last executing test programs: 13.027652241s ago: executing program 2 (id=280): r0 = openat$sr(0xffffff9c, &(0x7f0000000040), 0x101080, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r4, 0x4, 0x4c, 0x8, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, @local, 0x7, 0x7, 0x9, 0x40}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r8 = eventfd2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10044, 0x0) io_submit(r7, 0x1, &(0x7f0000000280)=[&(0x7f0000000300)={0x1802, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, r8}]) syz_emit_ethernet(0x2e, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRESHEX=r0, @ANYRESOCT=r7, @ANYRES16=r0, @ANYRESOCT=r5, @ANYBLOB="81ff41b92d"], 0x0) 12.874067023s ago: executing program 2 (id=282): prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) r0 = socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) setns(0xc9, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x5dd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt(r2, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000100), &(0x7f00000001c0)=0x8) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @multicast}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x2, 0x6, 0x3, 0x87, 0xffffffff, 0x2}) r5 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, 0x0, &(0x7f00000004c0)) preadv(r4, &(0x7f0000000340)=[{&(0x7f0000003200)=""/4096, 0x1000}], 0x1, 0x2c2, 0xca) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f0000000400)) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x200001, 0x0) 2.673786908s ago: executing program 3 (id=283): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff00000000050000008e480480000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59}, 0x94) r1 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x145}) close_range(r1, r1, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r3, 0x1000006) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000580)=0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0xf}, 0x1, 0x0, 0x0, 0x24084801}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x3, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x64}, @generic={0x85, 0x0, 0x0, 0x0, 0x3e}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r8, 0x0, &(0x7f0000000000)='dirsync\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r0, r7, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="400000002600010126bd7000fcffffff1d000000a4716e05e110c5fce32c000e80280007b2cd18b1925c84a67627ee6bc1c37a52800292d09be5b9cb3573c630"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.657300936s ago: executing program 2 (id=284): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x1) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000, 0xffffffff}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x3, 0x0, [{0x1b, 0x0, 0xfee00c00}, {0x832, 0x0, 0x40000}, {0x6e0, 0x0, 0x87a9}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='dummy_udc.0\n', 0xc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x2ad, r0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000"], 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_PACKETS={0xffffffffffffff31, 0x19, 0x1, 0x0, 0x7a}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6b6d}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x1) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8240022a}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r7, &(0x7f0000002a00)=[{&(0x7f0000000100)=@in={0x2, 0x100, @private=0xa010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)="14850c", 0x3}], 0x1, &(0x7f0000000000)=[@sndrcv={0x2c, 0x84, 0x1, {0x0, 0x0, 0x9, 0x0, 0x0, 0x4}}], 0x2c}], 0x1, 0x40) inotify_add_watch(r3, &(0x7f00000006c0)='.\x00', 0x400000ea) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e20, 0x10001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}, 0x5, 0x5, 0x8, 0x0, 0xbc, 0x7, 0x5}, &(0x7f0000000a00)=0x9c) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000140)=""/48, 0x30}, {&(0x7f0000000580)=""/42, 0x2a}], 0x2) 2.655296523s ago: executing program 2 (id=285): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x10d001, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f00000000c0)='usbip-vudc', 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x7f) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) r2 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x18e}, &(0x7f0000000000), &(0x7f0000000280), &(0x7f0000000000)) r3 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7766646e6fb42b3d", @ANYRESHEX=r3, @ANYBLOB=',\x00']) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r6 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) 2.654672193s ago: executing program 0 (id=286): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYBLOB="eb68bfb4e337d9efb5991a05801c68c386912ace4a69a08252bf214fd7d9367b34ce048f7c57a0b6928ae57eed35c5ab16773083b269467c80ca6b9d642157a6f6872a355a6d06121610f1917c860a17cab80f2b50bc656d3dbdfada26184e31d41fdf88686d74951b1bf0edb90776e343a4bf5cfc7adacee3bb458f5621a764ac310c92d173e8d02a5ebb34b078166ae076b91760f1449d3618e557f8fca9800448974bb31e1205305c3ab2e8dbd3e98248c024b6ede913c0b0f9c6c4c10682aa02a1143d30acc4f720901b665ca843e2914dd0dd024477f9a0dc2735"], 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth0_virt_wifi\x00', 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20083, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='nfsd 127.0.0.1 2147483647 *', 0x1b) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, &(0x7f00000012c0)={0x54, 0x0, {}, {}, 0x10001, 0x6}) sendmsg$nl_netfilter(r3, &(0x7f0000002880)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002840)={&(0x7f00000028c0)={0x155c, 0xb, 0xb, 0x201, 0x70bd26, 0x25dfdbfc, {0x7, 0x0, 0xa}, [@generic="9004d166bb9534582bb11ef2e884ed", @typed={0x4, 0x160, 0x0, 0x0, @str}, @typed={0x8, 0x13a, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0x14b}, @nested={0x1dc, 0xd5, 0x0, 0x1, [@generic="814554c6ab841a0501b17f9482b72ad91f3f90c3d3b9965ccaf220f398c183cfb4eccbb562c5c2e8df8693b23215484cb485ad0a1cc8fcf72cc3a631fd2ecedaabe256fef1326a5ebbc6d3c21a6569fb82bf58c7d22c12663a190399809c18e09556ccd83a87905f101b87628c6712c533ef625b51eaaeb42bb738945b48d788171cd07e676c7be0f44a3442ddcfaaccbba76a2ae63a9f22da78d548032db95f", @nested={0x4, 0xbe}, @nested={0x4, 0xae}, @generic="351f797c0e230e430a9efdcac5d34bbb7647c7c006e8b35f477766f75d66a33d16ca519e55aa3524de640333837ccb1eda6619ccb7305dbdb25352d2248a0d8e3c82053a7ccbc27a6888e30b4cc6d841ec1fcc00814c7a576e2f67875c7de1c9c3b8013e85593e1750eb54bbf34ab2c2279a64d6290f53adb73143ae03a2ea1e067efcc52b5e80ab3ec6b0dfd6a12a7d4666c5180219b006ccb606115111acfa4287d149931eaeaa0860370c5aafc743d79b8e257a08ca26c752e5ea5abe405cfbfb6519bd7a0a7496b7fb57050321348aed12fecedeaae7ad106d", @generic="476fc16d0f0a609781c8b552f939763f7089950d09a02fded752abb29f2e06f88b60737edf2e482e306acc8dacf596b4d897f45b984d75a9e83d0be07f932dcce9ba533da041090f26d70dade89a7dd2bd20df2370"]}, @generic="74bc9fe4db6ec94d61f4b449590379b8a6f6538ed9a7ddd6e47149bf5769ece21732c6694f35a9256980f558e51917ef83d0899b447205b6b5dc9fe1d7c3bb4a590f155261ac027113dadb1c86d06262543de86499e1c4a33cb1303df2a8f68919b63c052fb37660c49e506ea39af65b92628a2c56135d79d70a89736d3eed3bcc34f0a3b67ab963cb334fa849bdb7f27db5abad439ec7efad2d7a610a2e9021a0d3c354fd2fe5dbbbeb41cda8898d3eab019f7717100e43848775735b1a40217d24254cdc798a8d2e8e", @nested={0x127e, 0x23, 0x0, 0x1, [@generic="e7d50b46410e611fcd27df96a44bdf90d089b7e025fec1040d8947ec0e0dc034ef961a6fecd5cbcd4138932339a0ad35f527279d9a28819793821f232d26b0e6d294b33b5ff14c91fb21d7554e25b4ddfc5060806dcd9b748ae0e2f79ab50aabf0ec2987dd0b45618e557b2ef03f8188cf0754324a16fca2204e8d93921d7f86698ae0910c7a4482b5b426627271271d46a9762efc006d107e6c250303dd709f952cc4209ce9fb", @generic="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", @nested={0x4, 0xfd}, @generic="d1a07481aa66fe175b13a48c232380f2c3506fc2580701050c42e321b8dfd6e80930980a9bebcab49d2549c70a5167446f46b03ba9feb66b653d25f6c95692185825a0bb6e26845b05af0a6be873723aacf456c09bae4b81c8274e96b9e543aad6a2c14ec0ce7e0ff2b9586ad917646cc80bedfefde00cb1018b4f84ce73629b98c9b410b126e54e56ec90e85998e4130900a7a08a9d5d93163bb2433a9441aeb99d1ae04d7554946bcc4683d9a71b3008585a6e561424962f39f4220409dc1eebbabd17d1bf196fbd5074a709dd4cb736c5b685c7f6a8d778356e2fdcef0b4aaf192b", @nested={0x4, 0x4}, @typed={0xda, 0xf9, 0x0, 0x0, @binary="57d9e0df838fa05e987e1de48f6a0ba5912f9300bb2b541c7ab97ade009c004325a0bd4993c1a9a32bb84dfd701ad65c6109aa2c5b405ae793dffd26cb388bb9aa4151fc3b9c0f69a4c1bc39d77027e0a190003afbcbf5ecc429da92c117bd1ce95ed2054a138288c5600bd6225b2cd6c423d4acdf747e52cf2e1c098520fb885d23481452a227629084d6fd019e9faace347535b367875af69f47344871c84666ed16950f0630228c3d8f19f5968aa4f40185ab7d708acecfd3f939ba1e78f0f43ec2e3b9209ba2e8bc81a440200fcd05a99de6acb7"}, @nested={0x4, 0x78}, @typed={0x8, 0x90b, 0x0, 0x0, @u32=0x9}]}]}, 0x155c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='* / 2147483647 8192 0 0 0 secinfo 1 1 8192\n', 0x2b) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/nfsd.export/content\x00', 0x0, 0x0) read(r5, &(0x7f0000000280)=""/4096, 0x1000) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000003c0)={0x2, 0x0, [{0x40000000, 0x0, 0x6}, {0x40000001, 0x0, 0x1}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000adc000000060a0904000000000000000002000000b000048038000180080001006c6f67002c00028008000540800000000800034000000005080005400000000810000240217d2adb212fc9232e2d2a00600001800e000100696d6d6564696174650000004c00ee80100002800c00028008000180fffffffe38000280180002800900020073797a300000000008000340000002031b0001000031157dd6bb8971b2d5e864954174ba0fff9561e0634100140001800e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0x104}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 2.653213412s ago: executing program 1 (id=288): set_mempolicy(0x2002, &(0x7f0000000080)=0x9, 0x9) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r0 = openat$audio(0xffffff9c, &(0x7f0000000100), 0xc0000, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f0000000140)) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) socket(0x15, 0x5, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r2, 0x200000000114, 0x271f, 0x0, &(0x7f0000000000)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r4 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r4, &(0x7f0000000500)={'#! ', './file0', [{}, {0x20, '\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\''}, {}, {0x20, 'numa_maps\x00'}, {0x20, 'eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1f\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90\a\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82'}], 0xa, "58b73d17ad344f88540b68bd4430505c5bdc4d57ca30afa0772fae26746c4639149085fa4e5ea7e262b6713db5a2ddde58d2128da6cfa6742660d0155bd1941cb7984ffd817e729215e406b41c1938db4ac1ded17b88331ee09d64052e1bc44248a28240c6dc1f"}, 0x5eb) pread64(r3, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) r5 = mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1f\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90\a\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0xd9, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_notify(r5, &(0x7f0000000040)={0x0, 0x2a, 0x1}) mq_timedsend(r5, 0x0, 0x0, 0x1, 0x0) 2.652755063s ago: executing program 0 (id=289): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x802) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000440)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x29) r6 = dup3(r1, r0, 0x80000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001b00)="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", 0x2b3}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef", 0xb6}, {&(0x7f0000000140)="23b8ce44711f1e6f1e1059b58dfd6c1fbae9ca50cec9126827230a4b25a750120f30aab739c810d8424df34e6d1579255bc8ad160b61d2f336d7a823faad5de6204d45b9b5afde1391", 0x49}, {&(0x7f0000000ac0)="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", 0xb6e}, {&(0x7f0000000480)="d8a377abbbfb00686db5ec7c08f42f90f84cc42401bb188802f7dab39fd66669db6015d28b9037438483fd6715c48aa9422530ea0a6343e72b0314f1f972ef874bd39f7e1584c458b3718d613f7bcdc625e4f990962968045866241fbae3237854751d4c48b9e5540c3191eb85822e4c54ac4ba446bd45a466bd96b9ffb7c16b00096ddf1f2be2fbc7ec77b89be2f47a2d68d206d4f5ae1f6b057aeff507af484c4246385c032da080d928154420b578d41117176bddea8149fb82a2c0ce30054c85ac13829e215662bc788400c2409b9743cce8e29d57dfd41f869c4c803c2ef2", 0xe1}], 0x5, 0x0, 0x0, 0x4880}], 0x1, 0x150) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r9, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00') accept4$inet(r9, 0x0, 0x0, 0x0) 2.651785171s ago: executing program 1 (id=290): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) signalfd(r0, &(0x7f0000000040)={[0x0, 0x5]}, 0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) unshare(0x6020400) r2 = socket(0x2, 0x3, 0xff) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, 0x0) write$FUSE_INIT(r3, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa4, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@delqdisc={0x64, 0x25, 0x300, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xffff, 0xfff3}, {0xffe0}, {0x2, 0x9}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x200}, @TCA_RATE={0x6, 0x5, {0xff, 0xa1}}, @TCA_RATE={0x6, 0x5, {0xa, 0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 2.623114482s ago: executing program 0 (id=291): r0 = openat$sr(0xffffff9c, &(0x7f0000000040), 0x101080, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r4, 0x4, 0x4c, 0x8, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, @local, 0x7, 0x7, 0x9, 0x40}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r8 = eventfd2(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10044, 0x0) io_submit(r7, 0x1, &(0x7f0000000280)=[&(0x7f0000000300)={0x1802, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, r8}]) syz_emit_ethernet(0x2e, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRESHEX=r0, @ANYRESOCT=r7, @ANYRES16=r0, @ANYRESOCT=r5, @ANYBLOB="81ff41b92d"], 0x0) 2.62124425s ago: executing program 1 (id=292): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008700)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000800)={0x50, 0x0, r1, {0x7, 0x2b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x26b66b25}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r2, 0x125f, 0x0) 2.61842707s ago: executing program 2 (id=293): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000200)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r3 = io_uring_setup(0x1d4c, &(0x7f0000000140)={0x0, 0x64b13e, 0x80, 0x6, 0x58}) openat$cachefiles(0xffffff9c, &(0x7f0000000240), 0x141240, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x4c850) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000011c0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd28, 0x255fdbfd, {0x0, 0x0, 0x0, r6, {0xfff2, 0x2}, {0x0, 0xfff3}, {0xfff1, 0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xffe0}}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x0, 0x7, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20045005}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = getpgid(0x0) r9 = syz_pidfd_open(r8, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0x80087601, &(0x7f0000000040)) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r7}, 