last executing test programs: 1m53.912325515s ago: executing program 32 (id=4822): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000000)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0xb, 0x80, 0x2, 0x7, 0x87f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c78, 0x9, 0x244, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x4, 0x1, 0x7, 0x5, 0x3e, 0x8a, 0x6, 0x6, 0x0, 0x7, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x80000008, 0x4, 0x1, 0x40], [0x10000007, 0x6, 0x8000012f, 0x8005, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x7fdf, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x9, 0x5, 0x30, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x3f9, 0x401, 0x6, 0x1, 0xff, 0x5, 0x2, 0x2000000, 0xa, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0x3, 0xffff, 0x2, 0x4, 0x8, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c9368d, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x5, 0x9, 0x6, 0x80, 0x0, 0x1, 0x2, 0x2c41, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x3, 0x7, 0xd9, 0x3, 0x20000009, 0x4, 0x6d01, 0x4, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x87c, 0x1002, 0x1008, 0x7, 0x953a, 0x0, 0x6, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0x12f, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x6, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x1, 0x57, 0xe, 0x3, 0x3, 0x7, 0x4, 0x7fff, 0xffff, 0xa61d, 0x2, 0x5, 0x1, 0x2, 0x14a, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x1, 0x4, 0xc0, 0x1, 0x2, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0xa26, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0x0, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xfffffff7, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000880), &(0x7f0000000e00)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000e80)='asymmetric\x00', &(0x7f0000000ec0)=@chain) add_key(&(0x7f0000000f00)='asymmetric\x00', 0x0, &(0x7f00000010c0)="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", 0x559, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/mapper/control\x00', 0x2, 0x0) mkdir(&(0x7f0000000780)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f0000000cc0)="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", 0x13d) r3 = openat$autofs(0xffffff9c, &(0x7f0000000f40), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r2, {r1}}, './sys/bus/pci/rescan\x00'}) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f00000008c0)=0x6, 0x8, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(r2, 0x400c586e, &(0x7f0000000900)={0xb, 0x3}) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f0000000980)='1', 0x1) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="050000000400000008000000ff"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f0000001000)=ANY=[@ANYBLOB="18000000b2000000000000000040002018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000c30000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000c80)={r8}, 0xc) syz_usb_control_io$hid(r6, &(0x7f0000000a00)={0x24, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000a80), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r9, 0xae04) ioctl(r1, 0xc138fd03, &(0x7f0000000580)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl(r1, 0xc138fd09, &(0x7f00000005c0)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e2030") r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000001080)=ANY=[@ANYBLOB="24000000190029010deb7000f8dbdf2502200020ff02ff02002a000008000100ac1414aa"], 0x24}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) 1m50.83503553s ago: executing program 4 (id=4925): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060500000000000000000100000000000000800800000001250500010006000000050005000200000005000400020000000900020073797a31000000220500050007000000"], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="9b060000003800001c00128009000100626f6e64000000000c0002800500010006"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) (async) r4 = syz_usb_connect(0x5, 0x73, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000400)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xff}}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0xae, 0x0, 0x0, 0x0, 0x5, 0x0, 0xcc, 0x0, 0x6}) r6 = socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$packet(0x11, 0x2, 0x300) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1e, 0xc, &(0x7f0000000e40)=ANY=[@ANYRES8=r8, @ANYBLOB="50fa1f8fd11bce183988b162a09bc9f1fb86a12d5ac8c2a53d0bd42d8b8336af68ccb767035450c9e1f41977c72b84954f0baf489924e4907f5107ee0142b7e99a", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB="995e0d8e8da0982850ecfa6a0320faa2f05ebacbb74ada4656149e9895d44f260dc503ed45c2d2c1180d1acd40679ba2c278b501177364c6bdffc024b9e28ef39b93fe30a81ee3066ce38710ef3f21c6f5f0b27b284414cf2cd50e9747cadc0e166dce94706faf09704042ea4d195f792e98cef25e926f59d7442a526b556a16dbf11a2f91911b58d9313693186452f9c27646a89056f99208cd0799634946616cd2f82558926e789451da"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0xbc91fa730f303d75, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={0xffffffffffffffff, 0x2000002, 0xe, 0x0, &(0x7f0000000e00)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000480)={'ip_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f00000004c0)='O', 0x5c8, 0x0, &(0x7f0000000500)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @broadcast}, 0x14) r10 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x2, 0x4, 0x378, 0xffffffff, 0x0, 0x11c, 0x11c, 0xfeffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xf8, 0x11c, 0x0, {}, [@common=@inet=@ecn={{0x24}, {0x20, 0x10, 0x0, 0x2}}, @common=@ah={{0x30}, {[0x4d6, 0x4d3], 0x17de, 0x3b, 0x3}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0xff0000ff], 'sit0\x00', 'vxcan1\x00', {0xff}, {}, 0x20}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3d4) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket(0x10, 0x803, 0x0) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async, rerun: 32) sendmsg$NFT_BATCH(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24008800) (rerun: 32) 1m49.994257965s ago: executing program 4 (id=4928): r0 = syz_create_resource$binfmt(&(0x7f00000002c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r2 = memfd_create(&(0x7f0000000340)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00l\xfa\xf0o[\x9bC\xf6>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xcc%\x98\xa0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb4vDI\xc8\x91\x87\x1fuYG7}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x8e\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xcaBH\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xc4,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x0e\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xb9\xe0AW\x11\xb1uc\xbc\xec\xe5\xc79\x9c\xcf\xa4m\x06\x12\xd0IY\x18\x15\x8d\x01P\x12/\xfct\xfe\xa0\xc7-\x9a+\xf3\xf9R\x85\xa5~\x90\xbeC\xee\xe9\'\x9fW\xa5\xfa\xb9\xc8\x85\x16\xac\xf0\x9a\xb2\xbe\xfb\x91\xb2\xe2\x8f\xfa)?6\x0e\xac-\x82\xe3\xc1\xf7\xd3\x04\xf7I\xad\xaap\xddX\x14e\x11\xd8\xb3\xe9\xf2@\x97\xfa\x16\xe9\xb4l\x0e9\xf4\x9e\xefT\xfd\x9d\x18\xba\xaf\xfc\xa4\xa9\x98\xa4\x8fe\x11\xbd\xa3\xe4-\x10/;\x14\xce\x8bU\x16Xt\x8f\x8eP\xfb\xff\xd7\x98\xebxj\xbd\xee\x9d:\x19\x03\xe6\x18\x1dOT\x88\xf1\xfb\x19\xd0k\xff\xda\x83B#\x02r\x9e\xe4\xcb\x9fr\xec\x9e\t\b\x15\x9cx\x9f\xa9J\xfa\x9bH\xb1L\xd9\xa10\xb4\xf1\x12a\xd7\xc2G\x18\xb0\xfd\xad\'\xe5\x96d\x1e\xf6Mg\xfa\x9b\x1fP\x99\x81\x8eRn\xa9b\r\xe1j\xb7\xae\xdb\x05\t\xdbY\xfe\xb1\t\x964\xc9A{\xd0\xd0w\x88?\\S\x05(\x19\x14\x9e\xa7\x926!r\xca+\xfb\xa0\xf0\xb7\x95\x05\x950\xd0\xc2\xc4\xef-8e\xf3t\x96\xa3<\xc05L\xb5NG\x157\xcf\x01P&\xaf\xe7&n\xf1\v\xea\xbd\x03\x06\x1f\x9c\x83\xd6 \x1a\xb7Q\xbbD\xa0\x99\xcaM\xfc(\xd0\x1a\\\xe3K?\xddfM\x7f\xf0\x83\x97T\x9e\x04\'\x841\xb8\x94\x1e.\xdadM~\xff\xe7<#\r\xe2\xd3V-Ks\xf4\xe2c)\x86\x05\"}|c\xa6\xe9\x11\x05_hD\x1elF\xf0\x96\x1a\x12\x90|\xbf\x84$\r\xd7x$J\x1e\x1f\xe7/aC=\\**\xe0m\xf2\xc7E\xf4B!P\xb9\xf2Ts\x00\x16]1;g_i0Z\xad\x10\xc3\xc9\xc9\x9b\xcf>\x88u\x9aB\xa1Y\xdeS0x0) io_submit(r4, 0x2, &(0x7f0000006b80)=[&(0x7f0000006bc0)={0x1802, 0x0, 0x0, 0x5, 0xffed, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r3}, &(0x7f0000006c00)={0x0, 0x0, 0x0, 0x5, 0x10, r3, 0x0, 0xfffffffffffffff6, 0xfffffffffffffffd, 0x0, 0x1}]) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000006c40)={0xfffffffffffffd19, 0x2, 0x0, {0x1, 0x0, 0x200}}, 0x28) umount2(&(0x7f0000006c80)='./file0\x00', 0xb) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x6c, 0xb, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x6c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x25, 0x4, 0x270bd24, 0x25dfdbfa, {0x2}}, 0x14}}, 0xc004) 1m49.605941158s ago: executing program 4 (id=4930): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="b7010000000000007b1af8ff000000007b1af0ff000000007b1ae8ff000000007b1ae0ff000000007b1ad8ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300001400000085000000cc000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300000000000085000000cc000000b70000000200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x2, 0xba, &(0x7f00000003c0)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000640), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000680)=0x2) recvmmsg(r2, &(0x7f00000006c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x10040881) mkdirat(0xffffffffffffff9c, 0x0, 0x67) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000700)={0x0, 0x0}) mount$9p_rdma(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x10400, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r1]) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="0500"/12, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x2710, @ANYBLOB="0000000001310000020000000000000023a5cfd434"], 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB='\x00\x00\x00\x00!'], 0x48}, 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000840)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00042dbd7000fcdbdf251b0000000400cc000800010002000000300022802c00008008000700060000000800020092e500000800040000100000880002000600000008000200040000000800010079ffec00080001000d000000"], 0x60}}, 0x80) keyctl$instantiate(0xc, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="6e65772064656661756c7420747275737465643a73797a2030303030303030303030303030a406da6c1a5fc3e0"], 0x2d, 0x0) r7 = add_key(&(0x7f00000009c0)='encrypted\x00', &(0x7f0000000a00), &(0x7f0000000a40), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, r7, &(0x7f0000000a80)=ANY=[@ANYBLOB="75706461746520641480bb096c7420757365723aa90600000008000000"], 0x1d, r7) 1m49.183550947s ago: executing program 4 (id=4935): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000002c0)={0x7, 0x2, 0x1, 0x0, 0x83}) syz_emit_ethernet(0x96, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./gadget\x00', &(0x7f00000005c0)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget\x00', 0x10002, 0x78) r1 = openat(0xffffffffffffffff, &(0x7f0000000640)='./gadget\x00', 0x80, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000000)={0x20, {0xbf, 0x2, 0xe3, 0x4, 0xb, 0x1}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'ipvlan0\x00', 0xfffffffe}) ioctl(r2, 0x8b22, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f00000006c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80047601, &(0x7f0000000840)) r3 = socket(0x2a, 0x1, 0x4583) bind$inet(r3, &(0x7f0000000880)={0x2a, 0x4e23, @empty=0x1000000}, 0x10) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x700, 0x0}, 0x0) timer_create(0x0, &(0x7f0000000900)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000940)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000980)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getpeername$l2tp6(r3, 0x0, 0x0) timer_settime(r4, 0x1, &(0x7f00000009c0)={{0x0, 0x989680}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x240000c1) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000a40)=0x474c, 0x4) 1m48.308331549s ago: executing program 4 (id=4938): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf250100000008000100", @ANYRES64=r1], 0x60}}, 0x110) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000b40), 0x8, 0x10, &(0x7f0000000b80)={0x0, 0x8}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000c40)="3a173357f297c605804ab3828443", 0x0, 0x8cfd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$uhid(0xffffff9c, &(0x7f0000000ec0), 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000015c0)=@raw={'raw\x00', 0x8, 0x3, 0x3bc, 0x0, 0x11, 0x148, 0x0, 0x0, 0x328, 0x2a8, 0x2a8, 0x328, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x10}, 0xff000000, 0x0, 'syzkaller1\x00', 'veth0_to_batadv\x00', {}, {}, 0x2, 0x2, 0x13}, 0x0, 0x1e8, 0x208, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv6=@empty, [0xff, 0x0, 0x0, 0xff000000], @ipv4=@loopback, [0x0, 0xff, 0xff, 0xff000000], 0x4d4, 0x3505, 0x32, 0x1, 0x4}, {@ipv4=@local, [0xffffff, 0xff000000, 0x0, 0xffffffff], @ipv4=@local, [0xff, 0x0, 0xffffff00, 0xffffffff], 0x4d3, 0x3501, 0x6, 0x1, 0x11, 0x15}, {@ipv4=@broadcast, [0x0, 0xff, 0xff000000, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x23}, [0xff000000, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d3, 0x3505, 0x2c, 0x0, 0xb, 0x1}, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x19}, [0xffffff00, 0x0, 0xff000000, 0xffffffff], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xffffff00, 0xff000000], 0x4d5, 0x3503, 0x6, 0x0, 0x6, 0x5}], 0x4, 0x4}}, @common=@icmp={{0x24}, {0xd, "8b53"}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x40}}, @common=@ah={{0x2c}, {[0x9, 0x2c], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x0, 0x6, 0x1], 0x1, 0x7}, {0x1001, [0x1, 0x0, 0x0, 0x4, 0x1, 0x3], 0x1, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x418) write$UHID_CREATE2(r5, &(0x7f0000000f00)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x3e, 0x38, 0x2, 0x3, 0xfffffff7, 0xc, "7062b02b80ec4eb421ad9627c3d1b6f0dec549c759463aeb404d5ea2bc2678a08fa429e9e2dcd3bd54748e544ecf59fff88b77cd71323b52abf19a090940"}}, 0x156) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000001080)={&(0x7f00000010c0)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001100)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5c, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x20005, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18a, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x20005, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0xf, 0xe, 0x312, 0x9, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x5, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x80004, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x2000000b, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x9e, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x25, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0x2, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0xfe, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x7fff, 0xfffffffa, 0xfff]}, 0x45c) ppoll(&(0x7f0000001580)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000140)={"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"}) r8 = open(&(0x7f0000000c80)='.\x00', 0x0, 0x100) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000cc0)=0x20) openat(0xffffffffffffff9c, &(0x7f0000000d00)='./file1\x00', 0x42, 0x1ff) rename(&(0x7f0000000d40)='./file1\x00', &(0x7f0000000d80)='./file0\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 1m48.168705819s ago: executing program 4 (id=4939): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async) r2 = socket(0x40000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x103) (async) fcntl$setstatus(r0, 0x4, 0x2000) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet6(0xa, 0x5, 0x0) (async) close(0x3) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_int(r2, 0x0, 0xf, 0x0, 0x0) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) (async) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)={0xb0000004}) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x7, @private2, 0x14cd}], 0x1c) (async) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e21, 0x1, @loopback, 0xffff}, 0x1c) (async) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0) (async) read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, 0x0, 0x0) 1m39.504008323s ago: executing program 33 (id=4917): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000003c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x5, 0x3a, 'usrjquota=\xb9\xc4\xd7A%S\n\x10i\xcf\x84\x93v\x02\xe4y}\xcbV\xbb\xc1\xd5\x06\v\xdc\xd8\\\xc5\xb3\ag\xa6u\xbe\xf4)\xae\xb6\xfe*\x9d?\xb2C\xf0<\xc9\x820M\x92Tzs\xba\xca\x9d\xad\x17\x1b\x84\xbc\xb3\xd8\xad\f\x17\xbe\x17\xb5}.H\x90\xc7\x0e\xb3y\xd0\xc3\xf0c\x04\xe6\f\x01\x00\x02\xfd_W\x9a\xa7\x81\xfcr\xe9B\x95\x13\x9f\x10\x1b5\xc0\xf9\xb5\xe1\x15Y\x9b$\xa43\xe7F>\xb7\xa1\xb7zw\xac\xc8\x12\x94\xa7\xe5\xcb\xc0g\x865\\\x9e\xca\x8e\xe2\t\xb7\b\x00\x00\x00\x00\x00\x00\x00i7b\xad\x14oVT\xcb\xea\xd3\xad\xa9\x16\xd5\xb2\xa0 \x13^\xf6>\xd4\x8bZzl\x88\xddn\xab\xd6\x12\x1f\x06', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5\xf8\x8aOI\b\x87\xd6\xa9\x96\x82\xab\x86g\xdbr\xcdhT\xbc\xe8@\xfb\xc7<\x19\xb9dmo^}\b\xa3\xbe\xc6\xb8\xa1\xcc\xb0\xf3eDn<%;\x88(\x14\xc1)\xa4+\n\xce\x87?:\xb2\x03\xf0\xed\xb3\xd4Wr\xbd\x1c\x12\xa8\fl\xed-\"\xc2l5\xe7y\x89\xd7\xb3\xe1\xbd\x05\xc5\\\x83\f\x19\x96o\xa1\x0f)\xe7r@C\x9e([\xf4WH\xb4\xd1n\x88\t\x8e\xc9gg\x94\"\xe4\xfe\xdb\xb5\x84\xeeq\x9b\\L>\x96\x96\x8f\x1a_\xe2\xe0m:\n\xd1_\x8a\x94\x88\xa5', 0x3a, './file2'}, 0x1a2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x150) r1 = landlock_create_ruleset(&(0x7f0000000780)={0x100}, 0x30, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000800)={0x100, r2}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000880)={0x100, r3}, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000006c0), 0x8000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='fd/3\x00') ioctl$FIONREAD(r5, 0x541b, 0x0) r6 = syz_pidfd_open(0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, 0x0, 0x3}}, 0x26) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000340)) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) 1m33.045524728s ago: executing program 34 (id=4939): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async) r2 = socket(0x40000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x103) (async) fcntl$setstatus(r0, 0x4, 0x2000) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet6(0xa, 0x5, 0x0) (async) close(0x3) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_int(r2, 0x0, 0xf, 0x0, 0x0) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) (async) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)={0xb0000004}) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x7, @private2, 0x14cd}], 0x1c) (async) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e21, 0x1, @loopback, 0xffff}, 0x1c) (async) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, 0x0) (async) read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, 0x0, 0x0) 1m20.415691179s ago: executing program 1 (id=5089): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x106f) 1m20.345376952s ago: executing program 1 (id=5090): syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002500)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 1m19.864476519s ago: executing program 1 (id=5094): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000700)=0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) inotify_init() r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000300)='asymmetric\x00', 0x0, &(0x7f0000000440)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035594030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603751d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d0403020300304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a96d1132b27cff2b57d6a317bc44219cf4f674f356aee292500", 0x1d8, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000640)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x82, 0xfffffffd}}, 0x10) sendmsg$tipc(r5, &(0x7f0000000680)={&(0x7f00000006c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) splice(r7, 0x0, r8, 0x0, 0x88000cc, 0x0) 1m19.067358329s ago: executing program 1 (id=5097): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f00000003c0)=""/144, 0x90) 1m18.985781924s ago: executing program 1 (id=5098): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f00000003c0)=""/144, 0x90) 1m18.716001378s ago: executing program 1 (id=5099): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000440)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xb, 0x2, 0x2, 0x41, 0x1, 0xf7}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000840)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x8, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@delqdisc={0x44, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x7fffffff, "a2dbf168eecc191b1b6626b00f934bba"}}}]}, 0x44}}, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0500004850fb68e7bf5cb3f1fc040000000300"/32, @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) 1m18.660492431s ago: executing program 35 (id=5099): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000440)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xb, 0x2, 0x2, 0x41, 0x1, 0xf7}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000840)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x8, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@delqdisc={0x44, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x7fffffff, "a2dbf168eecc191b1b6626b00f934bba"}}}]}, 0x44}}, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0500004850fb68e7bf5cb3f1fc040000000300"/32, @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) 1m1.105241001s ago: executing program 6 (id=5206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x40, r1, 0x1, 0x4070bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4807}, 0x8080) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x808100}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="60010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0xc800}, 0x0) (async) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, 0xffffffffffffffff, 0x0) (async) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000140)) (async) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x84, r7, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x404000}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8001}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x11}}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x80000000}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x881}, 0x40000) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r8, 0x0) (async) connect$unix(r8, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) accept4$unix(r8, &(0x7f0000000080), 0x0, 0x80000) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async) close(r4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00022abd633d8c8a64c8e86a000008000300", @ANYRES32=0x0, @ANYBLOB="080057000200000008005700050000000800570002000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000040) 1m1.015436254s ago: executing program 6 (id=5207): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r0, &(0x7f00000001c0)='\x00', 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./gadget\x00', &(0x7f00000003c0)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./gadget/dummy_udc\x00', 0x2, 0x0) openat(r1, &(0x7f0000000440)='./gadget\x00', 0x1c5ec3, 0xda) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./tracing\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./tracing/uprobe_events\x00', 0x401, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./dbg\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./dbg/bluetooth/l2cap\x00', 0x0, 0xa2) read$FUSE(r3, &(0x7f0000001480)={0x2020}, 0x2020) write(r2, &(0x7f00000034c0)="707a73408b202e2f66696c65303a30", 0xf) openat(0xffffffffffffff9c, &(0x7f0000003500)='./tracing/uprobe_events\x00', 0x201, 0x0) write(r1, &(0x7f0000003540)="0000000009020900010100803212010002000000402505a0a4000100000002", 0x1f) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x101091, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROM_DEBUG(r4, 0x324, 0x1) setns(0xc9, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$sequencer2(0xffffff9c, &(0x7f0000000700), 0x20940, 0x0) ioctl$SNDCTL_SEQ_RESET(r6, 0x5100) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 1m0.924450895s ago: executing program 6 (id=5210): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x10}) r2 = socket$inet(0x2, 0x6000000000000001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x200}}, 0x1c}}, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r2, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000042000/0x1000)=nil, 0x1000}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x2, 0x1, 0x1}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x17) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000240)={0x3, 0x0, 0x1, 0x3}) r6 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) statx(r6, &(0x7f0000000080)='.