201.201542][ T8194] ? rcu_is_watching+0x12/0xc0 [ 201.201557][ T8194] __do_fast_syscall_32+0xe7/0x950 [ 201.201575][ T8194] ? lockdep_hardirqs_on+0x78/0x100 [ 201.201592][ T8194] do_fast_syscall_32+0x32/0x70 [ 201.201609][ T8194] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.201623][ T8194] RIP: 0023:0xf7f74fcc [ 201.201633][ T8194] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 201.201644][ T8194] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 201.201654][ T8194] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 201.201661][ T8194] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 201.201667][ T8194] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 201.201673][ T8194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.201679][ T8194] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 201.201695][ T8194] [ 201.356924][ T8097] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.359542][ T8097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.361948][ T8097] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.364167][ T8097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.430074][ T8097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.433470][ T8212] random: crng reseeded on system resumption [ 201.444610][ T8097] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.465129][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.472097][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.496106][ T8217] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 201.504547][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.507824][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.524977][ T8217] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 201.536218][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'. [ 201.543161][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.545530][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.551643][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'. [ 201.556001][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'. [ 201.568720][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'. [ 201.898531][ T8235] netlink: 'syz.4.584': attribute type 9 has an invalid length. [ 202.057614][ T8097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.245338][ T8097] veth0_vlan: entered promiscuous mode [ 202.280381][ T8097] veth1_vlan: entered promiscuous mode [ 202.303325][ T8097] veth0_macvtap: entered promiscuous mode [ 202.314065][ T8097] veth1_macvtap: entered promiscuous mode [ 202.324633][ T8097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.333668][ T8097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.341437][ T60] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.344479][ T60] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.348126][ T60] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.351086][ T60] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.407297][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.410293][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.432344][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.438955][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.458509][ T5098] Bluetooth: hci1: command tx timeout [ 202.679238][ T8248] netlink: 'syz.6.565': attribute type 2 has an invalid length. [ 202.744633][ T57] hid-generic 0005:00B6:0009.0005: hidraw0: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 203.191172][ T8259] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 203.224397][ T8259] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 203.426713][ T8267] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 203.535645][ T8274] input: syz1 as /devices/virtual/input/input29 [ 203.704101][ T8274] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 203.798228][ T40] kauditd_printk_skb: 534 callbacks suppressed [ 203.798244][ T40] audit: type=1800 audit(1778600044.620:908): pid=8279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.593" name="file0" dev="9p" ino=74733339 res=0 errno=0 [ 204.209294][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.596'. [ 204.537494][ T5098] Bluetooth: hci1: command tx timeout [ 204.552351][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.6.597'. [ 204.605255][ T8297] trusted_key: encrypted_key: insufficient parameters specified [ 204.694256][ T8301] block nbd4: Unsupported socket: should be TCP or UNIX. [ 204.735001][ T40] audit: type=1400 audit(1778600045.550:909): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3ABF pid=8298 comm="syz.3.599" [ 204.739369][ T8302] ªªªªª6: renamed from wg2 (while UP) [ 204.841986][ T8304] fuse: Bad value for 'fd' [ 204.866993][ T40] audit: type=1800 audit(1778600045.680:910): pid=8304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.601" name="file0" dev="9p" ino=74733339 res=0 errno=0 [ 205.132517][ T8309] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 205.178537][ T66] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 205.327160][ T66] usb 9-1: Using ep0 maxpacket: 8 [ 205.330380][ T66] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 205.333416][ T66] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 205.336692][ T66] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 205.340196][ T66] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 205.343351][ T66] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.347788][ T66] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 205.351550][ T66] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.550898][ T8324] FAULT_INJECTION: forcing a failure. [ 205.550898][ T8324] name failslab, interval 1, probability 0, space 0, times 0 [ 205.554989][ T8324] CPU: 2 UID: 0 PID: 8324 Comm: syz.3.607 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.555007][ T8324] Tainted: [L]=SOFTLOCKUP [ 205.555010][ T8324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.555017][ T8324] Call Trace: [ 205.555021][ T8324] [ 205.555026][ T8324] dump_stack_lvl+0x100/0x190 [ 205.555062][ T8324] should_fail_ex.cold+0x5/0xa [ 205.555078][ T8324] should_failslab+0xc2/0x120 [ 205.555091][ T8324] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 205.555108][ T8324] ? skb_clone+0x190/0x400 [ 205.555130][ T8324] skb_clone+0x190/0x400 [ 205.555142][ T8324] netlink_deliver_tap+0xaed/0xcc0 [ 205.555160][ T8324] netlink_unicast+0x6a5/0x850 [ 205.555179][ T8324] ? __pfx_netlink_unicast+0x10/0x10 [ 205.555199][ T8324] netlink_ack+0x655/0xb80 [ 205.555219][ T8324] netlink_rcv_skb+0x333/0x420 [ 205.555235][ T8324] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 205.555248][ T8324] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 205.555271][ T8324] ? ns_capable+0xd2/0xf0 [ 205.555286][ T8324] nfnetlink_rcv+0x1b3/0x440 [ 205.555299][ T8324] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 205.555310][ T8324] ? netlink_deliver_tap+0x1ae/0xcc0 [ 205.555328][ T8324] netlink_unicast+0x585/0x850 [ 205.555373][ T8324] ? __pfx_netlink_unicast+0x10/0x10 [ 205.555393][ T8324] netlink_sendmsg+0x8b0/0xda0 [ 205.555411][ T8324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.555428][ T8324] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 205.555455][ T8324] ____sys_sendmsg+0x9e1/0xb70 [ 205.555470][ T8324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.555486][ T8324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.555505][ T8324] ? _kstrtoull+0x13c/0x1f0 [ 205.555519][ T8324] ? __pfx__kstrtoull+0x10/0x10 [ 205.555534][ T8324] ___sys_sendmsg+0x190/0x1e0 [ 205.555551][ T8324] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.555568][ T8324] ? __lock_acquire+0x4a5/0x2630 [ 205.555596][ T8324] __sys_sendmmsg+0x2ff/0x430 [ 205.555610][ T8324] ? __pfx___sys_sendmmsg+0x10/0x10 [ 205.555628][ T8324] ? __fget_files+0x215/0x3d0 [ 205.555648][ T8324] ? fput+0x79/0x100 [ 205.555663][ T8324] ? ksys_write+0x1ac/0x250 [ 205.555678][ T8324] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 205.555697][ T8324] ? lockdep_hardirqs_on+0x78/0x100 [ 205.555720][ T8324] __do_fast_syscall_32+0xe7/0x950 [ 205.555736][ T8324] ? lockdep_hardirqs_on+0x78/0x100 [ 205.555753][ T8324] do_fast_syscall_32+0x32/0x70 [ 205.555771][ T8324] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.555785][ T8324] RIP: 0023:0xf703efcc [ 205.555797][ T8324] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 205.555808][ T8324] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 205.555821][ T8324] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 205.555828][ T8324] RDX: 000000000000009f RSI: 0000000000000000 RDI: 0000000000000000 [ 205.555837][ T8324] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 205.555843][ T8324] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 205.555849][ T8324] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 205.555864][ T8324] [ 205.758143][ T8330] FAULT_INJECTION: forcing a failure. [ 205.758143][ T8330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.764074][ T8330] CPU: 1 UID: 0 PID: 8330 Comm: syz.3.609 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.764102][ T8330] Tainted: [L]=SOFTLOCKUP [ 205.764110][ T8330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.764120][ T8330] Call Trace: [ 205.764127][ T8330] [ 205.764136][ T8330] dump_stack_lvl+0x100/0x190 [ 205.764161][ T8330] should_fail_ex.cold+0x5/0xa [ 205.764186][ T8330] _copy_from_user+0x2e/0xd0 [ 205.764208][ T8330] usbdev_ioctl+0x2a89/0x3aa0 [ 205.764238][ T8330] ? __pfx_usbdev_ioctl+0x10/0x10 [ 205.764263][ T8330] ? get_pid_task+0x106/0x250 [ 205.764298][ T8330] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 205.764328][ T8330] ? do_vfs_ioctl+0x226/0x13e0 [ 205.764349][ T8330] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 205.764376][ T8330] ? find_held_lock+0x2b/0x80 [ 205.764400][ T8330] ? __fget_files+0x215/0x3d0 [ 205.764421][ T8330] ? hook_file_ioctl_common+0x149/0x410 [ 205.764449][ T8330] ? __fget_files+0x21f/0x3d0 [ 205.764470][ T8330] ? __pfx_usbdev_ioctl+0x10/0x10 [ 205.764495][ T8330] compat_ptr_ioctl+0x6e/0xa0 [ 205.764514][ T8330] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 205.764531][ T8330] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 205.764555][ T8330] __do_fast_syscall_32+0xe7/0x950 [ 205.764581][ T8330] ? lockdep_hardirqs_on+0x78/0x100 [ 205.764612][ T8330] do_fast_syscall_32+0x32/0x70 [ 205.764642][ T8330] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.764665][ T8330] RIP: 0023:0xf703efcc [ 205.764680][ T8330] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 205.764697][ T8330] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 205.764717][ T8330] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008038550a [ 205.764727][ T8330] RDX: 0000000080000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.764737][ T8330] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 205.764747][ T8330] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 205.764758][ T8330] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 205.764781][ T8330] [ 205.935250][ T8332] lo speed is unknown, defaulting to 1000 [ 206.344562][ T8338] usbtmc 9-1:16.0: simple control status returned 9f [ 206.401178][ T8341] fuse: Bad value for 'fd' [ 206.409573][ T40] audit: type=1800 audit(1778600047.230:911): pid=8341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.612" name="file0" dev="9p" ino=74733339 res=0 errno=0 [ 206.557262][ T39] usb 9-1: USB disconnect, device number 14 [ 206.626740][ T5098] Bluetooth: hci1: command tx timeout [ 207.114024][ T8364] loop9: detected capacity change from 0 to 524287936 [ 207.117716][ T8366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.621'. [ 207.154225][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.621'. [ 207.233509][ T8371] fuse: Bad value for 'fd' [ 207.243896][ T40] audit: type=1800 audit(1778600048.060:912): pid=8371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.622" name="file0" dev="9p" ino=74733339 res=0 errno=0 [ 207.346695][ T39] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 207.530140][ T39] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 207.535738][ T39] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.540145][ T39] usb 5-1: config 0 has no interfaces? [ 207.542418][ T39] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 207.546172][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.552662][ T39] usb 5-1: config 0 descriptor?? [ 207.651929][ T8388] tipc: Started in network mode [ 207.653489][ T8388] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 207.655981][ T8388] tipc: Enabled bearer , priority 10 [ 207.692727][ T8390] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 207.884516][ T39] usb 5-1: USB disconnect, device number 25 [ 208.656745][ T5829] tipc: Node number set to 10005162 [ 208.956788][ T57] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 209.126809][ T57] usb 11-1: Using ep0 maxpacket: 8 [ 209.132189][ T8430] veth1_to_hsr: mtu less than device minimum [ 209.135199][ T57] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 209.140849][ T57] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 209.145107][ T57] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 209.150879][ T57] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 209.155058][ T57] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.160592][ T57] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 209.164452][ T57] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.368095][ T8435] netlink: 'syz.0.636': attribute type 10 has an invalid length. [ 209.423819][ T8435] team0: Failed to send options change via netlink (err -105) [ 209.427647][ T8435] team0: Port device dummy0 added [ 209.513176][ T8435] netlink: 'syz.0.636': attribute type 10 has an invalid length. [ 209.528546][ T8435] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 209.653037][ T57] usb 11-1: usb_control_msg returned -32 [ 209.655092][ T8435] team0: Failed to send options change via netlink (err -105) [ 209.669678][ T8435] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 209.688054][ T8435] team0: Port device dummy0 removed [ 209.819391][ T8420] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.845807][ T8420] bridge_slave_0 (unregistering): left allmulticast mode [ 209.851213][ T8420] bridge_slave_0 (unregistering): left promiscuous mode [ 209.854509][ T8420] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.876854][ T8436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.886310][ T8436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.903390][ T8436] loop2: detected capacity change from 0 to 7 [ 209.911484][ T8436] Dev loop2: unable to read RDB block 7 [ 209.926342][ T8436] loop2: AHDI p1 p2 p3 [ 209.930824][ T8436] loop2: partition table partially beyond EOD, truncated [ 209.936788][ T8436] loop2: p1 start 1601398130 is beyond EOD, truncated [ 209.941266][ T8436] loop2: p2 start 1702059890 is beyond EOD, truncated [ 210.101753][ T8440] netlink: 16 bytes leftover after parsing attributes in process `syz.4.637'. [ 210.191896][ T8445] netlink: 'syz.3.639': attribute type 2 has an invalid length. [ 210.198597][ T8445] netlink: 'syz.3.639': attribute type 1 has an invalid length. [ 210.285581][ T57] usbtmc 11-1:16.0: can't read capabilities [ 210.337896][ T57] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 211.770167][ T57] usb 11-1: USB disconnect, device number 2 [ 212.025817][ T8491] syzkaller0: entered promiscuous mode [ 212.027776][ T8491] syzkaller0: entered allmulticast mode [ 212.032994][ T8491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.652'. [ 212.036021][ T8491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.652'. [ 212.183009][ T8494] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 212.276698][ T39] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 212.436825][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 212.443960][ T39] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 212.449275][ T39] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 212.453566][ T39] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 212.459146][ T39] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 212.464978][ T39] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.471763][ T39] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 212.475580][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.696798][ T39] usb 5-1: usb_control_msg returned -32 [ 212.699299][ T39] usbtmc 5-1:16.0: can't read capabilities [ 212.729825][ T8502] input: syz1 as /devices/virtual/input/input31 [ 212.932436][ T8498] block device autoloading is deprecated and will be removed. [ 213.066050][ T8512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.070704][ T8512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.077329][ T8512] loop2: detected capacity change from 0 to 7 [ 213.127503][ T8512] Dev loop2: unable to read RDB block 7 [ 213.129627][ T8512] loop2: AHDI p1 p2 p3 [ 213.131064][ T8512] loop2: partition table partially beyond EOD, truncated [ 213.133443][ T8512] loop2: p1 start 1601398130 is beyond EOD, truncated [ 213.136320][ T8512] loop2: p2 start 1702059890 is beyond EOD, truncated [ 213.221987][ T8517] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 213.332964][ T8524] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 214.327828][ T8548] bridge0: port 1(vlan2) entered blocking state [ 214.329989][ T8548] bridge0: port 1(vlan2) entered disabled state [ 214.332166][ T8548] vlan2: entered allmulticast mode [ 214.333833][ T8548] geneve0: entered allmulticast mode [ 214.336451][ T8548] vlan2: entered promiscuous mode [ 214.338201][ T8548] geneve0: entered promiscuous mode [ 214.753184][ T8557] dlm: Unknown command passed to DLM device : 3 [ 214.753184][ T8557] [ 214.817393][ T8558] random: crng reseeded on system resumption [ 214.943645][ T8558] batman_adv: batadv0: Adding interface: macsec1 [ 214.948933][ T8558] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.960018][ T8558] batman_adv: batadv0: Interface activated: macsec1 [ 215.130372][ T29] usb 5-1: USB disconnect, device number 26 [ 215.220964][ T8564] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.456682][ T6455] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 215.643697][ T6455] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 215.648418][ T6455] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.656879][ T6455] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 215.659819][ T6455] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.666998][ T6455] usb 8-1: config 0 descriptor?? [ 215.867858][ T8568] netlink: 32 bytes leftover after parsing attributes in process `syz.0.666'. [ 216.059697][ T8575] syzkaller0: entered promiscuous mode [ 216.062111][ T8575] syzkaller0: entered allmulticast mode [ 216.216591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 216.236561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #84!!! [ 217.090936][ T8584] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 217.095828][ T8585] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 217.100489][ T8584] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 218.861803][ T8594] lo speed is unknown, defaulting to 1000 [ 219.436954][ T6455] usbhid 8-1:0.0: can't add hid device: -71 [ 219.440121][ T6455] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 219.457658][ T8600] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 219.488982][ T6455] usb 8-1: USB disconnect, device number 11 [ 219.833232][ T8620] veth1_to_hsr: mtu less than device minimum [ 219.844568][ T8618] tc action pedit unable to extract header offset for header type (0x5) [ 219.942849][ T5098] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 220.052603][ T8627] netlink: 'syz.6.680': attribute type 10 has an invalid length. [ 220.091994][ T8626] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 220.111417][ T8629] netlink: 'syz.6.680': attribute type 10 has an invalid length. [ 220.163417][ T8627] team0: Failed to send options change via netlink (err -105) [ 220.166149][ T8627] team0: Port device dummy0 added [ 220.178424][ T8629] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 220.193941][ T8629] team0: Failed to send options change via netlink (err -105) [ 220.197791][ T8629] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 220.202264][ T8629] team0: Port device dummy0 removed [ 221.200712][ T8644] binder: 8639:8644 ioctl c0285840 80000000 returned -22 [ 221.936312][ T5098] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 222.087212][ T8651] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 223.956242][ T8663] input: syz1 as /devices/virtual/input/input33 [ 223.979321][ T5098] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 224.014180][ T5098] Bluetooth: hci2: Injecting HCI hardware error event [ 224.026836][ T5098] Bluetooth: hci2: hardware error 0x00 [ 224.045476][ T8664] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 225.887546][ T8684] netlink: 32 bytes leftover after parsing attributes in process `syz.6.698'. [ 226.136696][ T5098] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 226.898095][ T57] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 227.046618][ T57] usb 9-1: Using ep0 maxpacket: 8 [ 