0xc) openat$ttyS3(0xffffff9c, &(0x7f00000002c0), 0x180100, 0x0) r10 = syz_open_dev$media(&(0x7f0000000040), 0x9, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r10, 0x80047c05, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.617571969s ago: executing program 3 (id=294): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$iommufd(0xffffff9c, &(0x7f0000000080), 0xf80, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)="52cece275370b01c28f98fce05809d7efb3a93478017f7cff926a46fe7eb91", 0x7, 0xe}) r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) openat$tun(0xffffff9c, &(0x7f0000000140), 0x503301, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc048aeca, &(0x7f00000000c0)) syz_usb_control_io(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers_probe\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='pcspkr', 0x6) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x17, 0x5, 0x8, 0x1, 0xa, "9591c289333bef7d35119544ed641462d4304c"}) 2.541595546s ago: executing program 2 (id=295): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$iommufd(0xffffff9c, &(0x7f0000000080), 0xf80, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)="52cece275370b01c28f98fce05809d7efb3a93478017f7cff926a46fe7eb91", 0x7, 0xe}) r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) openat$tun(0xffffff9c, &(0x7f0000000140), 0x503301, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc048aeca, &(0x7f00000000c0)={0x7, 0x0, [{0x9c7, 0x0, 0x4}, {0x2e8, 0x0, 0x40000005}, {0x8be, 0x0, 0x8001}, {0x9b5, 0x0, 0xb}, {0x804}, {0xbb4, 0x0, 0x200000000002}, {0x865, 0x0, 0x100000000}]}) syz_usb_control_io(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers_probe\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='pcspkr', 0x6) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x17, 0x5, 0x8, 0x1, 0xa, "9591c289333bef7d35119544ed641462d4304c"}) 2.434179507s ago: executing program 0 (id=296): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./merge\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./lower/file\x00', 0x41, 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000001940), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001d80)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf250300000008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) setns(0xc9, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x5, &(0x7f0000000080)=[{0x0, 0x2, 0x3, 0x6}, {0xfff, 0x4, 0xf4, 0x6}, {0x800, 0x5c, 0xff, 0xfffff34d}, {0x6, 0x4, 0x0, 0x7}, {0x2, 0xff, 0x5e, 0x4}]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x50009405, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg2\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="eaff000000bc0000000000000000cd0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000000880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000b80)=ANY=[@ANYBLOB="6c020000", @ANYRES16=0x0, @ANYRESHEX=r0, @ANYBLOB="746c6447231470f1914b40b857cea7b42d7b824a4ba7507de4bbd6d03e24366be72094391573262326a43d5ff47c30bda786e6c7821e14edcd0af3b7264f6bc1c92515482a017abd3af9c69a0741f8e20546088169d84e6f980796809aa2661e31204c9c93648763f62e6aad06819ec5f9e07754e0bf1c55de583ad983ac49b26d041e9723bea4549605dc8b3fda6cfbf930fa644715233df382e6292beefdecc1e9fb4a031ce2abb08ef002c766e6f39792cbaa1b286c573143a1fea5a6d4345e062847a63e18a283a31a4f431f7dab413b26b707c33467f3b91f6173dc6b65f3bad6de"], 0x26c}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x60) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d000000000000"], 0x0, 0x34}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='proc\x00', &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r5, &(0x7f0000000100)='1000\x00', 0x5) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000018000106000000000000000002200000fe04000100000000080001006401010108000400ffe9ed1c5a0400000000000000ef3040086fd0892f4aba39f649f438d76b04f7a58153131d86329d3503d5424f4573fac73be2e47b9921b2363cc1aff216c72441994240b48e2617bf83", @ANYRES32=0x1, @ANYBLOB="06001500010000000c0016800800010000000000"], 0x40}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000440)={'syz_tun\x00', 0x1001}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, 0x0) 2.334869583s ago: executing program 0 (id=297): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYBLOB="eb68bfb4e337d9efb5991a05801c68c386912ace4a69a08252bf214fd7d9367b34ce048f7c57a0b6928ae57eed35c5ab16773083b269467c80ca6b9d642157a6f6872a355a6d06121610f1917c860a17cab80f2b50bc656d3dbdfada26184e31d41fdf88686d74951b1bf0edb90776e343a4bf5cfc7adacee3bb458f5621a764ac310c92d173e8d02a5ebb34b078166ae076b91760f1449d3618e557f8fca9800448974bb31e1205305c3ab2e8dbd3e98248c024b6ede913c0b0f9c6c4c10682aa02a1143d30acc4f720901b665ca843e2914dd0dd024477f9a0dc2735"], 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth0_virt_wifi\x00', 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20083, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='nfsd 127.0.0.1 2147483647 *', 0x1b) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, &(0x7f00000012c0)={0x54, 0x0, {}, {}, 0x10001, 0x6}) sendmsg$nl_netfilter(r3, &(0x7f0000002880)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002840)={&(0x7f00000028c0)={0x155c, 0xb, 0xb, 0x201, 0x70bd26, 0x25dfdbfc, {0x7, 0x0, 0xa}, [@generic="9004d166bb9534582bb11ef2e884ed", @typed={0x4, 0x160, 0x0, 0x0, @str}, @typed={0x8, 0x13a, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0x14b}, @nested={0x1dc, 0xd5, 0x0, 0x1, [@generic="814554c6ab841a0501b17f9482b72ad91f3f90c3d3b9965ccaf220f398c183cfb4eccbb562c5c2e8df8693b23215484cb485ad0a1cc8fcf72cc3a631fd2ecedaabe256fef1326a5ebbc6d3c21a6569fb82bf58c7d22c12663a190399809c18e09556ccd83a87905f101b87628c6712c533ef625b51eaaeb42bb738945b48d788171cd07e676c7be0f44a3442ddcfaaccbba76a2ae63a9f22da78d548032db95f", @nested={0x4, 0xbe}, @nested={0x4, 0xae}, @generic="351f797c0e230e430a9efdcac5d34bbb7647c7c006e8b35f477766f75d66a33d16ca519e55aa3524de640333837ccb1eda6619ccb7305dbdb25352d2248a0d8e3c82053a7ccbc27a6888e30b4cc6d841ec1fcc00814c7a576e2f67875c7de1c9c3b8013e85593e1750eb54bbf34ab2c2279a64d6290f53adb73143ae03a2ea1e067efcc52b5e80ab3ec6b0dfd6a12a7d4666c5180219b006ccb606115111acfa4287d149931eaeaa0860370c5aafc743d79b8e257a08ca26c752e5ea5abe405cfbfb6519bd7a0a7496b7fb57050321348aed12fecedeaae7ad106d", @generic="476fc16d0f0a609781c8b552f939763f7089950d09a02fded752abb29f2e06f88b60737edf2e482e306acc8dacf596b4d897f45b984d75a9e83d0be07f932dcce9ba533da041090f26d70dade89a7dd2bd20df2370"]}, @generic="74bc9fe4db6ec94d61f4b449590379b8a6f6538ed9a7ddd6e47149bf5769ece21732c6694f35a9256980f558e51917ef83d0899b447205b6b5dc9fe1d7c3bb4a590f155261ac027113dadb1c86d06262543de86499e1c4a33cb1303df2a8f68919b63c052fb37660c49e506ea39af65b92628a2c56135d79d70a89736d3eed3bcc34f0a3b67ab963cb334fa849bdb7f27db5abad439ec7efad2d7a610a2e9021a0d3c354fd2fe5dbbbeb41cda8898d3eab019f7717100e43848775735b1a40217d24254cdc798a8d2e8e", @nested={0x127e, 0x23, 0x0, 0x1, [@generic="e7d50b46410e611fcd27df96a44bdf90d089b7e025fec1040d8947ec0e0dc034ef961a6fecd5cbcd4138932339a0ad35f527279d9a28819793821f232d26b0e6d294b33b5ff14c91fb21d7554e25b4ddfc5060806dcd9b748ae0e2f79ab50aabf0ec2987dd0b45618e557b2ef03f8188cf0754324a16fca2204e8d93921d7f86698ae0910c7a4482b5b426627271271d46a9762efc006d107e6c250303dd709f952cc4209ce9fb", @generic="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", @nested={0x4, 0xfd}, @generic="d1a07481aa66fe175b13a48c232380f2c3506fc2580701050c42e321b8dfd6e80930980a9bebcab49d2549c70a5167446f46b03ba9feb66b653d25f6c95692185825a0bb6e26845b05af0a6be873723aacf456c09bae4b81c8274e96b9e543aad6a2c14ec0ce7e0ff2b9586ad917646cc80bedfefde00cb1018b4f84ce73629b98c9b410b126e54e56ec90e85998e4130900a7a08a9d5d93163bb2433a9441aeb99d1ae04d7554946bcc4683d9a71b3008585a6e561424962f39f4220409dc1eebbabd17d1bf196fbd5074a709dd4cb736c5b685c7f6a8d778356e2fdcef0b4aaf192b", @nested={0x4, 0x4}, @typed={0xda, 0xf9, 0x0, 0x0, @binary="57d9e0df838fa05e987e1de48f6a0ba5912f9300bb2b541c7ab97ade009c004325a0bd4993c1a9a32bb84dfd701ad65c6109aa2c5b405ae793dffd26cb388bb9aa4151fc3b9c0f69a4c1bc39d77027e0a190003afbcbf5ecc429da92c117bd1ce95ed2054a138288c5600bd6225b2cd6c423d4acdf747e52cf2e1c098520fb885d23481452a227629084d6fd019e9faace347535b367875af69f47344871c84666ed16950f0630228c3d8f19f5968aa4f40185ab7d708acecfd3f939ba1e78f0f43ec2e3b9209ba2e8bc81a440200fcd05a99de6acb7"}, @nested={0x4, 0x78}, @typed={0x8, 0x90b, 0x0, 0x0, @u32=0x9}]}]}, 0x155c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='* / 2147483647 8192 0 0 0 secinfo 1 1 8192\n', 0x2b) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/nfsd.export/content\x00', 0x0, 0x0) read(r5, &(0x7f0000000280)=""/4096, 0x1000) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000003c0)={0x2, 0x0, [{0x40000000, 0x0, 0x6}, {0x40000001, 0x0, 0x1}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000adc000000060a0904000000000000000002000000b000048038000180080001006c6f67002c00028008000540800000000800034000000005080005400000000810000240217d2adb212fc9232e2d2a00600001800e000100696d6d6564696174650000004c00ee80100002800c00028008000180fffffffe38000280180002800900020073797a300000000008000340000002031b0001000031157dd6bb8971b2d5e864954174ba0fff9561e0634100140001800e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0x104}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 2.141227509s ago: executing program 0 (id=298): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff00000000050000008e48048000000000950000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59}, 0x94) io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x145}) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r2, 0x1000006) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000580)=0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x3, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x64}, @generic={0x85, 0x0, 0x0, 0x0, 0x3e}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r7, 0x0, &(0x7f0000000000)='dirsync\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r0, r6, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="400000002600010126bd7000fcffffff1d000000a4716e05e110c5fce32c000e80280007b2cd18b1925c84a67627ee6bc1c37a52800292d09be5b9cb3573c630"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.765360051s ago: executing program 1 (id=299): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, 0x0}) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x802) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000440)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x29) r6 = dup3(r1, r0, 0x80000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001b00)="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", 0x2b3}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef", 0xb6}, {&(0x7f0000000140)="23b8ce44711f1e6f1e1059b58dfd6c1fbae9ca50cec9126827230a4b25a750120f30aab739c810d8424df34e6d1579255bc8ad160b61d2f336d7a823faad5de6204d45b9b5afde1391", 0x49}, {&(0x7f0000000ac0)="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", 0xb6e}, {&(0x7f0000000480)="d8a377abbbfb00686db5ec7c08f42f90f84cc42401bb188802f7dab39fd66669db6015d28b9037438483fd6715c48aa9422530ea0a6343e72b0314f1f972ef874bd39f7e1584c458b3718d613f7bcdc625e4f990962968045866241fbae3237854751d4c48b9e5540c3191eb85822e4c54ac4ba446bd45a466bd96b9ffb7c16b00096ddf1f2be2fbc7ec77b89be2f47a2d68d206d4f5ae1f6b057aeff507af484c4246385c032da080d928154420b578d41117176bddea8149fb82a2c0ce30054c85ac13829e215662bc788400c2409b9743cce8e29d57dfd41f869c4c803c2ef2", 0xe1}], 0x5, 0x0, 0x0, 0x4880}], 0x1, 0x150) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r9, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00') accept4$inet(r9, 0x0, 0x0, 0x0) 1.139761903s ago: executing program 3 (id=300): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x1) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000, 0xffffffff}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x3, 0x0, [{0x1b, 0x0, 0xfee00c00}, {0x832, 0x0, 0x40000}, {0x6e0, 0x0, 0x87a9}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='dummy_udc.0\n', 0xc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x2ad, r0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000"], 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_PACKETS={0xffffffffffffff31, 0x19, 0x1, 0x0, 0x7a}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6b6d}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x1) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8240022a}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r7, &(0x7f0000002a00)=[{&(0x7f0000000100)=@in={0x2, 0x100, @private=0xa010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)="14850c", 0x3}], 0x1, &(0x7f0000000000)=[@sndrcv={0x2c, 0x84, 0x1, {0x0, 0x0, 0x9, 0x0, 0x0, 0x4}}], 0x2c}], 0x1, 0x40) inotify_add_watch(r3, &(0x7f00000006c0)='.\x00', 0x400000ea) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e20, 0x10001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}, 0x5, 0x5, 0x8, 0x0, 0xbc, 0x7, 0x5}, &(0x7f0000000a00)=0x9c) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000140)=""/48, 0x30}, {&(0x7f0000000580)=""/42, 0x2a}], 0x2) 1.090615608s ago: executing program 3 (id=301): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x10d001, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f00000000c0)='usbip-vudc', 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x7f) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) r2 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x18e}, &(0x7f0000000000), &(0x7f0000000280), &(0x7f0000000000)) r3 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7766646e6fb42b3d", @ANYRESHEX=r3, @ANYBLOB=',\x00']) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r6 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) 866.027003ms ago: executing program 1 (id=302): set_mempolicy(0x2002, &(0x7f0000000080)=0x9, 0x9) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r0 = openat$audio(0xffffff9c, &(0x7f0000000100), 0xc0000, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f0000000140)) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) socket(0x15, 0x5, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r2, 0x200000000114, 0x271f, 0x0, &(0x7f0000000000)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r4 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r4, &(0x7f0000000500)={'#! ', './file0', [{}, {0x20, '\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\''}, {}, {0x20, 'numa_maps\x00'}, {0x20, 'eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1f\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90\a\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82'}], 0xa, "58b73d17ad344f88540b68bd4430505c5bdc4d57ca30afa0772fae26746c4639149085fa4e5ea7e262b6713db5a2ddde58d2128da6cfa6742660d0155bd1941cb7984ffd817e729215e406b41c1938db4ac1ded17b88331ee09d64052e1bc44248a28240c6dc1f"}, 0x5eb) pread64(r3, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) r5 = mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1f\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90\a\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0xd9, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_notify(r5, &(0x7f0000000040)={0x0, 