\x00', 0x0, 0x100, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x400000f2, 0x0, 0x400006}]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r4, 0x0, 0x0}, 0x20) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f0000000440)='6\x00', 0x2) 1m0.740791364s ago: executing program 6 (id=5213): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f00000003c0)=""/144, 0x90) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="adcd1a9a3fc36e090000000000000095", 0x10) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) read$alg(r3, &(0x7f0000002300)=""/4128, 0x1020) sendmmsg$alg(r3, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="4789d3aefc1a4d", 0x7}, {&(0x7f00000008c0)="4f3df8bbb2703cda4c", 0x9}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) 1m0.521420376s ago: executing program 6 (id=5215): syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0x0, 0xeeef0000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x4c}}, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002500)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x0, 0x2d, &(0x7f0000002540)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002580)={0x1, &(0x7f00000025c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m0.09189711s ago: executing program 6 (id=5221): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xfff3, 0xb}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x2402c8b1}, 0x4890) sync_file_range(r0, 0x1, 0x7f, 0x2) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x74) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300000000e30085002e9bdc000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$lock(r5, 0x410, &(0x7f0000000040)={0x1, 0x1, 0x1, 0xfffe}) mknodat(r5, &(0x7f0000000080)='./file1/file0\x00', 0x200, 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@ipv6_deladdr={0x40, 0x15, 0x801, 0x70bd2d, 0x25dfdbfc, {0xa, 0xf1, 0x8}, [@IFA_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="030300400000fbdbdf250c00000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x850) r9 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@upd={0xe0, 0x12, 0x1, 0x70bd25, 0x25dfdbfe, {{'cbc-cast5-avx\x00'}, '\x00', '\x00', 0x2400, 0x2400}}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r8, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x804) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES8=r4], 0x38}}, 0x20044804) 59.930633018s ago: executing program 36 (id=5221): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xfff3, 0xb}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x2402c8b1}, 0x4890) sync_file_range(r0, 0x1, 0x7f, 0x2) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x74) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300000000e30085002e9bdc000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$lock(r5, 0x410, &(0x7f0000000040)={0x1, 0x1, 0x1, 0xfffe}) mknodat(r5, &(0x7f0000000080)='./file1/file0\x00', 0x200, 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@ipv6_deladdr={0x40, 0x15, 0x801, 0x70bd2d, 0x25dfdbfc, {0xa, 0xf1, 0x8}, [@IFA_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="030300400000fbdbdf250c00000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x850) r9 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@upd={0xe0, 0x12, 0x1, 0x70bd25, 0x25dfdbfe, {{'cbc-cast5-avx\x00'}, '\x00', '\x00', 0x2400, 0x2400}}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r8, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x804) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES8=r4], 0x38}}, 0x20044804) 56.292255084s ago: executing program 8 (id=5222): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f00000003c0)=""/144, 0x90) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="4789d3aefc1a4d", 0x7}, {&(0x7f00000008c0)="4f3df8bbb2703cda4c", 0x9}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) 56.126460501s ago: executing program 8 (id=5247): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x1}, 0x6) socket$nl_sock_diag(0x10, 0x3, 0x4) write$bt_hci(r0, 0x0, 0x6) 54.881214483s ago: executing program 8 (id=5261): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000000)=0xfffffffffffffffe) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r1, 0x0, 0x10, 0x10, &(0x7f0000000780)="0000ffffffffa000", &(0x7f0000000880)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r2, 0xc0045405, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffffff, 0x0, 0x36) ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010101010000010000000000000000000600124000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000500)={0x14, r7, 0x62d, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x12) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x4c) 54.770680768s ago: executing program 37 (id=5261): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000000)=0xfffffffffffffffe) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r1, 0x0, 0x10, 0x10, &(0x7f0000000780)="0000ffffffffa000", &(0x7f0000000880)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r2, 0xc0045405, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(r3, 0x80287010, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffffff, 0x0, 0x36) ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010101010000010000000000000000000600124000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000500)={0x14, r7, 0x62d, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x12) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x4c) 54.386163367s ago: executing program 7 (id=5269): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x1}, 0x6) socket$nl_sock_diag(0x10, 0x3, 0x4) write$bt_hci(r0, 0x0, 0x6) 54.385854449s ago: executing program 2 (id=5270): landlock_create_ruleset(&(0x7f0000000000)={0x4000, 0xd, 0x2, 0x801, 0x2}, 0x30, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0xe, 0x80000) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @any, 0x100}, 0xe) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0xf4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x8, 0x40, 0x9, 0x2}, {0x81, 0x4, 0x4, 0xaf65}]}) 54.384923044s ago: executing program 7 (id=5271): syz_usb_connect(0x3, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$igmp6(0xa, 0x3, 0x2) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x21, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x106f) 54.276429662s ago: executing program 2 (id=5272): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0xf4) (fail_nth: 3) 54.250429793s ago: executing program 2 (id=5274): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@can_newroute={0x1c, 0x18, 0x821, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x5, 0xd, 0x4}]}, 0x1c}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x50, 0xffffffffffffffff, 0xc75da000) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r2], 0x24}}, 0x14040) setresuid(0x0, 0xee00, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@can_newroute={0x1c, 0x18, 0x821, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x5, 0xd, 0x4}]}, 0x1c}}, 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x6, 0x50, 0xffffffffffffffff, 0xc75da000) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r2], 0x24}}, 0x14040) (async) setresuid(0x0, 0xee00, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) (async) 54.152893834s ago: executing program 2 (id=5275): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x24044080}, 0x20008004) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x34}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x34}}, 0x4000801) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000280)={[0x100000, 0xffffffff, 0x1ff8, 0x60000], 0x3, 0x50, 0x4}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40402, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x10000}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='mounts\x00') r8 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000440)) mkdir(&(0x7f0000000480)='./file0\x00', 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='devpts\x00', 0x3000096, 0x0) chroot(&(0x7f0000000540)='./file0\x00') mount$bind(&(0x7f0000000580)='.\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='./file0/../file0/../file0\x00') sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002000010029bd7000fedbdf2502141404e20000030400000008000200ac1e010108000100d90000014518e581911efccda8daaf9f359a0dd58984b79772849a896617bfc596c820ad77f18d2b085271530e36c29de7074b1889be46d94207a913ed50ba785c"], 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x8c755b2713612558) 54.026867057s ago: executing program 2 (id=5276): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f00000003c0)=""/144, 0x90) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="4789d3aefc1a4d", 0x7}, {&(0x7f00000008c0)="4f3df8bbb2703cda4c", 0x9}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) 53.749698063s ago: executing program 2 (id=5277): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x20, 0x10, 0x439}, 0x20}}, 0x0) 53.560842432s ago: executing program 38 (id=5277): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x20, 0x10, 0x439}, 0x20}}, 0x0) 53.096051537s ago: executing program 7 (id=5279): prctl$PR_SET_MM(0x59616d61, 0x7, &(0x7f0000ffd000/0x3000)=nil) r0 = io_uring_setup(0x180d, &(0x7f0000002c40)={0x0, 0x5d61, 0x80, 0x3, 0x3db}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0xc0841, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f00000000c0)) r2 = openat$ndctl0(0xffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000240)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x4000000) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) flock(r5, 0x1) r6 = openat(r2, &(0x7f0000000280)='./file0\x00', 0x200080, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) bind$netlink(r6, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfd, 0x40000000}, 0xc) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x74, 0x44, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x5c, 0x1, 0x0, 0x1, [@nested={0x58, 0x464, 0x0, 0x1, [@nested={0x54, 0xcd, 0x0, 0x1, [@nested={0x50, 0xd6, 0x0, 0x1, [@nested={0x4c, 0x18, 0x0, 0x1, [@nested={0x4, 0xf2}, @nested={0x4, 0x8d}, @nested={0x3f, 0x16a, 0x0, 0x1, [@generic="cb84262700fc44f829e9ac5d2b0168d2ed51fbf02783ae7705c94d9468d49caa3fe790", @nested={0x18, 0x39, 0x0, 0x1, [@nested={0x14, 0x6d, 0x0, 0x1, [@typed={0x5, 0xa4, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x14d, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xc}}]}]}]}]}]}]}]}]}]}, 0x74}}, 0xc000) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 52.856539705s ago: executing program 7 (id=5280): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f00000003c0)=""/144, 0x90) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="4789d3aefc1a4d", 0x7}, {&(0x7f00000008c0)="4f3df8bbb2703cda4c", 0x9}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) 52.649356621s ago: executing program 7 (id=5282): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, 0x2b, 0x9, 0x70bd25, 0x25dfd3ff, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x40000000) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000b00020001000000150000000c000c8006000100d43f0000060003"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x40000, 0x0) fcntl$notify(r3, 0x402, 0x40000029) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='10', 0x2) unshare(0x6000480) 51.993742265s ago: executing program 7 (id=5284): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f00000003c0)=""/144, 0x90) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="4789d3aefc1a4d", 0x7}, {&(0x7f00000008c0)="4f3df8bbb2703cda4c", 0x9}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) 51.846990281s ago: executing program 39 (id=5284): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f0000000340)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f00000003c0)=""/144, 0x90) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="4789d3aefc1a4d", 0x7}, {&(0x7f00000008c0)="4f3df8bbb2703cda4c", 0x9}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) 8.075746445s ago: executing program 9 (id=5679): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) open$dir(&(0x7f00000005c0)='./mnt/trace_marker\x00', 0x82, 0x1) (fail_nth: 3) 8.075328395s ago: executing program 9 (id=5680): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {0x6ec9, 0x7, 0x10, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x845, 0x10, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x82, 0xfffffffe, 0xfffffb9a, 0xfffffffc, 0x400004, 0x0, 0x4, 0x24f5, 0x4, 0xf252, 0x0, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0xc46, 0x3ff, 0x3, 0x5, 0x3, 0x1000ba55, 0x1000, 0x2, 0x200, 0x0, 0x1, 0x8, 0x100, 0x2, 0x80, 0x8, 0x0, 0x3, 0x199b, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x25, 0x40, 0x9, 0x7, 0x5], [0x12, 0x1e, 0x762, 0x8000, 0xfffffffe, 0x3, 0x10000, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x7, 0x1c32, 0x3, 0x9, 0xfffe, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x6, 0x981, 0x4, 0x100, 0x3fb, 0x8001, 0xfffffffd, 0x0, 0x1000001, 0xa6, 0xfffffff9, 0x0, 0x957, 0x1, 0x0, 0x6, 0x7, 0x800, 0xffff, 0x6, 0x98, 0xfffffffb, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x4, 0x200002, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x3fd, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0xa, 0x6, 0x9, 0x9, 0xe8b, 0x5, 0x80000001, 0x893, 0x3, 0x1000, 0x2, 0xfffffffe, 0x5, 0xfffffff9, 0xe55, 0x10, 0x2, 0x4, 0x4004, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xa, 0x47, 0x2, 0x7, 0x4, 0x7, 0x1c, 0x3, 0x8, 0x8001, 0xbf23, 0x40000c, 0x8, 0x95a, 0xffffffff, 0x4, 0x0, 0x6, 0x100fffd, 0x1, 0x9, 0x4, 0x5, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x800007f, 0x5, 0x3fa6, 0x6, 0x8e8, 0x9, 0x9, 0x4, 0xe48, 0x4, 0x4000, 0xa, 0x200, 0x1000, 0x0, 0x2, 0x5, 0x804, 0xa80a, 0x65f413f9, 0x4, 0x9, 0x8008a8, 0x2, 0x41, 0x7, 0x2, 0x4, 0x4, 0x10, 0x80, 0x0, 0x7fff, 0x10000005, 0x8001, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x4) r2 = gettid() r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000080)=0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0xf3a, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='auxv\x00') exit(0x3) syz_open_procfs(0x0, &(0x7f0000000740)='fd/3\x00') splice(r5, 0x0, r9, 0x0, 0x80, 0x4) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r8, &(0x7f0000001040)={0x2020, 0x0, 0x0}, 0x2020) ioctl$SOUND_PCM_READ_BITS(r5, 0x80045005, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r6, {0x830}}, './file0\x00'}) writev(r11, &(0x7f00000043c0)=[{&(0x7f0000003100)="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", 0x1000}, {&(0x7f0000004100)="744852bfb9be1d068c2c8e2773451ebae7c536bdb154e5243f8aa5e0401f56", 0x1f}, {&(0x7f0000004140)="8b0ebce587828f37f9d0638a40cfef52e240d510e4c5a5c8a6a6925c4ca76fb514a45348fb539417415685d7a228ae1cf681e43fda408d58f2ace181cf1d581a30643c79f35a5c0e7c56fdaa3e80750d4eac2acc3021e221863fdc045252a72a4861e1b111b662090f0998bad57b3e8cde82f0358fe98d8a4221e4939612d1f2517a7a853e2ffdad9d153796e3219f52da7dda9a78446a9799a4ac6d4352761f8763ad1d6d8eced73c48e06d3389485356bea29de6985fdec30c7085cda5e5bee58b912b4e34bb377db17b0fb5061abbedeb248541b9eab9c833d7f6b50aaff5875882", 0xe3}, {&(0x7f0000004240)="0fa85e6a122b73a79b3089326f770e5737d6a144fe807bd156298fe7a6463eaf7950630d7a284165c78a26ea276e011ece2d7176a8996e8ff443e925fc46784dab32cdc7b258f4cbda1629e592984dbb3e09638f66bc57f9f813a1b0fffde3dc7dba1f28fd4c", 0x66}, {&(0x7f00000042c0)="25dd6e39f9d7f9ec6ee42f6ffc943a53ffa0708764a74d4eccc0ab5fb671948732671e110d367d943587ce1e244d48fa5983652ba5540c31dd576c847705679c4e4b33a7ce70eb15479fc1028fbda55eb58f182e26cb0d6c160f8cb218efdfb60ed5d534b83974f97e806b6fb0a9395d33f22a5df51b913749349ef847f011013616a86f0b9eb15eaa57d372b0e5f09289b068c9e922b99544e1bb8c2578c370c8ba209a22def94df29ad38681a4f9ac24310349e4db1c097da7e3de9cdd75f0312068103d5f28e5379354300af78cb0bb792f6594b08f28e453f3f1378677ed4a3c651fd58a2479c546305f987868132cd5e3a4", 0xf4}], 0x5) write$FUSE_INIT(r6, &(0x7f0000003080)={0x50, 0x0, r10, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) ioctl$MEMGETREGIONINFO(0xffffffffffffffff, 0xc0104d08, &(0x7f0000000680)={0xb, 0x0, 0x401, 0x5}) 7.725362195s ago: executing program 3 (id=5686): mkdir(&(0x7f0000000400)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./mysys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x80047437, 0xfffffffffffffffd) listen(0xffffffffffffffff, 0x787) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000580)='1', 0x1) 7.646029865s ago: executing program 3 (id=5687): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000700)={0xa, &(0x7f0000000680)=[{0x8001, 0x6, 0x0, 0x9}, {0x9, 0xa, 0x1, 0x51}, {0x7fe6, 0xf7, 0x0, 0x2}, {0x5, 0x7, 0x9, 0x1}, {0x4, 0xef, 0x1, 0x7}, {0x800, 0x2, 0x4, 0x35e}, {0x7379, 0x7, 0x4, 0x4}, {0x6, 0x8, 0xff, 0x6ba}, {0x3, 0x3, 0x3, 0xd7}, {0x0, 0x1, 0x7, 0x6}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./debug\x00', &(0x7f0000000780)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./debug/lru_gen\x00', 0x2, 0x0) preadv(r2, &(0x7f0000000800)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1, 0x8001, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000001a80)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000001ac0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000001b00)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0xffff}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000001b80)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0xffff}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x5, 0xe, 0x0, &(0x7f00000002c0)="0000000000040000000002015370", 0x0, 0xff, 0x0, 0xfffffd0a, 0x0, 0x0, 0x0, 0x3, 0x0, 0x401}, 0x1a) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r5}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000018c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/comedi1\x00', 0x2, 0x0) ioctl(r7, 0x40946400, &(0x7f0000001cc0)='pc212e') r8 = syz_open_dev$radio(&(0x7f0000001c00), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r8, 0xc02c5625, &(0x7f0000001c40)={0x98f904, 0x0, @value=0x9}) ioctl$DVD_AUTH(r4, 0x5392, &(0x7f0000000200)=@lsasf={0x8, 0x2}) 7.620597694s ago: executing program 3 (id=5689): syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0x0, 0xeeef0000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000031f80005000100060000000529d851f40000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f72740000"], 0x4c}}, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002500)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x0, 0x2d, &(0x7f0000002540)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002580)={0x1, &(0x7f00000025c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 7.184326408s ago: executing program 9 (id=5691): syz_emit_vhci(&(0x7f0000000780)=ANY=[@ANYBLOB="040e0c0b1c20"], 0xf) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000200001002dbd7000fcdbdf250a008000090000001e80020014000200fc02"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000faffffffffffffff000114000200fc02"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write$binfmt_format(r1, &(0x7f0000000480)='1\x00', 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000180)={0x1}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0x6, @mcast1, 0x955b}}}, &(0x7f00000002c0)=0x84) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) r4 = syz_clone(0x80, 0x0, 0x0, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="2ab8bebe55") ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000640)=0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000680)={{0x1, 0x0, r3, r2, 0x0, 0x20, 0x6c6}, 0x0, 0x0, 0x1ff, 0x0, 0x3, 0xfffff52d, 0x6653, 0x3, 0x9, 0x5, r4, r5}) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000700)=@rnullb={'/dev/syzrnull', 0x0}, r2, &(0x7f0000000740)) sendmsg$nl_xfrm(r1, &(0x7f0000002640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002600)={&(0x7f0000001500)=@migrate={0x10e4, 0x21, 0x1, 0x70bd28, 0x25dfdbfc, {{@in6=@local, @in6=@rand_addr=' \x01\x00', 0x4e22, 0x7ff, 0x4e21, 0x3e78, 0x2, 0xa0, 0x60, 0x6c, 0x0, r2}}, [@iptfs_pkt_size={0x8, 0x29, 0x5a56ac70}, @policy_type={0xa}, @lifetime_val={0x24, 0x9, {0x6, 0x2}}, @algo_aead={0x104c, 0x12, {{'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x8000, 