227.051329][ T57] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 227.055448][ T57] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 227.061192][ T57] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 227.065331][ T57] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 227.071544][ T57] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.078745][ T57] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 227.082771][ T57] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.156727][ T8709] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 227.300739][ T57] usb 9-1: usb_control_msg returned -32 [ 227.303528][ T57] usbtmc 9-1:16.0: can't read capabilities [ 227.466864][ T34] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 227.627199][ T34] usb 11-1: Using ep0 maxpacket: 8 [ 227.631380][ T34] usb 11-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 227.635874][ T34] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 227.641163][ T34] usb 11-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 227.647886][ T34] usb 11-1: config 168 interface 0 has no altsetting 0 [ 227.653749][ T34] usb 11-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 227.665105][ T34] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 227.674290][ T8715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.678693][ T34] usb 11-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 227.685872][ T8715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.689744][ T34] usb 11-1: config 168 interface 0 has no altsetting 0 [ 227.696906][ T34] usb 11-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 227.702679][ T8715] loop2: detected capacity change from 0 to 7 [ 227.705328][ T34] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 227.710829][ T8715] Dev loop2: unable to read RDB block 7 [ 227.713342][ T34] usb 11-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 227.719093][ T8715] loop2: AHDI p1 p2 p3 [ 227.722814][ T8715] loop2: partition table partially beyond EOD, truncated [ 227.725923][ T34] usb 11-1: config 168 interface 0 has no altsetting 0 [ 227.728913][ T8715] loop2: p1 start 1601398130 is beyond EOD, truncated [ 227.732006][ T8715] loop2: p2 start 1702059890 is beyond EOD, truncated [ 227.744107][ T34] usb 11-1: string descriptor 0 read error: -22 [ 227.747416][ T34] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 227.751270][ T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.768490][ T34] adutux 11-1:168.0: interrupt endpoints not found [ 227.979202][ T8711] usbtmc 9-1:16.0: send_request_dev_dep_msg_in returned -90 [ 228.771532][ T8724] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 230.059094][ T34] usb 9-1: USB disconnect, device number 15 [ 230.104793][ T8741] netlink: 32 bytes leftover after parsing attributes in process `syz.3.712'. [ 230.265714][ T8747] input: syz1 as /devices/virtual/input/input35 [ 230.319847][ T8747] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 230.966780][ T34] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 231.006572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #204!!! [ 231.116626][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 231.120789][ T34] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 231.124302][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 231.128394][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 231.132547][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 231.136513][ T34] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.142061][ T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 231.145604][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.258624][ T8755] tipc: Started in network mode [ 231.260410][ T8755] tipc: Node identity , cluster identity 4711 [ 231.262448][ T8755] tipc: Failed to set node id, please configure manually [ 231.264788][ T8755] tipc: Enabling of bearer rejected, failed to enable media [ 231.273199][ T8755] syzkaller0: entered promiscuous mode [ 231.275018][ T8755] syzkaller0: entered allmulticast mode [ 231.365638][ T34] usb 5-1: usb_control_msg returned -32 [ 231.367471][ T34] usbtmc 5-1:16.0: can't read capabilities [ 231.446672][ T39] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 231.598881][ T39] usb 9-1: Using ep0 maxpacket: 8 [ 231.602774][ T39] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 231.605943][ T39] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 231.610790][ T39] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 231.615497][ T39] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 231.620286][ T39] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 231.624795][ T39] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 231.629512][ T39] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 231.634979][ T39] usb 9-1: config 168 interface 0 has no altsetting 0 [ 231.638949][ T39] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 231.642120][ T39] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 231.646856][ T39] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 231.652432][ T39] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 231.658605][ T39] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 231.663254][ T39] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 231.668067][ T39] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 231.676151][ T39] usb 9-1: config 168 interface 0 has no altsetting 0 [ 231.680314][ T39] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 231.683670][ T39] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 231.688120][ T39] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 231.691835][ T39] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 231.695717][ T39] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 231.699357][ T39] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 231.703110][ T39] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 231.707270][ T39] usb 9-1: config 168 interface 0 has no altsetting 0 [ 231.711698][ T39] usb 9-1: string descriptor 0 read error: -22 [ 231.713724][ T39] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 231.717299][ T39] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.728843][ T39] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 231.738910][ T8758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.742608][ T8758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.748947][ T8758] loop2: detected capacity change from 0 to 7 [ 231.752747][ T8758] Dev loop2: unable to read RDB block 7 [ 231.754647][ T8758] loop2: AHDI p1 p2 p3 [ 231.756097][ T8758] loop2: partition table partially beyond EOD, truncated [ 231.758652][ T8758] loop2: p1 start 1601398130 is beyond EOD, truncated [ 231.761232][ T8758] loop2: p2 start 1702059890 is beyond EOD, truncated [ 231.864323][ T1039] usb 11-1: USB disconnect, device number 3 [ 231.942071][ T8753] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 231.962498][ T57] usb 9-1: USB disconnect, device number 16 [ 233.686877][ T39] usb 5-1: USB disconnect, device number 27 [ 233.887229][ T8771] FAULT_INJECTION: forcing a failure. [ 233.887229][ T8771] name failslab, interval 1, probability 0, space 0, times 0 [ 233.891503][ T8771] CPU: 3 UID: 0 PID: 8771 Comm: syz.0.723 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.891522][ T8771] Tainted: [L]=SOFTLOCKUP [ 233.891525][ T8771] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.891532][ T8771] Call Trace: [ 233.891536][ T8771] [ 233.891542][ T8771] dump_stack_lvl+0x100/0x190 [ 233.891557][ T8771] should_fail_ex.cold+0x5/0xa [ 233.891572][ T8771] should_failslab+0xc2/0x120 [ 233.891586][ T8771] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 233.891603][ T8771] ? __kernfs_new_node+0xd2/0x9f0 [ 233.891619][ T8771] __kernfs_new_node+0xd2/0x9f0 [ 233.891633][ T8771] ? __pfx___kernfs_new_node+0x10/0x10 [ 233.891648][ T8771] ? find_held_lock+0x2b/0x80 [ 233.891662][ T8771] ? kernfs_root+0xee/0x2a0 [ 233.891673][ T8771] ? kernfs_root+0xee/0x2a0 [ 233.891688][ T8771] kernfs_new_node+0x11b/0x1a0 [ 233.891705][ T8771] __kernfs_create_file+0x53/0x350 [ 233.891724][ T8771] sysfs_add_file_mode_ns+0x207/0x3c0 [ 233.891738][ T8771] internal_create_group+0x593/0xf40 [ 233.891755][ T8771] ? __pfx_internal_create_group+0x10/0x10 [ 233.891770][ T8771] ? kernfs_create_link+0x1bd/0x240 [ 233.891789][ T8771] internal_create_groups+0x9d/0x150 [ 233.891803][ T8771] device_add+0x77a/0x1950 [ 233.891820][ T8771] ? __pfx_device_add+0x10/0x10 [ 233.891840][ T8771] input_register_device+0x7d2/0xe10 [ 233.891853][ T8771] uinput_ioctl_handler.isra.0+0x8d8/0x1d20 [ 233.891869][ T8771] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 233.891880][ T8771] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 233.891898][ T8771] ? find_held_lock+0x2b/0x80 [ 233.891912][ T8771] ? __fget_files+0x215/0x3d0 [ 233.891930][ T8771] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 233.891948][ T8771] ? __pfx_uinput_compat_ioctl+0x10/0x10 [ 233.891962][ T8771] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 233.891975][ T8771] __do_fast_syscall_32+0xe7/0x950 [ 233.891993][ T8771] ? lockdep_hardirqs_on+0x78/0x100 [ 233.892010][ T8771] do_fast_syscall_32+0x32/0x70 [ 233.892027][ T8771] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 233.892042][ T8771] RIP: 0023:0xf7f74fcc [ 233.892051][ T8771] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 233.892061][ T8771] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 233.892072][ T8771] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005501 [ 233.892079][ T8771] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 233.892085][ T8771] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 233.892091][ T8771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.892097][ T8771] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 233.892112][ T8771] [ 235.653073][ T5098] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 236.633066][ T8798] input: syz1 as /devices/virtual/input/input37 [ 236.734573][ T8803] input: syz1 as /devices/virtual/input/input38 [ 238.778627][ T8810] kvm: emulating exchange as write [ 239.148752][ T8824] netlink: 'syz.4.737': attribute type 1 has an invalid length. [ 239.292313][ T8827] netlink: 20 bytes leftover after parsing attributes in process `syz.4.737'. [ 239.657679][ T5098] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 239.680794][ T5098] Bluetooth: hci3: Injecting HCI hardware error event [ 239.694284][ T5741] Bluetooth: hci3: hardware error 0x00 [ 241.724667][ T8824] bond1 (unregistering): Released all slaves [ 241.816694][ T5741] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 242.045029][ T8836] raw_sendmsg: syz.4.739 forgot to set AF_INET. Fix it! [ 242.052775][ T8836] netlink: 52 bytes leftover after parsing attributes in process `syz.4.739'. [ 242.066715][ T8836] Invalid option length (1046359) for dns_resolver key [ 242.218752][ T8841] syzkaller0: entered promiscuous mode [ 242.221392][ T8841] syzkaller0: entered allmulticast mode [ 243.278150][ T39] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 243.436750][ T39] usb 8-1: Using ep0 maxpacket: 32 [ 243.440624][ T39] usb 8-1: config 0 has an invalid interface number: 119 but max is 0 [ 243.443744][ T39] usb 8-1: config 0 has no interface number 0 [ 243.446273][ T39] usb 8-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 243.450124][ T39] usb 8-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 243.454231][ T39] usb 8-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 243.458222][ T39] usb 8-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 243.463951][ T39] usb 8-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 243.467247][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.469878][ T39] usb 8-1: Product: syz [ 243.471272][ T39] usb 8-1: Manufacturer: syz [ 243.472930][ T39] usb 8-1: SerialNumber: syz [ 243.479063][ T39] usb 8-1: config 0 descriptor?? [ 243.481516][ T8848] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 243.487124][ T39] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.119/input/input39 [ 243.492730][ T5131] usb 8-1: BOGUS urb xfer, pipe 1 != type 3 [ 243.608656][ C2] bcm5974 8-1:0.119: trackpad urb failed: -1 [ 244.026237][ T5847] usb 8-1: USB disconnect, device number 12 [ 244.627949][ T34] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 244.827722][ T34] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9 [ 244.843590][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 244.876131][ T34] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 244.882202][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.893315][ T34] usb 5-1: Product: syz [ 244.896811][ T34] usb 5-1: Manufacturer: syz [ 244.903048][ T34] usb 5-1: SerialNumber: syz [ 244.948546][ T34] usb 5-1: config 0 descriptor?? [ 245.345393][ T40] audit: type=1326 audit(1778600086.160:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8870 comm="syz.6.750" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efcc code=0x7ffc0000 [ 245.360402][ T40] audit: type=1326 audit(1778600086.170:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8870 comm="syz.6.750" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efcc code=0x7ffc0000 [ 245.370532][ T40] audit: type=1326 audit(1778600086.170:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8870 comm="syz.6.750" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efcc code=0x7ffc0000 [ 245.383293][ T40] audit: type=1326 audit(1778600086.170:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8870 comm="syz.6.750" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efcc code=0x7ffc0000 [ 245.395411][ T40] audit: type=1326 audit(1778600086.180:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8870 comm="syz.6.750" exe="/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0xf700efcc code=0x7ffc0000 [ 245.406300][ T40] audit: type=1326 audit(1778600086.180:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8870 comm="syz.6.750" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efcc code=0x7ffc0000 [ 245.415576][ T40] audit: type=1326 audit(1778600086.180:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8870 comm="syz.6.750" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efcc code=0x7ffc0000 [ 245.425019][ T40] audit: type=1326 audit(1778600086.180:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8870 comm="syz.6.750" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efcc code=0x7ffc0000 [ 245.447828][ T40] audit: type=1326 audit(1778600086.180:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8870 comm="syz.6.750" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efcc code=0x7ffc0000 [ 245.457133][ T40] audit: type=1326 audit(1778600086.180:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8870 comm="syz.6.750" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efcc code=0x7ffc0000 [ 245.584784][ T8860] loop2: detected capacity change from 0 to 7 [ 245.593113][ T8880] netlink: 16 bytes leftover after parsing attributes in process `syz.3.751'. [ 245.603995][ T8860] Dev loop2: unable to read RDB block 7 [ 245.607210][ T8860] loop2: unable to read partition table [ 245.610239][ T8860] loop2: partition table beyond EOD, truncated [ 245.616325][ T8860] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 245.637214][ T34] usb 5-1: USB disconnect, device number 28 [ 245.735767][ T8872] 9pnet_virtio: no channels available for device syz [ 249.060203][ T8905] uprobe: syz.3.755:8905 failed to unregister, leaking uprobe [ 250.007110][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.6.763'. [ 250.010335][ T8918] lo: entered promiscuous mode [ 250.011855][ T8918] lo: entered allmulticast mode [ 250.060293][ T8918] tunl0: entered promiscuous mode [ 250.062251][ T8918] tunl0: entered allmulticast mode [ 250.069133][ T8918] gre0: entered promiscuous mode [ 250.072178][ T8918] gre0: entered allmulticast mode [ 250.074835][ T8918] gretap0: entered promiscuous mode [ 250.076707][ T8918] gretap0: entered allmulticast mode [ 250.087230][ T8918] erspan0: entered promiscuous mode [ 250.089252][ T8918] erspan0: entered allmulticast mode [ 250.093525][ T8918] ip_vti0: entered promiscuous mode [ 250.095745][ T8918] ip_vti0: entered allmulticast mode [ 250.101922][ T8918] ip6_vti0: entered promiscuous mode [ 250.110382][ T8918] ip6_vti0: entered allmulticast mode [ 250.116070][ T8918] sit0: entered promiscuous mode [ 250.118374][ T8918] sit0: entered allmulticast mode [ 250.128344][ T8918] ip6tnl0: entered promiscuous mode [ 250.130705][ T8918] ip6tnl0: entered allmulticast mode [ 250.152394][ T8918] ip6gre0: entered promiscuous mode [ 250.154874][ T8918] ip6gre0: entered allmulticast mode [ 250.157656][ T8918] syz_tun: entered promiscuous mode [ 250.166793][ T8918] syz_tun: entered allmulticast mode [ 250.169080][ T8918] ip6gretap0: entered promiscuous mode [ 250.186490][ T8918] ip6gretap0: entered allmulticast mode [ 250.210193][ T8918] bridge0: entered promiscuous mode [ 250.239475][ T8918] bridge0: entered allmulticast mode [ 250.261851][ T8918] vcan0: entered promiscuous mode [ 250.263637][ T8918] vcan0: entered allmulticast mode [ 250.311462][ T8918] bond0: entered promiscuous mode [ 250.313192][ T8918] bond_slave_0: entered promiscuous mode [ 250.321324][ T8918] bond_slave_1: entered promiscuous mode [ 250.323293][ T8918] bond0: entered allmulticast mode [ 250.334718][ T8918] bond_slave_0: entered allmulticast mode [ 250.337044][ T8918] bond_slave_1: entered allmulticast mode [ 250.345516][ T8918] team0: entered promiscuous mode [ 250.356847][ T8918] team_slave_0: entered promiscuous mode [ 250.407095][ T8918] team_slave_1: entered promiscuous mode [ 250.409609][ T8918] team0: entered allmulticast mode [ 250.439508][ T8918] team_slave_0: entered allmulticast mode [ 250.442204][ T8918] team_slave_1: entered allmulticast mode [ 250.462911][ T8918] dummy0: entered promiscuous mode [ 250.465178][ T8918] dummy0: entered allmulticast mode [ 250.526636][ T8918] nlmon0: entered promiscuous mode [ 250.528867][ T8918] nlmon0: entered allmulticast mode [ 250.531841][ T8918] batadv0: entered promiscuous mode [ 250.534081][ T8918] batadv0: entered allmulticast mode [ 250.543925][ T8918] vxcan0: entered promiscuous mode [ 250.560870][ T8918] vxcan0: entered allmulticast mode [ 250.563806][ T8918] vxcan1: entered promiscuous mode [ 250.566009][ T8918] vxcan1: entered allmulticast mode [ 250.598864][ T8918] veth0: entered promiscuous mode [ 250.600537][ T8918] veth0: entered allmulticast mode [ 250.603088][ T8918] veth1: entered promiscuous mode [ 250.604757][ T8918] veth1: entered allmulticast mode [ 250.607295][ T8918] wg0: entered promiscuous mode [ 250.609482][ T8918] wg0: entered allmulticast mode [ 250.611638][ T8918] wg1: entered promiscuous mode [ 250.613242][ T8918] wg1: entered allmulticast mode [ 250.615294][ T8918] wg2: entered promiscuous mode [ 250.617188][ T8918] wg2: entered allmulticast mode [ 250.619455][ T8918] veth1_to_bridge: entered promiscuous mode [ 250.621392][ T8918] veth1_to_bridge: entered allmulticast mode [ 250.624429][ T8918] veth0_to_bond: entered promiscuous mode [ 250.626241][ T8918] veth0_to_bond: entered allmulticast mode [ 250.630849][ T8918] veth1_to_bond: entered promiscuous mode [ 250.633094][ T8918] veth1_to_bond: entered allmulticast mode [ 250.635918][ T8918] veth0_to_team: entered promiscuous mode [ 250.638707][ T8918] veth0_to_team: entered allmulticast mode [ 250.642118][ T8918] veth1_to_team: entered promiscuous mode [ 250.644445][ T8918] veth1_to_team: entered allmulticast mode [ 250.648436][ T8918] veth0_to_batadv: entered promiscuous mode [ 250.650827][ T8918] veth0_to_batadv: entered allmulticast mode [ 250.653314][ T8918] batadv_slave_0: entered promiscuous mode [ 250.655247][ T8918] batadv_slave_0: entered allmulticast mode [ 250.658457][ T8918] veth1_to_batadv: entered promiscuous mode [ 250.660565][ T8918] veth1_to_batadv: entered allmulticast mode [ 250.664312][ T8918] batadv_slave_1: entered promiscuous mode [ 250.666431][ T8918] batadv_slave_1: entered allmulticast mode [ 250.669366][ T8918] xfrm0: entered promiscuous mode [ 250.671041][ T8918] xfrm0: entered allmulticast mode [ 250.672893][ T8918] veth0_to_hsr: entered promiscuous mode [ 250.674716][ T8918] veth0_to_hsr: entered allmulticast mode [ 250.677651][ T8918] hsr_slave_0: entered allmulticast mode [ 250.679840][ T8918] veth1_to_hsr: entered promiscuous mode [ 250.681562][ T8918] veth1_to_hsr: entered allmulticast mode [ 250.683749][ T8918] hsr_slave_1: entered allmulticast mode [ 250.685872][ T8918] hsr0: entered promiscuous mode [ 250.687903][ T8918] hsr0: entered allmulticast mode [ 250.690157][ T8918] veth1_virt_wifi: entered promiscuous mode [ 250.692002][ T8918] veth1_virt_wifi: entered allmulticast mode [ 250.694830][ T8918] veth0_virt_wifi: entered promiscuous mode [ 250.698147][ T8918] veth0_virt_wifi: entered allmulticast mode [ 250.701281][ T8918] virt_wifi0: entered promiscuous mode [ 250.703056][ T8918] virt_wifi0: entered allmulticast mode [ 250.705594][ T8918] veth1_vlan: entered allmulticast mode [ 250.709678][ T8918] veth0_vlan: entered allmulticast mode [ 250.713060][ T8918] vlan0: entered promiscuous mode [ 250.715359][ T8918] vlan0: entered allmulticast mode [ 250.718790][ T8918] vlan1: entered promiscuous mode [ 250.720684][ T8918] vlan1: entered allmulticast mode [ 250.722940][ T8918] macvlan0: entered promiscuous mode [ 250.724701][ T8918] macvlan0: entered allmulticast mode [ 250.727475][ T8918] macvlan1: entered promiscuous mode [ 250.729353][ T8918] macvlan1: entered allmulticast mode [ 250.731669][ T8918] ipvlan0: entered promiscuous mode [ 250.733326][ T8918] ipvlan0: entered allmulticast mode [ 250.736246][ T8918] ipvlan1: entered promiscuous mode [ 250.738491][ T8918] ipvlan1: entered allmulticast mode [ 250.741768][ T8918] veth1_macvtap: entered allmulticast mode [ 250.744243][ T8918] veth0_macvtap: entered allmulticast mode [ 250.746961][ T8918] macvtap0: entered promiscuous mode [ 250.748730][ T8918] macvtap0: entered allmulticast mode [ 250.751120][ T8918] macsec0: entered promiscuous mode [ 250.752843][ T8918] macsec0: entered allmulticast mode [ 250.754964][ T8918] geneve0: entered promiscuous mode [ 250.757453][ T8918] geneve0: entered allmulticast mode [ 250.759624][ T8918] geneve1: entered promiscuous mode [ 250.761434][ T8918] geneve1: entered allmulticast mode [ 250.764513][ T8918] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 250.768897][ T8918] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 250.774863][ T8918] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 250.777616][ T8918] netdevsim netdevsim6 netdevsim1: entered allmulticast mode [ 250.780575][ T8918] netdevsim netdevsim6 netdevsim2: entered promiscuous mode [ 250.783056][ T8918] netdevsim netdevsim6 netdevsim2: entered allmulticast mode [ 250.785976][ T8918] netdevsim netdevsim6 netdevsim3: entered promiscuous mode [ 250.788400][ T8918] netdevsim netdevsim6 netdevsim3: entered allmulticast mode [ 250.792474][ T8918] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 250.794927][ T8918] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 250.799320][ T8918] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 250.801634][ T8918] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 250.804474][ T8918] macsec1: entered promiscuous mode [ 250.806391][ T8918] macsec1: entered allmulticast mode [ 250.810733][ T8918] ppp0: entered promiscuous mode [ 250.812426][ T8918] ppp0: entered allmulticast mode [ 252.891773][ T8948] input: syz1 as /devices/virtual/input/input41 [ 253.158106][ T8948] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 254.128457][ T8956] netlink: 32 bytes leftover after parsing attributes in process `syz.6.772'. [ 254.526576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 254.576600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 254.857773][ T8968] overlay: ./file0 is not a directory [ 255.780238][ T8973] netlink: 32 bytes leftover after parsing attributes in process `syz.6.784'. [ 256.321298][ T8988] overlay: ./file0 is not a directory [ 256.922154][ T8996] netlink: 'syz.6.781': attribute type 2 has an invalid length. [ 256.924624][ T8996] netlink: 'syz.6.781': attribute type 1 has an invalid length. [ 258.595739][ T9007] siw: device registration error -23 [ 260.471449][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.474172][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.798243][ T9027] input: syz1 as /devices/virtual/input/input43 [ 260.879267][ T9025] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 261.720587][ T9034] netlink: 32 bytes leftover after parsing attributes in process `syz.3.794'. [ 265.397946][ T9044] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 266.053847][ T9056] netlink: 32 bytes leftover after parsing attributes in process `syz.3.799'. [ 267.226649][ T66] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 267.378492][ T66] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 267.383200][ T66] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 267.389290][ T66] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 267.393967][ T66] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 267.399048][ T66] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 267.406910][ T66] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 267.410965][ T66] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.414307][ T66] usb 8-1: Product: syz [ 267.416232][ T66] usb 8-1: Manufacturer: syz [ 267.418502][ T66] usb 8-1: SerialNumber: syz [ 267.435560][ T66] usb 8-1: config 0 descriptor?? [ 267.449806][ T9073] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 267.456933][ T66] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input44 [ 267.465276][ C3] kbtab 8-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 267.576493][ C0] kbtab 8-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 267.675789][ T34] usb 8-1: USB disconnect, device number 13 [ 268.559476][ T40] kauditd_printk_skb: 232 callbacks suppressed [ 268.559487][ T40] audit: type=1326 audit(1778600109.380:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9100 comm="syz.6.810" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700efcc code=0x0 [ 268.909812][ T9099] ADFS-fs (loop4): error: unable to read block 3, try 0 [ 270.859610][ T5741] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 271.000164][ T9147] input: syz1 as /devices/virtual/input/input45 [ 271.288574][ T9147] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 272.276750][ T5847] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 272.426639][ T5847] usb 9-1: Using ep0 maxpacket: 8 [ 272.430551][ T5847] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 272.434224][ T5847] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 272.438599][ T5847] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 272.443074][ T5847] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 272.447469][ T5847] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.452969][ T5847] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 272.457277][ T5847] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.671536][ T5847] usb 9-1: usb_control_msg returned -32 [ 272.674045][ T5847] usbtmc 9-1:16.0: can't read capabilities [ 273.034495][ T9163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.038676][ T9163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.048857][ T9163] loop2: detected capacity change from 0 to 7 [ 273.054545][ T9163] Dev loop2: unable to read RDB block 7 [ 273.057176][ T9163] loop2: AHDI p1 p2 p3 [ 273.059037][ T9163] loop2: partition table partially beyond EOD, truncated [ 273.062181][ T9163] loop2: p1 start 1601398130 is beyond EOD, truncated [ 273.064468][ T9163] loop2: p2 start 1702059890 is beyond EOD, truncated [ 274.155244][ T9165] ADFS-fs (loop6): error: unable to read block 3, try 0 [ 275.445371][ T5146] Dev loop2: unable to read RDB block 7 [ 275.451159][ T5146] loop2: AHDI p1 p2 p3 [ 275.452657][ T5146] loop2: partition table partially beyond EOD, truncated [ 275.455336][ T5146] loop2: p1 start 1601398130 is beyond EOD, truncated [ 275.457832][ T5146] loop2: p2 start 1702059890 is beyond EOD, truncated [ 275.477828][ T5847] usb 9-1: USB disconnect, device number 17 [ 276.123722][ T9177] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 277.329662][ T9175] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 277.332294][ T9175] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 277.343936][ T9175] vhci_hcd vhci_hcd.0: Device attached [ 277.349518][ T9184] netlink: 40 bytes leftover after parsing attributes in process `syz.3.830'. [ 277.361952][ T9184] bond1: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 277.368603][ T9184] netlink: 40 bytes leftover after parsing attributes in process `syz.3.830'. [ 277.372737][ T9184] bond1: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 277.607697][ T10] usb 50-1: SetAddress Request (2) to port 0 [ 277.610689][ T10] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 278.163366][ T9198] input: syz1 as /devices/virtual/input/input46 [ 278.386443][ T9198] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 278.630141][ T9181] vhci_hcd: connection reset by peer [ 278.632317][ T60] vhci_hcd vhci_hcd.6: stop threads [ 278.634746][ T60] vhci_hcd vhci_hcd.6: release socket [ 278.637124][ T60] vhci_hcd vhci_hcd.6: disconnect device [ 280.179108][ T9212] Bluetooth: MGMT ver 1.23 [ 280.184241][ T9211] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 280.188344][ T9212] netlink: 'syz.3.839': attribute type 2 has an invalid length. [ 280.335344][ T9214] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 280.339670][ T9214] overlayfs: conflicting options: userxattr,redirect_dir=on [ 280.835901][ T57] libceph: connect (1)[c::]:6789 error -101 [ 280.841607][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 280.920324][ T9225] input: syz1 as /devices/virtual/input/input47 [ 281.099574][ T57] libceph: connect (1)[c::]:6789 error -101 [ 281.137568][ T9227] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 281.819719][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 281.975951][ T9219] ceph: No mds server is up or the cluster is laggy [ 282.057835][ T9242] netlink: 'syz.4.846': attribute type 29 has an invalid length. [ 282.136754][ T5098] Bluetooth: hci0: command tx timeout [ 282.198502][ T9245] xt_CT: No such helper "pptp" [ 282.329332][ T9255] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 282.338282][ T9254] netlink: 40 bytes leftover after parsing attributes in process `syz.4.850'. [ 282.372087][ T9256] input: syz1 as /devices/virtual/input/input48 [ 282.722583][ T10] usb 50-1: device descriptor read/8, error -110 [ 283.428213][ T9265] input: syz1 as /devices/virtual/input/input49 [ 283.829009][ T10] usb usb50-port1: attempt power cycle [ 284.001620][ T5741] Bluetooth: hci0: Opcode 0x0406 failed: -110 [ 284.036706][ T9254] kthread_run failed with err -4 [ 284.214280][ T9278] geneve2: entered promiscuous mode [ 284.218266][ T9278] geneve2: entered allmulticast mode [ 284.547357][ T10] usb usb50-port1: unable to enumerate USB device [ 284.767248][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.858'. [ 284.799262][ T9288] netlink: 'syz.3.859': attribute type 1 has an invalid length. [ 284.809140][ T9288] netlink: 'syz.3.859': attribute type 2 has an invalid length. [ 284.825368][ T9288] netlink: 'syz.3.859': attribute type 1 has an invalid length. [ 284.840211][ T9288] netlink: 16 bytes leftover after parsing attributes in process `syz.3.859'. [ 287.227243][ T9319] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 287.229313][ T9319] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 287.252561][ T9319] vhci_hcd vhci_hcd.0: Device attached [ 287.433956][ T57] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 287.472961][ T34] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 287.492635][ T57] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 287.600246][ T34] usb 11-1: device descriptor read/64, error -71 [ 287.834769][ T34] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 287.961902][ T34] usb 11-1: device descriptor read/64, error -71 [ 287.964178][ T9320] vhci_hcd: connection reset by peer [ 287.967799][ T13] vhci_hcd vhci_hcd.0: stop threads [ 287.969504][ T13] vhci_hcd vhci_hcd.0: release socket [ 287.974263][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 288.069823][ T34] usb usb11-port1: attempt power cycle [ 288.271461][ T9327] netlink: 72 bytes leftover after parsing attributes in process `syz.3.873'. [ 288.309385][ T9329] netlink: 20 bytes leftover after parsing attributes in process `syz.3.874'. [ 288.313613][ T9329] syz_tun: entered allmulticast mode [ 288.360692][ T9331] futex_wake_op: à³OñJ÷N\ìg´é tries to shift op by 144; fix this program [ 288.402460][ T34] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 288.422734][ T34] usb 11-1: device descriptor read/8, error -71 [ 288.659419][ T34] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 288.677447][ T34] usb 11-1: device descriptor read/8, error -71 [ 288.784671][ T34] usb usb11-port1: unable to enumerate USB device [ 291.202205][ T9362] netlink: 32 bytes leftover after parsing attributes in process `syz.4.884'. [ 292.023395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 293.630893][ T57] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 294.555562][ T9370] netlink: 32 bytes leftover after parsing attributes in process `syz.0.885'. [ 296.036109][ T9401] bridge0: port 1(erspan0) entered blocking state [ 296.040129][ T9401] bridge0: port 1(erspan0) entered disabled state [ 296.094327][ T9401] bridge0: port 1(erspan0) entered blocking state [ 296.096727][ T9401] bridge0: port 1(erspan0) entered forwarding state [ 296.106791][ T9411] netlink: 16 bytes leftover after parsing attributes in process `syz.6.894'. [ 296.474556][ T9418] input: syz1 as /devices/virtual/input/input50 [ 296.510888][ T9420] FAULT_INJECTION: forcing a failure. [ 296.510888][ T9420] name failslab, interval 1, probability 0, space 0, times 0 [ 296.515489][ T9420] CPU: 2 UID: 0 PID: 9420 Comm: syz.4.899 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.515519][ T9420] Tainted: [L]=SOFTLOCKUP [ 296.515523][ T9420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 296.515529][ T9420] Call Trace: [ 296.515533][ T9420] [ 296.515538][ T9420] dump_stack_lvl+0x100/0x190 [ 296.515554][ T9420] should_fail_ex.cold+0x5/0xa [ 296.515569][ T9420] should_failslab+0xc2/0x120 [ 296.515582][ T9420] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 296.515599][ T9420] ? alloc_empty_file+0x5b/0x1c0 [ 296.515618][ T9420] alloc_empty_file+0x5b/0x1c0 [ 296.515635][ T9420] path_openat+0xe8/0x31a0 [ 296.515652][ T9420] ? trace_kmem_cache_alloc+0xd5/0x100 [ 296.515665][ T9420] ? __kasan_slab_alloc+0x89/0x90 [ 296.515677][ T9420] ? __pfx_path_openat+0x10/0x10 [ 296.515694][ T9420] ? __asan_memcpy+0x3c/0x60 [ 296.515710][ T9420] ? do_getname_kernel+0x1be/0x250 [ 296.515727][ T9420] do_file_open_root+0x2f6/0x5a0 [ 296.515741][ T9420] ? __kasan_slab_free+0x5f/0x80 [ 296.515753][ T9420] ? __pfx_do_file_open_root+0x10/0x10 [ 296.515780][ T9420] ? do_raw_spin_lock+0x128/0x260 [ 296.515792][ T9420] ? find_held_lock+0x2b/0x80 [ 296.515808][ T9420] file_open_root+0x19b/0x3b0 [ 296.515823][ T9420] ? __pfx_file_open_root+0x10/0x10 [ 296.515835][ T9420] ? _raw_spin_unlock+0x28/0x50 [ 296.515859][ T9420] do_handle_open+0xab0/0xce0 [ 296.515877][ T9420] ? __pfx_do_handle_open+0x10/0x10 [ 296.515896][ T9420] ? fput+0x79/0x100 [ 296.515911][ T9420] ? exit_to_user_mode_loop+0xe2/0x4f0 [ 296.515922][ T9420] ? rcu_is_watching+0x12/0xc0 [ 296.515937][ T9420] ? __do_fast_syscall_32+0xe7/0x950 [ 296.515955][ T9420] __do_fast_syscall_32+0xe7/0x950 [ 296.515971][ T9420] ? lockdep_hardirqs_on+0x78/0x100 [ 296.515988][ T9420] do_fast_syscall_32+0x32/0x70 [ 296.516005][ T9420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 296.516019][ T9420] RIP: 0023:0xf7f23fcc [ 296.516028][ T9420] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 296.516039][ T9420] RSP: 002b:00000000f53a450c EFLAGS: 00000292 ORIG_RAX: 0000000000000156 [ 296.516050][ T9420] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000000 [ 296.516056][ T9420] RDX: 0000000000030002 RSI: 0000000000000000 RDI: 0000000000000000 [ 296.516063][ T9420] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 296.516069][ T9420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.516075][ T9420] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 296.516089][ T9420] [ 296.832521][ T9419] netlink: 32 bytes leftover after parsing attributes in process `syz.3.900'. [ 297.476222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 297.495978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 297.527280][ T40] audit: type=1800 audit(1778600138.648:1156): pid=9427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.901" name="cpuset.effective_cpus" dev="9p" ino=74733391 res=0 errno=0 [ 297.925645][ T9433] Driver unsupported XDP return value 0 on prog (id 145) dev N/A, expect packet loss! [ 298.026566][ T9436] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 298.029264][ T9436] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 298.036554][ T9436] vhci_hcd vhci_hcd.0: Device attached [ 298.089249][ T9439] vhci_hcd: connection closed [ 298.090577][ T60] vhci_hcd vhci_hcd.0: stop threads [ 298.094350][ T60] vhci_hcd vhci_hcd.0: release socket [ 298.096449][ T60] vhci_hcd vhci_hcd.0: disconnect device [ 298.805617][ T9445] pim6reg: entered allmulticast mode [ 298.813155][ T9445] pim6reg: left allmulticast mode [ 299.275768][ T9453] JFS: discard option not supported on device [ 299.282574][ T9453] Mount JFS Failure: -22 [ 299.285137][ T9453] jfs_mount failed w/return code = -22 [ 299.440117][ T9458] kAFS: unable to lookup cell '.' [ 300.920377][ T9474] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 301.105687][ T9479] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 301.524376][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 301.692784][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 301.700261][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 301.707523][ T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 301.711045][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 301.714959][ T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 301.718673][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 301.732476][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 301.747502][ T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 301.756908][ T9] usb 5-1: config 168 interface 0 has no altsetting 0 [ 301.769270][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 301.771790][ T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 301.787527][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 301.800860][ T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 301.810358][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 301.820077][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 301.831793][ T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 301.839640][ T9] usb 5-1: config 168 interface 0 has no altsetting 0 [ 301.848179][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 301.851028][ T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 301.867448][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 301.876045][ T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 301.887294][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 301.890999][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 301.895065][ T40] audit: type=1326 audit(1778600143.063:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.921" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fcc code=0x7ffc0000 [ 301.911812][ T40] audit: type=1326 audit(1778600143.063:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.921" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fcc code=0x7ffc0000 [ 301.925155][ T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 301.931090][ T9] usb 5-1: config 168 interface 0 has no altsetting 0 [ 301.931727][ T40] audit: type=1326 audit(1778600143.063:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.921" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f23fcc code=0x7ffc0000 [ 301.942446][ T40] audit: type=1326 audit(1778600143.063:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.921" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fcc code=0x7ffc0000 [ 301.951277][ T40] audit: type=1326 audit(1778600143.083:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.921" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f23fcc code=0x7ffc0000 [ 301.978106][ T40] audit: type=1326 audit(1778600143.083:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.921" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fcc code=0x7ffc0000 [ 301.978298][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 301.989894][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.994708][ T9] usb 5-1: Product: syz [ 301.996673][ T9] usb 5-1: Manufacturer: syz [ 301.999439][ T9] usb 5-1: SerialNumber: syz [ 301.999511][ T40] audit: type=1326 audit(1778600143.083:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.921" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f23fcc code=0x7ffc0000 [ 302.012714][ T40] audit: type=1326 audit(1778600143.093:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.921" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fcc code=0x7ffc0000 [ 302.021158][ T40] audit: type=1326 audit(1778600143.093:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.921" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f23fcc code=0x7ffc0000 [ 302.719944][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 302.719957][ T40] audit: type=1326 audit(1778600143.870:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.921" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f23fcc code=0x7ffc0000 [ 303.096689][ T9500] netlink: 12 bytes leftover after parsing attributes in process `syz.6.923'. [ 303.155740][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.921'. [ 303.172628][ T40] audit: type=1326 audit(1778600144.354:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.921" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fcc