0x2a, 0x1}) mq_timedsend(r5, 0x0, 0x0, 0x1, 0x0) 221.294552ms ago: executing program 3 (id=303): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0x20004, r0, 0x2}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x13, r2, 0x80000000) r3 = userfaultfd(0x801) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x280380) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, &(0x7f0000000040)) 1.521211ms ago: executing program 3 (id=304): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0\x00') writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getegid() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) openat(r2, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x901, 0x0) statx(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x800, 0x400, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x121}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5}]}}}]}, 0x3c}}, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000100)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 0s ago: executing program 1 (id=305): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./merge\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./lower/file\x00', 0x41, 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000001940), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001d80)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf250300000008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) setns(0xc9, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x5, &(0x7f0000000080)=[{0x0, 0x2, 0x3, 0x6}, {0xfff, 0x4, 0xf4, 0x6}, {0x800, 0x5c, 0xff, 0xfffff34d}, {0x6, 0x4, 0x0, 0x7}, {0x2, 0xff, 0x5e, 0x4}]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x50009405, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg2\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="eaff000000bc0000000000000000cd0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000000880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000b80)=ANY=[@ANYBLOB="6c020000", @ANYRES16=0x0, @ANYRESHEX=r0, @ANYBLOB="746c6447231470f1914b40b857cea7b42d7b824a4ba7507de4bbd6d03e24366be72094391573262326a43d5ff47c30bda786e6c7821e14edcd0af3b7264f6bc1c92515482a017abd3af9c69a0741f8e20546088169d84e6f980796809aa2661e31204c9c93648763f62e6aad06819ec5f9e07754e0bf1c55de583ad983ac49b26d041e9723bea4549605dc8b3fda6cfbf930fa644715233df382e6292beefdecc1e9fb4a031ce2abb08ef002c766e6f39792cbaa1b286c573143a1fea5a6d4345e062847a63e18a283a31a4f431f7dab413b26b707c33467f3b91f6173dc6b65f3bad6de"], 0x26c}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x60) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d000000000000"], 0x0, 0x34}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='proc\x00', &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r5, &(0x7f0000000100)='1000\x00', 0x5) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000018000106000000000000000002200000fe04000100000000080001006401010108000400ffe9ed1c5a0400000000000000ef3040086fd0892f4aba39f649f438d76b04f7a58153131d86329d3503d5424f4573fac73be2e47b9921b2363cc1aff216c72441994240b48e2617bf83", @ANYRES32=0x1, @ANYBLOB="06001500010000000c0016800800010000000000"], 0x40}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000440)={'syz_tun\x00', 0x1001}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:48669' (ED25519) to the list of known hosts. [ 67.227831][ T5747] cgroup: Unknown subsys name 'net' [ 67.397707][ T5747] cgroup: Unknown subsys name 'cpuset' [ 67.401883][ T5747] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.363519][ T5747] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.226817][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.230025][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.969622][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.969706][ T5763] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.976271][ T5763] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.979632][ T5763] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.982788][ T5771] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.982857][ T5763] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.985684][ T5771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.988098][ T5763] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.992271][ T5771] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.992880][ T5763] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.996516][ T5771] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.998604][ T5763] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.000631][ T5771] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.003485][ T5763] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.004072][ T5773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.004590][ T5774] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.007098][ T5774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.010330][ T5763] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.012494][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.020838][ T5763] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.746084][ T5758] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.749696][ T5758] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.752129][ T5758] bridge_slave_0: entered allmulticast mode [ 73.755149][ T5758] bridge_slave_0: entered promiscuous mode [ 73.789498][ T5758] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.792148][ T5758] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.794379][ T5758] bridge_slave_1: entered allmulticast mode [ 73.796991][ T5758] bridge_slave_1: entered promiscuous mode [ 73.805625][ T5759] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.807975][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.810148][ T5759] bridge_slave_0: entered allmulticast mode [ 73.812655][ T5759] bridge_slave_0: entered promiscuous mode [ 73.824120][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.826502][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.828722][ T5768] bridge_slave_0: entered allmulticast mode [ 73.831269][ T5768] bridge_slave_0: entered promiscuous mode [ 73.839956][ T5759] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.842582][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.844870][ T5759] bridge_slave_1: entered allmulticast mode [ 73.847474][ T5759] bridge_slave_1: entered promiscuous mode [ 73.855201][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.857557][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.859702][ T5767] bridge_slave_0: entered allmulticast mode [ 73.862183][ T5767] bridge_slave_0: entered promiscuous mode [ 73.865655][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.868052][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.870423][ T5768] bridge_slave_1: entered allmulticast mode [ 73.873616][ T5768] bridge_slave_1: entered promiscuous mode [ 73.877918][ T5758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.886540][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.889098][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.891742][ T5767] bridge_slave_1: entered allmulticast mode [ 73.894731][ T5767] bridge_slave_1: entered promiscuous mode [ 73.909514][ T5758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.919822][ T5759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.924147][ T5759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.934741][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.964335][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.969326][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.973710][ T5758] team0: Port device team_slave_0 added [ 73.978248][ T5759] team0: Port device team_slave_0 added [ 73.988963][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.994476][ T5758] team0: Port device team_slave_1 added [ 74.007316][ T5759] team0: Port device team_slave_1 added [ 74.054150][ T5768] team0: Port device team_slave_0 added [ 74.058240][ T5767] team0: Port device team_slave_0 added [ 74.060971][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.063097][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.072975][ T5758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.080939][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.083843][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.094313][ T5758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.111927][ T5768] team0: Port device team_slave_1 added [ 74.115903][ T5767] team0: Port device team_slave_1 added [ 74.133749][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.136931][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.146169][ T5759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.173489][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.176546][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.187448][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.199087][ T5759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.201734][ T5759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.210448][ T5759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.223318][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.226377][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.237098][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.242308][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.244735][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.252622][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.257477][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.259687][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.270334][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.336408][ T5758] hsr_slave_0: entered promiscuous mode [ 74.339803][ T5758] hsr_slave_1: entered promiscuous mode [ 74.349219][ T5759] hsr_slave_0: entered promiscuous mode [ 74.352334][ T5759] hsr_slave_1: entered promiscuous mode [ 74.355550][ T5759] debugfs: 'hsr0' already exists in 'hsr' [ 74.358081][ T5759] Cannot create hsr debugfs directory [ 74.418824][ T5768] hsr_slave_0: entered promiscuous mode [ 74.421886][ T5768] hsr_slave_1: entered promiscuous mode [ 74.424434][ T5768] debugfs: 'hsr0' already exists in 'hsr' [ 74.426502][ T5768] Cannot create hsr debugfs directory [ 74.433414][ T5767] hsr_slave_0: entered promiscuous mode [ 74.437105][ T5767] hsr_slave_1: entered promiscuous mode [ 74.441131][ T5767] debugfs: 'hsr0' already exists in 'hsr' [ 74.443686][ T5767] Cannot create hsr debugfs directory [ 74.870516][ T5758] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.881246][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.884021][ T5758] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.890499][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.893879][ T5758] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.899184][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.902031][ T5758] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.908173][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.970920][ T5759] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.978976][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.982960][ T5759] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.992231][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.996356][ T5759] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.005496][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.012100][ T5759] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.019721][ T5759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.065693][ T5766] Bluetooth: hci0: command tx timeout [ 75.066208][ T64] Bluetooth: hci1: command tx timeout [ 75.068697][ T5763] Bluetooth: hci3: command tx timeout [ 75.072097][ T64] Bluetooth: hci2: command tx timeout [ 75.104277][ T5767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.113079][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.117761][ T5767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.123846][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.138732][ T5767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.150365][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.153842][ T5767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.162004][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.214233][ T5758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.249891][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.255843][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.258755][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.262705][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.267323][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.271863][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.276607][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.282236][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.293049][ T5758] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.321067][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.323606][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.348566][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.351383][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.391400][ T5759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.430462][ T5759] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.456317][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.462847][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.468381][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.471420][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.489115][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.491638][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.514948][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.525658][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.540183][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.543083][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.559584][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.561779][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.565380][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.567595][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.586553][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.588820][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.890230][ T5759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.924768][ T5758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.956518][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.968780][ T5759] veth0_vlan: entered promiscuous mode [ 75.985712][ T5758] veth0_vlan: entered promiscuous mode [ 75.992442][ T5759] veth1_vlan: entered promiscuous mode [ 75.998775][ T5758] veth1_vlan: entered promiscuous mode [ 76.020272][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.032373][ T5767] veth0_vlan: entered promiscuous mode [ 76.045388][ T5767] veth1_vlan: entered promiscuous mode [ 76.059799][ T5758] veth0_macvtap: entered promiscuous mode [ 76.064115][ T5759] veth0_macvtap: entered promiscuous mode [ 76.071475][ T5759] veth1_macvtap: entered promiscuous mode [ 76.075397][ T5758] veth1_macvtap: entered promiscuous mode [ 76.107031][ T5767] veth0_macvtap: entered promiscuous mode [ 