0x100, "7bbdc2f16ebfdadd91f38f944ef809917e63b1cbb45638c255db976abb1b383a644e1f471883d3ca51f1ac1c2e44932d22b2806ad5dd400b96404c1d4488496f1b2cf4f6edb1f9e1c1a61b2769ae10a8628729a2b3f5394279f02cbc040feb3f532c148a8d01b103ccd20e340cf99b9ef167996c038553666e6d7dffe991188172a99d88dc91daf2991abb4c6f4bba1a10a7480dac773e4cdfc7d0c179b71f509879a2abe0ee7d3c45c2bf06e7c171ac27e6c74c90d5f0dbcf565feef70814bcb3438dbce561bf3a46594831cab97dcfc3e38427c43b9eefd22923f9e4451a47d355a13fc3ebe55c6c97ee082336506856ec50227fd033ea7dcad84fb58c08a2bf7bd7394ecc6e762b1c06edaa03479ecfc9f3aaa21bef43ee5fa7ae251ac048cc5efe25b4cf993be0027846c13f2cad12db8e9049a83cffb228ddd0ee2b1b3b1611df7db061e52f8db70ea40051247c8ee078138addcb7b13a37468c3d82a8513d696bbca9a188c6cda5888acfe17dc0271ea242cf03cf344ded9876cbadf1f15a620a84beda3973a38a0e69e0604b12135014e019dac60254d4737cfd8808a946274bbca7c0ee91a8cff34feefd71c738a390f06589ae3e96e528690a18d7ee2e95a04150f23f0519c88551b9c9fba17c62e7ed0c80ce4af851b9bd6fe01b61d2a1a6499f74d4307b989e86ddd77c49661e145aa38984668120c5aa3384ac2c8178d3c008ef791ce906e7b87dca1a03e4e85f1f4ffaa376d7bc290ae8ed6f4a1d0943fe1b608a51a681c18cb0cd67444831bcc9d114aac738ed39bf3cb4cd730885f30a8fb3fd04c295c6a69a02cf1de9385142332b418941035a37cf3d49f3950d1e7d364bb5c6fa338c361cc6aa8e9c5a14b11035d6e68044414a4e5397c2b21b903a8ffbb8ee5f1fa07ccffe701d29611f6858cf839d88756e56fe7761fde152beefffb7f6e064074b0e6df81e212bd0428b104be87da47480343ea2f2b488714c711b75b67b6f8a25f7f2b407ee67c565d8a6976915dcf9b71e6341e1163b54e0a10abbba6fe6ad18ae79018115d6637c7dbd8432d0bd77b02a08d2d0f3d390cc2342775dd092818f31c15e472a990641d12f06ac7e72e7f66839c9854e4cc0a6a53b439f090b5ad8c492c5e9ad825f8597b7fa6dbcf3e62005ee653aac9e6c2dfb8836eb7446296f7d14334a3c480aadf01dbe5bc9b247811f67143ec6db5cdd3e192a8df359bfde0a6c491a4682dfb7402c2a8aabc16525ddd22143607e7eb561aab3f3d70e04a0553d0924c57b9b202abe5ff6db6c3c1e932e73bfd12b114c2576bbb86f1e72b5636936304005629b6ccca7692127ba93789106595b9a979cfc2ca912a6233d0f4025ac6329c33ac41b84daba0458f7f0e195e4b55250725a14b2d01b1cafeb53a78ebe63f4665034fa8bc0be0f446a2a163681bad73d1210243e9c25eb90a0c79f277a9a19a7749131acf0b5f4b5baea995aa94c75b03957a2d35e1bb636f849b022256b01a124ada325f98e876ac51838b4ae27bc4f38a9250c8c3ad955826cfded5aaea0bab2c6d1851c9d6c950bc3a2f1c06fcbb52bdab6df96db44d099f00ee9712813bf2a7c1d28cc9165bf72cac6e7db93374fd6cdc2b0a68c212d82f1d69b39659b923b488676557b2cc447c3dd1a0a8c2d4b7ea5bfdeab64b96132d2a895fd9199098c638f40b845097268aa8490b339c54d23dfc1b8827e5354a3e0a04f3b94e5a5bf48bd32038f92fa74774d93cd6f1535536554173db909140974b0e005f1eeb37fdab2d4467da3820e32521ee0ac4557254034a272b122069f68881e54b2d6b78fad30702719ca6010e4f6322a3f228af3e5bcb7636c258eebb2dd5d5297a44b1611fe4a4c73e8affe06acf2034ba66691d5a86ed06965347373814a45c40e1fcbb656b94f5ce85105bc65d0ce5e723186d60948e2ed2ffe244d950138eaf8c2070d09cd8c054e3cc6f239d87ecf64e455cfa750c7c5acb088476d8cd1791596c56e85bd1e6370074d98d03bc5e60407c026d0bd51c9c15633b4e8105446d437f96eb36e3a751700f25239ccd4c47cf5e6ba7ca9debbaeb9406316cdbaf9cca4f4640bfc332e3fc87a81b2d1929c03645b10f36125da9da79ad9b446c882eab0657e23a41e192535229ca3349fe72cffff95417e9ca58c1647719b984f20b1b7e2821cdc1b93d8dc9a08099e67a04d6e448bd9d982dd4d076f610aa2a543f25d5f0f7a876167c52d8fcd48c202a4e816a53ac4ce655913d40395856b5607b206ab8c51791cdfaddf6e89aa12f51d01103feff4f2df3afd8918a4d3e06ad7f5f6d2b8830a0ee7a2ead8bd983e4dbeab3229a9d057d9324c367677146f337070998208f5a0df5f2061c8c0fc0bb48db85e3fea6b11f7f7b8f2744b763ada66a0b6de91abed5ace6ecd19e6a6a870200bf012a04e5a498f45a100f13bbae4e8739761f3e3393b346b2184075ae260e2399372c724b278545bc2ba511cfc473e3e3ebce18748dc429ed56b77e3ced2f5ce6956155ccf08c77a5817cb32a0d638e0a9637ed5f9c39617f4c0cc125ec2147dd597b43aaf4a7ef88ccd4a5735235d460cb6f1bddd6915c7b17ead04c811ca8955b2a316b8407a7bce9230bd5eb3f16867e1581f0b3c08db120655a476179b6ed746d02ec42a4ee63d47e697fec5dbc480bd70501c1ca99b1e6e1ee70e1f8d62e9ec8f7fe66624668e9db60aeac5f1f9c14417f42cdbc1d24a4d236927aae9e7026f3a67d61a4483a3d55a0b31dfb2ad840486a3ba7ed058bebeea2c34995ca8279ce7ea9eca7abc930aaee7ef9378f202fd1c6dca5f87bc0ca33ac9aa8a59ccd9671944ab0ee7e4f368e1942c5b76790f01f8844315e86ba96b9a8ce2d24b460e658daee9029da8c29a43884805a72dc7d8198387342fd86cba51880765432ec763d028b4b5625f6867d799cd489eb9724993a07ddd8a37730e702bf9d126c1a11daa52d3a806cd528b32f3cd4afc8aeec3e65724c165bfae5b45755d35e0e167fd22d6bbb0c81f1283a1edf3a6c953516963bc4a67f31b804541750faf134a190c8759e2e959a0fa7f78b18c4211eab1f95716e15e3b41e65bd6781d9fbe089f0c08e65975ef95d5dfd28ebf3f5cf0828ec0b384a5b813e23d8f6d005ed0d2dd74098972e56c59616392ca871c9f438ae01fe1f9767d558540a2ed359e3eab1bbcdd74370cabce3273c79a0d2afae35ed26cba23fa3f49bdc464fd58ba13c4a8f97d0a7c4aceeadff4e1d56759830214a0116af9a7716ab2a930fc0878119730682663cd0689d0d96de60c7cefe8ea80cb471963e92083e37fb2b9fabf82322c396e4628d2295cf1c42b7c63281f657e82a4e33f2646ec38da7f01c6b31965d10420a55ffc4bcdd7698df64b86168a44e6d32c9a51d8bcdfee95f0b008249eeb05a40306b9607fd8daac86986cf51ff10aca64b308b11b2fa77440c356cb67ad55100f575bda09e42719253c0f0815e9f72b1422524101ac3b8448965aae244762bd94ddc39bf55bd8c58e32dc1361904dc415962c807ac7704a90ea147f89200a5006581ddcfbe34b5b8da327980fef33a0fa4008dee60b55dcef34f7020d52993a32c4688dd32f17cfa6cd1b5797d93f9d27794c938d99ca11166ec401ba9efc9aa035646404756191208f716a14945cc5e0c354c2867404279096c6bcb251aa0ff2284bde13fcc513ef157138813414bdb16c113dd2b89c510e5eae6e2ddb0c218df5dccf19767c52c7077de0d14dfa87a7e98fd4a87828f1855b9eb4edee250f97d1fcb13114b78863494ec196e88eb611d090f0d38e58f69667cf3e962d9b6d9e0cb9c613a6629b418bcfd1ba3b83ac44d0cd1b7865299c665b1cf060131ccdd6d4ea7163854e1977ff5fadff9dab1ef7fcd0ef1c3aad5dd52d46163c7e2797b70effcd7aea3021c6d2fbff217287213154836fc357c9b3792d5120371bf81a0a702f9eb4b5edd49c2e91e7948c134ccee88c7c7000be74dff5adee350bd2b9101ce595f4e12c84a832fe178c9abede8426a2c9f945184ed6bece1c85d171c10ced6f12f4fa3bae24bb81ba0b94be5423ec57958be861b26ca92945e18aa12f29fc3b0c1dd7aa61b867d1b082cdec672b35673771c2b7786b3f29152149645e54be7350ae166e356e75448945a9354e6370f28094b0d7618322cb80edc056c4eee409edf297a9c559ce8734ad28d28e9cb45395feee15646204a535b2be5c390c411c8ae2e1e31fe7fc71a74546f6495838ad9751422b4ed98013fe990531be25b15d50c7e6e723f64212561737388c5abfc01afd126e70f52dae639c869296789d2e8d43ea60feef8825771a3e370c3c5cb1213ae04a366ae6ccc62ef749a81a827471d848d63ca7ac190f8e82dff85f3c9d506d753bbd6ecca2774796fab53691f3aebd34a095f1fe56ddfbb9727c0105cc452e4ad72ae31bcd8f0c94cee1289c7a3ab493a8087f87f0c12f2117c8a8668fb895d7e8c0c08c698c5f7f589cac8f996bace363d7f7dc993da97e1f5511a970f9d4b23dfecc353206daefb92766af4f168d59c4b686f45b5cb5028e0830f021eca68ee8b814083ca50fb95a508469737d1c7b40dc7bdfe58673ad3604229c15c5030be3787b86a16f957a468e1b54e9eeac08da9e882841aae717cb438eb6a220df20dd7d8bb570b883b294c6991475d3b15fbdb00cc4ff589f1022d76735b8a6e27d86c75a0c88858a36fc1dd116de24b68909c225ca94bc53ca164194fb7190bc7596bb59fdc2458da61a87075efa084aada702906abbd3f9ceb83c09b9f1b6f676e819c3432e8de9f3c38cec30a4710b0c2f73597503521b1fd18dd9b518ea3b631887fe1d7625dcf1da27e58e0c84a9c26c90f3cea3f6170e5ddcb35f5982b0b5323a96c5e91f1f1b4f1c4280bc75f4106062aa5def4d9b8933ed13be34dafeef1c315fb04a3cd76621a7f46bfc3fb440e0a11fe5c8bf62ec107595eba0f53fc3e3ac0b94e506cfd7fb8ab295ecc3db614151fdc00fe718cab8ba0f1de57e9f737a5db143a93f7b3decaa3798a494c888e6374c02ea2dd15641318aecaa74b1d6b41fb4b1fab206fb593f1883c09b88d59d6eb3cba3cddc707054468ebe2f76e1c7d34249c92dc185783bf2f24c4977a3a98d0d7c43d98cb6327546c769f72ab92e9c203ece585a8c6530d9384745915775c7a1e8ba48bc10f00fd9ad61ef6145429a5a263b225964c7fc104e26e13311afc024172cf4a8bcfa395472de69f9d58fdb5d9645eb9d11b3847eb6fe06b7615b2438ed93e4c8918750220ed5eac0db4b438e67ecfbe26a7a6c798de8f97ea6e79bc95081696def3eca1e74249217ad01b13d8972183ecb88cd052f575de8a39beb78a4d29e84df2d1d34338fc18619500d872fc6dac6c1f22f595e3462d86439f1420c906e31f9361daa59854b13b1310a4f78b7e9d72bb6c5aafe69c6e002b33fff9a386e5f4cff7bcb3e58c3a76c5e18f5652b3948230e8bb9206d6a2841705ffb93f4a0458cd906e2a5232b6a551125427e24c79c118ccb89ccab1b46e8693b512f876d788d53dc7681df39b3282ecfc42a7e447fb82ed116a7c228686b077854fee29eec6fa66ce791eee366c9dcf9bdf65caa9ac34401885e8b291790d82036196a3fba454dbd4e706df47d9f8b1e77677b8dd89c1e7380d68fd0f6f04e94b881ca081bc3e844119278246c972ee5b93f865e5b381714581b08de64744e057fd18f99169ca83c1c5eb218131ade22b161c3e1b"}}, @replay_thresh={0x8, 0xb, 0x3}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0x10e4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) poll(&(0x7f0000000300), 0x0, 0xfffffff6) 7.023514204s ago: executing program 5 (id=5694): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) open$dir(&(0x7f00000005c0)='./mnt/trace_marker\x00', 0x82, 0x1) 7.017643868s ago: executing program 5 (id=5695): syz_open_dev$char_usb(0xc, 0xb4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x21, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x106f) 6.946222657s ago: executing program 5 (id=5696): mkdir(&(0x7f0000000400)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./mysys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x80047437, 0xfffffffffffffffd) listen(0xffffffffffffffff, 0x787) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000580)='1', 0x1) 6.895875307s ago: executing program 5 (id=5697): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b405000000000000611004000000000063012245000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) rmdir(&(0x7f0000000240)='./mnt/trace_marker\x00') openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) open$dir(&(0x7f00000005c0)='./mnt/trace_marker\x00', 0x82, 0x3) 6.895675486s ago: executing program 5 (id=5698): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = userfaultfd(0x80001) (rerun: 64) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) (async) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup(r3, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000002c0)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) (async, rerun: 64) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x715}) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x400000, 0x1, 0x6040000}) 6.772863828s ago: executing program 0 (id=5699): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b45, 0x1) 6.695761618s ago: executing program 0 (id=5700): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x11e, 0x20, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x300, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x6c, r6, 0x0, 0x6c}, 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_NUM_PEER_NOTIF={0x5}]}}}]}, 0x44}}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000600)={'dummy0\x00'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000054000104000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="01000000ef0101010000"], 0x38}}, 0x0) 6.515733867s ago: executing program 0 (id=5701): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./dev\x00', &(0x7f0000000880)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, 0x0) 6.19600501s ago: executing program 3 (id=5702): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0xd1}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x80) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000006c0)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000700)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000740)={{}, {r2, r3+10000000}}, 0x0) timer_delete(r1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = epoll_create1(0x0) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000001240)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f00000012c0)=0x0, &(0x7f0000001300)=0x0, &(0x7f0000001340)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000001380)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001400)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000001440)) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r10) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000001800)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r12, 0x1, 0x53, &(0x7f0000000000)=0x20, 0x4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r11, &(0x7f0000001880)={0x8}) shutdown(r11, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r11, &(0x7f00000018c0)={0x2000200b}) r13 = syz_usb_connect$uac3(0x5, 0xd7, &(0x7f0000000bc0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x582, 0x9, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0x8, 0x98, 0x7, {0x8, 0xb, 0x2, 0x2, 0x1, 0x22, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0x29, 0xfff}, [@input_terminal={0x14, 0x24, 0x2, 0x6, 0x4fd, 0x2, 0xc3, 0xf, 0x7, 0xae, 0x9, 0x1}, @mixer_unit={0xb, 0x24, 0x5, 0x6, 0x40, "825f3d7b2e23"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x1b, 0x1000, 0x3, "4dae"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9, 0x3, 0xff, {0xa, 0x25, 0x25, 0x0, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x5}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x4, 0xfa, 0x5, "", 'JM'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x81, 0x2, 0xa, 0xfb, 0x3}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9f, 0x4, 0x7, 0x5, "", "3591f4"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x8e, 0x1, 0x2, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xe9, 0x80, 0x8, {0xa, 0x25, 0x25, 0x80000000, 0x6}}}}}}}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x200, 0x1, 0x6, 0x7f, 0x40, 0x23}, 0x8, &(0x7f0000000d00)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x5, [{0xfe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"]}, {0xb8, &(0x7f0000000e40)=@string={0xb8, 0x3, "63142dc24d28b8964b4c1759fb7b7fe0cb9a0c3ce55353096d494320262388b9498788f2e2a6e315ec6949f3388462af9afe9ed7179d69180da328455b2ac7c202d5f8179f00ca28b635b769e3103fedcab77f0fc0370f7e3404c1ffbd1614e4591cb0e06a521d44a02b803d346d8a890fc59422b9572657971d627863eed5d7c6b8b280ca46986455a1385c98d1590d848505e69770ec8ba9ee4ec9027dc2cfeb9f91d5978c352f5e8eddd7383cdd70c5bb2ed09a6b"}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x43f}}, {0x1e, &(0x7f0000000f40)=@string={0x1e, 0x3, "8cb062e8be3cfed37f8534d46dd55fd1558adc5708b7e4caad730b42"}}, {0x47, &(0x7f0000000f80)=@string={0x47, 0x3, "f4e9b46c42124826de8b924b7d7459d5ce510160e1becbb9abbad5e2944ef657eb3297ec962b0fa0bdd0c1e48845f597c4927d846f7a281aa41c58b8d9e5697b8685e9189b"}}]}) syz_usb_disconnect(r13) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000003000000850000007b000000850000007d00000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r14, 0x2000012, 0xe, 0x0, &(0x7f0000000940)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r15, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x2c, r16, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040051}, 0x4000000) 5.853423612s ago: executing program 0 (id=5703): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000340)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000540)="0c05020059feff000600002f88a8", 0xe}], 0x1}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000180)={0x1f, @none}, 0x8) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/50, 0x32}], 0x2000000000000040}, 0x0) 5.853288018s ago: executing program 5 (id=5704): syz_usb_connect(0x3, 0x3d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x21, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x106f) 5.773217078s ago: executing program 9 (id=5705): mkdir(&(0x7f0000000400)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./mysys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x80047437, 0xfffffffffffffffd) listen(0xffffffffffffffff, 0x787) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./mysys/bus/pci/devices/0000:00:01.0/enable\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 3.455925692s ago: executing program 9 (id=5706): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80045b10, 0x0) 3.294847465s ago: executing program 3 (id=5707): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x80000001, @empty, 0x2}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000500)="88", 0x1}], 0x1}, 0x0) write$P9_RSETATTR(r1, &(0x7f00000001c0)={0x7, 0x1b, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r0, 0x84, 0x83, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x17}, 0x3}}}, 0x84) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0x4, @empty, 0x6}}, 0x0, 0x9, 0xffff1896, 0x104, 0x25, 0x7fff, 0x9}, 0x9c) 2.308705608s ago: executing program 0 (id=5708): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@updsa={0xec, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@empty}, {@in, 0x0, 0x6c}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xec}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100a8}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x50}}, 0x40080) r2 = msgget$private(0x0, 0x1c0) msgctl$IPC_RMID(r2, 0x0) 945.393072ms ago: executing program 3 (id=5709): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x11e, 0x20, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x300, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x6c, r6, 0x0, 0x6c}, 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_NUM_PEER_NOTIF={0x5}]}}}]}, 0x44}}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000600)={'dummy0\x00'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000054000104000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="01000000ef0101010000"], 0x38}}, 0x0) 945.201755ms ago: executing program 0 (id=5710): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x24044080}, 0x20008004) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, r0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x34}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x34}}, 0x4000801) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40402, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='mounts\x00') epoll_create(0x7) 0s ago: executing program 9 (id=5711): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./dev\x00', &(0x7f0000000880)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, 0x0) kernel console output (not intermixed with test programs): .255333][T24426] ? __pfx_kernel_clone+0x10/0x10 [ 819.255347][T24426] ? find_held_lock+0x2b/0x80 [ 819.255359][T24426] ? ksys_write+0x190/0x250 [ 819.255373][T24426] ? ksys_write+0x190/0x250 [ 819.255387][T24426] ? lock_acquire+0x1d1/0x380 [ 819.255404][T24426] __do_compat_sys_ia32_clone+0xd4/0x120 [ 819.255422][T24426] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 819.255446][T24426] ? fput+0x7c/0x100 [ 819.255470][T24426] ? ksys_write+0x1ac/0x250 [ 819.255492][T24426] ? __pfx_ksys_write+0x10/0x10 [ 819.255521][T24426] __do_fast_syscall_32+0x13a/0x8b0 [ 819.255542][T24426] ? lockdep_hardirqs_on+0x7d/0x110 [ 819.255571][T24426] do_fast_syscall_32+0x32/0x70 [ 819.255593][T24426] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 819.255616][T24426] RIP: 0023:0xf748efec [ 819.255632][T24426] Code: Unable to access opcode bytes at 0xf748efc2. [ 819.255637][T24426] RSP: 002b:00000000f54a64bc EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 819.255649][T24426] RAX: ffffffffffffffda RBX: 0000000020223000 RCX: 0000000000000000 [ 819.255656][T24426] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 819.255662][T24426] RBP: 00000000f74b4f80 R08: 0000000000000000 R09: 0000000000000000 [ 819.255669][T24426] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 819.255676][T24426] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 819.255691][T24426] [ 819.339687][ T855] usb 8-1: Using ep0 maxpacket: 16 [ 819.340422][ T855] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 819.341270][ T855] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.341287][ T855] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.341303][ T855] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 819.341323][ T855] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.344737][ T855] usb 8-1: config 0 descriptor?? [ 819.889943][T23189] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 819.966599][ T855] usbhid 8-1:0.0: can't add hid device: -71 [ 819.966673][ T855] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 820.040160][T23189] usb 14-1: Using ep0 maxpacket: 16 [ 820.040715][T23189] usb 14-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 820.041820][T23189] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.041844][T23189] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.041864][T23189] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 820.041896][T23189] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.090188][ T855] usb 8-1: USB disconnect, device number 84 [ 820.101883][T23189] usb 14-1: config 0 descriptor?? [ 820.258314][T24447] netlink: 'syz.0.5433': attribute type 9 has an invalid length. [ 820.515836][T23189] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 820.515855][T23189] microsoft 0003:045E:07DA.0010: ignoring exceeding usage max [ 820.546130][T23189] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/0003:045E:07DA.0010/input/input49 [ 820.577439][T24463] fuse: Unknown parameter '0x0000000000000004' [ 820.595881][T24465] fuse: Unknown parameter '0x0000000000000004' [ 820.599091][T24465] FAULT_INJECTION: forcing a failure. [ 820.599091][T24465] name failslab, interval 1, probability 0, space 0, times 0 [ 820.599111][T24465] CPU: 2 UID: 0 PID: 24465 Comm: syz.0.5438 Tainted: G L syzkaller #0 PREEMPT(full) [ 820.599127][T24465] Tainted: [L]=SOFTLOCKUP [ 820.599131][T24465] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 820.599138][T24465] Call Trace: [ 820.599142][T24465] [ 820.599147][T24465] dump_stack_lvl+0x100/0x190 [ 820.599167][T24465] should_fail_ex.cold+0x5/0xa [ 820.599182][T24465] should_failslab+0xc2/0x120 [ 820.599200][T24465] __kvmalloc_node_noprof+0x113/0x9b0 [ 820.599217][T24465] ? __pfx_net_ctl_permissions+0x10/0x10 [ 820.599236][T24465] ? proc_sys_call_handler+0x2c7/0x5a0 [ 820.599251][T24465] proc_sys_call_handler+0x2c7/0x5a0 [ 820.599263][T24465] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 820.599279][T24465] vfs_write+0x6af/0x1050 [ 820.599294][T24465] ? __pfx_proc_sys_write+0x10/0x10 [ 820.599307][T24465] ? __pfx_vfs_write+0x10/0x10 [ 820.599320][T24465] ? find_held_lock+0x2b/0x80 [ 820.599344][T24465] ksys_write+0x12a/0x250 [ 820.599358][T24465] ? __pfx_ksys_write+0x10/0x10 [ 820.599371][T24465] ? ksys_write+0x1ac/0x250 [ 820.599385][T24465] ? __pfx_ksys_write+0x10/0x10 [ 820.599402][T24465] __do_fast_syscall_32+0x13a/0x8b0 [ 820.599414][T24465] ? lockdep_hardirqs_on+0x7d/0x110 [ 820.599432][T24465] do_fast_syscall_32+0x32/0x70 [ 820.599444][T24465] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 820.599459][T24465] RIP: 0023:0xf73eefec [ 820.599472][T24465] Code: Unable to access opcode bytes at 0xf73eefc2. [ 820.599477][T24465] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 820.599488][T24465] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080006b40 [ 820.599496][T24465] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 820.599502][T24465] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 820.599509][T24465] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 820.599516][T24465] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 820.599531][T24465] [ 820.638470][T23189] microsoft 0003:045E:07DA.0010: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 820.643466][T24463] syzkaller0: entered promiscuous mode [ 820.643482][T24463] syzkaller0: entered allmulticast mode [ 820.730979][T10352] usb 14-1: USB disconnect, device number 6 [ 820.772031][T24465] syzkaller0: entered promiscuous mode [ 820.772045][T24465] syzkaller0: entered allmulticast mode [ 820.778023][T24468] fido_id[24468]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb14/report_descriptor': No such file or directory [ 821.315922][T24483] fuse: Unknown parameter '0x0000000000000004' [ 821.588980][ T6091] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 821.759213][ T6091] usb 10-1: Using ep0 maxpacket: 8 [ 821.759758][ T6091] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 821.760553][ T6091] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 821.760567][ T6091] usb 10-1: config 0 has no interface number 0 [ 821.760586][ T6091] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 821.760598][ T6091] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 821.760612][ T6091] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 821.760627][ T6091] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 821.760647][ T6091] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.765559][ T6091] usb 10-1: config 0 descriptor?? [ 821.808661][ T6091] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 822.018077][T23189] usb 10-1: USB disconnect, device number 11 [ 822.035170][T23189] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 823.223092][T24499] FAULT_INJECTION: forcing a failure. [ 823.223092][T24499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 823.223114][T24499] CPU: 2 UID: 0 PID: 24499 Comm: syz.5.5442 Tainted: G L syzkaller #0 PREEMPT(full) [ 823.223130][T24499] Tainted: [L]=SOFTLOCKUP [ 823.223135][T24499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 823.223141][T24499] Call Trace: [ 823.223145][T24499] [ 823.223150][T24499] dump_stack_lvl+0x100/0x190 [ 823.223170][T24499] should_fail_ex.cold+0x5/0xa [ 823.223186][T24499] _copy_from_user+0x2e/0xd0 [ 823.223198][T24499] get_compat_msghdr+0xb3/0x480 [ 823.223231][T24499] ? __pfx_get_compat_msghdr+0x10/0x10 [ 823.223254][T24499] ___sys_sendmsg+0x1b6/0x1e0 [ 823.223273][T24499] ? __pfx____sys_sendmsg+0x10/0x10 [ 823.223297][T24499] ? find_held_lock+0x2b/0x80 [ 823.223320][T24499] __sys_sendmsg+0x160/0x210 [ 823.223334][T24499] ? __pfx___sys_sendmsg+0x10/0x10 [ 823.223352][T24499] ? syscall_user_dispatch+0x76/0x130 [ 823.223371][T24499] __do_fast_syscall_32+0x13a/0x8b0 [ 823.223384][T24499] ? lockdep_hardirqs_on+0x7d/0x110 [ 823.223402][T24499] do_fast_syscall_32+0x32/0x70 [ 823.223414][T24499] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 823.223429][T24499] RIP: 0023:0xf73aefec [ 823.223442][T24499] Code: Unable to access opcode bytes at 0xf73aefc2. [ 823.223447][T24499] RSP: 002b:00000000f538450c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 823.223459][T24499] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000100 [ 823.223466][T24499] RDX: 000000000000c080 RSI: 0000000000000000 RDI: 0000000000000000 [ 823.223473][T24499] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 823.223480][T24499] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 823.223486][T24499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 823.223501][T24499] [ 823.505952][T24502] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5444'. [ 823.506701][ T43] audit: type=1326 audit(1791891179.327:9424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24501 comm="syz.3.5444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fec code=0x7ffc0000 [ 823.507083][ T43] audit: type=1326 audit(1791891179.327:9425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24501 comm="syz.3.5444" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f42fec code=0x7ffc0000 [ 823.507471][ T43] audit: type=1326 audit(1791891179.327:9426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24501 comm="syz.3.5444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42fec code=0x7ffc0000 [ 823.507758][ T43] audit: type=1326 audit(1791891179.327:9427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24501 comm="syz.3.5444" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf713762b code=0x7ffc0000 [ 823.508005][ T43] audit: type=1326 audit(1791891179.327:9428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24501 comm="syz.3.5444" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f42fec code=0x7ffc0000 [ 823.508155][ T43] audit: type=1326 audit(1791891179.327:9429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24501 comm="syz.3.5444" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f42fec code=0x7ffc0000 [ 823.528701][ T43] audit: type=1326 audit(1791891179.347:9430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24501 comm="syz.3.5444" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f42fec code=0x7ffc0000 [ 823.528729][ T43] audit: type=1326 audit(1791891179.347:9431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24501 comm="syz.3.5444" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f42fec code=0x7ffc0000 [ 823.634579][ T43] audit: type=1326 audit(1791891179.457:9432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24501 comm="syz.3.5444" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f42fec code=0x7ffc0000 [ 823.704423][ T43] audit: type=1326 audit(1791891179.527:9433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24501 comm="syz.3.5444" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f42fec code=0x7ffc0000 [ 823.761438][T14803] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 823.914375][T14803] usb 8-1: Using ep0 maxpacket: 8 [ 823.915175][T14803] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 823.923765][T14803] usb 8-1: config 0 has no interfaces? [ 823.923784][T14803] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.925097][T14803] usb 8-1: config 0 descriptor?? [ 824.134387][T24081] usb 8-1: USB disconnect, device number 85 [ 825.699183][T24506] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 825.699267][T24506] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 825.705353][T24506] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 825.787557][T24506] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 825.787662][T24506] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 825.837490][T24506] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 825.842645][T24506] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 825.842919][T24506] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 825.876671][T24506] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 825.877503][T24506] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 825.877554][T24506] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 825.916802][T24506] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 826.201299][T23189] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 826.349352][T23189] usb 14-1: Using ep0 maxpacket: 8 [ 826.349794][T23189] usb 14-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 826.350637][T23189] usb 14-1: config 0 has an invalid interface number: 55 but max is 0 [ 826.350650][T23189] usb 14-1: config 0 has no interface number 0 [ 826.350673][T23189] usb 14-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 826.350686][T23189] usb 14-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 826.350699][T23189] usb 14-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 826.350711][T23189] usb 14-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 826.350731][T23189] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.351892][T23189] usb 14-1: config 0 descriptor?? [ 826.397643][T23189] ldusb 14-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 826.556168][T24531] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 826.734498][T14803] usb 14-1: USB disconnect, device number 7 [ 826.737245][T14803] ldusb 14-1:0.55: LD USB Device #0 now disconnected [ 826.755883][T24521] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5449'. [ 826.795308][T24533] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5446'. [ 826.796325][T24533] ipt_ah: unknown flags FE [ 826.961210][T24546] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 826.961225][T24546] device-mapper: ioctl: error adding target to table [ 826.983895][T24539] netlink: 'syz.3.5451': attribute type 9 has an invalid length. [ 827.020265][ T855] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 827.060292][T24550] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 827.083379][T24553] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 827.171020][ T855] usb 10-1: Using ep0 maxpacket: 8 [ 827.173954][ T855] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 827.181686][ T855] usb 10-1: config 0 has no interfaces? [ 827.181708][ T855] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.182938][ T855] usb 10-1: config 0 descriptor?? [ 827.257848][T15021] Bluetooth: hci2: unexpected cc 0x2029 length: 100 > 1 [ 827.257871][T15021] Bluetooth: hci2: unexpected event for opcode 0x2029 [ 827.272990][T24558] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5455'. [ 827.406544][T14803] usb 10-1: USB disconnect, device number 12 [ 827.411452][T24573] random: crng reseeded on system resumption [ 827.462512][T24570] netlink: 'syz.9.5457': attribute type 3 has an invalid length. [ 827.463468][T24570] netlink: 'syz.9.5457': attribute type 4 has an invalid length. [ 827.464383][T24573] netlink: zone id is out of range [ 827.464392][T24573] netlink: zone id is out of range [ 827.464396][T24573] netlink: zone id is out of range [ 827.464405][T24573] netlink: zone id is out of range [ 827.464409][T24573] netlink: zone id is out of range [ 827.464413][T24573] netlink: zone id is out of range [ 827.464420][T24573] netlink: get zone limit has 4 unknown bytes [ 827.729759][T15021] Bluetooth: hci0: command 0x0c1a tx timeout [ 827.736411][T24579] netlink: 'syz.9.5459': attribute type 9 has an invalid length. [ 827.809906][T15021] Bluetooth: hci3: command 0x0c1a tx timeout [ 827.889851][T15021] Bluetooth: hci1: command 0x0c1a tx timeout [ 828.038568][T24591] trusted_key: encrypted_key: insufficient parameters specified [ 828.040574][T24600] FAULT_INJECTION: forcing a failure. [ 828.040574][T24600] name fail_futex, interval 1, probability 0, space 0, times 0 [ 828.040670][T24600] CPU: 0 UID: 0 PID: 24600 Comm: syz.5.5461 Tainted: G L syzkaller #0 PREEMPT(full) [ 828.040686][T24600] Tainted: [L]=SOFTLOCKUP [ 828.040690][T24600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 828.040697][T24600] Call Trace: [ 828.040701][T24600] [ 828.040706][T24600] dump_stack_lvl+0x100/0x190 [ 828.040726][T24600] should_fail_ex.cold+0x5/0xa [ 828.040741][T24600] get_futex_key+0x1d0/0x14f0 [ 828.040756][T24600] ? __pfx_get_futex_key+0x10/0x10 [ 828.040774][T24600] futex_wake+0xf4/0x5e0 [ 828.040791][T24600] ? __pfx_futex_wake+0x10/0x10 [ 828.040808][T24600] ? __raw_spin_lock_init+0x3a/0x110 [ 828.040821][T24600] ? lockdep_init_map_type+0x5c/0x250 [ 828.040841][T24600] do_futex+0x2b2/0x440 [ 828.040855][T24600] ? __pfx_do_futex+0x10/0x10 [ 828.040872][T24600] __ia32_sys_futex_time32+0x2f4/0x470 [ 828.040889][T24600] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 828.040909][T24600] __do_fast_syscall_32+0x13a/0x8b0 [ 828.040922][T24600] ? lockdep_hardirqs_on+0x7d/0x110 [ 828.040940][T24600] do_fast_syscall_32+0x32/0x70 [ 828.040952][T24600] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 828.040967][T24600] RIP: 0023:0xf73aefec [ 828.040980][T24600] Code: Unable to access opcode bytes at 0xf73aefc2. [ 828.040986][T24600] RSP: 002b:00000000f53c65cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 828.040998][T24600] RAX: ffffffffffffffda RBX: 00000000f73d4f8c RCX: 0000000000000081 [ 828.041006][T24600] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 828.041014][T24600] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 828.041022][T24600] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 828.041029][T24600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 828.041045][T24600] [ 828.501294][T23189] usb 8-1: new high-speed USB device number 86 using dummy_hcd [ 828.513460][T24633] FAULT_INJECTION: forcing a failure. [ 828.513460][T24633] name fail_futex, interval 1, probability 0, space 0, times 0 [ 828.513482][T24633] CPU: 0 UID: 0 PID: 24633 Comm: syz.9.5471 Tainted: G L syzkaller #0 PREEMPT(full) [ 828.513498][T24633] Tainted: [L]=SOFTLOCKUP [ 828.513503][T24633] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 828.513510][T24633] Call Trace: [ 828.513514][T24633] [ 828.513519][T24633] dump_stack_lvl+0x100/0x190 [ 828.513540][T24633] should_fail_ex.cold+0x5/0xa [ 828.513555][T24633] get_futex_key+0x1d0/0x14f0 [ 828.513570][T24633] ? __pfx_get_futex_key+0x10/0x10 [ 828.513583][T24633] ? wakeup_preempt_fair+0x5c3/0xdc0 [ 828.513597][T24633] ? tracing_record_taskinfo_sched_switch+0xac/0x560 [ 828.513612][T24633] futex_wait_setup+0x91/0x540 [ 828.513633][T24633] __futex_wait+0x19f/0x300 [ 828.513650][T24633] ? __pfx___futex_wait+0x10/0x10 [ 828.513664][T24633] ? __pfx_try_to_wake_up+0x10/0x10 [ 828.513681][T24633] ? futex_hash+0x311/0x400 [ 828.513694][T24633] ? __pfx_futex_wake_mark+0x10/0x10 [ 828.513712][T24633] ? find_held_lock+0x2b/0x80 [ 828.513725][T24633] ? futex_wake+0x4ea/0x5e0 [ 828.513744][T24633] futex_wait+0xe6/0x370 [ 828.513759][T24633] ? __pfx_futex_wait+0x10/0x10 [ 828.513778][T24633] ? __raw_spin_lock_init+0x3a/0x110 [ 828.513790][T24633] ? lockdep_init_map_type+0x5c/0x250 [ 828.513810][T24633] do_futex+0x265/0x440 [ 828.513824][T24633] ? __pfx_do_futex+0x10/0x10 [ 828.513841][T24633] __ia32_sys_futex_time32+0x2f4/0x470 [ 828.513858][T24633] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 828.513879][T24633] __do_fast_syscall_32+0x13a/0x8b0 [ 828.513891][T24633] ? lockdep_hardirqs_on+0x7d/0x110 [ 828.513910][T24633] do_fast_syscall_32+0x32/0x70 [ 828.513922][T24633] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 828.513937][T24633] RIP: 0023:0xf748efec [ 828.513950][T24633] Code: Unable to access opcode bytes at 0xf748efc2. [ 828.513956][T24633] RSP: 002b:00000000f54a65bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 828.513968][T24633] RAX: ffffffffffffffda RBX: 00000000f74b4f88 RCX: 0000000000000080 [ 828.513976][T24633] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f74b4f8c [ 828.513984][T24633] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 828.513991][T24633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 828.513999][T24633] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 828.514014][T24633] [ 828.653687][T23189] usb 8-1: Using ep0 maxpacket: 8 [ 828.654295][T23189] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 828.655182][T23189] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 828.655195][T23189] usb 8-1: config 0 has no interface number 0 [ 828.655212][T23189] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 828.655230][T23189] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 828.655242][T23189] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 828.655255][T23189] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 828.655274][T23189] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.656655][T23189] usb 8-1: config 0 descriptor?? [ 828.666490][T23189] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 828.692817][T24637] FAULT_INJECTION: forcing a failure. [ 828.692817][T24637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 828.692837][T24637] CPU: 0 UID: 0 PID: 24637 Comm: syz.9.5472 Tainted: G L syzkaller #0 PREEMPT(full) [ 828.692853][T24637] Tainted: [L]=SOFTLOCKUP [ 828.692857][T24637] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 828.692864][T24637] Call Trace: [ 828.692869][T24637] [ 828.692874][T24637] dump_stack_lvl+0x100/0x190 [ 828.692894][T24637] should_fail_ex.cold+0x5/0xa [ 828.692910][T24637] _copy_to_user+0x32/0xd0 [ 828.692923][T24637] simple_read_from_buffer+0xcb/0x170 [ 828.692940][T24637] proc_fail_nth_read+0x1af/0x230 [ 828.692957][T24637] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 828.692973][T24637] ? rw_verify_area+0xce/0x6d0 [ 828.692986][T24637] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 828.693001][T24637] vfs_read+0x1e4/0xb40 [ 828.693015][T24637] ? lock_acquire+0x1d1/0x380 [ 828.693032][T24637] ? __fget_files+0x34/0x3d0 [ 828.693047][T24637] ? __pfx_vfs_read+0x10/0x10 [ 828.693060][T24637] ? find_held_lock+0x2b/0x80 [ 828.693073][T24637] ? __fget_files+0x215/0x3d0 [ 828.693090][T24637] ? __fget_files+0x21f/0x3d0 [ 828.693110][T24637] ksys_read+0x12a/0x250 [ 828.693124][T24637] ? __pfx_ksys_read+0x10/0x10 [ 828.693142][T24637] do_int80_emulation+0x166/0x650 [ 828.693156][T24637] asm_int80_emulation+0x1a/0x20 [ 828.693167][T24637] RIP: 0023:0xf71e762b [ 828.693177][T24637] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 828.693189][T24637] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 828.693200][T24637] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54a65d0 [ 828.693207][T24637] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 828.693214][T24637] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 828.693226][T24637] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 828.693233][T24637] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 828.693248][T24637] [ 828.715072][T24617] FAULT_INJECTION: forcing a failure. [ 828.715072][T24617] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 828.715093][T24617] CPU: 0 UID: 0 PID: 24617 Comm: syz.5.5468 Tainted: G L syzkaller #0 PREEMPT(full) [ 828.715109][T24617] Tainted: [L]=SOFTLOCKUP [ 828.715113][T24617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 828.715120][T24617] Call Trace: [ 828.715125][T24617] [ 828.715129][T24617] dump_stack_lvl+0x100/0x190 [ 828.715149][T24617] should_fail_ex.cold+0x5/0xa [ 828.715162][T24617] ? prepare_alloc_pages+0x16d/0x5b0 [ 828.715193][T24617] should_fail_alloc_page+0xeb/0x140 [ 828.715215][T24617] prepare_alloc_pages+0x1f0/0x5b0 [ 828.715240][T24617] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 828.715260][T24617] ? rcu_is_watching+0x13/0xc0 [ 828.715273][T24617] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 828.715290][T24617] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 828.715310][T24617] ? __pfx_stack_trace_save+0x10/0x10 [ 828.715324][T24617] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 828.715341][T24617] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 828.715355][T24617] ? is_bpf_text_address+0x94/0x1a0 [ 828.715376][T24617] ? kasan_save_track+0x14/0x30 [ 828.715391][T24617] ? __kasan_slab_alloc+0x89/0x90 [ 828.715407][T24617] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 828.715422][T24617] ? alloc_vmap_area+0x640/0x2bb0 [ 828.715438][T24617] ? __get_vm_area_node+0x1ed/0x350 [ 828.715453][T24617] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 828.715471][T24617] ? __vmalloc_node_noprof+0xad/0xf0 [ 828.715488][T24617] ? __snd_dma_alloc_pages+0xd2/0x150 [ 828.715501][T24617] ? snd_dma_alloc_dir_pages+0x151/0x240 [ 828.715514][T24617] ? do_alloc_pages+0xe5/0x1e0 [ 828.715529][T24617] ? snd_pcm_lib_malloc_pages+0x4bd/0x9b0 [ 828.715620][T24617] ? snd_pcm_hw_params+0x1738/0x1cd0 [ 828.715630][T24617] ? snd_pcm_kernel_ioctl+0x104/0x280 [ 828.715641][T24617] ? snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 828.715656][T24617] ? snd_pcm_oss_make_ready+0xeb/0x1b0 [ 828.715694][T24617] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 828.715713][T24617] ? policy_nodemask+0xed/0x4f0 [ 828.715733][T24617] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 828.715757][T24617] __kasan_populate_vmalloc+0xf0/0x210 [ 828.715775][T24617] alloc_vmap_area+0x95d/0x2bb0 [ 828.715796][T24617] ? kasan_save_track+0x14/0x30 [ 828.715811][T24617] ? __kasan_kmalloc+0xaa/0xb0 [ 828.715826][T24617] ? __pfx_alloc_vmap_area+0x10/0x10 [ 828.715843][T24617] ? __get_vm_area_node+0x124/0x350 [ 828.715862][T24617] __get_vm_area_node+0x1ed/0x350 [ 828.715882][T24617] __vmalloc_node_range_noprof+0x268/0x1420 [ 828.715900][T24617] ? __snd_dma_alloc_pages+0xd2/0x150 [ 828.715913][T24617] ? lock_acquire+0x1d1/0x380 [ 828.715930][T24617] ? do_alloc_pages+0x39/0x1e0 [ 828.715949][T24617] ? __snd_dma_alloc_pages+0xd2/0x150 [ 828.715963][T24617] ? __mutex_lock+0x26c/0x1bd0 [ 828.715975][T24617] ? do_alloc_pages+0x39/0x1e0 [ 828.715991][T24617] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 828.716009][T24617] ? do_alloc_pages+0xb3/0x1e0 [ 828.716025][T24617] ? do_alloc_pages+0xb3/0x1e0 [ 828.716045][T24617] ? __snd_dma_alloc_pages+0xd2/0x150 [ 828.716058][T24617] __vmalloc_node_noprof+0xad/0xf0 [ 828.716075][T24617] ? __snd_dma_alloc_pages+0xd2/0x150 [ 828.716089][T24617] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 828.716101][T24617] __snd_dma_alloc_pages+0xd2/0x150 [ 828.716115][T24617] snd_dma_alloc_dir_pages+0x151/0x240 [ 828.716130][T24617] do_alloc_pages+0xe5/0x1e0 [ 828.716149][T24617] snd_pcm_lib_malloc_pages+0x4bd/0x9b0 [ 828.716169][T24617] snd_pcm_hw_params+0x1738/0x1cd0 [ 828.716182][T24617] ? do_raw_spin_lock+0x128/0x260 [ 828.716194][T24617] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 828.716204][T24617] ? find_held_lock+0x2b/0x80 [ 828.716225][T24617] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 828.716242][T24617] ? lockdep_hardirqs_on+0x7d/0x110 [ 828.716259][T24617] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 828.716277][T24617] snd_pcm_kernel_ioctl+0x104/0x280 [ 828.716289][T24617] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 828.716312][T24617] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 828.716329][T24617] ? __pfx___mutex_lock+0x10/0x10 [ 828.716346][T24617] ? locks_remove_file+0x42e/0x600 [ 828.716358][T24617] ? locks_remove_file+0x42e/0x600 [ 828.716373][T24617] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 828.716390][T24617] snd_pcm_oss_sync+0x1de/0x840 [ 828.716408][T24617] snd_pcm_oss_release+0x238/0x300 [ 828.716424][T24617] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 828.716439][T24617] __fput+0x400/0xb60 [ 828.716460][T24617] task_work_run+0x150/0x240 [ 828.716475][T24617] ? __pfx_task_work_run+0x10/0x10 [ 828.716494][T24617] exit_to_user_mode_loop+0x1d8/0x700 [ 828.716505][T24617] ? rcu_is_watching+0x13/0xc0 [ 828.716519][T24617] __do_fast_syscall_32+0x59f/0x8b0 [ 828.716533][T24617] do_fast_syscall_32+0x32/0x70 [ 828.716544][T24617] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 828.716559][T24617] RIP: 0023:0xf73aefec [ 828.716573][T24617] Code: Unable to access opcode bytes at 0xf73aefc2. [ 828.716578][T24617] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 00000000000001b4 [ 828.716589][T24617] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000ffffffff [ 828.716596][T24617] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 828.716603][T24617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 828.716609][T24617] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 828.716616][T24617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 828.716630][T24617] [ 828.730763][T24617] warn_alloc: 1 callbacks suppressed [ 828.730775][T24617] syz.5.5468: vmalloc error: size 2097152, align 0x1, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 828.730904][T24617] CPU: 0 UID: 0 PID: 24617 Comm: syz.5.5468 Tainted: G L syzkaller #0 PREEMPT(full) [ 828.730920][T24617] Tainted: [L]=SOFTLOCKUP [ 828.730924][T24617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 828.730931][T24617] Call Trace: [ 828.730935][T24617] [ 828.730940][T24617] dump_stack_lvl+0x100/0x190 [ 828.730959][T24617] warn_alloc.cold+0x9e/0xb2 [ 828.730972][T24617] ? __pfx_warn_alloc+0x10/0x10 [ 828.730986][T24617] ? lockdep_hardirqs_on+0x7d/0x110 [ 828.731006][T24617] ? __get_vm_area_node+0x2f0/0x350 [ 828.731026][T24617] ? __get_vm_area_node+0x22b/0x350 [ 828.731046][T24617] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 828.731065][T24617] ? lock_acquire+0x1d1/0x380 [ 828.731081][T24617] ? do_alloc_pages+0x39/0x1e0 [ 828.731102][T24617] ? __snd_dma_alloc_pages+0xd2/0x150 [ 828.731116][T24617] ? __mutex_lock+0x26c/0x1bd0 [ 828.731127][T24617] ? do_alloc_pages+0x39/0x1e0 [ 828.731143][T24617] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 828.731161][T24617] ? do_alloc_pages+0xb3/0x1e0 [ 828.731177][T24617] ? do_alloc_pages+0xb3/0x1e0 [ 828.731208][T24617] ? __snd_dma_alloc_pages+0xd2/0x150 [ 828.731227][T24617] __vmalloc_node_noprof+0xad/0xf0 [ 828.731245][T24617] ? __snd_dma_alloc_pages+0xd2/0x150 [ 828.731258][T24617] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 828.731271][T24617] __snd_dma_alloc_pages+0xd2/0x150 [ 828.731285][T24617] snd_dma_alloc_dir_pages+0x151/0x240 [ 828.731300][T24617] do_alloc_pages+0xe5/0x1e0 [ 828.731320][T24617] snd_pcm_lib_malloc_pages+0x4bd/0x9b0 [ 828.731341][T24617] snd_pcm_hw_params+0x1738/0x1cd0 [ 828.731354][T24617] ? do_raw_spin_lock+0x128/0x260 [ 828.731366][T24617] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 