code=0x7ffc0000 [ 303.180183][ T40] audit: type=1326 audit(1778600144.354:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9489 comm="syz.4.921" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23fcc code=0x7ffc0000 [ 303.948657][ T9] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 303.961082][ T9] usb 5-1: USB disconnect, device number 29 [ 306.065192][ T9522] input: syz1 as /devices/virtual/input/input51 [ 306.706763][ T9537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.933'. [ 308.033242][ T9558] binder: 9557:9558 unknown command 0 [ 308.035056][ T9558] binder: 9557:9558 ioctl c0306201 800001c0 returned -22 [ 308.043981][ T9558] binder: 9557:9558 ioctl c0306201 80000180 returned -14 [ 308.047278][ T9558] binder: 9557:9558 ioctl c0306201 80000240 returned -14 [ 308.121153][ T9560] fuse: Bad value for 'fd' [ 308.322540][ T40] audit: type=1804 audit(1778600149.539:1176): pid=9569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.942" name="/newroot/234/file0" dev="tmpfs" ino=1274 res=1 errno=0 [ 308.372859][ T9576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.945'. [ 308.373212][ T9572] ufs: failed to set blocksize [ 309.599055][ T9613] uprobe: syz.3.954:9613 failed to unregister, leaking uprobe [ 310.454943][ T9626] netlink: 24 bytes leftover after parsing attributes in process `syz.6.958'. [ 311.129638][ T8249] usb 11-1: new full-speed USB device number 8 using dummy_hcd [ 311.142531][ T9614] lo speed is unknown, defaulting to 1000 [ 311.282465][ T8249] usb 11-1: unable to get BOS descriptor or descriptor too short [ 311.285391][ T8249] usb 11-1: not running at top speed; connect to a high speed hub [ 311.288805][ T8249] usb 11-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 311.292403][ T8249] usb 11-1: config 1 interface 0 has no altsetting 0 [ 311.296928][ T8249] usb 11-1: string descriptor 0 read error: -22 [ 311.300170][ T8249] usb 11-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.40 [ 311.303100][ T8249] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.307960][ T9628] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 311.514353][ T9628] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 311.519072][ T8249] usbhid 11-1:1.0: can't add hid device: -71 [ 311.521052][ T8249] usbhid 11-1:1.0: probe with driver usbhid failed with error -71 [ 311.527041][ T8249] usb 11-1: USB disconnect, device number 8 [ 312.137693][ T9614] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input52 [ 312.429454][ T9] IPVS: starting estimator thread 0... [ 312.523287][ T9647] IPVS: using max 37 ests per chain, 88800 per kthread [ 312.551233][ T9651] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:20004 [ 312.557434][ T9651] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 312.952197][ T9655] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.981604][ T9655] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 312.982848][ T9661] input: syz1 as /devices/virtual/input/input53 [ 313.000841][ T1039] lo speed is unknown, defaulting to 1000 [ 313.005934][ T1039] syz2: Port: 1 Link DOWN [ 314.462921][ T40] audit: type=1804 audit(1778600155.689:1177): pid=9673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.967" name="/newroot/267/file0" dev="tmpfs" ino=1443 res=1 errno=0 [ 314.625025][ T40] audit: type=1804 audit(1778600155.709:1178): pid=9673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.967" name="/newroot/267/file0" dev="tmpfs" ino=1443 res=1 errno=0 [ 314.745205][ T9677] netlink: 20 bytes leftover after parsing attributes in process `syz.0.968'. [ 314.868124][ T9678] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 314.870215][ T9678] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 314.874403][ T9678] vhci_hcd vhci_hcd.0: Device attached [ 315.196901][ T9678] netlink: 'syz.0.968': attribute type 12 has an invalid length. [ 315.264296][ T9667] uprobe: syz.3.967:9667 failed to unregister, leaking uprobe [ 316.245705][ T9697] netlink: 'syz.3.971': attribute type 12 has an invalid length. [ 316.251190][ T9694] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 316.254110][ T9694] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 316.258041][ T9694] vhci_hcd vhci_hcd.0: Device attached [ 316.270466][ T5789] usb 38-1: SetAddress Request (6) to port 0 [ 316.283507][ T5789] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 316.405441][ T9679] vhci_hcd: connection closed [ 316.505115][ T9681] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 316.542329][ T13] vhci_hcd vhci_hcd.0: stop threads [ 316.547849][ T13] vhci_hcd vhci_hcd.0: release socket [ 316.551556][ T9691] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 316.551604][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 316.572420][ T9691] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 316.788776][ T29] usb 44-1: SetAddress Request (2) to port 0 [ 316.794398][ T29] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 316.957915][ T9695] vhci_hcd: connection reset by peer [ 317.351770][ T89] vhci_hcd vhci_hcd.3: stop threads [ 317.353623][ T89] vhci_hcd vhci_hcd.3: release socket [ 317.359698][ T89] vhci_hcd vhci_hcd.3: disconnect device [ 317.560448][ T9709] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 317.578066][ T9691] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 318.213552][ T40] audit: type=1400 audit(1778600159.472:1179): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=9722 comm="syz.4.979" [ 318.225354][ T9719] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 318.228251][ T9719] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 318.239475][ T9719] vhci_hcd vhci_hcd.0: Device attached [ 318.523807][ T9725] vhci_hcd: connection closed [ 318.527339][ T102] vhci_hcd vhci_hcd.6: stop threads [ 318.530821][ T102] vhci_hcd vhci_hcd.6: release socket [ 318.531248][ T1481] usb 50-1: SetAddress Request (6) to port 0 [ 318.534906][ T102] vhci_hcd vhci_hcd.6: disconnect device [ 318.541129][ T1481] usb 50-1: new SuperSpeed USB device number 6 using vhci_hcd [ 318.560946][ T1481] usb 50-1: enqueue for inactive port 0 [ 318.572049][ T5741] Bluetooth: hci1: command 0x0c1a tx timeout [ 318.693558][ T9738] tipc: Enabled bearer , priority 0 [ 318.698698][ T9738] syzkaller0: MTU too low for tipc bearer [ 318.700583][ T9738] tipc: Disabling bearer [ 318.744025][ T9738] ALSA: seq fatal error: cannot create timer (-19) [ 318.789643][ T9738] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 319.425591][ T1481] usb usb50-port1: attempt power cycle [ 319.682168][ T9745] [ 319.683017][ T9745] ====================================================== [ 319.685279][ T9745] WARNING: possible circular locking dependency detected [ 319.687576][ T9745] syzkaller #0 Tainted: G L [ 319.689710][ T9745] ------------------------------------------------------ [ 319.691935][ T9745] syz.6.984/9745 is trying to acquire lock: [ 319.693812][ T9745] ffff888028687d08 (&ht->mutex){+.+.}-{4:4}, at: rhashtable_free_and_destroy+0x49/0x9c0 [ 319.696843][ T9745] [ 319.696843][ T9745] but task is already holding lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 319.699262][ T9745] ffffffff8e9b0880 (fs_reclaim){+.+.}-{0:0}, at: __alloc_frozen_pages_noprof+0x1239/0x2bc0 [ 319.702517][ T9745] [ 319.702517][ T9745] which lock already depends on the new lock. [ 319.702517][ T9745] [ 319.705820][ T9745] [ 319.705820][ T9745] the existing dependency chain (in reverse order) is: [ 319.708628][ T9745] [ 319.708628][ T9745] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 319.710916][ T9745] fs_reclaim_acquire+0xc4/0x100 [ 319.712659][ T9745] __kvmalloc_node_noprof+0xcc/0xa00 [ 319.714538][ T9745] bucket_table_alloc.isra.0+0x88/0x460 [ 319.716444][ T9745] rhashtable_rehash_alloc+0x68/0x110 [ 319.718314][ T9745] rht_deferred_worker+0x1d9/0x1fd0 [ 319.720117][ T9745] process_one_work+0xa0e/0x1980 [ 319.721941][ T9745] worker_thread+0x5ef/0xe50 [ 319.723836][ T9745] kthread+0x370/0x450 [ 319.725595][ T9745] ret_from_fork+0x72b/0xd50 [ 319.727647][ T9745] ret_from_fork_asm+0x1a/0x30 [ 319.729747][ T9745] [ 319.729747][ T9745] -> #0 (&ht->mutex){+.+.}-{4:4}: [ 319.732585][ T9745] __lock_acquire+0x14b8/0x2630 [ 319.734723][ T9745] lock_acquire+0x1b1/0x370 [ 319.736721][ T9745] __mutex_lock+0x1a4/0x1b10 [ 319.738798][ T9745] rhashtable_free_and_destroy+0x49/0x9c0 [ 319.741270][ T9745] kernfs_put.part.0+0x175/0x720 [ 319.743450][ T9745] kernfs_put+0x53/0x60 [ 319.745343][ T9745] evict+0x3c2/0xad0 [ 319.747140][ T9745] iput.part.0+0x605/0xf50 [ 319.749111][ T9745] iput+0x35/0x40 [ 319.750786][ T9745] dentry_unlink_inode+0x2c0/0x4c0 [ 319.753051][ T9745] __dentry_kill+0x1d0/0x690 [ 319.754779][ T9745] shrink_dentry_list+0x180/0x5e0 [ 319.756577][ T9745] prune_dcache_sb+0xea/0x150 [ 319.758244][ T9745] super_cache_scan+0x328/0x550 [ 319.759945][ T9745] do_shrink_slab+0x416/0x1240 [ 319.761637][ T9745] shrink_slab+0xa7d/0x12e0 [ 319.763290][ T9745] shrink_one+0x398/0x7f0 [ 319.764859][ T9745] shrink_node+0x2673/0x3dc0 [ 319.766494][ T9745] do_try_to_free_pages+0x33e/0x16d0 [ 319.768357][ T9745] try_to_free_pages+0x294/0x750 [ 319.770131][ T9745] __alloc_frozen_pages_noprof+0x128f/0x2bc0 [ 319.772213][ T9745] only_alloc_fresh_hugetlb_folio.isra.0+0x180/0x230 [ 319.774515][ T9745] alloc_surplus_hugetlb_folio+0x11a/0x2a0 [ 319.776577][ T9745] alloc_hugetlb_folio+0xe97/0x14d0 [ 319.778425][ T9745] hugetlb_no_page+0xe7a/0x1980 [ 319.780136][ T9745] hugetlb_fault+0x5e5/0x1410 [ 319.781808][ T9745] handle_mm_fault+0x5f1/0xa20 [ 319.783507][ T9745] __get_user_pages+0x1178/0x32a0 [ 319.785277][ T9745] populate_vma_page_range+0x267/0x3f0 [ 319.787201][ T9745] __mm_populate+0x107/0x3a0 [ 319.788840][ T9745] vm_mmap_pgoff+0x37f/0x470 [ 319.790496][ T9745] ksys_mmap_pgoff+0x285/0x610 [ 319.792204][ T9745] __do_fast_syscall_32+0xe7/0x950 [ 319.794008][ T9745] do_fast_syscall_32+0x32/0x70 [ 319.795726][ T9745] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 319.797910][ T9745] [ 319.797910][ T9745] other info that might help us debug this: [ 319.797910][ T9745] [ 319.801132][ T9745] Possible unsafe locking scenario: [ 319.801132][ T9745] [ 319.803697][ T9745] CPU0 CPU1 [ 319.805837][ T9745] ---- ---- [ 319.807953][ T9745] lock(fs_reclaim); [ 319.809548][ T9745] lock(&ht->mutex); [ 319.812162][ T9745] lock(fs_reclaim); [ 319.814742][ T9745] lock(&ht->mutex); [ 319.816350][ T9745] [ 319.816350][ T9745] *** DEADLOCK *** [ 319.816350][ T9745] [ 319.819104][ T9745] 5 locks held by syz.6.984/9745: [ 319.820715][ T9745] #0: ffff88802a67f178 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x229/0x3a0 [ 319.823667][ T9745] #1: ffff88801d7e1d10 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}, at: hugetlb_fault+0x2f8/0x1410 [ 319.827526][ T9745] #2: ffff88806114e570 (&vma_lock->rw_sema){++++}-{4:4}, at: hugetlb_vma_lock_read+0xb1/0x140 [ 319.831607][ T9745] #3: ffffffff8e9b0880 (fs_reclaim){+.