76.113431][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.117688][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.127559][ T5768] veth0_vlan: entered promiscuous mode [ 76.134341][ T5759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.137357][ T5767] veth1_macvtap: entered promiscuous mode [ 76.142888][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.158273][ T5768] veth1_vlan: entered promiscuous mode [ 76.215770][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.231602][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.244815][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.248990][ T5768] veth0_macvtap: entered promiscuous mode [ 76.271372][ T5768] veth1_macvtap: entered promiscuous mode [ 76.276975][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.283234][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.284960][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.286687][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.289221][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.302559][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.335596][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.338872][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.364919][ T5860] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.376672][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.379296][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.409397][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.415125][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.432080][ T5759] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.437038][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.439498][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.445822][ T5759] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 76.452679][ T5759] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 76.459936][ T5759] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 76.469856][ T5759] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 76.470377][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.485518][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.507442][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.512143][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.535635][ T5860] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.542918][ T5860] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.553253][ T5860] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.584995][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.591126][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.635264][ T5860] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.644117][ T5860] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.649061][ T5860] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.652979][ T5860] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.711900][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.717071][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.720387][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.724241][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.730366][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.828628][ T5919] binder: 5912:5919 ioctl c0306201 80000040 returned -14 [ 76.836147][ T5927] CIFS: Attempting to mount //127.0.0.1/share [ 76.916298][ T5928] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 77.054726][ T3271] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 77.104708][ T5853] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 77.144812][ T5766] Bluetooth: hci1: command tx timeout [ 77.148010][ T64] Bluetooth: hci3: command tx timeout [ 77.151098][ T5763] Bluetooth: hci0: command tx timeout [ 77.154667][ T5110] Bluetooth: hci2: command tx timeout [ 77.207061][ T3271] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 77.210513][ T3271] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 77.213525][ T3271] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 77.216531][ T3271] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.229705][ T3271] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 77.252015][ T3271] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 77.260860][ T5853] usb 6-1: config 0 has no interfaces? [ 77.262906][ T5853] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 77.275206][ T5853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.285258][ T5853] usb 6-1: config 0 descriptor?? [ 77.520031][ T5853] usb 6-1: USB disconnect, device number 2 [ 77.541574][ T5927] CIFS: VFS: cifs_mount failed w/return code = -112 [ 77.579471][ T5930] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5'. [ 77.881857][ T41] audit: type=1326 audit(1785944918.961:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.3.7" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 77.888558][ T41] audit: type=1326 audit(1785944918.971:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.3.7" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 77.895811][ T41] audit: type=1326 audit(1785944918.971:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.3.7" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 77.914628][ T41] audit: type=1326 audit(1785944918.971:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.3.7" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 77.921636][ T41] audit: type=1326 audit(1785944918.971:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.3.7" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 77.930609][ T41] audit: type=1326 audit(1785944918.971:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.3.7" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 77.939686][ T41] audit: type=1326 audit(1785944918.971:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.3.7" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 77.972467][ T41] audit: type=1326 audit(1785944918.971:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.3.7" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 77.990008][ T41] audit: type=1326 audit(1785944918.971:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.3.7" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 77.998585][ T41] audit: type=1326 audit(1785944918.971:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5934 comm="syz.3.7" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 79.168342][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 79.224974][ T5110] Bluetooth: hci1: command tx timeout [ 79.225023][ T5766] Bluetooth: hci0: command tx timeout [ 79.227638][ T5110] Bluetooth: hci3: command tx timeout [ 79.234738][ T5110] Bluetooth: hci2: command tx timeout [ 79.400613][ T5959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12'. [ 79.411107][ T5959] vcan0: entered promiscuous mode [ 79.414221][ T5959] vcan0: entered allmulticast mode [ 79.794673][ T5845] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.848131][ T29] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 79.869726][ T5981] netlink: 'syz.1.15': attribute type 1 has an invalid length. [ 79.878115][ T1041] usb 7-1: USB disconnect, device number 2 [ 79.899221][ T1041] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 79.906009][ T1041] spcp8x5 7-1:1.0: device disconnected [ 79.958684][ T5845] usb 5-1: config 0 has no interfaces? [ 79.961306][ T5845] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 79.965424][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.971224][ T5845] usb 5-1: config 0 descriptor?? [ 80.023065][ T29] usb 8-1: config 0 has no interfaces? [ 80.025704][ T29] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 80.029588][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.039070][ T29] usb 8-1: config 0 descriptor?? [ 80.272119][ T1041] usb 5-1: USB disconnect, device number 2 [ 80.326117][ T5853] usb 8-1: USB disconnect, device number 2 [ 80.358284][ T5989] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17'. [ 81.305602][ T5110] Bluetooth: hci2: command tx timeout [ 81.309766][ T5766] Bluetooth: hci3: command tx timeout [ 81.314685][ T5110] Bluetooth: hci0: command tx timeout [ 81.314698][ T5766] Bluetooth: hci1: command tx timeout [ 81.516160][ T55] cfg80211: failed to load regulatory.db [ 82.359518][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'. [ 82.371046][ T6012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22'. [ 82.598473][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23'. [ 82.608995][ T6020] netlink: 'syz.3.25': attribute type 1 has an invalid length. [ 82.708245][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.712312][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.819628][ T6024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.821456][ T6033] binder: 6032:6033 ioctl c0306201 80000040 returned -14 [ 82.827862][ T6033] CIFS: Attempting to mount //127.0.0.1/share [ 82.830619][ T6024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.118711][ T6046] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 83.155292][ T5860] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.162062][ T5860] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.165145][ T5860] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.171962][ T5860] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.516397][ T5853] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 83.610447][ T6052] netlink: 'syz.2.30': attribute type 1 has an invalid length. [ 83.659227][ T6033] CIFS: VFS: cifs_mount failed w/return code = -112 [ 83.684813][ T5853] usb 6-1: Using ep0 maxpacket: 32 [ 83.687986][ T5853] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 83.693001][ T5853] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 83.696105][ T5853] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 83.698662][ T5853] usb 6-1: Product: syz [ 83.699981][ T5853] usb 6-1: Manufacturer: syz [ 83.701569][ T5853] usb 6-1: SerialNumber: syz [ 83.718713][ T5853] usb 6-1: config 0 descriptor?? [ 83.721472][ T6050] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 83.726738][ T5853] hub 6-1:0.0: bad descriptor, ignoring hub [ 83.728672][ T5853] hub 6-1:0.0: probe with driver hub failed with error -5 [ 83.841961][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31'. [ 84.127454][ T6067] binder: 6065:6067 ioctl c0306201 80000040 returned -14 [ 84.136149][ T6072] CIFS: Attempting to mount //127.0.0.1/share [ 84.299664][ T6077] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 84.334634][ T845] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 84.374736][ T6050] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 84.535577][ T6050] usb 6-1: device firmware changed [ 84.542023][ T9] usb 6-1: USB disconnect, device number 3 [ 84.704668][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 84.874617][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 84.885044][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 84.890179][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 84.892698][ T9] usb 6-1: can't read configurations, error -71 [ 84.919580][ T6072] CIFS: VFS: cifs_mount failed w/return code = -512 [ 85.089819][ T41] kauditd_printk_skb: 100 callbacks suppressed [ 85.089835][ T41] audit: type=1326 audit(1785944925.199:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.2.35" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 85.107245][ T41] audit: type=1326 audit(1785944925.209:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.2.35" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 85.116387][ T41] audit: type=1326 audit(1785944925.209:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.2.35" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 85.125506][ T41] audit: type=1326 audit(1785944925.209:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.2.35" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 85.132546][ T41] audit: type=1326 audit(1785944925.209:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.2.35" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 85.150074][ T41] audit: type=1326 audit(1785944925.209:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.2.35" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 85.169989][ T41] audit: type=1326 audit(1785944925.209:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.2.35" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 85.177134][ T41] audit: type=1326 audit(1785944925.209:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.2.35" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 85.183906][ T41] audit: type=1326 audit(1785944925.209:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.2.35" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 85.193070][ T41] audit: type=1326 audit(1785944925.209:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.2.35" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 85.265860][ T845] usb 5-1: config 0 has no interfaces? [ 85.268166][ T845] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 85.271738][ T845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.276280][ T845] usb 5-1: config 0 descriptor?? [ 85.495779][ T40] usb 5-1: USB disconnect, device number 3 [ 85.954683][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 86.114705][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 86.119712][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 86.130371][ T9] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 86.135560][ T9] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 86.142686][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.41'. [ 86.143553][ T9] usb 6-1: Product: syz [ 86.150173][ T9] usb 6-1: Manufacturer: syz [ 86.152214][ T9] usb 6-1: SerialNumber: syz [ 86.153096][ T6111] netlink: 20 bytes leftover after parsing attributes in process `syz.3.41'. [ 86.169258][ T9] usb 6-1: config 0 descriptor?? [ 86.177352][ T6105] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 86.181680][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 86.184736][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 86.205239][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 86.313728][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.42'. [ 86.330288][ T6113] netlink: 20 bytes leftover after parsing attributes in process `syz.3.42'. [ 86.386796][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.390087][ T10] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 86.393041][ T10] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 86.396791][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.804631][ T5845] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 86.956057][ T5845] usb 8-1: config 0 has no interfaces? [ 86.958069][ T5845] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 86.961718][ T5845] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.966270][ T5845] usb 8-1: config 0 descriptor?? [ 87.130536][ T6125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.137207][ T6125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.153523][ T6125] netlink: 44 bytes leftover after parsing attributes in process `syz.0.44'. [ 87.240464][ T5845] usb 8-1: USB disconnect, device number 3 [ 89.057462][ T5845] usb 7-1: USB disconnect, device number 3 [ 