828.731376][T24617] ? find_held_lock+0x2b/0x80 [ 828.731392][T24617] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 828.731408][T24617] ? lockdep_hardirqs_on+0x7d/0x110 [ 828.731425][T24617] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 828.731443][T24617] snd_pcm_kernel_ioctl+0x104/0x280 [ 828.731455][T24617] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 828.731479][T24617] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 828.731495][T24617] ? __pfx___mutex_lock+0x10/0x10 [ 828.731512][T24617] ? locks_remove_file+0x42e/0x600 [ 828.731524][T24617] ? locks_remove_file+0x42e/0x600 [ 828.731539][T24617] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 828.731557][T24617] snd_pcm_oss_sync+0x1de/0x840 [ 828.731575][T24617] snd_pcm_oss_release+0x238/0x300 [ 828.731591][T24617] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 828.731607][T24617] __fput+0x400/0xb60 [ 828.731628][T24617] task_work_run+0x150/0x240 [ 828.731643][T24617] ? __pfx_task_work_run+0x10/0x10 [ 828.731678][T24617] exit_to_user_mode_loop+0x1d8/0x700 [ 828.731692][T24617] ? rcu_is_watching+0x13/0xc0 [ 828.731707][T24617] __do_fast_syscall_32+0x59f/0x8b0 [ 828.731721][T24617] do_fast_syscall_32+0x32/0x70 [ 828.731733][T24617] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 828.731747][T24617] RIP: 0023:0xf73aefec [ 828.731761][T24617] Code: Unable to access opcode bytes at 0xf73aefc2. [ 828.731766][T24617] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 00000000000001b4 [ 828.731777][T24617] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000ffffffff [ 828.731784][T24617] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 828.731790][T24617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 828.731797][T24617] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 828.731803][T24617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 828.731818][T24617] [ 828.731857][T24617] Mem-Info: [ 828.731864][T24617] active_anon:5033 inactive_anon:2119 isolated_anon:0 [ 828.731864][T24617] active_file:2592 inactive_file:12388 isolated_file:0 [ 828.731864][T24617] unevictable:0 dirty:255 writeback:0 [ 828.731864][T24617] slab_reclaimable:7988 slab_unreclaimable:90774 [ 828.731864][T24617] mapped:26175 shmem:4479 pagetables:1221 [ 828.731864][T24617] sec_pagetables:318 bounce:0 [ 828.731864][T24617] kernel_misc_reclaimable:0 [ 828.731864][T24617] free:25820 free_pcp:3578 free_cma:0 [ 828.731890][T24617] Node 0 active_anon:12kB inactive_anon:56kB active_file:132kB inactive_file:1556kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2076kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9792kB pagetables:1392kB sec_pagetables:1116kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 828.731916][T24617] Node 1 active_anon:20120kB inactive_anon:8420kB active_file:10236kB inactive_file:47996kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:102624kB dirty:1012kB writeback:0kB shmem:17916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:8708kB pagetables:3492kB sec_pagetables:156kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 828.731943][T24617] Node 0 DMA free:3908kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 828.731972][T24617] lowmem_reserve[]: 0 259 259 259 259 [ 828.731990][T24617] Node 0 DMA32 free:17004kB boost:4096kB min:15800kB low:18724kB high:21648kB reserved_highatomic:2048kB free_highatomic:1180kB active_anon:8kB inactive_anon:56kB active_file:132kB inactive_file:1552kB unevictable:0kB writepending:8kB zspages:316kB present:1032196kB managed:265360kB mlocked:0kB bounce:0kB free_pcp:1084kB local_pcp:868kB free_cma:0kB [ 828.732020][T24617] lowmem_reserve[]: 0 0 0 0 0 [ 828.732037][T24617] Node 1 DMA32 free:82368kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:20120kB inactive_anon:8420kB active_file:10236kB inactive_file:47996kB unevictable:0kB writepending:1012kB zspages:5992kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:13224kB local_pcp:4788kB free_cma:0kB [ 828.732067][T24617] lowmem_reserve[]: 0 0 0 0 0 [ 828.732084][T24617] Node 0 DMA: 133*4kB (UM) 102*8kB (UM) 54*16kB (UM) 29*32kB (UM) 6*64kB (UM) 1*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3908kB [ 828.741182][T24617] Node 0 DMA32: 439*4kB (UEH) 198*8kB (UMEH) 21*16kB (UMEH) 70*32kB (UMEH) 37*64kB (UME) 22*128kB (UMEH) 7*256kB (UMH) 8*512kB (UMH) 0*1024kB 0*2048kB 0*4096kB = 16988kB [ 828.741261][T24617] Node 1 DMA32: 18*4kB (ME) 327*8kB (UME) 176*16kB (UE) 325*32kB (UME) 116*64kB (UME) 81*128kB (UME) 50*256kB (UME) 44*512kB (UM) 13*1024kB (UM) 0*2048kB 0*4096kB = 82336kB [ 828.741337][T24617] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 828.741346][T24617] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 828.741354][T24617] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 828.741362][T24617] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 828.741371][T24617] 20331 total pagecache pages [ 828.741375][T24617] 874 pages in swap cache [ 828.741379][T24617] Free swap = 92700kB [ 828.741383][T24617] Total swap = 124996kB [ 828.741387][T24617] 524155 pages RAM [ 828.741391][T24617] 0 pages HighMem/MovableOnly [ 828.741395][T24617] 216923 pages reserved [ 828.741399][T24617] 0 pages cma reserved [ 828.782551][T24619] dummy0 speed is unknown, defaulting to 1000 [ 828.975538][T23189] usb 8-1: USB disconnect, device number 86 [ 828.996880][T23189] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 829.383294][ T43] kauditd_printk_skb: 52 callbacks suppressed [ 829.383308][ T43] audit: type=1326 audit(1791891185.207:9486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24651 comm="syz.5.5476" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73aefec code=0x0 [ 829.614371][T24658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5478'. [ 829.687131][T24662] FAULT_INJECTION: forcing a failure. [ 829.687131][T24662] name failslab, interval 1, probability 0, space 0, times 0 [ 829.687154][T24662] CPU: 0 UID: 0 PID: 24662 Comm: syz.3.5479 Tainted: G L syzkaller #0 PREEMPT(full) [ 829.687170][T24662] Tainted: [L]=SOFTLOCKUP [ 829.687175][T24662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 829.687182][T24662] Call Trace: [ 829.687186][T24662] [ 829.687192][T24662] dump_stack_lvl+0x100/0x190 [ 829.687212][T24662] should_fail_ex.cold+0x5/0xa [ 829.687232][T24662] should_failslab+0xc2/0x120 [ 829.687251][T24662] __kmalloc_cache_noprof+0x91/0x6d0 [ 829.687265][T24662] ? cma_alloc_port+0x9b/0x5f0 [ 829.687282][T24662] cma_alloc_port+0x9b/0x5f0 [ 829.687297][T24662] rdma_bind_addr_dst+0x2702/0x2c70 [ 829.687320][T24662] cma_bind_addr+0x2be/0x300 [ 829.687336][T24662] ? __pfx_cma_bind_addr+0x10/0x10 [ 829.687357][T24662] ? mark_held_locks+0x40/0x70 [ 829.687374][T24662] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 829.687393][T24662] rdma_resolve_addr+0x142/0x20e0 [ 829.687421][T24662] ? xa_load+0x153/0x2c0 [ 829.687436][T24662] ? __pfx_xa_load+0x10/0x10 [ 829.687449][T24662] ? ucma_get_ctx+0xc7/0x280 [ 829.687464][T24662] ? __pfx_rdma_resolve_addr+0x10/0x10 [ 829.687479][T24662] ? do_raw_spin_unlock+0x145/0x1e0 [ 829.687494][T24662] ? __pfx_ucma_get_ctx+0x10/0x10 [ 829.687510][T24662] ? ucma_resolve_addr+0x1ac/0x270 [ 829.687523][T24662] ucma_resolve_addr+0x1ac/0x270 [ 829.687536][T24662] ? __pfx_ucma_resolve_addr+0x10/0x10 [ 829.687549][T24662] ? __lock_acquire+0x5c0/0x1f40 [ 829.687581][T24662] ? __pfx_ucma_resolve_addr+0x10/0x10 [ 829.687595][T24662] ucma_write+0x1fb/0x330 [ 829.687607][T24662] ? __pfx_ucma_write+0x10/0x10 [ 829.687619][T24662] ? bpf_lsm_file_permission+0x9/0x10 [ 829.687636][T24662] ? security_file_permission+0x76/0x210 [ 829.687651][T24662] ? rw_verify_area+0xce/0x6d0 [ 829.687689][T24662] vfs_write+0x2aa/0x1050 [ 829.687704][T24662] ? __pfx_ucma_write+0x10/0x10 [ 829.687716][T24662] ? lock_acquire+0x1d1/0x380 [ 829.687732][T24662] ? __fget_files+0x34/0x3d0 [ 829.687746][T24662] ? __pfx_vfs_write+0x10/0x10 [ 829.687760][T24662] ? find_held_lock+0x2b/0x80 [ 829.687773][T24662] ? __fget_files+0x215/0x3d0 [ 829.687863][T24662] ? __fget_files+0x215/0x3d0 [ 829.687880][T24662] ? __fget_files+0x21f/0x3d0 [ 829.687899][T24662] ksys_write+0x1f8/0x250 [ 829.687913][T24662] ? __pfx_ksys_write+0x10/0x10 [ 829.687926][T24662] ? ksys_write+0x1ac/0x250 [ 829.687940][T24662] ? __pfx_ksys_write+0x10/0x10 [ 829.687957][T24662] __do_fast_syscall_32+0x13a/0x8b0 [ 829.687968][T24662] ? lockdep_hardirqs_on+0x7d/0x110 [ 829.687987][T24662] do_fast_syscall_32+0x32/0x70 [ 829.687999][T24662] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 829.688013][T24662] RIP: 0023:0xf7f42fec [ 829.688027][T24662] Code: Unable to access opcode bytes at 0xf7f42fc2. [ 829.688033][T24662] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 829.688044][T24662] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 829.688051][T24662] RDX: 0000000000000118 RSI: 0000000000000000 RDI: 0000000000000000 [ 829.688058][T24662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 829.688064][T24662] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 829.688071][T24662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 829.688086][T24662] [ 829.795869][T24654] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5476'. [ 829.810566][T15021] Bluetooth: hci0: command 0x0c1a tx timeout [ 829.826920][T24664] FAULT_INJECTION: forcing a failure. [ 829.826920][T24664] name fail_futex, interval 1, probability 0, space 0, times 0 [ 829.826950][T24664] CPU: 2 UID: 0 PID: 24664 Comm: syz.3.5480 Tainted: G L syzkaller #0 PREEMPT(full) [ 829.826974][T24664] Tainted: [L]=SOFTLOCKUP [ 829.826981][T24664] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 829.826992][T24664] Call Trace: [ 829.826999][T24664] [ 829.827007][T24664] dump_stack_lvl+0x100/0x190 [ 829.827036][T24664] should_fail_ex.cold+0x5/0xa [ 829.827060][T24664] get_futex_key+0x1d0/0x14f0 [ 829.827083][T24664] ? __pfx_get_futex_key+0x10/0x10 [ 829.827113][T24664] futex_wake+0xf4/0x5e0 [ 829.827141][T24664] ? __pfx_futex_wake+0x10/0x10 [ 829.827168][T24664] ? __raw_spin_lock_init+0x3a/0x110 [ 829.827188][T24664] ? lockdep_init_map_type+0x5c/0x250 [ 829.827221][T24664] do_futex+0x2b2/0x440 [ 829.827243][T24664] ? __pfx_do_futex+0x10/0x10 [ 829.827270][T24664] __ia32_sys_futex_time32+0x2f4/0x470 [ 829.827295][T24664] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 829.827335][T24664] __do_fast_syscall_32+0x13a/0x8b0 [ 829.827357][T24664] ? lockdep_hardirqs_on+0x7d/0x110 [ 829.827389][T24664] do_fast_syscall_32+0x32/0x70 [ 829.827410][T24664] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 829.827436][T24664] RIP: 0023:0xf7f42fec [ 829.827456][T24664] Code: Unable to access opcode bytes at 0xf7f42fc2. [ 829.827464][T24664] RSP: 002b:00000000f53f65cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 829.827483][T24664] RAX: ffffffffffffffda RBX: 00000000f7404f8c RCX: 0000000000000081 [ 829.827496][T24664] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 829.827507][T24664] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 829.827519][T24664] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 829.827531][T24664] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 829.827556][T24664] [ 829.889977][T15021] Bluetooth: hci3: command 0x0c1a tx timeout [ 829.969992][T15021] Bluetooth: hci1: command 0x0c1a tx timeout [ 829.984503][T24667] FAULT_INJECTION: forcing a failure. [ 829.984503][T24667] name failslab, interval 1, probability 0, space 0, times 0 [ 829.984524][T24667] CPU: 0 UID: 0 PID: 24667 Comm: syz.3.5481 Tainted: G L syzkaller #0 PREEMPT(full) [ 829.984540][T24667] Tainted: [L]=SOFTLOCKUP [ 829.984544][T24667] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 829.984551][T24667] Call Trace: [ 829.984556][T24667] [ 829.984561][T24667] dump_stack_lvl+0x100/0x190 [ 829.984580][T24667] should_fail_ex.cold+0x5/0xa [ 829.984596][T24667] should_failslab+0xc2/0x120 [ 829.984614][T24667] __kmalloc_cache_noprof+0x91/0x6d0 [ 829.984629][T24667] ? configfs_write_iter+0x388/0x4e0 [ 829.984643][T24667] configfs_write_iter+0x388/0x4e0 [ 829.984657][T24667] vfs_write+0x6af/0x1050 [ 829.984672][T24667] ? __pfx_configfs_write_iter+0x10/0x10 [ 829.984685][T24667] ? __pfx_vfs_write+0x10/0x10 [ 829.984699][T24667] ? find_held_lock+0x2b/0x80 [ 829.984723][T24667] ksys_write+0x12a/0x250 [ 829.984737][T24667] ? __pfx_ksys_write+0x10/0x10 [ 829.984750][T24667] ? ksys_write+0x1ac/0x250 [ 829.984764][T24667] ? __pfx_ksys_write+0x10/0x10 [ 829.984782][T24667] __do_fast_syscall_32+0x13a/0x8b0 [ 829.984794][T24667] ? lockdep_hardirqs_on+0x7d/0x110 [ 829.984813][T24667] do_fast_syscall_32+0x32/0x70 [ 829.984824][T24667] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 829.984846][T24667] RIP: 0023:0xf7f42fec [ 829.984858][T24667] Code: Unable to access opcode bytes at 0xf7f42fc2. [ 829.984864][T24667] RSP: 002b:00000000f53d550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 829.984875][T24667] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000840 [ 829.984882][T24667] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 829.984889][T24667] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 829.984896][T24667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 829.984902][T24667] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 829.984917][T24667] [ 830.203084][T24671] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 830.203542][T24671] team0: Device macvlan2 is already an upper device of the team interface [ 830.353701][T15021] Bluetooth: hci0: unexpected event for opcode 0x201c [ 830.362627][T24673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5484'. [ 830.491706][T24680] device-mapper: table: 248:0: multipath: not enough priority group arguments (-EINVAL) [ 830.491723][T24680] device-mapper: ioctl: error adding target to table [ 830.538517][T24682] netlink: 348 bytes leftover after parsing attributes in process `syz.9.5487'. [ 830.663412][T24686] FAULT_INJECTION: forcing a failure. [ 830.663412][T24686] name fail_futex, interval 1, probability 0, space 0, times 0 [ 830.663434][T24686] CPU: 0 UID: 0 PID: 24686 Comm: syz.9.5489 Tainted: G L syzkaller #0 PREEMPT(full) [ 830.663450][T24686] Tainted: [L]=SOFTLOCKUP [ 830.663455][T24686] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 830.663462][T24686] Call Trace: [ 830.663467][T24686] [ 830.663472][T24686] dump_stack_lvl+0x100/0x190 [ 830.663492][T24686] should_fail_ex.cold+0x5/0xa [ 830.663508][T24686] get_futex_key+0x1d0/0x14f0 [ 830.663523][T24686] ? __pfx_get_futex_key+0x10/0x10 [ 830.663540][T24686] futex_wake+0xf4/0x5e0 [ 830.663558][T24686] ? __pfx_futex_wake+0x10/0x10 [ 830.663576][T24686] ? __raw_spin_lock_init+0x3a/0x110 [ 830.663589][T24686] ? lockdep_init_map_type+0x5c/0x250 [ 830.663611][T24686] do_futex+0x2b2/0x440 [ 830.663625][T24686] ? __pfx_do_futex+0x10/0x10 [ 830.663644][T24686] __ia32_sys_futex_time32+0x2f4/0x470 [ 830.663684][T24686] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 830.663706][T24686] __do_fast_syscall_32+0x13a/0x8b0 [ 830.663719][T24686] ? lockdep_hardirqs_on+0x7d/0x110 [ 830.663738][T24686] do_fast_syscall_32+0x32/0x70 [ 830.663751][T24686] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 830.663766][T24686] RIP: 0023:0xf748efec [ 830.663779][T24686] Code: Unable to access opcode bytes at 0xf748efc2. [ 830.663785][T24686] RSP: 002b:00000000f54a65cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 830.663797][T24686] RAX: ffffffffffffffda RBX: 00000000f74b4f8c RCX: 0000000000000081 [ 830.663806][T24686] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 830.663813][T24686] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 830.663821][T24686] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 830.663833][T24686] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 830.663849][T24686] [ 831.189066][T10352] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 831.359192][T10352] usb 14-1: Using ep0 maxpacket: 8 [ 831.361995][T10352] usb 14-1: unable to get BOS descriptor or descriptor too short [ 831.362024][T10352] usb 14-1: New USB device found, idVendor=17ef, idProduct=7205, bcdDevice=8b.61 [ 831.362944][T10352] usb 14-1: config 42 has an invalid interface number: 170 but max is 0 [ 831.362959][T10352] usb 14-1: config 42 has no interface number 0 [ 831.362973][T10352] usb 14-1: config 42 interface 170 has no altsetting 0 [ 831.364974][T10352] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.365027][T10352] usb 14-1: Product: syz [ 831.365036][T10352] usb 14-1: Manufacturer: syz [ 831.365044][T10352] usb 14-1: SerialNumber: syz [ 831.368918][T10352] r8152-cfgselector 14-1: Unknown version 0x0000 [ 831.599346][T10352] r8152-cfgselector 14-1: USB disconnect, device number 8 [ 831.618412][T24697] random: crng reseeded on system resumption [ 831.635340][T24697] netlink: zone id is out of range [ 831.635348][T24697] netlink: zone id is out of range [ 831.635353][T24697] netlink: zone id is out of range [ 831.635357][T24697] netlink: zone id is out of range [ 831.635361][T24697] netlink: zone id is out of range [ 831.635365][T24697] netlink: zone id is out of range [ 831.635371][T24697] netlink: get zone limit has 4 unknown bytes [ 831.734136][T24701] device-mapper: table: 248:0: multipath: not enough priority group arguments (-EINVAL) [ 831.734152][T24701] device-mapper: ioctl: error adding target to table [ 831.734167][T24702] random: crng reseeded on system resumption [ 831.755479][T24702] netlink: zone id is out of range [ 831.755488][T24702] netlink: zone id is out of range [ 831.755492][T24702] netlink: zone id is out of range [ 831.969709][T15021] Bluetooth: hci3: command 0x0c1a tx timeout [ 832.049750][T15021] Bluetooth: hci1: command 0x0c1a tx timeout [ 832.059017][T10352] usb 8-1: new high-speed USB device number 87 using dummy_hcd [ 832.193282][T24711] FAULT_INJECTION: forcing a failure. [ 832.193282][T24711] name fail_futex, interval 1, probability 0, space 0, times 0 [ 832.193304][T24711] CPU: 0 UID: 0 PID: 24711 Comm: syz.9.5499 Tainted: G L syzkaller #0 PREEMPT(full) [ 832.193320][T24711] Tainted: [L]=SOFTLOCKUP [ 832.193325][T24711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 832.193332][T24711] Call Trace: [ 832.193336][T24711] [ 832.193341][T24711] dump_stack_lvl+0x100/0x190 [ 832.193361][T24711] should_fail_ex.cold+0x5/0xa [ 832.193378][T24711] get_futex_key+0x1d0/0x14f0 [ 832.193392][T24711] ? __pfx_get_futex_key+0x10/0x10 [ 832.193409][T24711] futex_wake+0xf4/0x5e0 [ 832.193427][T24711] ? __pfx_futex_wake+0x10/0x10 [ 832.193444][T24711] ? __raw_spin_lock_init+0x3a/0x110 [ 832.193458][T24711] ? lockdep_init_map_type+0x5c/0x250 [ 832.193479][T24711] do_futex+0x2b2/0x440 [ 832.193493][T24711] ? __pfx_do_futex+0x10/0x10 [ 832.193510][T24711] __ia32_sys_futex_time32+0x2f4/0x470 [ 832.193527][T24711] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 832.193549][T24711] __do_fast_syscall_32+0x13a/0x8b0 [ 832.193561][T24711] ? lockdep_hardirqs_on+0x7d/0x110 [ 832.193580][T24711] do_fast_syscall_32+0x32/0x70 [ 832.193592][T24711] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 832.193607][T24711] RIP: 0023:0xf748efec [ 832.193620][T24711] Code: Unable to access opcode bytes at 0xf748efc2. [ 832.193626][T24711] RSP: 002b:00000000f54a65cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 832.193637][T24711] RAX: ffffffffffffffda RBX: 00000000f74b4f8c RCX: 0000000000000081 [ 832.193645][T24711] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 832.193656][T24711] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 832.193662][T24711] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 832.193669][T24711] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 832.193684][T24711] [ 832.241518][T10352] usb 8-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 832.267068][T10352] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 832.267091][T10352] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 832.273868][T10352] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.273896][T10352] usb 8-1: Product: syz [ 832.273909][T10352] usb 8-1: Manufacturer: syz [ 832.273922][T10352] usb 8-1: SerialNumber: syz [ 832.414418][T24719] FAULT_INJECTION: forcing a failure. [ 832.414418][T24719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 832.414440][T24719] CPU: 2 UID: 0 PID: 24719 Comm: syz.9.5502 Tainted: G L syzkaller #0 PREEMPT(full) [ 832.414456][T24719] Tainted: [L]=SOFTLOCKUP [ 832.414461][T24719] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 832.414467][T24719] Call Trace: [ 832.414471][T24719] [ 832.414476][T24719] dump_stack_lvl+0x100/0x190 [ 832.414495][T24719] should_fail_ex.cold+0x5/0xa [ 832.414510][T24719] _copy_from_iter+0x1f4/0x1690 [ 832.414535][T24719] ? __asan_memset+0x23/0x50 [ 832.414553][T24719] ? __pfx__copy_from_iter+0x10/0x10 [ 832.414564][T24719] ? __pfx___alloc_skb+0x10/0x10 [ 832.414579][T24719] ? aa_sk_perm+0x389/0xab0 [ 832.414596][T24719] netlink_sendmsg+0x808/0xda0 [ 832.414611][T24719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 832.414625][T24719] ? apparmor_socket_sendmsg+0x165/0x280 [ 832.414639][T24719] ____sys_sendmsg+0xa4d/0xbe0 [ 832.414654][T24719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 832.414667][T24719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 832.414690][T24719] ___sys_sendmsg+0x190/0x1e0 [ 832.414709][T24719] ? __pfx____sys_sendmsg+0x10/0x10 [ 832.414733][T24719] ? find_held_lock+0x2b/0x80 [ 832.414756][T24719] __sys_sendmsg+0x160/0x210 [ 832.414769][T24719] ? __pfx___sys_sendmsg+0x10/0x10 [ 832.414787][T24719] ? __pfx_ksys_write+0x10/0x10 [ 832.414804][T24719] __do_fast_syscall_32+0x13a/0x8b0 [ 832.414817][T24719] ? lockdep_hardirqs_on+0x7d/0x110 [ 832.414836][T24719] do_fast_syscall_32+0x32/0x70 [ 832.414848][T24719] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 832.414862][T24719] RIP: 0023:0xf748efec [ 832.414875][T24719] Code: Unable to access opcode bytes at 0xf748efc2. [ 832.414881][T24719] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 832.414893][T24719] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 832.414900][T24719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 832.414907][T24719] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 832.414913][T24719] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 832.414920][T24719] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 832.414935][T24719] [ 832.505866][T24707] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5497'. [ 832.525576][T24192] IPVS: starting estimator thread 0... [ 832.570579][T24724] netlink: 'syz.9.5504': attribute type 1 has an invalid length. [ 832.599906][T24724] 8021q: adding VLAN 0 to HW filter on device bond1 [ 832.613245][T24722] IPVS: using max 43 ests per chain, 103200 per kthread [ 832.685424][T10352] usb 8-1: USB disconnect, device number 87 [ 832.786681][T24740] device-mapper: table: 248:0: multipath: not enough priority group arguments (-EINVAL) [ 832.786698][T24740] device-mapper: ioctl: error adding target to table [ 832.829109][T24743] random: crng reseeded on system resumption [ 833.002545][T24736] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5509'. [ 833.007893][T24736] cgroup: Invalid name [ 833.120044][T24761] batman_adv: batadv0: Interface deactivated: dummy0 [ 833.120060][T24761] batman_adv: batadv0: Removing interface: dummy0 [ 833.235581][T24767] device-mapper: table: 248:0: multipath: not enough priority group arguments (-EINVAL) [ 833.235597][T24767] device-mapper: ioctl: error adding target to table [ 833.360576][T24772] xt_hashlimit: invalid interval [ 833.428738][T24774] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 833.528132][T24771] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5523'. [ 833.534772][ T43] audit: type=1326 audit(1791891189.357:9487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24770 comm="syz.5.5523" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 833.534922][ T43] audit: type=1326 audit(1791891189.357:9488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24770 comm="syz.5.5523" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 833.535661][ T43] audit: type=1326 audit(1791891189.357:9489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24770 comm="syz.5.5523" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 833.536283][ T43] audit: type=1326 audit(1791891189.357:9490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24770 comm="syz.5.5523" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 833.538004][ T43] audit: type=1326 audit(1791891189.357:9491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24770 comm="syz.5.5523" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 833.542914][ T43] audit: type=1326 audit(1791891189.367:9492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24770 comm="syz.5.5523" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf710762b code=0x7ffc0000 [ 833.543236][ T43] audit: type=1326 audit(1791891189.367:9493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24770 comm="syz.5.5523" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 833.543482][ T43] audit: type=1326 audit(1791891189.367:9494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24770 comm="syz.5.5523" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 833.553831][ T43] audit: type=1326 audit(1791891189.377:9495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24770 comm="syz.5.5523" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73aefec code=0x7ffc0000 [ 833.789449][ T855] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 833.939991][ T855] usb 10-1: Using ep0 maxpacket: 8 [ 833.940877][ T855] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 833.941739][ T855] usb 10-1: config 0 has no interfaces? [ 833.941771][ T855] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.945379][ T855] usb 10-1: config 0 descriptor?? [ 834.173856][ T855] usb 10-1: USB disconnect, device number 13 [ 834.240089][T24794] netlink: 'syz.0.5530': attribute type 2 has an invalid length. [ 834.443483][T15021] Bluetooth: hci3: unexpected event for opcode 0x201c [ 834.444992][T24799] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5532'. [ 834.803392][T24806] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5535'. [ 834.986989][T24813] device-mapper: table: 248:0: multipath: not enough priority group arguments (-EINVAL) [ 834.987032][T24813] device-mapper: ioctl: error adding target to table [ 835.061888][T24815] FAULT_INJECTION: forcing a failure. [ 835.061888][T24815] name fail_futex, interval 1, probability 0, space 0, times 0 [ 835.062275][T24815] CPU: 0 UID: 0 PID: 24815 Comm: syz.0.5539 Tainted: G L syzkaller #0 PREEMPT(full) [ 835.062292][T24815] Tainted: [L]=SOFTLOCKUP [ 835.062297][T24815] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 835.062304][T24815] Call Trace: [ 835.062313][T24815] [ 835.062318][T24815] dump_stack_lvl+0x100/0x190 [ 835.062338][T24815] should_fail_ex.cold+0x5/0xa [ 835.062355][T24815] get_futex_key+0x1d0/0x14f0 [ 835.062371][T24815] ? __pfx_get_futex_key+0x10/0x10 [ 835.062387][T24815] futex_wait_setup+0x91/0x540 [ 835.062408][T24815] __futex_wait+0x19f/0x300 [ 835.062424][T24815] ? __pfx___futex_wait+0x10/0x10 [ 835.062439][T24815] ? __pfx_try_to_wake_up+0x10/0x10 [ 835.062456][T24815] ? futex_hash+0x311/0x400 [ 835.062468][T24815] ? __pfx_futex_wake_mark+0x10/0x10 [ 835.062486][T24815] ? find_held_lock+0x2b/0x80 [ 835.062501][T24815] ? futex_wake+0x4ea/0x5e0 [ 835.062521][T24815] futex_wait+0xe6/0x370 [ 835.062537][T24815] ? __pfx_futex_wait+0x10/0x10 [ 835.062555][T24815] ? __raw_spin_lock_init+0x3a/0x110 [ 835.062567][T24815] ? lockdep_init_map_type+0x5c/0x250 [ 835.062589][T24815] do_futex+0x265/0x440 [ 835.062602][T24815] ? __pfx_do_futex+0x10/0x10 [ 835.062619][T24815] __ia32_sys_futex_time32+0x2f4/0x470 [ 835.062636][T24815] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 835.062657][T24815] __do_fast_syscall_32+0x13a/0x8b0 [ 835.062669][T24815] ? lockdep_hardirqs_on+0x7d/0x110 [ 835.062688][T24815] do_fast_syscall_32+0x32/0x70 [ 835.062700][T24815] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 835.062715][T24815] RIP: 0023:0xf73eefec [ 835.062729][T24815] Code: Unable to access opcode bytes at 0xf73eefc2. [ 835.062734][T24815] RSP: 002b:00000000f54065bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 835.062747][T24815] RAX: ffffffffffffffda RBX: 00000000f7414f88 RCX: 0000000000000080 [ 835.062755][T24815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7414f8c [ 835.062763][T24815] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 835.062770][T24815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.062777][T24815] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 835.062791][T24815] [ 835.292718][T24834] device-mapper: table: 248:0: multipath: not enough priority group arguments (-EINVAL) [ 835.292734][T24834] device-mapper: ioctl: error adding target to table [ 835.318581][T24839] fuse: fd is not a fuse device [ 835.340666][T24844] FAULT_INJECTION: forcing a failure. [ 835.340666][T24844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 835.340689][T24844] CPU: 0 UID: 0 PID: 24844 Comm: syz.0.5550 Tainted: G L syzkaller #0 PREEMPT(full) [ 835.340705][T24844] Tainted: [L]=SOFTLOCKUP [ 835.340709][T24844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 835.340716][T24844] Call Trace: [ 835.340721][T24844] [ 835.340726][T24844] dump_stack_lvl+0x100/0x190 [ 835.340745][T24844] should_fail_ex.cold+0x5/0xa [ 835.340760][T24844] _copy_from_user+0x2e/0xd0 [ 835.340773][T24844] addrconf_set_dstaddr+0xb5/0x2f0 [ 835.340789][T24844] ? __pfx_addrconf_set_dstaddr+0x10/0x10 [ 835.340813][T24844] inet6_ioctl+0x24f/0x2b0 [ 835.340824][T24844] ? kasan_quarantine_put+0x104/0x240 [ 835.340841][T24844] ? __pfx_inet6_ioctl+0x10/0x10 [ 835.340852][T24844] ? find_held_lock+0x2b/0x80 [ 835.340866][T24844] ? tomoyo_path_number_perm+0x28f/0x580 [ 835.340881][T24844] ? tomoyo_path_number_perm+0x28f/0x580 [ 835.340896][T24844] ? tomoyo_path_number_perm+0x188/0x580 [ 835.340912][T24844] sock_do_ioctl+0x118/0x280 [ 835.340928][T24844] ? __pfx_sock_do_ioctl+0x10/0x10 [ 835.340947][T24844] ? do_vfs_ioctl+0x226/0x13e0 [ 835.340961][T24844] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 835.340976][T24844] compat_sock_ioctl+0x568/0x760 [ 835.340995][T24844] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 835.341012][T24844] ? hook_file_ioctl_common+0x140/0x440 [ 835.341029][T24844] ? __fget_files+0x21f/0x3d0 [ 835.341047][T24844] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 835.341065][T24844] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 835.341081][T24844] __do_fast_syscall_32+0x13a/0x8b0 [ 835.341093][T24844] ? lockdep_hardirqs_on+0x7d/0x110 [ 835.341111][T24844] do_fast_syscall_32+0x32/0x70 [ 835.341123][T24844] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 835.341137][T24844] RIP: 0023:0xf73eefec [ 835.341162][T24844] Code: Unable to access opcode bytes at 0xf73eefc2. [ 835.341169][T24844] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 835.341181][T24844] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008918 [ 835.341189][T24844] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 835.341196][T24844] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 835.341203][T24844] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 835.341209][T24844] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 835.341224][T24844] [ 835.346019][T24845] FAULT_INJECTION: forcing a failure. [ 835.346019][T24845] name fail_futex, interval 1, probability 0, space 0, times 0 [ 835.346041][T24845] CPU: 2 UID: 0 PID: 24845 Comm: syz.5.5551 Tainted: G L syzkaller #0 PREEMPT(full) [ 835.346058][T24845] Tainted: [L]=SOFTLOCKUP [ 835.346062][T24845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 835.346069][T24845] Call Trace: [ 835.346073][T24845] [ 835.346078][T24845] dump_stack_lvl+0x100/0x190 [ 835.346098][T24845] should_fail_ex.cold+0x5/0xa [ 835.346115][T24845] get_futex_key+0x1d0/0x14f0 [ 835.346130][T24845] ? __pfx_get_futex_key+0x10/0x10 [ 835.346147][T24845] futex_wake+0xf4/0x5e0 [ 835.346165][T24845] ? __pfx_futex_wake+0x10/0x10 [ 835.346183][T24845] ? __raw_spin_lock_init+0x3a/0x110 [ 835.346196][T24845] ? lockdep_init_map_type+0x5c/0x250 [ 835.346217][T24845] do_futex+0x2b2/0x440 [ 835.346230][T24845] ? __pfx_do_futex+0x10/0x10 [ 835.346247][T24845] __ia32_sys_futex_time32+0x2f4/0x470 [ 835.346265][T24845] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 835.346287][T24845] __do_fast_syscall_32+0x13a/0x8b0 [ 835.346315][T24845] ? lockdep_hardirqs_on+0x7d/0x110 [ 835.346337][T24845] do_fast_syscall_32+0x32/0x70 [ 835.346349][T24845] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 835.346365][T24845] RIP: 0023:0xf73aefec [ 835.346379][T24845] Code: Unable to access opcode bytes at 0xf73aefc2. [ 835.346385][T24845] RSP: 002b:00000000f53c65cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 835.346397][T24845] RAX: ffffffffffffffda RBX: 00000000f73d4f8c RCX: 0000000000000081 [ 835.346404][T24845] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 835.346412][T24845] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 835.346419][T24845] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 835.346427][T24845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 835.346442][T24845] [ 835.911194][T24863] random: crng reseeded on system resumption [ 836.257918][T24866] random: crng reseeded on system resumption [ 836.747294][T24876] FAULT_INJECTION: forcing a failure. [ 836.747294][T24876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 836.747316][T24876] CPU: 0 UID: 0 PID: 24876 Comm: syz.5.5561 Tainted: G L syzkaller #0 PREEMPT(full) [ 836.747336][T24876] Tainted: [L]=SOFTLOCKUP [ 836.747341][T24876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 836.747348][T24876] Call Trace: [ 836.747352][T24876] [ 836.747357][T24876] dump_stack_lvl+0x100/0x190 [ 836.747376][T24876] should_fail_ex.cold+0x5/0xa [ 836.747392][T24876] _copy_to_user+0x32/0xd0 [ 836.747405][T24876] simple_read_from_buffer+0xcb/0x170 [ 836.747423][T24876] proc_fail_nth_read+0x1af/0x230 [ 836.747439][T24876] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 836.747455][T24876] ? rw_verify_area+0xce/0x6d0 [ 836.747468][T24876] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 836.747483][T24876] vfs_read+0x1e4/0xb40 [ 836.747497][T24876] ? lock_acquire+0x1d1/0x380 [ 836.747514][T24876] ? __fget_files+0x34/0x3d0 [ 836.747529][T24876] ? __pfx_vfs_read+0x10/0x10 [ 836.747541][T24876] ? find_held_lock+0x2b/0x80 [ 836.747555][T24876] ? __fget_files+0x215/0x3d0 [ 836.747572][T24876] ? __fget_files+0x21f/0x3d0 [ 836.747591][T24876] ksys_read+0x12a/0x250 [ 836.747604][T24876] ? __pfx_ksys_read+0x10/0x10 [ 836.747641][T24876] do_int80_emulation+0x166/0x650 [ 836.747657][T24876] asm_int80_emulation+0x1a/0x20 [ 836.747669][T24876] RIP: 0023:0xf710762b [ 836.747679][T24876] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 836.747690][T24876] RSP: 002b:00000000f53a54bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 836.747701][T24876] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53a55d0 [ 836.747708][T24876] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 836.747715][T24876] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 836.747722][T24876] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 836.747728][T24876] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 836.747743][T24876] [ 836.837968][T24878] FAULT_INJECTION: forcing a failure. [ 836.837968][T24878] name failslab, interval 1, probability 0, space 0, times 0 [ 836.837992][T24878] CPU: 0 UID: 0 PID: 24878 Comm: syz.5.5562 Tainted: G L syzkaller #0 PREEMPT(full) [ 836.838014][T24878] Tainted: [L]=SOFTLOCKUP [ 836.838020][T24878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 836.838029][T24878] Call Trace: [ 836.838035][T24878] [ 836.838042][T24878] dump_stack_lvl+0x100/0x190 [ 836.838087][T24878] should_fail_ex.cold+0x5/0xa [ 836.838112][T24878] should_failslab+0xc2/0x120 [ 836.838142][T24878] __kmalloc_noprof+0xfc/0x840 [ 836.838168][T24878] ? sock_kmalloc+0x111/0x170 [ 836.838198][T24878] sock_kmalloc+0x111/0x170 [ 836.838226][T24878] __ipv6_sock_mc_join+0x3ef/0x9c0 [ 836.838260][T24878] do_ipv6_mcast_group_source+0x21e/0x270 [ 836.838286][T24878] ? __pfx_do_ipv6_mcast_group_source+0x10/0x10 [ 836.838310][T24878] ? __lock_acquire+0x5c0/0x1f40 [ 836.838371][T24878] ? __local_bh_enable_ip+0xa5/0x120 [ 836.838399][T24878] ? lockdep_hardirqs_on+0x7d/0x110 [ 836.838433][T24878] do_ipv6_setsockopt+0x1d5b/0x43a0 [ 836.838464][T24878] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 836.838490][T24878] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 836.838519][T24878] ? lock_acquire+0x1d1/0x380 [ 836.838544][T24878] ? get_pid_task+0x2a/0x250 [ 836.838565][T24878] ? find_held_lock+0x2b/0x80 [ 836.838586][T24878] ? get_pid_task+0xfc/0x250 [ 836.838605][T24878] ? get_pid_task+0xfc/0x250 [ 836.838633][T24878] ? __lock_acquire+0x5c0/0x1f40 [ 836.838676][T24878] ? ipv6_setsockopt+0xcb/0x170 [ 836.838697][T24878] ipv6_setsockopt+0xcb/0x170 [ 836.838722][T24878] udpv6_setsockopt+0x64/0xb0 [ 836.838750][T24878] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 836.838779][T24878] do_sock_setsockopt+0xf3/0x1d0 [ 836.838808][T24878] __sys_setsockopt+0x119/0x190 [ 836.838834][T24878] __ia32_sys_setsockopt+0xbc/0x160 [ 836.838855][T24878] ? __do_fast_syscall_32+0xb3/0x8b0 [ 836.838873][T24878] ? lockdep_hardirqs_on+0x7d/0x110 [ 836.838900][T24878] __do_fast_syscall_32+0x13a/0x8b0 [ 836.838917][T24878] ? lockdep_hardirqs_on+0x7d/0x110 [ 836.838944][T24878] do_fast_syscall_32+0x32/0x70 [ 836.838960][T24878] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 836.838981][T24878] RIP: 0023:0xf73aefec [ 836.838999][T24878] Code: Unable to access opcode bytes at 0xf73aefc2. [ 836.839007][T24878] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 836.839024][T24878] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 836.839034][T24878] RDX: 000000000000002e RSI: 0000000080001180 RDI: 0000000000000108 [ 836.839044][T24878] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 836.839054][T24878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.839063][T24878] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 836.839084][T24878] [ 837.000182][T24886] FAULT_INJECTION: forcing a failure. [ 837.000182][T24886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 837.000206][T24886] CPU: 0 UID: 0 PID: 24886 Comm: syz.9.5566 Tainted: G L syzkaller #0 PREEMPT(full) [ 837.000223][T24886] Tainted: [L]=SOFTLOCKUP [ 837.000228][T24886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 837.000235][T24886] Call Trace: [ 837.000239][T24886] [ 837.000245][T24886] dump_stack_lvl+0x100/0x190 [ 837.000264][T24886] should_fail_ex.cold+0x5/0xa [ 837.000280][T24886] _copy_from_user+0x2e/0xd0 [ 837.000293][T24886] get_compat_msghdr+0xb3/0x480 [ 837.000311][T24886] ? __pfx_get_compat_msghdr+0x10/0x10 [ 837.000339][T24886] ___sys_sendmsg+0x1b6/0x1e0 [ 837.000358][T24886] ? __pfx____sys_sendmsg+0x10/0x10 [ 837.000382][T24886] ? find_held_lock+0x2b/0x80 [ 837.000406][T24886] __sys_sendmsg+0x160/0x210 [ 837.000420][T24886] ? __pfx___sys_sendmsg+0x10/0x10 [ 837.000438][T24886] ? __pfx_ksys_write+0x10/0x10 [ 837.000456][T24886] __do_fast_syscall_32+0x13a/0x8b0 [ 837.000469][T24886] ? lockdep_hardirqs_on+0x7d/0x110 [ 837.000488][T24886] do_fast_syscall_32+0x32/0x70 [ 837.000501][T24886] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 837.000515][T24886] RIP: 0023:0xf748efec [ 837.000543][T24886] Code: Unable to access opcode bytes at 0xf748efc2. [ 837.000549][T24886] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 837.000560][T24886] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002780 [ 837.000568][T24886] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 837.000574][T24886] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 837.000581][T24886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.000588][T24886] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 837.000602][T24886] [ 837.078831][T24889] netlink: 'syz.5.5567': attribute type 16 has an invalid length. [ 837.085701][T24889] netlink: 'syz.5.5567': attribute type 17 has an invalid length. [ 837.168390][T24889] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.183329][T24889] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.197398][T24893] net_ratelimit: 29 callbacks suppressed [ 837.197411][T24893] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 837.257094][T24889] 8021q: adding VLAN 0 to HW filter on device bond1 [ 837.265433][T24889] 8021q: adding VLAN 0 to HW filter on device bond2 [ 837.268647][T24889] 8021q: adding VLAN 0 to HW filter on device bond3 [ 837.283088][T24889] 8021q: adding VLAN 0 to HW filter on device bond4 [ 837.300350][T24889] 8021q: adding VLAN 0 to HW filter on device bond5 [ 837.302489][T24889] 8021q: adding VLAN 0 to HW filter on device bond6 [ 837.314072][T24889] 8021q: adding VLAN 0 to HW filter on device bond7 [ 837.316147][T24889] 8021q: adding VLAN 0 to HW filter on device bond8 [ 837.339927][ T10] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 837.355275][ T9815] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 837.355477][ T9815] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 837.381603][T23189] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 837.418162][T24897] random: crng reseeded on system resumption [ 837.428485][T24895] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 837.428499][T24895] overlayfs: failed to set xattr on upper [ 837.428504][T24895] overlayfs: ...falling back to redirect_dir=nofollow. [ 837.428509][T24895] overlayfs: ...falling back to index=off. [ 837.428513][T24895] overlayfs: ...falling back to uuid=null. [ 837.428517][T24895] overlayfs: ...falling back to xino=off. [ 837.428526][T24895] overlayfs: maximum fs stacking depth exceeded [ 837.463664][T24897] netlink: zone id is out of range [ 837.463673][T24897] netlink: zone id is out of range [ 837.463678][T24897] netlink: zone id is out of range [ 837.463682][T24897] netlink: zone id is out of range [ 837.463686][T24897] netlink: zone id is out of range [ 837.463691][T24897] netlink: zone id is out of range [ 837.463697][T24897] netlink: get zone limit has 4 unknown bytes [ 837.491677][ T10] usb 14-1: Using ep0 maxpacket: 8 [ 837.492189][ T10] usb 14-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 837.493166][ T10] usb 14-1: config 0 has an invalid interface number: 55 but max is 0 [ 837.493180][ T10] usb 14-1: config 0 has no interface number 0 [ 837.493199][ T10] usb 14-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 837.493211][ T10] usb 14-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 837.493224][ T10] usb 14-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 837.493237][ T10] usb 14-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 837.493256][ T10] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.494629][ T10] usb 14-1: config 0 descriptor?? [ 837.542350][ T10] ldusb 14-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 837.719997][ T9815] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 837.720202][ T9815] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 837.737054][ T6091] usb 14-1: USB disconnect, device number 9 [ 837.740539][ T6091] ldusb 14-1:0.55: LD USB Device #0 now disconnected [ 837.750332][T24118] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 837.776200][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 837.939002][ T6091] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 837.959494][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 838.012856][T24918] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5579'. [ 838.013633][ T43] kauditd_printk_skb: 23 callbacks suppressed [ 838.013645][ T43] audit: type=1326 audit(1791891193.837:9519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24915 comm="syz.0.5579" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefec code=0x7ffc0000 [ 838.013672][ T43] audit: type=1326 audit(1791891193.837:9520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24915 comm="syz.0.5579" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefec code=0x7ffc0000 [ 838.013969][ T43] audit: type=1326 audit(1791891193.837:9521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24915 comm="syz.0.5579" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf73eefec code=0x7ffc0000 [ 838.016114][ T43] audit: type=1326 audit(1791891193.837:9522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24915 comm="syz.0.5579" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefec code=0x7ffc0000 [ 838.016510][ T43] audit: type=1326 audit(1791891193.837:9523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24915 comm="syz.0.5579" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefec code=0x7ffc0000 [ 838.016686][ T43] audit: type=1326 audit(1791891193.837:9524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24915 comm="syz.0.5579" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf714762b code=0x7ffc0000 [ 838.017156][ T43] audit: type=1326 audit(1791891193.837:9525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24915 comm="syz.0.5579" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73eefec code=0x7ffc0000 [ 838.017297][ T43] audit: type=1326 audit(1791891193.837:9526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24915 comm="syz.0.5579" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73eefec code=0x7ffc0000 [ 838.019867][ T6091] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 838.020981][T24918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.021199][T24918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.023328][ T43] audit: type=1326 audit(1791891193.847:9527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24915 comm="syz.0.5579" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefec code=0x7ffc0000 [ 838.023355][ T43] audit: type=1326 audit(1791891193.847:9528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24915 comm="syz.0.5579" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefec code=0x7ffc0000 [ 838.305772][T24931] FAULT_INJECTION: forcing a failure. [ 838.305772][T24931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 838.305811][T24931] CPU: 0 UID: 0 PID: 24931 Comm: syz.5.5584 Tainted: G L syzkaller #0 PREEMPT(full) [ 838.305836][T24931] Tainted: [L]=SOFTLOCKUP [ 838.305844][T24931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 838.305855][T24931] Call Trace: [ 838.305862][T24931] [ 838.305871][T24931] dump_stack_lvl+0x100/0x190 [ 838.305901][T24931] should_fail_ex.cold+0x5/0xa [ 838.305927][T24931] _copy_to_user+0x32/0xd0 [ 838.305949][T24931] simple_read_from_buffer+0xcb/0x170 [ 838.305978][T24931] proc_fail_nth_read+0x1af/0x230 [ 838.306004][T24931] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 838.306031][T24931] ? rw_verify_area+0xce/0x6d0 [ 838.306052][T24931] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 838.306078][T24931] vfs_read+0x1e4/0xb40 [ 838.306102][T24931] ? lock_acquire+0x1d1/0x380 [ 838.306129][T24931] ? __fget_files+0x34/0x3d0 [ 838.306167][T24931] ? __pfx_vfs_read+0x10/0x10 [ 838.306190][T24931] ? find_held_lock+0x2b/0x80 [ 838.306213][T24931] ? __fget_files+0x215/0x3d0 [ 838.306243][T24931] ? __fget_files+0x21f/0x3d0 [ 838.306275][T24931] ksys_read+0x12a/0x250 [ 838.306298][T24931] ? __pfx_ksys_read+0x10/0x10 [ 838.306329][T24931] do_int80_emulation+0x166/0x650 [ 838.306352][T24931] asm_int80_emulation+0x1a/0x20 [ 838.306370][T24931] RIP: 0023:0xf710762b [ 838.306386][T24931] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 838.306404][T24931] RSP: 002b:00000000f53c64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 838.306422][T24931] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53c65d0 [ 838.306434][T24931] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 838.306445][T24931] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 838.306456][T24931] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 838.306467][T24931] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 838.306491][T24931] [ 838.471494][T24940] Set syz0 is full, maxelem 0 reached [ 838.740065][T24951] FAULT_INJECTION: forcing a failure. [ 838.740065][T24951] name failslab, interval 1, probability 0, space 0, times 0 [ 838.740089][T24951] CPU: 2 UID: 0 PID: 24951 Comm: syz.9.5592 Tainted: G L syzkaller #0 PREEMPT(full) [ 838.740105][T24951] Tainted: [L]=SOFTLOCKUP [ 838.740110][T24951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 838.740118][T24951] Call Trace: [ 838.740122][T24951] [ 838.740127][T24951] dump_stack_lvl+0x100/0x190 [ 838.740154][T24951] should_fail_ex.cold+0x5/0xa [ 838.740171][T24951] should_failslab+0xc2/0x120 [ 838.740191][T24951] kmem_cache_alloc_noprof+0x92/0x6a0 [ 838.740208][T24951] ? alloc_uid+0x13d/0x4c0 [ 838.740223][T24951] alloc_uid+0x13d/0x4c0 [ 838.740235][T24951] ? __pfx_alloc_uid+0x10/0x10 [ 838.740248][T24951] ? bpf_lsm_capable+0x9/0x10 [ 838.740261][T24951] ? security_capable+0x80/0x260 [ 838.740282][T24951] __sys_setuid+0x1be/0x440 [ 838.740299][T24951] __do_fast_syscall_32+0x13a/0x8b0 [ 838.740314][T24951] do_fast_syscall_32+0x32/0x70 [ 838.740326][T24951] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 838.740341][T24951] RIP: 0023:0xf748efec [ 838.740355][T24951] Code: Unable to access opcode bytes at 0xf748efc2. [ 838.740360][T24951] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000017 [ 838.740372][T24951] RAX: ffffffffffffffda RBX: 000000000000ee00 RCX: 0000000000000000 [ 838.740380][T24951] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 838.740387][T24951] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 838.740394][T24951] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 838.740401][T24951] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 838.740417][T24951] [ 838.834472][T24954] random: crng reseeded on system resumption [ 838.863984][T24955] FAULT_INJECTION: forcing a failure. [ 838.863984][T24955] name failslab, interval 1, probability 0, space 0, times 0 [ 838.864007][T24955] CPU: 2 UID: 0 PID: 24955 Comm: syz.0.5593 Tainted: G L syzkaller #0 PREEMPT(full) [ 838.864025][T24955] Tainted: [L]=SOFTLOCKUP [ 838.864030][T24955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 838.864037][T24955] Call Trace: [ 838.864041][T24955] [ 838.864046][T24955] dump_stack_lvl+0x100/0x190 [ 838.864067][T24955] should_fail_ex.cold+0x5/0xa [ 838.864084][T24955] should_failslab+0xc2/0x120 [ 838.864104][T24955] kmem_cache_alloc_noprof+0x92/0x6a0 [ 838.864154][T24955] ? alloc_uid+0x13d/0x4c0 [ 838.864173][T24955] alloc_uid+0x13d/0x4c0 [ 838.864188][T24955] ? __pfx_alloc_uid+0x10/0x10 [ 838.864208][T24955] ? bpf_lsm_capable+0x9/0x10 [ 838.864223][T24955] ? security_capable+0x80/0x260 [ 838.864247][T24955] __sys_setuid+0x1be/0x440 [ 838.864267][T24955] __do_fast_syscall_32+0x13a/0x8b0 [ 838.864283][T24955] do_fast_syscall_32+0x32/0x70 [ 838.864296][T24955] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 838.864311][T24955] RIP: 0023:0xf73eefec [ 838.864327][T24955] Code: Unable to access opcode bytes at 0xf73eefc2. [ 838.864333][T24955] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000017 [ 838.864345][T24955] RAX: ffffffffffffffda RBX: 000000000000ee00 RCX: 0000000000000000 [ 838.864353][T24955] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 838.864359][T24955] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 838.864367][T24955] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 838.864374][T24955] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 838.864389][T24955] [ 838.913168][T24954] netlink: zone id is out of range [ 839.524741][T24974] new mount options do not match the existing superblock, will be ignored [ 839.534435][T24974] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 840.283887][T24983] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5602'. [ 840.530096][ T10] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 840.597791][T25004] FAULT_INJECTION: forcing a failure. [ 840.597791][T25004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.597824][T25004] CPU: 2 UID: 0 PID: 25004 Comm: syz.3.5611 Tainted: G L syzkaller #0 PREEMPT(full) [ 840.597842][T25004] Tainted: [L]=SOFTLOCKUP [ 840.597846][T25004] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 840.597853][T25004] Call Trace: [ 840.597857][T25004] [ 840.597862][T25004] dump_stack_lvl+0x100/0x190 [ 840.597881][T25004] should_fail_ex.cold+0x5/0xa [ 840.597897][T25004] _copy_from_user+0x2e/0xd0 [ 840.597909][T25004] bpf_test_init.isra.0+0xaf/0x100 [ 840.597929][T25004] bpf_prog_test_run_skb+0x48e/0x3530 [ 840.597942][T25004] ? lock_acquire+0x1d1/0x380 [ 840.597959][T25004] ? __fget_files+0x34/0x3d0 [ 840.597974][T25004] ? find_held_lock+0x2b/0x80 [ 840.597988][T25004] ? __fget_files+0x201/0x3d0 [ 840.598006][T25004] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 840.598020][T25004] ? fput+0x7c/0x100 [ 840.598038][T25004] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 840.598124][T25004] __sys_bpf+0x2265/0x4a30 [ 840.598146][T25004] ? __pfx___sys_bpf+0x10/0x10 [ 840.598163][T25004] ? lock_acquire+0x1d1/0x380 [ 840.598185][T25004] ? get_pid_task+0x2a/0x250 [ 840.598209][T25004] ? find_held_lock+0x2b/0x80 [ 840.598226][T25004] ? get_pid_task+0xfc/0x250 [ 840.598245][T25004] ? get_pid_task+0xfc/0x250 [ 840.598271][T25004] ? proc_fail_nth_write+0x9f/0x220 [ 840.598293][T25004] ? find_held_lock+0x2b/0x80 [ 840.598309][T25004] ? rcu_read_lock_any_held+0x6a/0x90 [ 840.598324][T25004] ? find_held_lock+0x2b/0x80 [ 840.598337][T25004] ? ksys_write+0x190/0x250 [ 840.598350][T25004] ? ksys_write+0x190/0x250 [ 840.598364][T25004] ? lock_acquire+0x1d1/0x380 [ 840.598391][T25004] ? fput+0x7c/0x100 [ 840.598409][T25004] ? __ia32_sys_bpf+0xcc/0x170 [ 840.598422][T25004] __ia32_sys_bpf+0xcc/0x170 [ 840.598436][T25004] ? __do_fast_syscall_32+0xb3/0x8b0 [ 840.598449][T25004] __do_fast_syscall_32+0x13a/0x8b0 [ 840.598461][T25004] ? lockdep_hardirqs_on+0x7d/0x110 [ 840.598479][T25004] do_fast_syscall_32+0x32/0x70 [ 840.598491][T25004] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 840.598506][T25004] RIP: 0023:0xf7f42fec [ 840.598518][T25004] Code: Unable to access opcode bytes at 0xf7f42fc2. [ 840.598524][T25004] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 840.598535][T25004] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000200 [ 840.598542][T25004] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 840.598549][T25004] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 840.598556][T25004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 840.598562][T25004] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 840.598577][T25004] [ 840.699682][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 840.701792][ T10] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 840.702287][ T10] usb 10-1: config 0 has no interfaces? [ 840.702303][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.705216][ T10] usb 10-1: config 0 descriptor?? [ 840.761008][T25007] FAULT_INJECTION: forcing a failure. [ 840.761008][T25007] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 840.761030][T25007] CPU: 2 UID: 0 PID: 25007 Comm: syz.3.5612 Tainted: G L syzkaller #0 PREEMPT(full) [ 840.761046][T25007] Tainted: [L]=SOFTLOCKUP [ 840.761050][T25007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 840.761057][T25007] Call Trace: [ 840.761061][T25007] [ 840.761066][T25007] dump_stack_lvl+0x100/0x190 [ 840.761086][T25007] should_fail_ex.cold+0x5/0xa [ 840.761099][T25007] ? prepare_alloc_pages+0x16d/0x5b0 [ 840.761117][T25007] should_fail_alloc_page+0xeb/0x140 [ 840.761136][T25007] prepare_alloc_pages+0x1f0/0x5b0 [ 840.761156][T25007] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 840.761171][T25007] ? sock_alloc_send_pskb+0x801/0x980 [ 840.761183][T25007] ? tun_get_user+0x907/0x3da0 [ 840.761200][T25007] ? tun_chr_write_iter+0xdc/0x200 [ 840.761212][T25007] ? vfs_write+0x6af/0x1050 [ 840.761225][T25007] ? ksys_write+0x12a/0x250 [ 840.761238][T25007] ? do_int80_emulation+0x166/0x650 [ 840.761250][T25007] ? asm_int80_emulation+0x1a/0x20 [ 840.761267][T25007] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 840.761291][T25007] ? trace_kmalloc+0xeb/0x110 [ 840.761308][T25007] ? __kasan_kmalloc+0xaa/0xb0 [ 840.761324][T25007] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 840.761341][T25007] ? trace_kmem_cache_alloc+0xdd/0x100 [ 840.761358][T25007] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 840.761377][T25007] ? policy_nodemask+0xed/0x4f0 [ 840.761396][T25007] alloc_pages_mpol+0x201/0x550 [ 840.761407][T25007] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 840.761417][T25007] ? __alloc_skb+0x5b7/0x710 [ 840.761430][T25007] ? __pfx___alloc_skb+0x10/0x10 [ 840.761442][T25007] ? is_bpf_text_address+0x25/0x1a0 [ 840.761461][T25007] alloc_pages_noprof+0x1a/0x160 [ 840.761474][T25007] alloc_skb_with_frags+0x4e7/0x760 [ 840.761493][T25007] sock_alloc_send_pskb+0x801/0x980 [ 840.761506][T25007] ? __lock_acquire+0x5c0/0x1f40 [ 840.761525][T25007] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 840.761537][T25007] ? __lock_acquire+0x5c0/0x1f40 [ 840.761567][T25007] ? lock_acquire+0x1d1/0x380 [ 840.761584][T25007] ? aa_file_perm+0x197/0x14d0 [ 840.761602][T25007] ? find_held_lock+0x2b/0x80 [ 840.761616][T25007] tun_get_user+0x907/0x3da0 [ 840.761635][T25007] ? __lock_acquire+0x5c0/0x1f40 [ 840.761651][T25007] ? __pfx_tun_get_user+0x10/0x10 [ 840.761665][T25007] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 840.761684][T25007] ? find_held_lock+0x2b/0x80 [ 840.761697][T25007] ? tun_get+0x191/0x370 [ 840.761707][T25007] ? tun_get+0x191/0x370 [ 840.761721][T25007] tun_chr_write_iter+0xdc/0x200 [ 840.761736][T25007] vfs_write+0x6af/0x1050 [ 840.761750][T25007] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 840.761764][T25007] ? __pfx_vfs_write+0x10/0x10 [ 840.761778][T25007] ? find_held_lock+0x2b/0x80 [ 840.761800][T25007] ksys_write+0x12a/0x250 [ 840.761814][T25007] ? __pfx_ksys_write+0x10/0x10 [ 840.761832][T25007] do_int80_emulation+0x166/0x650 [ 840.761845][T25007] asm_int80_emulation+0x1a/0x20 [ 840.761856][T25007] RIP: 0023:0xf713762b [ 840.761866][T25007] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 840.761877][T25007] RSP: 002b:00000000f53f644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 840.761888][T25007] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 00000000800018c0 [ 840.761896][T25007] RDX: 000000000000133d RSI: 0000000000000000 RDI: 0000000000000000 [ 840.761903][T25007] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 840.761909][T25007] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 840.761916][T25007] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 840.762003][T25007] [ 840.919251][T24118] usb 10-1: USB disconnect, device number 14 [ 841.344998][T25026] FAULT_INJECTION: forcing a failure. [ 841.344998][T25026] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 841.345018][T25026] CPU: 0 UID: 0 PID: 25026 Comm: syz.3.5617 Tainted: G L syzkaller #0 PREEMPT(full) [ 841.345034][T25026] Tainted: [L]=SOFTLOCKUP [ 841.345038][T25026] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 841.345045][T25026] Call Trace: [ 841.345050][T25026] [ 841.345055][T25026] dump_stack_lvl+0x100/0x190 [ 841.345075][T25026] should_fail_ex.cold+0x5/0xa [ 841.345088][T25026] ? prepare_alloc_pages+0x16d/0x5b0 [ 841.345107][T25026] should_fail_alloc_page+0xeb/0x140 [ 841.345126][T25026] prepare_alloc_pages+0x1f0/0x5b0 [ 841.345146][T25026] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 841.345162][T25026] ? __lock_acquire+0x5c0/0x1f40 [ 841.345181][T25026] ? lock_acquire+0x1d1/0x380 [ 841.345197][T25026] ? unwind_next_frame+0xbd/0x2090 [ 841.345219][T25026] ? __lock_acquire+0x5c0/0x1f40 [ 841.345236][T25026] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 841.345254][T25026] ? __lock_acquire+0x5c0/0x1f40 [ 841.345273][T25026] ? __lock_acquire+0x5c0/0x1f40 [ 841.345293][T25026] ? __lock_acquire+0x5c0/0x1f40 [ 841.345309][T25026] ? number+0x983/0xc90 [ 841.345323][T25026] ? lock_acquire+0x1d1/0x380 [ 841.345338][T25026] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 841.345357][T25026] ? policy_nodemask+0xed/0x4f0 [ 841.345376][T25026] alloc_pages_mpol+0x201/0x550 [ 841.345388][T25026] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 841.345399][T25026] ? __lock_acquire+0x5c0/0x1f40 [ 841.345419][T25026] folio_alloc_mpol_noprof+0x36/0x260 [ 841.345433][T25026] vma_alloc_folio_noprof+0xed/0x1d0 [ 841.345446][T25026] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 841.345464][T25026] do_anonymous_page+0xac9/0x2050 [ 841.345480][T25026] ? __pfx_do_anonymous_page+0x10/0x10 [ 841.345491][T25026] ? rcu_read_unlock+0x2d/0xb0 [ 841.345503][T25026] ? rcu_read_unlock+0x2d/0xb0 [ 841.345515][T25026] ? __pte_offset_map+0x179/0x310 [ 841.345533][T25026] __handle_mm_fault+0x1ff3/0x2f60 [ 841.345549][T25026] ? __pfx___handle_mm_fault+0x10/0x10 [ 841.345560][T25026] ? __pfx_mt_find+0x10/0x10 [ 841.345594][T25026] ? find_vma+0xbf/0x140 [ 841.345611][T25026] ? __pfx_find_vma+0x10/0x10 [ 841.345629][T25026] handle_mm_fault+0x363/0xa20 [ 841.345644][T25026] do_user_addr_fault+0x745/0x12f0 [ 841.345662][T25026] exc_page_fault+0x6f/0xd0 [ 841.345679][T25026] asm_exc_page_fault+0x26/0x30 [ 841.345691][T25026] RIP: 0010:_copy_to_iter+0x4c0/0x1720 [ 841.345702][T25026] Code: 00 e8 d4 35 e3 fc 48 8b 74 24 18 48 8b 44 24 08 4c 8d 24 06 89 de 4c 89 e7 e8 1c 82 56 fd 0f 01 cb 48 89 d9 4c 89 f7 4c 89 e6 a4 0f 1f 00 49 89 cc 0f 01 ca 48 89 d8 48 29 c8 48 01 44 24 08 [ 841.345714][T25026] RSP: 0018:ffffc90003c3f8d0 EFLAGS: 00050246 [ 841.345723][T25026] RAX: 0000000000000001 RBX: 00000000000000b1 RCX: 00000000000000b1 [ 841.345731][T25026] RDX: 0000000000000001 RSI: ffff888073a4a001 RDI: 0000000080001980 [ 841.345738][T25026] RBP: ffffc90003c3fad8 R08: 0000000000000000 R09: ffffed100e749416 [ 841.345745][T25026] R10: ffff888073a4a0b1 R11: 0000000000000000 R12: ffff888073a4a001 [ 841.345752][T25026] R13: 0000000000000000 R14: 0000000080001980 R15: 00000000000000b1 [ 841.345772][T25026] ? __pfx__copy_to_iter+0x10/0x10 [ 841.345782][T25026] ? _raw_spin_unlock+0x28/0x50 [ 841.345797][T25026] ? tcp_seq_stop+0x1f2/0x260 [ 841.345813][T25026] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 841.345834][T25026] seq_read_iter+0x691/0x1270 [ 841.345848][T25026] ? aa_file_perm+0x7f3/0x14d0 [ 841.345871][T25026] seq_read+0x344/0x4d0 [ 841.345885][T25026] ? __pfx_seq_read+0x10/0x10 [ 841.345903][T25026] ? import_ubuf+0x1b6/0x220 [ 841.345922][T25026] ? common_file_perm+0x266/0x500 [ 841.345937][T25026] ? __pfx_seq_read+0x10/0x10 [ 841.345952][T25026] proc_reg_read+0x240/0x330 [ 841.345964][T25026] ? __pfx_proc_reg_read+0x10/0x10 [ 841.345974][T25026] vfs_readv+0x5d8/0x8d0 [ 841.345992][T25026] ? __pfx_vfs_readv+0x10/0x10 [ 841.346009][T25026] ? lock_acquire+0x1d1/0x380 [ 841.346025][T25026] ? __fget_files+0x34/0x3d0 [ 841.346046][T25026] ? __fget_files+0x21f/0x3d0 [ 841.346064][T25026] ? do_preadv+0x1ac/0x270 [ 841.346077][T25026] do_preadv+0x1ac/0x270 [ 841.346090][T25026] ? __pfx_do_preadv+0x10/0x10 [ 841.346103][T25026] ? ksys_write+0x1ac/0x250 [ 841.346117][T25026] ? __pfx_ksys_write+0x10/0x10 [ 841.346134][T25026] __do_fast_syscall_32+0x13a/0x8b0 [ 841.346146][T25026] ? lockdep_hardirqs_on+0x7d/0x110 [ 841.346164][T25026] do_fast_syscall_32+0x32/0x70 [ 841.346176][T25026] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 841.346191][T25026] RIP: 0023:0xf7f42fec [ 841.346203][T25026] Code: Unable to access opcode bytes at 0xf7f42fc2. [ 841.346212][T25026] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 000000000000014d [ 841.346222][T25026] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 841.346230][T25026] RDX: 0000000000000001 RSI: 0000000000000144 RDI: 0000000000000000 [ 841.346236][T25026] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 841.346243][T25026] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 841.346250][T25026] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 841.346265][T25026] [ 841.700694][T25045] dyndbg: bad flag-op e, at start of eMwOITÝRூv [ 841.700706][T25045] dyndbg: flags parse failed [ 841.700711][T25045] dyndbg: bad flag-op ~, at start of ~ [ 841.700716][T25045] dyndbg: flags parse failed [ 841.700826][T25045] FAULT_INJECTION: forcing a failure. [ 841.700826][T25045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 841.700844][T25045] CPU: 0 UID: 0 PID: 25045 Comm: syz.5.5624 Tainted: G L syzkaller #0 PREEMPT(full) [ 841.700859][T25045] Tainted: [L]=SOFTLOCKUP [ 841.700864][T25045] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 841.700871][T25045] Call Trace: [ 841.700875][T25045] [ 841.700880][T25045] dump_stack_lvl+0x100/0x190 [ 841.700901][T25045] should_fail_ex.cold+0x5/0xa [ 841.700916][T25045] _copy_to_user+0x32/0xd0 [ 841.700929][T25045] simple_read_from_buffer+0xcb/0x170 [ 841.700946][T25045] proc_fail_nth_read+0x1af/0x230 [ 841.700962][T25045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 841.700979][T25045] ? rw_verify_area+0xce/0x6d0 [ 841.700992][T25045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 841.701007][T25045] vfs_read+0x1e4/0xb40 [ 841.701021][T25045] ? lock_acquire+0x1d1/0x380 [ 841.701038][T25045] ? __fget_files+0x34/0x3d0 [ 841.701053][T25045] ? __pfx_vfs_read+0x10/0x10 [ 841.701066][T25045] ? find_held_lock+0x2b/0x80 [ 841.701080][T25045] ? __fget_files+0x215/0x3d0 [ 841.701097][T25045] ? __fget_files+0x21f/0x3d0 [ 841.701116][T25045] ksys_read+0x12a/0x250 [ 841.701135][T25045] ? __pfx_ksys_read+0x10/0x10 [ 841.701154][T25045] do_int80_emulation+0x166/0x650 [ 841.701168][T25045] asm_int80_emulation+0x1a/0x20 [ 841.701180][T25045] RIP: 0023:0xf710762b [ 841.701190][T25045] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 841.701201][T25045] RSP: 002b:00000000f53c64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 841.701212][T25045] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53c65d0 [ 841.701219][T25045] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 841.701226][T25045] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 841.701233][T25045] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 841.701239][T25045] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 841.701254][T25045] [ 841.717314][T25042] trusted_key: encrypted_key: insufficient parameters specified [ 841.974481][T25056] jffs2: notice: (25056) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 842.024036][T10352] libceph: mon0 (1)[c::]:6789 socket error on write [ 842.034518][T25053] ceph: No mds server is up or the cluster is laggy [ 842.106109][T25060] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5630'. [ 842.186988][T25056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5629'. [ 842.248216][T25077] dyndbg: bad flag-op e, at start of eMwO [ 842.248228][T25077] dyndbg: flags parse failed [ 842.248233][T25077] dyndbg: bad flag-op T, at start of TÝRூv [ 842.248239][T25077] dyndbg: flags parse failed [ 842.248242][T25077] dyndbg: bad flag-op ~, at start of ~ [ 842.248247][T25077] dyndbg: flags parse failed [ 842.274687][T25079] net_ratelimit: 14 callbacks suppressed [ 842.274700][T25079] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 842.349593][ T10] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 842.437758][T25090] FAULT_INJECTION: forcing a failure. [ 842.437758][T25090] name failslab, interval 1, probability 0, space 0, times 0 [ 842.437783][T25090] CPU: 0 UID: 0 PID: 25090 Comm: syz.0.5639 Tainted: G L syzkaller #0 PREEMPT(full) [ 842.437799][T25090] Tainted: [L]=SOFTLOCKUP [ 842.437803][T25090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 842.437810][T25090] Call Trace: [ 842.437814][T25090] [ 842.437819][T25090] dump_stack_lvl+0x100/0x190 [ 842.437838][T25090] should_fail_ex.cold+0x5/0xa [ 842.437854][T25090] should_failslab+0xc2/0x120 [ 842.437872][T25090] kmem_cache_alloc_noprof+0x92/0x6a0 [ 842.437888][T25090] ? alloc_empty_file+0x5b/0x1c0 [ 842.437902][T25090] alloc_empty_file+0x5b/0x1c0 [ 842.437913][T25090] path_openat+0xdb/0x2440 [ 842.437929][T25090] ? lock_acquire+0x1d1/0x380 [ 842.437945][T25090] ? __might_fault+0xc5/0x140 [ 842.437959][T25090] ? __pfx_path_openat+0x10/0x10 [ 842.437974][T25090] ? kasan_save_stack+0x3f/0x50 [ 842.437990][T25090] ? kasan_save_stack+0x30/0x50 [ 842.438004][T25090] ? kasan_save_track+0x14/0x30 [ 842.438019][T25090] ? __kasan_slab_alloc+0x89/0x90 [ 842.438034][T25090] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 842.438048][T25090] ? do_getname+0x35/0x390 [ 842.438059][T25090] ? acct_on+0x93/0xa00 [ 842.438072][T25090] ? __ia32_sys_acct+0x80/0x1e0 [ 842.438088][T25090] do_file_open+0x20e/0x430 [ 842.438106][T25090] ? __pfx_do_file_open+0x10/0x10 [ 842.438132][T25090] ? __might_fault+0xc5/0x140 [ 842.438144][T25090] ? find_held_lock+0x2b/0x80 [ 842.438157][T25090] ? __might_fault+0xc5/0x140 [ 842.438169][T25090] ? __might_fault+0xc5/0x140 [ 842.438182][T25090] file_open_name+0x1c3/0x3e0 [ 842.438194][T25090] ? __pfx_file_open_name+0x10/0x10 [ 842.438208][T25090] ? do_getname+0x191/0x390 [ 842.438221][T25090] acct_on+0xa6/0xa00 [ 842.438236][T25090] ? __pfx_acct_on+0x10/0x10 [ 842.438250][T25090] ? bpf_lsm_capable+0x9/0x10 [ 842.438269][T25090] __ia32_sys_acct+0x80/0x1e0 [ 842.438283][T25090] ? lockdep_hardirqs_on+0x7d/0x110 [ 842.438301][T25090] __do_fast_syscall_32+0x13a/0x8b0 [ 842.438315][T25090] ? lockdep_hardirqs_on+0x7d/0x110 [ 842.438336][T25090] do_fast_syscall_32+0x32/0x70 [ 842.438348][T25090] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 842.438362][T25090] RIP: 0023:0xf73eefec [ 842.438374][T25090] Code: Unable to access opcode bytes at 0xf73eefc2. [ 842.438379][T25090] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000033 [ 842.438391][T25090] RAX: ffffffffffffffda RBX: 00000000800007c0 RCX: 0000000000000000 [ 