+.}-{0:0}, at: __alloc_frozen_pages_noprof+0x1239/0x2bc0 [ 319.835720][ T9745] #4: ffff888052ae60d8 (&type->s_umount_key#51){++++}-{4:4}, at: super_cache_scan+0x98/0x550 [ 319.839679][ T9745] [ 319.839679][ T9745] stack backtrace: [ 319.841943][ T9745] CPU: 1 UID: 0 PID: 9745 Comm: syz.6.984 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.841961][ T9745] Tainted: [L]=SOFTLOCKUP [ 319.841965][ T9745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 319.841972][ T9745] Call Trace: [ 319.841977][ T9745] [ 319.841981][ T9745] dump_stack_lvl+0x100/0x190 [ 319.841995][ T9745] print_circular_bug.cold+0x178/0x1c7 [ 319.842013][ T9745] check_noncircular+0x146/0x160 [ 319.842031][ T9745] __lock_acquire+0x14b8/0x2630 [ 319.842044][ T9745] lock_acquire+0x1b1/0x370 [ 319.842053][ T9745] ? rhashtable_free_and_destroy+0x49/0x9c0 [ 319.842072][ T9745] ? __pfx___might_resched+0x10/0x10 [ 319.842084][ T9745] ? __flush_work+0x7e2/0xcb0 [ 319.842096][ T9745] __mutex_lock+0x1a4/0x1b10 [ 319.842112][ T9745] ? rhashtable_free_and_destroy+0x49/0x9c0 [ 319.842129][ T9745] ? rhashtable_free_and_destroy+0x49/0x9c0 [ 319.842145][ T9745] ? try_to_grab_pending+0x45f/0x840 [ 319.842157][ T9745] ? rcu_is_watching+0x12/0xc0 [ 319.842170][ T9745] ? __pfx___mutex_lock+0x10/0x10 [ 319.842186][ T9745] ? enable_work+0x295/0x320 [ 319.842201][ T9745] ? lockdep_hardirqs_on+0x78/0x100 [ 319.842216][ T9745] ? enable_work+0x24c/0x320 [ 319.842228][ T9745] ? __pfx___might_resched+0x10/0x10 [ 319.842242][ T9745] ? rhashtable_free_and_destroy+0x49/0x9c0 [ 319.842258][ T9745] rhashtable_free_and_destroy+0x49/0x9c0 [ 319.842274][ T9745] ? __pfx_simple_xattr_ht_free+0x10/0x10 [ 319.842291][ T9745] ? __pfx___might_resched+0x10/0x10 [ 319.842304][ T9745] kernfs_put.part.0+0x175/0x720 [ 319.842318][ T9745] ? __pfx_kernfs_evict_inode+0x10/0x10 [ 319.842329][ T9745] kernfs_put+0x53/0x60 [ 319.842340][ T9745] evict+0x3c2/0xad0 [ 319.842355][ T9745] ? find_held_lock+0x2b/0x80 [ 319.842368][ T9745] ? __pfx_evict+0x10/0x10 [ 319.842384][ T9745] ? iput.part.0+0x5fd/0xf50 [ 319.842401][ T9745] iput.part.0+0x605/0xf50 [ 319.842415][ T9745] ? __pfx_inode_just_drop+0x10/0x10 [ 319.842428][ T9745] iput+0x35/0x40 [ 319.842442][ T9745] dentry_unlink_inode+0x2c0/0x4c0 [ 319.842457][ T9745] __dentry_kill+0x1d0/0x690 [ 319.842472][ T9745] ? shrink_dentry_list+0x10e/0x5e0 [ 319.842488][ T9745] shrink_dentry_list+0x180/0x5e0 [ 319.842504][ T9745] ? list_lru_walk_one+0x3c/0x50 [ 319.842515][ T9745] prune_dcache_sb+0xea/0x150 [ 319.842524][ T9745] ? list_lru_count_one+0x147/0x320 [ 319.842541][ T9745] ? __pfx_prune_dcache_sb+0x10/0x10 [ 319.842553][ T9745] super_cache_scan+0x328/0x550 [ 319.842565][ T9745] do_shrink_slab+0x416/0x1240 [ 319.842579][ T9745] shrink_slab+0xa7d/0x12e0 [ 319.842590][ T9745] ? shrink_slab+0x690/0x12e0 [ 319.842602][ T9745] ? __pfx_shrink_slab+0x10/0x10 [ 319.842616][ T9745] shrink_one+0x398/0x7f0 [ 319.842632][ T9745] ? shrink_node+0x2653/0x3dc0 [ 319.842642][ T9745] shrink_node+0x2673/0x3dc0 [ 319.842652][ T9745] ? shrink_node+0x23c3/0x3dc0 [ 319.842663][ T9745] ? __pfx_shrink_node+0x10/0x10 [ 319.842675][ T9745] ? rcu_is_watching+0x8e/0xc0 [ 319.842688][ T9745] ? do_try_to_free_pages+0x33e/0x16d0 [ 319.842698][ T9745] do_try_to_free_pages+0x33e/0x16d0 [ 319.842711][ T9745] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 319.842724][ T9745] try_to_free_pages+0x294/0x750 [ 319.842734][ T9745] ? psi_group_change+0x457/0xa20 [ 319.842744][ T9745] ? __pfx_try_to_free_pages+0x10/0x10 [ 319.842757][ T9745] ? fs_reclaim_acquire+0x70/0x100 [ 319.842769][ T9745] ? fs_reclaim_acquire+0x70/0x100 [ 319.842783][ T9745] __alloc_frozen_pages_noprof+0x128f/0x2bc0 [ 319.842804][ T9745] ? __lock_acquire+0x4a5/0x2630 [ 319.842813][ T9745] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 319.842832][ T9745] ? __lock_acquire+0x4a5/0x2630 [ 319.842843][ T9745] ? __lock_acquire+0x4a5/0x2630 [ 319.842852][ T9745] ? __hugetlb_cgroup_charge_cgroup+0x9d4/0xde0 [ 319.842863][ T9745] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 319.842880][ T9745] ? do_raw_spin_lock+0x128/0x260 [ 319.842892][ T9745] ? find_held_lock+0x2b/0x80 [ 319.842906][ T9745] only_alloc_fresh_hugetlb_folio.isra.0+0x180/0x230 [ 319.842919][ T9745] ? _raw_spin_unlock_irq+0x23/0x50 [ 319.842933][ T9745] alloc_surplus_hugetlb_folio+0x11a/0x2a0 [ 319.842949][ T9745] alloc_hugetlb_folio+0xe97/0x14d0 [ 319.842963][ T9745] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 319.842979][ T9745] hugetlb_no_page+0xe7a/0x1980 [ 319.842996][ T9745] hugetlb_fault+0x5e5/0x1410 [ 319.843011][ T9745] ? __pfx_hugetlb_fault+0x10/0x10 [ 319.843027][ T9745] ? pmdp_set_access_flags+0x12d/0x1a0 [ 319.843044][ T9745] ? __pfx___up_read+0x10/0x10 [ 319.843055][ T9745] ? hugetlb_vma_unlock_read+0xb1/0x140 [ 319.843065][ T9745] ? hugetlb_vma_unlock_read+0xb1/0x140 [ 319.843076][ T9745] handle_mm_fault+0x5f1/0xa20 [ 319.843093][ T9745] __get_user_pages+0x1178/0x32a0 [ 319.843108][ T9745] ? __pfx___get_user_pages+0x10/0x10 [ 319.843123][ T9745] populate_vma_page_range+0x267/0x3f0 [ 319.843138][ T9745] ? __pfx_populate_vma_page_range+0x10/0x10 [ 319.843152][ T9745] ? __pfx_find_vma_intersection+0x10/0x10 [ 319.843165][ T9745] ? do_mmap+0x93f/0x12f0 [ 319.843178][ T9745] __mm_populate+0x107/0x3a0 [ 319.843191][ T9745] ? __pfx___mm_populate+0x10/0x10 [ 319.843209][ T9745] ? up_write+0x28c/0x4f0 [ 319.843221][ T9745] vm_mmap_pgoff+0x37f/0x470 [ 319.843235][ T9745] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 319.843248][ T9745] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 319.843264][ T9745] ? do_set_mempolicy+0x217/0x3d0 [ 319.843278][ T9745] ksys_mmap_pgoff+0x285/0x610 [ 319.843291][ T9745] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 319.843304][ T9745] ? rcu_is_watching+0x12/0xc0 [ 319.843317][ T9745] __do_fast_syscall_32+0xe7/0x950 [ 319.843334][ T9745] do_fast_syscall_32+0x32/0x70 [ 319.843350][ T9745] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 319.843364][ T9745] RIP: 0023:0xf700efcc [ 319.843373][ T9745] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 319.843383][ T9745] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0 [ 319.843394][ T9745] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000ff5000 [ 319.843401][ T9745] RDX: 000000000200000a RSI: 000000000004c831 RDI: 00000000ffffffff [ 319.843407][ T9745] RBP: 000000001cbf8000 R08: 0000000000000000 R09: 0000000000000000 [ 319.843414][ T9745] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 319.843420][ T9745] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.843431][ T9745] [ 320.256379][ T1481] usb usb50-port1: unable to enumerate USB device [ 320.336373][ T102] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.435467][ T102] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.504062][ T9731] syz_tun (unregistering): left allmulticast mode [ 320.581939][ T102] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.708063][ T102] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.819908][ T102] bridge0: port 1(erspan0) entered disabled state [ 320.825522][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.897984][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.903564][ T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.908452][ T102] bond0 (unregistering): Released all slaves [ 321.060482][ T5449] 8021q: adding VLAN 0 to HW filter on device eth15 [ 321.145933][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.148960][ T102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.152403][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.157609][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.161263][ T102] batman_adv: batadv0: Interface deactivated: macsec1 [ 321.164264][ T102] batman_adv: batadv0: Removing interface: macsec1 [ 321.261973][ T102] team0 (unregistering): Port device team_slave_1 removed [ 321.270319][ T102] team0 (unregistering): Port device team_slave_0 removed [ 321.293339][ T5449] 8021q: adding VLAN 0 to HW filter on device eth14 [ 321.363488][ T5789] usb 38-1: device descriptor read/8, error -110 [ 321.444302][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.446732][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.480756][ T5449] 8021q: adding VLAN 0 to HW filter on device eth17 [ 321.597135][ T102] IPVS: stop unused estimator thread 0... [ 321.648773][ T5449] 8021q: adding VLAN 0 to HW filter on device eth16 [ 321.730624][ T102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.754780][ T5789] usb usb38-port1: attempt power cycle [ 321.827283][ T102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.902152][ T102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.921983][ T29] usb 44-1: device descriptor read/8, error -110 [ 321.990545][ T102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.065117][ T102] bridge_slave_1: left allmulticast mode [ 322.067019][ T102] bridge_slave_1: left promiscuous mode [ 322.069204][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.138973][ T102] bridge0 (unregistering): left promiscuous mode [ 322.221308][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.225656][ T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.229325][ T102] bond0 (unregistering): Released all slaves [ 322.232549][ T102] bond1 (unregistering): Released all slaves [ 322.312810][ T29] usb usb44-port1: attempt power cycle [ 322.314925][ T5789] usb usb38-port1: unable to enumerate USB device [ 322.381537][ T5449] 8021q: adding VLAN 0 to HW filter on device eth18 [ 322.484861][ T102] dummy0: left promiscuous mode [ 322.487780][ T102] hsr_slave_0: left promiscuous mode [ 322.489934][ T102] hsr_slave_1: left promiscuous mode [ 322.492147][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.494617][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.535225][ T102] team0 (unregistering): Port device team_slave_1 removed [ 322.541573][ T102] team0 (unregistering): Port device team_slave_0 removed [ 322.579438][ T1262] smbdirect: ib_dev[syz2] removed [ 322.581132][ T5449] 8021q: adding VLAN 0 to HW filter on device eth19 [ 322.744918][ T5449] 8021q: adding VLAN 0 to HW filter on device eth20 [ 322.870985][ T29] usb usb44-port1: unable to enumerate USB device [ 322.946094][ T5449] 8021q: adding VLAN 0 to HW filter on device eth21