89.674897][ T55] usb 6-1: USB disconnect, device number 5 [ 90.035089][ T55] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 90.236257][ T6141] netlink: 'syz.0.49': attribute type 1 has an invalid length. [ 90.242294][ T6141] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.49'. [ 90.247252][ T6141] netlink: 'syz.0.49': attribute type 1 has an invalid length. [ 90.254244][ T6141] netlink: 2016 bytes leftover after parsing attributes in process `syz.0.49'. [ 90.527232][ T55] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.530409][ T55] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 90.533231][ T55] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 90.536376][ T55] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.540524][ T55] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 90.544011][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.555860][ T55] spcp8x5 6-1:1.0: required endpoints missing [ 91.282446][ T41] kauditd_printk_skb: 84 callbacks suppressed [ 91.282458][ T41] audit: type=1326 audit(1785944931.389:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.0.54" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 91.297870][ T41] audit: type=1326 audit(1785944931.399:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.0.54" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 91.309747][ T41] audit: type=1326 audit(1785944931.399:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.0.54" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 91.320756][ T41] audit: type=1326 audit(1785944931.409:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.0.54" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 91.330392][ T41] audit: type=1326 audit(1785944931.409:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.0.54" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 91.344193][ T41] audit: type=1326 audit(1785944931.409:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.0.54" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 91.354490][ T41] audit: type=1326 audit(1785944931.409:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.0.54" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 91.363580][ T6150] syz.3.51 (6150) used greatest stack depth: 18624 bytes left [ 91.364799][ T41] audit: type=1326 audit(1785944931.409:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.0.54" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 91.390642][ T41] audit: type=1326 audit(1785944931.409:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.0.54" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 91.404417][ T41] audit: type=1326 audit(1785944931.409:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6161 comm="syz.0.54" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 91.444342][ T6170] Zero length message leads to an empty skb [ 92.400198][ T6183] netlink: 'syz.0.58': attribute type 1 has an invalid length. [ 92.575325][ T6186] netlink: 'syz.0.59': attribute type 1 has an invalid length. [ 92.882965][ T40] usb 6-1: USB disconnect, device number 6 [ 92.992070][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 93.001437][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 93.746501][ T6209] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 93.748588][ T6209] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 93.766776][ T6209] vhci_hcd vhci_hcd.0: Device attached [ 93.898552][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.65'. [ 93.909412][ T6218] netlink: 20 bytes leftover after parsing attributes in process `syz.0.65'. [ 94.007362][ T6209] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 94.074677][ T55] usb 42-1: SetAddress Request (2) to port 0 [ 94.076841][ T55] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 94.217751][ T6230] netlink: 'syz.1.67': attribute type 1 has an invalid length. [ 94.350590][ T6211] vhci_hcd: connection reset by peer [ 94.355438][ T5860] vhci_hcd vhci_hcd.2: stop threads [ 94.358221][ T5860] vhci_hcd vhci_hcd.2: release socket [ 94.361871][ T5860] vhci_hcd vhci_hcd.2: disconnect device [ 94.402177][ T6240] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 94.402177][ T6240] [ 94.410892][ T6240] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 94.414949][ T6240] CIFS: Attempting to mount //127.0.0.1/test [ 94.582628][ T6243] syzkaller0: entered promiscuous mode [ 94.585310][ T6243] syzkaller0: entered allmulticast mode [ 94.743895][ T6245] syzkaller0: entered promiscuous mode [ 94.749246][ T6245] syzkaller0: entered allmulticast mode [ 95.035753][ T6258] bridge_slave_0: left allmulticast mode [ 95.038282][ T6258] bridge_slave_0: left promiscuous mode [ 95.040577][ T6258] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.043530][ T6260] netlink: 'syz.3.76': attribute type 1 has an invalid length. [ 95.051699][ T6258] bridge_slave_1: left allmulticast mode [ 95.054082][ T6258] bridge_slave_1: left promiscuous mode [ 95.061942][ T6258] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.072725][ T6258] bond0: (slave bond_slave_0): Releasing backup interface [ 95.097318][ T6258] bond0: (slave bond_slave_1): Releasing backup interface [ 95.116030][ T6258] team0: Port device team_slave_0 removed [ 95.133918][ T6258] team0: Port device team_slave_1 removed [ 95.138530][ T6258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.142847][ T6258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.159014][ T6258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.167642][ T6258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.180893][ T6258] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 95.231772][ T6240] CIFS: VFS: Error connecting to socket. Aborting operation. [ 95.236360][ T6240] CIFS: VFS: cifs_mount failed w/return code = -4 [ 95.291902][ T6270] netlink: 16 bytes leftover after parsing attributes in process `syz.1.78'. [ 95.310306][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'. [ 95.319744][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'. [ 95.323404][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.77'. [ 95.400862][ T6275] No buffer was provided with the request [ 95.504497][ T6280] trusted_key: encrypted_key: insufficient parameters specified [ 95.699001][ T6290] loop6: detected capacity change from 0 to 2640 [ 95.705768][ T6290] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.711461][ T6290] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.717796][ T6290] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.725794][ T6290] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.731824][ T6290] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.734892][ T6290] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.737443][ T6290] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.739922][ T6290] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.742564][ T6290] ldm_validate_partition_table(): Disk read failed. [ 95.744852][ T6290] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.747381][ T6290] Buffer I/O error on dev loop6, logical block 0, async page read [ 95.749899][ T6290] Dev loop6: unable to read RDB block 0 [ 95.751759][ T6290] loop6: unable to read partition table [ 95.753654][ T6290] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 95.754170][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.85'. [ 95.775700][ T5159] ldm_validate_partition_table(): Disk read failed. [ 95.778032][ T5159] Dev loop6: unable to read RDB block 0 [ 95.779990][ T5159] loop6: unable to read partition table [ 95.980631][ T6309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90'. [ 96.009115][ T6308] 9pnet_fd: Insufficient options for proto=fd [ 96.013295][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.91'. [ 96.043247][ T6309] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.061627][ T6307] team0: Port device team_slave_0 removed [ 96.077689][ T6311] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.088514][ T6311] bond1: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 96.104061][ T6311] bond1: (slave ip_vti0): Error -95 calling set_mac_address [ 96.235954][ T6314] raw_sendmsg: syz.0.93 forgot to set AF_INET. Fix it! [ 96.329508][ T6321] UDC core: g1: couldn't find an available UDC or it's busy [ 96.349523][ T6321] UDC core: g1: couldn't find an available UDC or it's busy [ 96.361003][ T6323] tipc: Started in network mode [ 96.364271][ T6323] tipc: Node identity 1a04360f7309, cluster identity 4711 [ 96.367856][ T6323] tipc: Enabled bearer , priority 0 [ 96.371878][ T6323] syzkaller0: entered promiscuous mode [ 96.373672][ T6323] syzkaller0: entered allmulticast mode [ 96.378310][ T6325] FAULT_INJECTION: forcing a failure. [ 96.378310][ T6325] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 96.379115][ T6323] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 96.382483][ T6325] CPU: 0 UID: 0 PID: 6325 Comm: syz.3.98 Not tainted syzkaller #0 PREEMPT(full) [ 96.382497][ T6325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.382504][ T6325] Call Trace: [ 96.382521][ T6325] [ 96.382525][ T6325] dump_stack_lvl+0x100/0x190 [ 96.382544][ T6325] should_fail_ex.cold+0x5/0xa [ 96.382557][ T6325] _copy_from_user+0x2e/0xd0 [ 96.382580][ T6325] __do_sys_add_key+0x278/0x460 [ 96.382594][ T6325] ? __pfx___do_sys_add_key+0x10/0x10 [ 96.382604][ T6325] ? fput+0x79/0x100 [ 96.382619][ T6325] ? __pfx_ksys_write+0x10/0x10 [ 96.382632][ T6325] __do_fast_syscall_32+0xe7/0x970 [ 96.382663][ T6325] ? lockdep_hardirqs_on+0x78/0x100 [ 96.382679][ T6325] do_fast_syscall_32+0x32/0x70 [ 96.382694][ T6325] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 96.382709][ T6325] RIP: 0023:0xf7ff3fec [ 96.382722][ T6325] Code: Unable to access opcode bytes at 0xf7ff3fc2. [ 96.382736][ T6325] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 000000000000011e [ 96.382746][ T6325] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 0000000080000180 [ 96.382753][ T6325] RDX: 0000000080000100 RSI: 00000000000000ca RDI: 00000000fffffffe [ 96.382759][ T6325] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.382765][ T6325] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 96.382772][ T6325] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.382785][ T6325] [ 96.461741][ T6323] tipc: Resetting bearer [ 96.469443][ T6322] tipc: Resetting bearer [ 96.484481][ T6322] tipc: Disabling bearer [ 96.582481][ T6334] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 96.585424][ T6334] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 96.592925][ T6334] vhci_hcd vhci_hcd.0: Device attached [ 96.609078][ T6327] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 96.817634][ T6335] vhci_hcd: connection closed [ 96.823311][ T13] vhci_hcd vhci_hcd.0: stop threads [ 96.835590][ T13] vhci_hcd vhci_hcd.0: release socket [ 96.840019][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 96.844727][ T845] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 96.847912][ T845] usb 37-1: enqueue for inactive port 0 [ 96.888175][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.103'. [ 96.901332][ T6340] team0: Port device team_slave_0 removed [ 96.914805][ T845] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 97.286870][ T6350] syz.1.107 uses obsolete (PF_INET,SOCK_PACKET) [ 97.530923][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.111'. [ 97.537164][ T6365] netlink: 20 bytes leftover after parsing attributes in process `syz.0.111'. [ 98.482818][ T6411] netlink: 'syz.3.118': attribute type 1 has an invalid length. [ 98.502929][ T6411] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.514720][ T5853] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 98.676364][ T5853] usb 7-1: config 0 has no interfaces? [ 98.680191][ T5853] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 98.684470][ T5853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.694794][ T5853] usb 7-1: config 0 descriptor?? [ 98.838560][ T41] kauditd_printk_skb: 113 callbacks suppressed [ 98.838571][ T41] audit: type=1326 audit(1785944938.949:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.3.122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 98.848733][ T41] audit: type=1326 audit(1785944938.959:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.3.122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 98.859047][ T6434] ip6tnl1: entered allmulticast mode [ 98.860154][ T41] audit: type=1326 audit(1785944938.969:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.3.122" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 98.871292][ T41] audit: type=1326 audit(1785944938.979:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.3.122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 98.884411][ T41] audit: type=1326 audit(1785944938.979:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.3.122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 98.895404][ T41] audit: type=1326 audit(1785944938.979:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.3.122" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 98.911658][ T41] audit: type=1326 audit(1785944938.979:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.3.122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 98.913220][ T60] usb 7-1: USB disconnect, device number 4 [ 98.921283][ T41] audit: type=1326 audit(1785944938.979:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.3.122" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 98.939315][ T41] audit: type=1326 audit(1785944938.979:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.3.122" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 98.957416][ T41] audit: type=1326 audit(1785944938.979:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.3.122" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7ff3fec code=0x7ffc0000 [ 98.994765][ T5766] Bluetooth: hci3: command 0x0405 tx timeout [ 98.999907][ T6435] team0: Port device team_slave_0 removed [ 99.061517][ T6448] netlink: 'syz.1.127': attribute type 1 has an invalid length. [ 99.092233][ T6448] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.154769][ T55] usb 42-1: device descriptor read/8, error -110 [ 99.494618][ T60] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 99.569000][ T55] usb usb42-port1: attempt power cycle [ 99.646803][ T60] usb 6-1: Using ep0 maxpacket: 32 [ 99.656556][ T60] usb 6-1: unable to get BOS descriptor or descriptor too short [ 99.663219][ T60] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 99.669078][ T60] usb 6-1: can't read configurations, error -71 [ 99.703973][ T6462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.712272][ T6462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.115991][ T6472] 9pnet_fd: Insufficient options for proto=fd [ 100.125858][ T55] usb usb42-port1: unable to enumerate USB device [ 100.216832][ T6475] netlink: 'syz.1.137': attribute type 1 has an invalid length. [ 100.235325][ T6475] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.848067][ T1165] nvmet: connect request for invalid subsystem testnqn! [ 100.852046][ T6485] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testnqn" [ 101.066602][ T6495] __nla_validate_parse: 9 callbacks suppressed [ 