842.438398][T25090] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 842.438405][T25090] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 842.438412][T25090] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 842.438418][T25090] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 842.438433][T25090] [ 842.489438][T10352] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 842.501033][ T10] usb 14-1: Using ep0 maxpacket: 8 [ 842.503254][ T10] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 842.503714][ T10] usb 14-1: config 0 has no interfaces? [ 842.503731][ T10] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.505289][ T10] usb 14-1: config 0 descriptor?? [ 842.670644][T10352] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 842.672358][T10352] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 842.672377][T10352] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.672390][T10352] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 842.672412][T10352] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.675845][T10352] usb 10-1: config 0 descriptor?? [ 842.726860][T24118] usb 14-1: USB disconnect, device number 10 [ 843.113121][T10352] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 843.215492][T25103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5642'. [ 843.418145][T25111] FAULT_INJECTION: forcing a failure. [ 843.418145][T25111] name failslab, interval 1, probability 0, space 0, times 0 [ 843.418213][T25111] CPU: 2 UID: 0 PID: 25111 Comm: syz.9.5644 Tainted: G L syzkaller #0 PREEMPT(full) [ 843.418231][T25111] Tainted: [L]=SOFTLOCKUP [ 843.418236][T25111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 843.418242][T25111] Call Trace: [ 843.418247][T25111] [ 843.418252][T25111] dump_stack_lvl+0x100/0x190 [ 843.418272][T25111] should_fail_ex.cold+0x5/0xa [ 843.418288][T25111] should_failslab+0xc2/0x120 [ 843.418306][T25111] kmem_cache_alloc_noprof+0x92/0x6a0 [ 843.418334][T25111] ? __pfx_map_id_range_down+0x10/0x10 [ 843.418353][T25111] ? security_inode_alloc+0x3b/0x2c0 [ 843.418369][T25111] security_inode_alloc+0x3b/0x2c0 [ 843.418382][T25111] inode_init_always_gfp+0xc6f/0xfb0 [ 843.418401][T25111] alloc_inode+0x8e/0x250 [ 843.418414][T25111] new_inode+0x22/0x1c0 [ 843.418427][T25111] proc_pid_make_inode+0x22/0x160 [ 843.418446][T25111] proc_pident_instantiate+0x85/0x310 [ 843.418465][T25111] proc_pident_lookup+0x1e3/0x270 [ 843.418485][T25111] ? __pfx_proc_tgid_base_lookup+0x10/0x10 [ 843.418504][T25111] lookup_open+0xa79/0x1990 [ 843.418523][T25111] path_openat+0xa2c/0x2440 [ 843.418542][T25111] ? __pfx_path_openat+0x10/0x10 [ 843.418563][T25111] do_file_open+0x20e/0x430 [ 843.418581][T25111] ? __pfx_do_file_open+0x10/0x10 [ 843.418603][T25111] ? __pfx_kfree_link+0x10/0x10 [ 843.418621][T25111] ? _raw_spin_unlock+0x28/0x50 [ 843.418638][T25111] ? alloc_fd+0x471/0x7a0 [ 843.418658][T25111] do_sys_openat2+0x10f/0x1e0 [ 843.418670][T25111] ? __pfx_do_sys_openat2+0x10/0x10 [ 843.418684][T25111] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 843.418702][T25111] __ia32_compat_sys_openat+0x12d/0x210 [ 843.418716][T25111] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 843.418735][T25111] do_int80_emulation+0x166/0x650 [ 843.418751][T25111] asm_int80_emulation+0x1a/0x20 [ 843.418763][T25111] RIP: 0023:0xf71e762b [ 843.418773][T25111] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 843.418784][T25111] RSP: 002b:00000000f54a63cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 843.418797][T25111] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f54a6490 [ 843.418804][T25111] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 843.418811][T25111] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 843.418818][T25111] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 843.418826][T25111] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 843.418841][T25111] [ 843.475678][T25114] ip6t_ah: unknown flags D6 [ 843.519871][T25113] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 843.958083][T25134] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5652'. [ 843.958825][ T43] kauditd_printk_skb: 77 callbacks suppressed [ 843.958836][ T43] audit: type=1326 audit(1791891199.777:9606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25132 comm="syz.0.5652" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefec code=0x7ffc0000 [ 843.969215][ T43] audit: type=1326 audit(1791891199.787:9607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25132 comm="syz.0.5652" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefec code=0x7ffc0000 [ 843.970423][ T43] audit: type=1326 audit(1791891199.787:9608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25132 comm="syz.0.5652" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf73eefec code=0x7ffc0000 [ 843.970451][ T43] audit: type=1326 audit(1791891199.787:9609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25132 comm="syz.0.5652" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefec code=0x7ffc0000 [ 843.970473][ T43] audit: type=1326 audit(1791891199.787:9610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25132 comm="syz.0.5652" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefec code=0x7ffc0000 [ 843.971030][ T43] audit: type=1326 audit(1791891199.787:9611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25132 comm="syz.0.5652" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf714762b code=0x7ffc0000 [ 843.971462][ T43] audit: type=1326 audit(1791891199.787:9612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25132 comm="syz.0.5652" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73eefec code=0x7ffc0000 [ 843.971684][ T43] audit: type=1326 audit(1791891199.787:9613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25132 comm="syz.0.5652" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73eefec code=0x7ffc0000 [ 843.974938][T25134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.975370][T25134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.975540][ T43] audit: type=1326 audit(1791891199.797:9614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25132 comm="syz.0.5652" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefec code=0x7ffc0000 [ 843.978071][ T43] audit: type=1326 audit(1791891199.797:9615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25132 comm="syz.0.5652" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf73eefec code=0x7ffc0000 [ 844.691281][T25123] ceph: No mds server is up or the cluster is laggy [ 845.359762][ T10] usb 10-1: USB disconnect, device number 15 [ 845.451386][T23189] usb 14-1: new high-speed USB device number 11 using dummy_hcd [ 845.462832][T15021] Bluetooth: hci2: unexpected event for opcode 0x201c [ 845.465445][T25168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5664'. [ 845.518432][T25174] netlink: zone id is out of range [ 845.518442][T25174] netlink: zone id is out of range [ 845.518446][T25174] netlink: zone id is out of range [ 845.518450][T25174] netlink: zone id is out of range [ 845.518454][T25174] netlink: zone id is out of range [ 845.518458][T25174] netlink: zone id is out of range [ 845.518464][T25174] netlink: get zone limit has 4 unknown bytes [ 845.610113][T23189] usb 14-1: Using ep0 maxpacket: 8 [ 845.610833][T23189] usb 14-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 845.611786][T23189] usb 14-1: config 0 has an invalid interface number: 55 but max is 0 [ 845.611800][T23189] usb 14-1: config 0 has no interface number 0 [ 845.611817][T23189] usb 14-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 845.611831][T23189] usb 14-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 845.611844][T23189] usb 14-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 845.611857][T23189] usb 14-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 845.611877][T23189] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.615110][T23189] usb 14-1: config 0 descriptor?? [ 845.656378][T23189] ldusb 14-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 845.667969][T25177] sctp: [Deprecated]: syz.0.5667 (pid 25177) Use of int in max_burst socket option. [ 845.667969][T25177] Use struct sctp_assoc_value instead [ 845.727943][T25178] sctp: [Deprecated]: syz.0.5667 (pid 25178) Use of struct sctp_assoc_value in delayed_ack socket option. [ 845.727943][T25178] Use struct sctp_sack_info instead [ 845.827791][T10352] usb 14-1: USB disconnect, device number 11 [ 845.831208][T10352] ldusb 14-1:0.55: LD USB Device #0 now disconnected [ 846.392024][T25181] netlink: 'syz.9.5668': attribute type 10 has an invalid length. [ 846.423433][T25181] team0 (unregistering): Port device team_slave_0 removed [ 846.426122][T25189] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.5668'. [ 846.445484][T25181] team0 (unregistering): Port device team_slave_1 removed [ 846.501197][T25191] Set syz0 is full, maxelem 0 reached [ 846.628351][T15021] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 846.700710][T25208] random: crng reseeded on system resumption [ 846.735311][T25212] FAULT_INJECTION: forcing a failure. [ 846.735311][T25212] name failslab, interval 1, probability 0, space 0, times 0 [ 846.735333][T25212] CPU: 2 UID: 0 PID: 25212 Comm: syz.9.5679 Tainted: G L syzkaller #0 PREEMPT(full) [ 846.735349][T25212] Tainted: [L]=SOFTLOCKUP [ 846.735353][T25212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 846.735360][T25212] Call Trace: [ 846.735364][T25212] [ 846.735369][T25212] dump_stack_lvl+0x100/0x190 [ 846.735388][T25212] should_fail_ex.cold+0x5/0xa [ 846.735403][T25212] should_failslab+0xc2/0x120 [ 846.735421][T25212] kmem_cache_alloc_noprof+0x92/0x6a0 [ 846.735437][T25212] ? alloc_empty_file+0x5b/0x1c0 [ 846.735450][T25212] alloc_empty_file+0x5b/0x1c0 [ 846.735462][T25212] path_openat+0xdb/0x2440 [ 846.735481][T25212] ? __pfx_path_openat+0x10/0x10 [ 846.735500][T25212] do_file_open+0x20e/0x430 [ 846.735517][T25212] ? __pfx_do_file_open+0x10/0x10 [ 846.735544][T25212] ? alloc_fd+0x471/0x7a0 [ 846.735560][T25212] ? do_getname+0x191/0x390 [ 846.735573][T25212] do_sys_openat2+0x10f/0x1e0 [ 846.735612][T25212] ? __pfx_do_sys_openat2+0x10/0x10 [ 846.735626][T25212] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 846.735638][T25212] ? __fget_files+0x21f/0x3d0 [ 846.735655][T25212] __ia32_compat_sys_open+0xfe/0x1c0 [ 846.735667][T25212] ? __pfx___ia32_compat_sys_open+0x10/0x10 [ 846.735679][T25212] ? fput+0x7c/0x100 [ 846.735695][T25212] ? ksys_write+0x1ac/0x250 [ 846.735709][T25212] ? __pfx_ksys_write+0x10/0x10 [ 846.735726][T25212] __do_fast_syscall_32+0x13a/0x8b0 [ 846.735738][T25212] ? lockdep_hardirqs_on+0x7d/0x110 [ 846.735756][T25212] do_fast_syscall_32+0x32/0x70 [ 846.735768][T25212] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 846.735783][T25212] RIP: 0023:0xf748efec [ 846.735796][T25212] Code: Unable to access opcode bytes at 0xf748efc2. [ 846.735801][T25212] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000005 [ 846.735812][T25212] RAX: ffffffffffffffda RBX: 00000000800005c0 RCX: 0000000000000082 [ 846.735820][T25212] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 846.735826][T25212] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 846.735833][T25212] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 846.735840][T25212] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 846.735854][T25212] [ 846.793826][T25215] input: syz1 as /devices/virtual/input/input52 [ 846.864290][T25222] batman_adv: batadv0: Adding interface: dummy0 [ 846.864301][T25222] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.864316][T25222] batman_adv: batadv0: Interface activated: dummy0 [ 847.341672][T25243] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5689'. [ 847.579687][T23189] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 847.661425][T25247] net_ratelimit: 28 callbacks suppressed [ 847.661439][T25247] Set syz0 is full, maxelem 0 reached [ 847.662009][T15021] Bluetooth: hci3: unexpected event for opcode 0x201c [ 847.663492][T25250] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5691'. [ 847.729752][T23189] usb 8-1: Using ep0 maxpacket: 8 [ 847.735143][T23189] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 847.736519][T23189] usb 8-1: config 0 has no interfaces? [ 847.736538][T23189] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.751870][T23189] usb 8-1: config 0 descriptor?? [ 847.774503][T25254] futex_wake_op: syz.5.5693 tries to shift op by 144; fix this program [ 847.955980][T10352] usb 8-1: USB disconnect, device number 88 [ 848.223108][T25290] Set syz0 is full, maxelem 0 reached [ 848.242344][T25264] cgroup: fork rejected by pids controller in /syz5 [ 849.129264][T10352] usb 8-1: new high-speed USB device number 89 using dummy_hcd [ 849.479050][T10352] usb 8-1: Using ep0 maxpacket: 32 [ 849.481672][T10352] usb 8-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 849.482700][T10352] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 233, changing to 7 [ 849.484647][T10352] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.484660][T10352] usb 8-1: Product: п [ 849.484668][T10352] usb 8-1: Manufacturer: ᑣ숭⡍隸䱋夗篻髋㰌句॓䥭⁃⌦릈蝉ꛢᗣ槬萸꽢ﺚ힞鴗ᡩꌍ䔨⩛싇픂៸Ÿ⣊㖶榷უ럊ཿ㟀縏д￁ᚽ᱙剪䐝⮠㶀洴覊씏⊔垹圦ᶗ硢ퟕ룆育䛊撘ꅕ尸톘൙薄炗诬쥎紂쿂鿫햑貗⼵蹞ퟝ㰸烝믅퀮殚 [ 849.484684][T10352] usb 8-1: SerialNumber: 낌㲾폾蕿퐴항텟評埜뜈쫤玭䈋 [ 849.649056][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 849.649071][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 849.659686][ C2] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 850.218690][T10352] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 850.222402][T10352] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 850.224664][T10352] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 850.224843][T10352] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 850.227341][T10352] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 850.513636][T10352] snd-usb-audio 8-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 850.950919][T10352] usb 8-1: USB disconnect, device number 89 [ 853.155018][T25341] veth3: entered promiscuous mode [ 853.155034][T25341] veth3: entered allmulticast mode [ 853.264757][T23272] udevd[23272]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 853.769231][T24118] usb 14-1: new high-speed USB device number 12 using dummy_hcd [ 853.921248][T24118] usb 14-1: Using ep0 maxpacket: 8 [ 853.927812][T24118] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 853.935349][T24118] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 853.935391][T24118] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 853.935411][T24118] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 853.935431][T24118] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 853.935452][T24118] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 853.935487][T24118] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.190194][T24118] usb 14-1: usb_control_msg returned -32 [ 854.190231][T24118] usbtmc 14-1:16.0: can't read capabilities [ 854.204408][T24118] usb 14-1: USB disconnect, device number 12 [ 855.087027][T25350] FAULT_INJECTION: forcing a failure. [ 855.087027][T25350] name fail_futex, interval 1, probability 0, space 0, times 0 [ 855.087052][T25350] CPU: 2 UID: 0 PID: 25350 Comm: syz.0.5710 Tainted: G L syzkaller #0 PREEMPT(full) [ 855.087069][T25350] Tainted: [L]=SOFTLOCKUP [ 855.087074][T25350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 855.087081][T25350] Call Trace: [ 855.087085][T25350] [ 855.087091][T25350] dump_stack_lvl+0x100/0x190 [ 855.087112][T25350] should_fail_ex.cold+0x5/0xa [ 855.087128][T25350] get_futex_key+0x1d0/0x14f0 [ 855.087143][T25350] ? __pfx_get_futex_key+0x10/0x10 [ 855.087162][T25350] futex_wake+0xf4/0x5e0 [ 855.087180][T25350] ? __pfx_futex_wake+0x10/0x10 [ 855.087197][T25350] ? __raw_spin_lock_init+0x3a/0x110 [ 855.087210][T25350] ? lockdep_init_map_type+0x5c/0x250 [ 855.087231][T25350] do_futex+0x2b2/0x440 [ 855.087245][T25350] ? __pfx_do_futex+0x10/0x10 [ 855.087261][T25350] __ia32_sys_futex_time32+0x2f4/0x470 [ 855.087279][T25350] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 855.087300][T25350] __do_fast_syscall_32+0x13a/0x8b0 [ 855.087312][T25350] ? lockdep_hardirqs_on+0x7d/0x110 [ 855.087332][T25350] do_fast_syscall_32+0x32/0x70 [ 855.087344][T25350] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 855.087358][T25350] RIP: 0023:0xf73eefec [ 855.087371][T25350] Code: Unable to access opcode bytes at 0xf73eefc2. [ 855.087377][T25350] RSP: 002b:00000000f54065cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 855.087388][T25350] RAX: ffffffffffffffda RBX: 00000000f7414f8c RCX: 0000000000000081 [ 855.087396][T25350] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 855.087403][T25350] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 855.087410][T25350] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 855.087417][T25350] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 855.087431][T25350] [ 855.567587][T25351] Set syz0 is full, maxelem 0 reached [ 857.659821][T15021] Bluetooth: hci3: unexpected event for opcode 0x201c [ 860.410030][T13958] ------------[ cut here ]------------ [ 860.410041][T13958] time_after(jiffies, timeout) [ 860.410047][T13958] WARNING: io_uring/io_uring.c:2359 at io_ring_exit_work+0x479/0xd1a, CPU#0: kworker/u33:31/13958 [ 860.418344][T13958] Modules linked in: [ 860.420619][T13958] CPU: 0 UID: 0 PID: 13958 Comm: kworker/u33:31 Tainted: G L syzkaller #0 PREEMPT(full) [ 860.424317][T13958] Tainted: [L]=SOFTLOCKUP [ 860.425753][T13958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 860.429886][T13958] Workqueue: iou_exit io_ring_exit_work [ 860.431734][T13958] RIP: 0010:io_ring_exit_work+0x479/0xd1a [ 860.433685][T13958] Code: 8f e8 8b 53 49 01 48 8b 05 a4 5c 6b 0e 4c 8b 74 24 38 31 ff 49 29 c6 4c 89 f6 e8 22 07 d6 00 4d 85 f6 79 12 e8 78 0c d6 00 90 <0f> 0b 90 48 c7 44 24 20 70 17 00 00 e8 66 0c d6 00 48 8b 74 24 20 [ 860.440884][T13958] RSP: 0000:ffffc900036bfa80 EFLAGS: 00010293 [ 860.442934][T13958] RAX: 0000000000000000 RBX: ffff88805495c710 RCX: 0000000000000000 [ 860.445552][T13958] RDX: ffff88806ffe0000 RSI: ffffffff813595f8 RDI: ffff88806ffe0000 [ 860.448170][T13958] RBP: ffffc900036bfc18 R08: 0000000000000007 R09: 0000000000000000 [ 860.451803][T13958] R10: ffffffffffffffff R11: 0000000000000000 R12: ffff88805495c000 [ 860.454393][T13958] R13: dffffc0000000000 R14: ffffffffffffffff R15: 000000005495c700 [ 860.456938][T13958] FS: 0000000000000000(0000) GS:ffff88809574a000(0000) knlGS:0000000000000000 [ 860.460745][T13958] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 860.462983][T13958] CR2: 00007fd6537f0980 CR3: 000000006a2fc000 CR4: 0000000000352ef0 [ 860.466561][T13958] DR0: 0000000008000003 DR1: 00000000000001f8 DR2: 0000000000000086 [ 860.470540][T13958] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 860.473206][T13958] Call Trace: [ 860.474354][T13958] [ 860.475354][T13958] ? __pfx_io_ring_exit_work+0x10/0x10 [ 860.477165][T13958] ? __pfx_try_to_wake_up+0x10/0x10 [ 860.479830][T13958] ? process_one_work+0x906/0x1b10 [ 860.481580][T13958] ? process_one_work+0x906/0x1b10 [ 860.483297][T13958] process_one_work+0xac7/0x1b10 [ 860.484994][T13958] ? __pfx_process_one_work+0x10/0x10 [ 860.486763][T13958] ? lock_acquire+0x1d1/0x380 [ 860.488348][T13958] ? __pfx_io_ring_exit_work+0x10/0x10 [ 860.491120][T13958] worker_thread+0x5ef/0xe50 [ 860.492690][T13958] ? kthread+0x13a/0x450 [ 860.494148][T13958] ? __pfx_worker_thread+0x10/0x10 [ 860.495863][T13958] kthread+0x373/0x450 [ 860.497186][T13958] ? __pfx_kthread+0x10/0x10 [ 860.498749][T13958] ret_from_fork+0x730/0xd60 [ 860.501767][T13958] ? __pfx_ret_from_fork+0x10/0x10 [ 860.503568][T13958] ? native_load_gs_index+0x1e/0xc0 [ 860.505307][T13958] ? __switch_to+0x800/0x10f0 [ 860.506876][T13958] ? __pfx_kthread+0x10/0x10 [ 860.508449][T13958] ret_from_fork_asm+0x1a/0x30 [ 860.510878][T13958] [ 860.511939][T13958] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 860.514319][T13958] CPU: 0 UID: 0 PID: 13958 Comm: kworker/u33:31 Tainted: G L syzkaller #0 PREEMPT(full) [ 860.517915][T13958] Tainted: [L]=SOFTLOCKUP [ 860.519407][T13958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 860.522702][T13958] Workqueue: iou_exit io_ring_exit_work [ 860.524607][T13958] Call Trace: [ 860.525715][T13958] [ 860.526692][T13958] dump_stack_lvl+0x100/0x190 [ 860.528273][T13958] vpanic+0x553/0x970 [ 860.529639][T13958] ? __pfx_vpanic+0x10/0x10 [ 860.531170][T13958] panic+0xd1/0xe0 [ 860.532455][T13958] ? __pfx_panic+0x10/0x10 [ 860.533947][T13958] check_panic_on_warn.cold+0x19/0x34 [ 860.535699][T13958] ? io_ring_exit_work+0x479/0xd1a [ 860.537424][T13958] __warn.cold+0x191/0x318 [ 860.538875][T13958] __report_bug+0x30f/0x440 [ 860.540460][T13958] ? io_ring_exit_work+0x479/0xd1a [ 860.542171][T13958] ? __pfx___report_bug+0x10/0x10 [ 860.543874][T13958] ? rcu_is_watching+0x13/0xc0 [ 860.545474][T13958] ? trace_contention_end+0x126/0x160 [ 860.547229][T13958] ? __mutex_lock+0x26c/0x1bd0 [ 860.548773][T13958] ? io_ring_exit_work+0x422/0xd1a [ 860.550439][T13958] ? find_held_lock+0x2b/0x80 [ 860.551989][T13958] ? io_ring_exit_work+0x434/0xd1a [ 860.553651][T13958] ? io_ring_exit_work+0x479/0xd1a [ 860.555253][T13958] report_bug+0xb3/0x220 [ 860.556595][T13958] ? io_ring_exit_work+0x479/0xd1a [ 860.558196][T13958] handle_bug+0x16a/0x2a0 [ 860.559569][T13958] exc_invalid_op+0x17/0x50 [ 860.560992][T13958] asm_exc_invalid_op+0x1a/0x20 [ 860.562516][T13958] RIP: 0010:io_ring_exit_work+0x479/0xd1a [ 860.564309][T13958] Code: 8f e8 8b 53 49 01 48 8b 05 a4 5c 6b 0e 4c 8b 74 24 38 31 ff 49 29 c6 4c 89 f6 e8 22 07 d6 00 4d 85 f6 79 12 e8 78 0c d6 00 90 <0f> 0b 90 48 c7 44 24 20 70 17 00 00 e8 66 0c d6 00 48 8b 74 24 20 [ 860.570215][T13958] RSP: 0000:ffffc900036bfa80 EFLAGS: 00010293 [ 860.572106][T13958] RAX: 0000000000000000 RBX: ffff88805495c710 RCX: 0000000000000000 [ 860.574547][T13958] RDX: ffff88806ffe0000 RSI: ffffffff813595f8 RDI: ffff88806ffe0000 [ 860.576996][T13958] RBP: ffffc900036bfc18 R08: 0000000000000007 R09: 0000000000000000 [ 860.579444][T13958] R10: ffffffffffffffff R11: 0000000000000000 R12: ffff88805495c000 [ 860.581894][T13958] R13: dffffc0000000000 R14: ffffffffffffffff R15: 000000005495c700 [ 860.584372][T13958] ? io_ring_exit_work+0x478/0xd1a [ 860.585983][T13958] ? __pfx_io_ring_exit_work+0x10/0x10 [ 860.587703][T13958] ? __pfx_try_to_wake_up+0x10/0x10 [ 860.589358][T13958] ? process_one_work+0x906/0x1b10 [ 860.590961][T13958] ? process_one_work+0x906/0x1b10 [ 860.592568][T13958] process_one_work+0xac7/0x1b10 [ 860.594124][T13958] ? __pfx_process_one_work+0x10/0x10 [ 860.595809][T13958] ? lock_acquire+0x1d1/0x380 [ 860.597324][T13958] ? __pfx_io_ring_exit_work+0x10/0x10 [ 860.599034][T13958] worker_thread+0x5ef/0xe50 [ 860.600515][T13958] ? kthread+0x13a/0x450 [ 860.601843][T13958] ? __pfx_worker_thread+0x10/0x10 [ 860.603448][T13958] kthread+0x373/0x450 [ 860.604769][T13958] ? __pfx_kthread+0x10/0x10 [ 860.606232][T13958] ret_from_fork+0x730/0xd60 [ 860.607698][T13958] ? __pfx_ret_from_fork+0x10/0x10 [ 860.609308][T13958] ? native_load_gs_index+0x1e/0xc0 [ 860.610935][T13958] ? __switch_to+0x800/0x10f0 [ 860.612394][T13958] ? __pfx_kthread+0x10/0x10 [ 860.613810][T13958] ret_from_fork_asm+0x1a/0x30 [ 860.615270][T13958] [ 860.616820][T13958] Kernel Offset: disabled [ 860.618112][T13958] Rebooting in 86400 seconds..