101.066620][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.143'. [ 101.077639][ T6495] netlink: 20 bytes leftover after parsing attributes in process `syz.3.143'. [ 101.113285][ T6499] netlink: 16 bytes leftover after parsing attributes in process `syz.0.145'. [ 101.120657][ T6499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.124000][ T6499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.343593][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.147'. [ 101.498937][ T6517] netlink: 'syz.3.148': attribute type 1 has an invalid length. [ 101.511682][ T6517] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.785427][ T6522] binder: 6521:6522 ioctl c0306201 80000040 returned -14 [ 101.789494][ T6522] CIFS: Attempting to mount //127.0.0.1/share [ 101.832474][ T6525] ip6tnl1: entered allmulticast mode [ 102.135717][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.155'. [ 102.143158][ T6538] netlink: 20 bytes leftover after parsing attributes in process `syz.2.155'. [ 102.201397][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.156'. [ 102.258039][ T6542] netlink: 'syz.2.157': attribute type 1 has an invalid length. [ 102.283989][ T6542] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.294772][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 102.469855][ T9] usb 6-1: config 0 has no interfaces? [ 102.472699][ T9] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 102.476712][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.483750][ T9] usb 6-1: config 0 descriptor?? [ 102.542156][ T6558] process 'syz.2.161' launched './file1' with NULL argv: empty string added [ 102.561760][ T6522] CIFS: VFS: Error connecting to socket. Aborting operation. [ 102.565190][ T6522] CIFS: VFS: cifs_mount failed w/return code = -4 [ 102.700232][ T55] usb 6-1: USB disconnect, device number 9 [ 102.770040][ T6532] netlink: 44 bytes leftover after parsing attributes in process `syz.1.154'. [ 103.400107][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.165'. [ 103.408597][ T6566] netlink: 20 bytes leftover after parsing attributes in process `syz.2.165'. [ 103.954765][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 104.096409][ T10] usb 8-1: device descriptor read/64, error -71 [ 104.143533][ T6608] ip6tnl1: entered allmulticast mode [ 104.301772][ T6614] binder: 6613:6614 ioctl c0306201 80000040 returned -14 [ 104.303210][ T6615] CIFS: Attempting to mount //127.0.0.1/share [ 104.334799][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 104.434613][ T41] kauditd_printk_skb: 110 callbacks suppressed [ 104.434630][ T41] audit: type=1326 audit(1785944944.539:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.0.172" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 104.452441][ T41] audit: type=1326 audit(1785944944.549:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.0.172" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 104.463915][ T41] audit: type=1326 audit(1785944944.549:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.0.172" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 104.473892][ T41] audit: type=1326 audit(1785944944.549:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.0.172" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 104.484602][ T41] audit: type=1326 audit(1785944944.549:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.0.172" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 104.484742][ T10] usb 8-1: device descriptor read/64, error -71 [ 104.504607][ T41] audit: type=1326 audit(1785944944.549:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.0.172" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 104.512039][ T41] audit: type=1326 audit(1785944944.559:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.0.172" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 104.519676][ T41] audit: type=1326 audit(1785944944.559:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.0.172" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 104.526526][ T41] audit: type=1326 audit(1785944944.569:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.0.172" exe="/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 104.533791][ T41] audit: type=1326 audit(1785944944.569:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6617 comm="syz.0.172" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 104.616076][ T10] usb usb8-port1: attempt power cycle [ 104.965925][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 104.985677][ T10] usb 8-1: device descriptor read/8, error -71 [ 105.078230][ T6615] CIFS: VFS: cifs_mount failed w/return code = -112 [ 105.274983][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 105.299456][ T10] usb 8-1: device descriptor read/8, error -71 [ 105.417618][ T10] usb usb8-port1: unable to enumerate USB device [ 105.995496][ T6638] 9pnet_fd: Insufficient options for proto=fd [ 106.094665][ T40] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 106.245859][ T40] usb 7-1: config 0 has no interfaces? [ 106.247785][ T40] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 106.250895][ T40] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.254803][ T40] usb 7-1: config 0 descriptor?? [ 106.472028][ T40] usb 7-1: USB disconnect, device number 5 [ 107.024606][ T60] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 107.176732][ T60] usb 8-1: config 0 has no interfaces? [ 107.179060][ T60] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 107.182645][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.190430][ T60] usb 8-1: config 0 descriptor?? [ 107.437808][ T55] usb 8-1: USB disconnect, device number 8 [ 108.111049][ T6666] __nla_validate_parse: 5 callbacks suppressed [ 108.111060][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.184'. [ 108.117029][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.184'. [ 108.468647][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.185'. [ 108.488499][ T6669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.185'. [ 108.624457][ T6674] 9pnet_fd: Insufficient options for proto=fd [ 108.668959][ T6676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.673038][ T6676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.687164][ T6676] netlink: 44 bytes leftover after parsing attributes in process `syz.0.186'. [ 109.759197][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.193'. [ 109.763069][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.193'. [ 110.203282][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'. [ 110.215513][ T6708] netlink: 20 bytes leftover after parsing attributes in process `syz.3.195'. [ 110.684626][ T6730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.207'. [ 110.774662][ T40] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 110.926430][ T40] usb 8-1: config 0 has no interfaces? [ 110.929109][ T40] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 110.933177][ T40] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.940210][ T40] usb 8-1: config 0 descriptor?? [ 111.143158][ T6740] 9pnet_fd: Insufficient options for proto=fd [ 111.180772][ T5845] usb 8-1: USB disconnect, device number 9 [ 111.556815][ T6743] netlink: 'syz.2.202': attribute type 1 has an invalid length. [ 111.608210][ T6743] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.984904][ T5845] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 112.136844][ T5845] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 112.142296][ T5845] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 112.148361][ T5845] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 112.153292][ T5845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.172133][ T5845] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 112.180409][ T5845] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 112.544828][ T6749] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 112.547761][ T6749] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 112.551377][ T6749] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 112.567389][ T60] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 112.649205][ T6749] SPCP8x5 ttyUSB0: Set UART format 0x70b failed (error = -32) [ 112.714715][ T60] usb 6-1: Using ep0 maxpacket: 32 [ 112.743604][ T60] usb 6-1: unable to get BOS descriptor or descriptor too short [ 112.748733][ T60] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 112.751923][ T60] usb 6-1: can't read configurations, error -71 [ 112.758067][ T10] usb 7-1: USB disconnect, device number 6 [ 112.777347][ T10] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 112.782247][ T10] spcp8x5 7-1:1.0: device disconnected [ 113.029531][ T6784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.034407][ T6784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.451333][ T6788] __nla_validate_parse: 7 callbacks suppressed [ 113.451351][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.214'. [ 113.460259][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.214'. [ 113.765477][ T6793] netlink: 24 bytes leftover after parsing attributes in process `syz.3.213'. [ 113.804926][ T60] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 113.967587][ T60] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 113.975509][ T60] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 113.982358][ T60] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 113.991996][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.997287][ T6795] 9pnet_fd: Insufficient options for proto=fd [ 114.009745][ T60] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 114.016886][ T60] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 114.365918][ T6787] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 114.370466][ T6787] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 114.374099][ T6787] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 114.466516][ T6787] SPCP8x5 ttyUSB0: Set UART format 0x70b failed (error = -32) [ 114.577472][ T5845] usb 6-1: USB disconnect, device number 11 [ 114.588781][ T5845] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 114.592471][ T5845] spcp8x5 6-1:1.0: device disconnected [ 114.814810][ T40] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 114.997719][ T40] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 115.000124][ T40] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 115.003454][ T40] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.007929][ T40] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 115.012141][ T40] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 115.016899][ T40] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 115.019357][ T40] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 115.022732][ T40] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.026511][ T40] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 115.029969][ T40] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 115.034215][ T40] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 115.036830][ T40] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 115.040301][ T40] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.043893][ T40] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 115.048230][ T40] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 115.053813][ T40] usb 8-1: string descriptor 0 read error: -22 [ 115.056198][ T40] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 115.059058][ T40] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.070374][ T40] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 115.214626][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 115.261830][ T6808] netlink: 'syz.1.220': attribute type 5 has an invalid length. [ 115.368384][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 115.376560][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 115.387203][ T10] usb 7-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 115.390778][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.393818][ T10] usb 7-1: Product: syz [ 115.396073][ T10] usb 7-1: Manufacturer: syz [ 115.397590][ T10] usb 7-1: SerialNumber: syz [ 115.609202][ T10] usblp 7-1:1.0: usblp1: USB Bidirectional printer dev 7 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 115.616759][ T845] usb 8-1: USB disconnect, device number 10 [ 115.754671][ T60] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 115.807918][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.224'. [ 115.815588][ T10] usb 7-1: USB disconnect, device number 7 [ 115.821409][ T10] usblp1: removed [ 115.906526][ T60] usb 6-1: config 0 has no interfaces? [ 115.909130][ T60] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 115.913167][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.919550][ T60] usb 6-1: config 0 descriptor?? [ 116.065487][ T6838] 9pnet_fd: Insufficient options for proto=fd [ 116.143820][ T10] usb 6-1: USB disconnect, device number 12 [ 116.744800][ T60] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 116.910929][ T60] usb 7-1: config 0 has no interfaces? [ 116.913580][ T60] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 116.919373][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.929256][ T60] usb 7-1: config 0 descriptor?? [ 117.139188][ T6850] FAULT_INJECTION: forcing a failure. [ 117.139188][ T6850] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 117.144596][ T6850] CPU: 0 UID: 0 PID: 6850 Comm: syz.0.231 Not tainted syzkaller #0 PREEMPT(full) [ 117.144612][ T6850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.144619][ T6850] Call Trace: [ 117.144624][ T6850] [ 117.144628][ T6850] dump_stack_lvl+0x100/0x190 [ 117.144661][ T6850] should_fail_ex.cold+0x5/0xa [ 117.144672][ T6850] ? prepare_alloc_pages+0x16d/0x5f0 [ 117.144691][ T6850] should_fail_alloc_page+0xeb/0x140 [ 117.144709][ T6850] prepare_alloc_pages+0x1f0/0x5f0 [ 117.144727][ T6850] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 117.144744][ T6850] ? rcu_is_watching+0x12/0xc0 [ 117.144758][ T6850] ? trace_mm_page_alloc+0x164/0x1c0 [ 117.144774][ T6850] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 117.144788][ T6850] ? find_held_lock+0x2b/0x80 [ 117.144803][ T6850] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 117.144817][ T6850] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 117.144831][ T6850] ? lockdep_hardirqs_on+0x78/0x100 [ 117.144845][ T6850] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 117.144859][ T6850] ? stack_depot_save_flags+0x479/0x9d0 [ 117.144879][ T6850] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 117.144894][ T6850] ? __kasan_slab_alloc+0x89/0x90 [ 117.144909][ T6850] ? kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 117.144922][ T6850] ? alloc_vmap_area+0x182f/0x2bb0 [ 117.144936][ T6850] ? __get_vm_area_node+0x1ca/0x330 [ 117.144951][ T6850] ? __vmalloc_node_range_noprof+0x228/0x1630 [ 117.144967][ T6850] ? __vmalloc_node_noprof+0xad/0xf0 [ 117.144995][ T6850] ? xt_copy_counters+0x31e/0x530 [ 117.145012][ T6850] ? do_arpt_set_ctl+0x51d/0xf70 [ 117.145023][ T6850] ? nf_setsockopt+0x8d/0xf0 [ 117.145038][ T6850] ? ip_setsockopt+0xcb/0xf0 [ 117.145053][ T6850] ? tcp_setsockopt+0xa7/0x100 [ 117.145063][ T6850] ? do_sock_setsockopt+0xf3/0x1d0 [ 117.145073][ T6850] ? __sys_setsockopt+0x119/0x190 [ 117.145088][ T6850] ? __ia32_sys_setsockopt+0xbc/0x160 [ 117.145103][ T6850] ? __do_fast_syscall_32+0xe7/0x970 [ 117.145122][ T6850] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 117.145138][ T6850] ? policy_nodemask+0xed/0x4f0 [ 117.145155][ T6850] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 117.145176][ T6850] __kasan_populate_vmalloc+0xf0/0x210 [ 117.145192][ T6850] alloc_vmap_area+0x95d/0x2bb0 [ 117.145211][ T6850] ? kasan_save_track+0x14/0x30 [ 117.145225][ T6850] ? __kasan_kmalloc+0xaa/0xb0 [ 117.145237][ T6850] ? __pfx_alloc_vmap_area+0x10/0x10 [ 117.145253][ T6850] ? __get_vm_area_node+0x101/0x330 [ 117.145270][ T6850] __get_vm_area_node+0x1ca/0x330 [ 117.145288][ T6850] __vmalloc_node_range_noprof+0x228/0x1630 [ 117.145305][ T6850] ? xt_copy_counters+0x31e/0x530 [ 117.145321][ T6850] ? __lock_acquire+0x49f/0x1a40 [ 117.145342][ T6850] ? xt_copy_counters+0x31e/0x530 [ 117.145362][ T6850] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 117.145382][ T6850] ? __might_fault+0xc5/0x140 [ 117.145394][ T6850] ? __might_fault+0xc5/0x140 [ 117.145407][ T6850] ? xt_copy_counters+0x31e/0x530 [ 117.145429][ T6850] __vmalloc_node_noprof+0xad/0xf0 [ 117.145445][ T6850] ? xt_copy_counters+0x31e/0x530 [ 117.145463][ T6850] xt_copy_counters+0x31e/0x530 [ 117.145481][ T6850] ? __pfx_xt_copy_counters+0x10/0x10 [ 117.145497][ T6850] ? __lock_acquire+0x49f/0x1a40 [ 117.145514][ T6850] ? rcu_is_watching+0x12/0xc0 [ 117.145529][ T6850] ? bpf_lsm_capable+0x9/0x10 [ 117.145542][ T6850] ? security_capable+0x80/0x260 [ 117.145557][ T6850] do_arpt_set_ctl+0x51d/0xf70 [ 117.145571][ T6850] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 117.145582][ T6850] ? __mutex_lock+0x26d/0x1bd0 [ 117.145596][ T6850] ? nf_sockopt_find.isra.0+0x2a/0x290 [ 117.145611][ T6850] ? find_held_lock+0x2b/0x80 [ 117.145623][ T6850] ? nf_sockopt_find.isra.0+0x222/0x290 [ 117.145641][ T6850] ? __mutex_unlock_slowpath+0x35d/0x930 [ 117.145657][ T6850] ? sockopt_release_sock+0x5c/0x70 [ 117.145674][ T6850] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 117.145691][ T6850] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 117.145710][ T6850] ? nf_sockopt_find.isra.0+0x222/0x290 [ 117.145726][ T6850] nf_setsockopt+0x8d/0xf0 [ 117.145742][ T6850] ip_setsockopt+0xcb/0xf0 [ 117.145759][ T6850] tcp_setsockopt+0xa7/0x100 [ 117.145770][ T6850] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 117.145782][ T6850] do_sock_setsockopt+0xf3/0x1d0 [ 117.145794][ T6850] __sys_setsockopt+0x119/0x190 [ 117.145812][ T6850] __ia32_sys_setsockopt+0xbc/0x160 [ 117.145827][ T6850] ? __do_fast_syscall_32+0x98/0x970 [ 117.145843][ T6850] ? lockdep_hardirqs_on+0x78/0x100 [ 117.145857][ T6850] __do_fast_syscall_32+0xe7/0x970 [ 117.145872][ T6850] ? lockdep_hardirqs_on+0x78/0x100 [ 117.145887][ T6850] do_fast_syscall_32+0x32/0x70 [ 117.145903][ T6850] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.145918][ T6850] RIP: 0023:0xf6feefec [ 117.145931][ T6850] Code: Unable to access opcode bytes at 0xf6feefc2. [ 117.145936][ T6850] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 117.145947][ T6850] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 117.145954][ T6850] RDX: 0000000000000061 RSI: 0000000080000140 RDI: 0000000000000064 [ 117.145960][ T6850] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.145966][ T6850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.145972][ T6850] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.145985][ T6850] [ 117.146225][ T6850] syz.0.231: vmalloc error: size 64, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 117.185273][ T60] usb 7-1: USB disconnect, device number 8 [ 117.186499][ T6850] ,cpuset= [ 117.240359][ T6844] netlink: 44 bytes leftover after parsing attributes in process `syz.2.227'. [ 117.240501][ T6850] /,mems_allowed=0-1 [ 117.337293][ T6850] CPU: 0 UID: 0 PID: 6850 Comm: syz.0.231 Not tainted syzkaller #0 PREEMPT(full) [ 117.337307][ T6850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.337314][ T6850] Call Trace: [ 117.337319][ T6850] [ 117.337323][ T6850] dump_stack_lvl+0x100/0x190 [ 117.337342][ T6850] warn_alloc.cold+0x94/0xa8 [ 117.337355][ T6850] ? __pfx_warn_alloc+0x10/0x10 [ 117.337367][ T6850] ? lockdep_hardirqs_on+0x78/0x100 [ 117.337384][ T6850] ? __get_vm_area_node+0x2cd/0x330 [ 117.337404][ T6850] ? __get_vm_area_node+0x208/0x330 [ 117.337422][ T6850] __vmalloc_node_range_noprof+0xccd/0x1630 [ 117.337439][ T6850] ? __lock_acquire+0x49f/0x1a40 [ 117.337461][ T6850] ? xt_copy_counters+0x31e/0x530 [ 117.337495][ T6850] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 117.337517][ T6850] ? __might_fault+0xc5/0x140 [ 117.337533][ T6850] ? __might_fault+0xc5/0x140 [ 117.337546][ T6850] ? xt_copy_counters+0x31e/0x530 [ 117.337561][ T6850] __vmalloc_node_noprof+0xad/0xf0 [ 117.337578][ T6850] ? xt_copy_counters+0x31e/0x530 [ 117.337596][ T6850] xt_copy_counters+0x31e/0x530 [ 117.337613][ T6850] ? __pfx_xt_copy_counters+0x10/0x10 [ 117.337630][ T6850] ? __lock_acquire+0x49f/0x1a40 [ 117.337647][ T6850] ? rcu_is_watching+0x12/0xc0 [ 117.337663][ T6850] ? bpf_lsm_capable+0x9/0x10 [ 117.337676][ T6850] ? security_capable+0x80/0x260 [ 117.337690][ T6850] do_arpt_set_ctl+0x51d/0xf70 [ 117.337706][ T6850] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 117.337717][ T6850] ? __mutex_lock+0x26d/0x1bd0 [ 117.337732][ T6850] ? nf_sockopt_find.isra.0+0x2a/0x290 [ 117.337747][ T6850] ? find_held_lock+0x2b/0x80 [ 117.337760][ T6850] ? nf_sockopt_find.isra.0+0x222/0x290 [ 117.337778][ T6850] ? __mutex_unlock_slowpath+0x35d/0x930 [ 117.337794][ T6850] ? sockopt_release_sock+0x5c/0x70 [ 117.337811][ T6850] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 117.337827][ T6850] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 117.337861][ T6850] ? nf_sockopt_find.isra.0+0x222/0x290 [ 117.337877][ T6850] nf_setsockopt+0x8d/0xf0 [ 117.337893][ T6850] ip_setsockopt+0xcb/0xf0 [ 117.337911][ T6850] tcp_setsockopt+0xa7/0x100 [ 117.337922][ T6850] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 117.337934][ T6850] do_sock_setsockopt+0xf3/0x1d0 [ 117.337947][ T6850] __sys_setsockopt+0x119/0x190 [ 117.337966][ T6850] __ia32_sys_setsockopt+0xbc/0x160 [ 117.337980][ T6850] ? __do_fast_syscall_32+0x98/0x970 [ 117.337996][ T6850] ? lockdep_hardirqs_on+0x78/0x100 [ 117.338010][ T6850] __do_fast_syscall_32+0xe7/0x970 [ 117.338025][ T6850] ? lockdep_hardirqs_on+0x78/0x100 [ 117.338040][ T6850] do_fast_syscall_32+0x32/0x70 [ 117.338056][ T6850] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.338071][ T6850] RIP: 0023:0xf6feefec [ 117.338085][ T6850] Code: Unable to access opcode bytes at 0xf6feefc2. [ 117.338090][ T6850] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 117.338101][ T6850] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 117.338110][ T6850] RDX: 0000000000000061 RSI: 0000000080000140 RDI: 0000000000000064 [ 117.338119][ T6850] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.338128][ T6850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.338138][ T6850] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.338160][ T6850] [ 117.338216][ T6850] Mem-Info: [ 117.449363][ T6850] active_anon:4906 inactive_anon:19 isolated_anon:0 [ 117.449363][ T6850] active_file:8227 inactive_file:47512 isolated_file:0 [ 117.449363][ T6850] unevictable:1768 dirty:140 writeback:0 [ 117.449363][ T6850] slab_reclaimable:9445 slab_unreclaimable:50634 [ 117.449363][ T6850] mapped:23723 shmem:2279 pagetables:1079 [ 117.449363][ T6850] sec_pagetables:300 bounce:0 [ 117.449363][ T6850] kernel_misc_reclaimable:0 [ 117.449363][ T6850] free:42889 free_pcp:11896 free_cma:0 [ 117.467936][ T6850] Node 0 active_anon:48kB inactive_anon:76kB active_file:28kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:8kB writeback:0kB shmem:3624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9120kB pagetables:1672kB sec_pagetables:1148kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 117.480339][ T6850] Node 1 active_anon:19576kB inactive_anon:0kB active_file:32880kB inactive_file:190068kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:94864kB dirty:552kB writeback:0kB shmem:5492kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4784kB pagetables:2644kB sec_pagetables:52kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 117.494910][ T6850] Node 0 DMA free:2160kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:96kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:400kB local_pcp:168kB free_cma:0kB [ 117.506860][ T6850] lowmem_reserve[]: 0 280 280 280 280 [ 117.509155][ T6850] Node 0 DMA32 free:23412kB boost:0kB min:12768kB low:15960kB high:19152kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:80kB active_file:24kB inactive_file:0kB unevictable:3536kB writepending:4kB zspages:0kB present:1032196kB managed:286916kB mlocked:0kB bounce:0kB free_pcp:5880kB local_pcp:204kB free_cma:0kB [ 117.522685][ T6850] lowmem_reserve[]: 0 0 0 0 0 [ 117.524854][ T6850] Node 1 DMA32 free:158504kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19584kB inactive_anon:20kB active_file:32880kB inactive_file:190060kB unevictable:3536kB writepending:556kB zspages:2920kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:29456kB local_pcp:12840kB free_cma:0kB [ 117.538376][ T6850] lowmem_reserve[]: 0 0 0 0 0 [ 117.540407][ T6850] Node 0 DMA: 46*4kB (UM) 10*8kB (UM) 11*16kB (UM) 12*32kB (UM) 11*64kB (UM) 1*128kB (M) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2168kB [ 117.547554][ T6850] Node 0 DMA32: 15*4kB (UME) 89*8kB (UME) 68*16kB (UME) 171*32kB (UME) 70*64kB (UME) 44*128kB (UME) 11*256kB (UM) 2*512kB (U) 0*1024kB 1*2048kB (M) 0*4096kB = 23332kB [ 117.554171][ T6850] Node 1 DMA32: 1506*4kB (UME) 769*8kB (UME) 391*16kB (UME) 408*32kB (UME) 121*64kB (UME) 125*128kB (UME) 64*256kB (UME) 42*512kB (UM) 24*1024kB (UME) 14*2048kB (UM) 3*4096kB (M) = 158656kB [ 117.563588][ T6850] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 117.567673][ T6850] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 117.571498][ T6850] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 117.575434][ T6850] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 117.579175][ T6850] 58243 total pagecache pages [ 117.581099][ T6850] 296 pages in swap cache [ 117.582763][ T6850] Free swap = 116968kB [ 117.584475][ T6850] Total swap = 124996kB [ 117.586324][ T6850] 524155 pages RAM [ 117.587880][ T6850] 0 pages HighMem/MovableOnly [ 117.589753][ T6850] 211533 pages reserved [ 117.591428][ T6850] 0 pages cma reserved [ 117.604684][ T5853] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 117.761526][ T5853] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 117.765729][ T5853] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 117.769690][ T5853] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 117.773289][ T5853] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.784217][ T5853] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 117.796937][ T5853] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 118.145119][ T6853] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 118.147393][ T6857] xt_hashlimit: max too large, truncated to 1048576 [ 118.148406][ T6853] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 118.154315][ T6853] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 118.241660][ T6853] SPCP8x5 ttyUSB0: Set UART format 0x70b failed (error = -32) [ 118.357465][ T9] usb 8-1: USB disconnect, device number 11 [ 118.369303][ T9] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 118.375589][ T9] spcp8x5 8-1:1.0: device disconnected [ 118.485322][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.233'. [ 118.657711][ T6869] 9pnet_fd: Insufficient options for proto=fd [ 118.694706][ T845] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 118.845940][ T845] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 118.849181][ T845] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 118.852314][ T845] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 118.855284][ T845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.863788][ T845] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 118.871051][ T845] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 119.708607][ T41] kauditd_printk_skb: 19 callbacks suppressed [ 119.708621][ T41] audit: type=1326 audit(1785944959.819:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.0.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 119.728299][ T41] audit: type=1326 audit(1785944959.829:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.0.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 119.744736][ T41] audit: type=1326 audit(1785944959.839:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.0.241" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 119.753400][ T41] audit: type=1326 audit(1785944959.839:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.0.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 119.762625][ T41] audit: type=1326 audit(1785944959.839:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.0.241" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 119.771436][ T41] audit: type=1326 audit(1785944959.839:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.0.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 119.780202][ T41] audit: type=1326 audit(1785944959.849:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.0.241" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 119.788822][ T41] audit: type=1326 audit(1785944959.849:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.0.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 119.797542][ T41] audit: type=1326 audit(1785944959.849:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.0.241" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 119.807397][ T41] audit: type=1326 audit(1785944959.859:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.0.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 120.647110][ T6909] netlink: 'syz.0.245': attribute type 1 has an invalid length. [ 120.677780][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 120.687056][ T6909] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.839376][ T24] usb 7-1: config 0 has no interfaces? [ 120.844105][ T24] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 120.850059][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.852188][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.246'. [ 120.860547][ T24] usb 7-1: config 0 descriptor?? [ 120.861486][ T6912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.246'. [ 121.057519][ T6918] FAULT_INJECTION: forcing a failure. [ 121.057519][ T6918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.064019][ T6918] CPU: 3 UID: 0 PID: 6918 Comm: syz.0.248 Not tainted syzkaller #0 PREEMPT(full) [ 121.064034][ T6918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 121.064041][ T6918] Call Trace: [ 121.064045][ T6918] [ 121.064050][ T6918] dump_stack_lvl+0x100/0x190 [ 121.064071][ T6918] should_fail_ex.cold+0x5/0xa [ 121.064085][ T6918] _copy_to_user+0x32/0xd0 [ 121.064106][ T6918] simple_read_from_buffer+0xcb/0x170 [ 121.064126][ T6918] proc_fail_nth_read+0x1af/0x230 [ 121.064143][ T6918] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 121.064159][ T6918] ? rw_verify_area+0xce/0x6d0 [ 121.064176][ T6918] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 121.064191][ T6918] vfs_read+0x1e4/0xb40 [ 121.064204][ T6918] ? __pfx_vfs_read+0x10/0x10 [ 121.064212][ T6918] ? find_held_lock+0x2b/0x80 [ 121.064228][ T6918] ? __fget_files+0x215/0x3d0 [ 121.064241][ T6918] ? __fget_files+0x21f/0x3d0 [ 121.064254][ T6918] ksys_read+0x12a/0x250 [ 121.064264][ T6918] ? __pfx_ksys_read+0x10/0x10 [ 121.064278][ T6918] do_int80_emulation+0x14b/0x720 [ 121.064296][ T6918] asm_int80_emulation+0x1a/0x20 [ 121.064308][ T6918] RIP: 0023:0xf71274eb [ 121.064317][ T6918] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 121.064327][ T6918] RSP: 002b:00000000f53dd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 121.064338][ T6918] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53dd5d0 [ 121.064345][ T6918] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 121.064351][ T6918] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 121.064357][ T6918] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 121.064363][ T6918] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 121.064376][ T6918] [ 121.086389][ T9] usb 7-1: USB disconnect, device number 9 [ 121.155292][ T6920] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 121.237997][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.250'. [ 121.247886][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.250'. [ 121.538639][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.251'. [ 121.628352][ T55] usb 6-1: USB disconnect, device number 13 [ 121.645385][ T55] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 121.648346][ T55] spcp8x5 6-1:1.0: device disconnected [ 121.657132][ T6937] random: crng reseeded on system resumption [ 121.722256][ T6942] netlink: 'syz.3.254': attribute type 1 has an invalid length. [ 121.738170][ T6942] 8021q: adding VLAN 0 to HW filter on device bond3 [ 121.798232][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.255'. [ 121.809287][ T6947] netlink: 20 bytes leftover after parsing attributes in process `syz.1.255'. [ 122.135397][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 122.207433][ T6957] xt_connbytes: Forcing CT accounting to be enabled [ 122.209688][ T6957] Cannot find del_set index 0 as target [ 122.212541][ T6957] Cannot find del_set index 0 as target [ 122.233747][ T5845] libceph: connect (1)[c::]:6789 error -101 [ 122.236074][ T5845] libceph: mon0 (1)[c::]:6789 connect error [ 122.269184][ T6957] ceph: No mds server is up or the cluster is laggy [ 122.306681][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.311276][ T9] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 122.315453][ T9] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 122.319980][ T9] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 122.326564][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.330561][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.334048][ T9] usb 8-1: Product: syz [ 122.337050][ T9] usb 8-1: Manufacturer: syz [ 122.339261][ T9] usb 8-1: SerialNumber: syz [ 122.350099][ T9] cdc_mbim 8-1:1.0: skipping garbage [ 122.552204][ T6955] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 122.853100][ T6967] 9pnet_fd: Insufficient options for proto=fd [ 123.160930][ T6955] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 123.373649][ T9] cdc_mbim 8-1:1.0: bind() failure [ 123.380522][ T9] cdc_ncm 8-1:1.1: probe with driver cdc_ncm failed with error -71 [ 123.383615][ T9] cdc_mbim 8-1:1.1: probe with driver cdc_mbim failed with error -71 [ 123.387319][ T9] usbtest 8-1:1.1: probe with driver usbtest failed with error -71 [ 123.391923][ T9] usb 8-1: USB disconnect, device number 12 [ 123.614642][ T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 123.766139][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 123.769166][ T24] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 123.772183][ T24] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 123.777567][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.783694][ T24] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 123.799760][ T24] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 123.806628][ T6976] binder: 6975:6976 ioctl c0306201 80000040 returned -14 [ 123.807569][ T6980] CIFS: Attempting to mount //127.0.0.1/share [ 123.826855][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.263'. [ 124.037730][ T6992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.267'. [ 124.046648][ T6992] netlink: 20 bytes leftover after parsing attributes in process `syz.1.267'. [ 124.145437][ T24] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 124.298548][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 124.302848][ T24] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 124.307433][ T24] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 124.311390][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.321073][ T24] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 124.334751][ T24] usb 8-1: SPCP8x5 converter now attached to ttyUSB1 [ 124.581639][ T6980] CIFS: VFS: Error connecting to socket. Aborting operation. [ 124.584105][ T6980] CIFS: VFS: cifs_mount failed w/return code = -4 [ 124.625783][ T6983] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 124.629003][ T6983] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 124.632436][ T6983] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 124.650721][ T7009] 9pnet_fd: Insufficient options for proto=fd [ 124.654661][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 124.806258][ T9] usb 7-1: USB disconnect, device number 10 [ 124.810495][ T9] SPCP8x5 ttyUSB0: failed to set control lines: -19 [ 124.816270][ T9] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 124.817075][ T24] usb 6-1: config 0 has no interfaces? [ 124.821115][ T9] spcp8x5 7-1:1.0: device disconnected [ 124.826609][ T24] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 124.835158][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.845018][ T24] usb 6-1: config 0 descriptor?? [ 125.062648][ T845] usb 6-1: USB disconnect, device number 14 [ 125.624368][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'. [ 125.693882][ T7025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.277'. [ 125.703325][ T7025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.277'. [ 125.886126][ T7032] binder: 7031:7032 ioctl c0306201 80000040 returned -14 [ 125.887937][ T7036] CIFS: Attempting to mount //127.0.0.1/share [ 126.622567][ T7038] netlink: 'syz.2.280': attribute type 1 has an invalid length. [ 126.647892][ T7038] 8021q: adding VLAN 0 to HW filter on device bond3 [ 126.662420][ T7036] CIFS: VFS: Error connecting to socket. Aborting operation. [ 126.665883][ T7036] CIFS: VFS: cifs_mount failed w/return code = -4 [ 126.713681][ T7041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.718637][ T7041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.855424][ T7044] capability: warning: `syz.2.282' uses 32-bit capabilities (legacy support in use) [ 126.930108][ T845] usb 8-1: USB disconnect, device number 13 [ 126.936981][ T5853] e1000 0000:00:06.0 eth0: Reset adapter [ 126.956019][ T845] SPCP8x5 ttyUSB1: SPCP8x5 converter now disconnected from ttyUSB1 [ 126.960624][ T845] spcp8x5 8-1:1.0: device disconnected [ 127.059690][ T7043] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 127.245680][ T7060] 9pnet_fd: Insufficient options for proto=fd [ 127.398524][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'. [ 127.404675][ T845] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 127.416239][ T7069] netlink: 20 bytes leftover after parsing attributes in process `syz.1.287'. [ 127.455815][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.286'. [ 127.534615][ T845] usb 8-1: device descriptor read/64, error -71 [ 127.546743][ T55] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 127.651961][ T7081] binder: 7080:7081 ioctl c0306201 80000040 returned -14 [ 127.667034][ T7081] CIFS: Attempting to mount //127.0.0.1/share [ 127.787705][ T845] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 127.902065][ T7098] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 127.914672][ T845] usb 8-1: device descriptor read/64, error -71 [ 128.037166][ T845] usb usb8-port1: attempt power cycle [ 128.386467][ T845] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 128.406675][ T845] usb 8-1: device descriptor read/8, error -71 [ 128.426615][ T7081] CIFS: VFS: Error connecting to socket. Aborting operation. [ 128.429894][ T7081] CIFS: VFS: cifs_mount failed w/return code = -4 [ 128.654747][ T845] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 128.685869][ T845] usb 8-1: device descriptor read/8, error -71 [ 128.795111][ T845] usb usb8-port1: unable to enumerate USB device [ 129.225657][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 132.678380][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.682241][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.027440][ T7125] netlink: 'syz.0.291': attribute type 1 has an invalid length. [ 137.049287][ T7125] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.234134][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.296'. [ 137.246484][ T7140] netlink: 20 bytes leftover after parsing attributes in process `syz.0.296'. [ 137.334622][ T845] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 137.375799][ T55] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 137.432722][ T7145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'. [ 137.516551][ T845] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 137.520806][ T845] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 137.525488][ T845] usb 8-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 137.529382][ T845] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.536635][ T55] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 137.540790][ T55] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 137.542641][ T845] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 137.545145][ T55] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 137.551742][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.561573][ T845] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 137.573179][ T55] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 137.582880][ T55] usb 7-1: SPCP8x5 converter now attached to ttyUSB1 [ 137.668838][ T7150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.673484][ T7150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.915616][ T7133] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 137.919287][ T7133] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 137.922189][ T7133] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 137.924800][ T7137] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 137.985558][ T7154] binder: 7153:7154 ioctl c0306201 80000040 returned -14 [ 137.988238][ T7155] CIFS: Attempting to mount //127.0.0.1/share [ 137.997833][ T7133] SPCP8x5 ttyUSB0: Set UART format 0x70b failed (error = -32) [ 138.002242][ T845] usb 8-1: USB disconnect, device number 18 [ 138.012172][ T845] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 138.018462][ T845] spcp8x5 8-1:1.0: device disconnected [ 138.602265][ T7159] 9pnet_fd: Insufficient options for proto=fd [ 138.759013][ T7155] CIFS: VFS: Error connecting to socket. Aborting operation. [ 138.762583][ T7155] CIFS: VFS: cifs_mount failed w/return code = -4 [ 139.673960][ T7178] [ 139.674967][ T7178] ====================================================== [ 139.677180][ T7178] WARNING: possible circular locking dependency detected [ 139.679330][ T7178] syzkaller #0 Not tainted [ 139.680814][ T7178] ------------------------------------------------------ [ 139.683047][ T7178] syz.3.304/7178 is trying to acquire lock: [ 139.685039][ T7178] ffff8880005e4880 (&default_group_class[depth - 1]#9){+.+.}-{4:4}, at: configfs_detach_group+0x21c/0x440 [ 139.688565][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 139.688592][ T7178] [ 139.688592][ T7178] but task is already holding lock: [ 139.688599][ T7178] ffff8880005e1900 (&default_group_class[depth - 1]#8){++++}-{4:4}, at: configfs_detach_group+0x21c/0x440 [ 139.697252][ T7180] netlink: 20 bytes leftover after parsing attributes in process `syz.1.305'. [ 139.699790][ T7178] [ 139.699790][ T7178] which lock already depends on the new lock. [ 139.699790][ T7178] [ 139.699800][ T7178] [ 139.699800][ T7178] the existing dependency chain (in reverse order) is: [ 139.699807][ T7178] [ 139.699807][ T7178] -> #5 (&default_group_class[depth - 1]#8){++++}-{4:4}: [ 139.699842][ T7178] lock_acquire+0x1b9/0x370 [ 139.716814][ T7178] down_write+0x8b/0x1f0 [ 139.718797][ T7178] configfs_detach_group+0x21c/0x440 [ 139.721179][ T7178] configfs_detach_group+0x224/0x440 [ 139.723526][ T7178] configfs_rmdir+0x598/0x950 [ 139.725630][ T7178] vfs_rmdir+0x328/0x8a0 [ 139.727649][ T7178] filename_rmdir+0x31a/0x5c0 [ 139.729786][ T7178] __ia32_sys_rmdir+0x45/0x60 [ 139.731912][ T7178] __do_fast_syscall_32+0xe7/0x970 [ 139.734195][ T7178] do_fast_syscall_32+0x32/0x70 [ 139.736288][ T7178] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.738736][ T7178] [ 139.738736][ T7178] -> #4 (&default_group_class[depth - 1]#2){+.+.}-{4:4}: [ 139.742017][ T7178] lock_acquire+0x1b9/0x370 [ 139.743856][ T7178] down_write+0x8b/0x1f0 [ 139.745618][ T7178] configfs_detach_group+0x21c/0x440 [ 139.747686][ T7178] configfs_rmdir+0x598/0x950 [ 139.749416][ T7178] vfs_rmdir+0x328/0x8a0 [ 139.750921][ T7178] filename_rmdir+0x31a/0x5c0 [ 139.752556][ T7178] __ia32_sys_rmdir+0x45/0x60 [ 139.754170][ T7178] __do_fast_syscall_32+0xe7/0x970 [ 139.755953][ T7178] do_fast_syscall_32+0x32/0x70 [ 139.757623][ T7178] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.759744][ T7178] [ 139.759744][ T7178] -> #3 (&sb->s_type->i_mutex_key#26){++++}-{4:4}: [ 139.762421][ T7178] lock_acquire+0x1b9/0x370 [ 139.764021][ T7178] down_write+0x8b/0x1f0 [ 139.765581][ T7178] configfs_depend_item_unlocked+0xf3/0x6a0 [ 139.768052][ T7178] usbg_make_tpg+0x261/0x620 [ 139.770046][ T7178] target_fabric_make_tpg+0xab/0x8c0 [ 139.772326][ T7178] configfs_mkdir+0x51e/0xb70 [ 139.774346][ T7178] vfs_mkdir+0x361/0x850 [ 139.776261][ T7178] filename_mkdirat+0x48b/0x5e0 [ 139.778368][ T7178] __ia32_sys_mkdir+0x6a/0x90 [ 139.780386][ T7178] __do_fast_syscall_32+0xe7/0x970 [ 139.782570][ T7178] do_fast_syscall_32+0x32/0x70 [ 139.784669][ T7178] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.787329][ T7178] [ 139.787329][ T7178] -> #2 (&opts->dep_lock){+.+.}-{4:4}: [ 139.790285][ T7178] lock_acquire+0x1b9/0x370 [ 139.792257][ T7178] __mutex_lock+0x1a4/0x1bd0 [ 139.794260][ T7178] tcm_set_name+0x29/0xb0 [ 139.796171][ T7178] function_make+0x21c/0x3f0 [ 139.798158][ T7178] configfs_mkdir+0x51e/0xb70 [ 139.800131][ T7178] vfs_mkdir+0x361/0x850 [ 139.802006][ T7178] filename_mkdirat+0x48b/0x5e0 [ 139.804095][ T7178] __ia32_sys_mkdir+0x6a/0x90 [ 139.806119][ T7178] __do_fast_syscall_32+0xe7/0x970 [ 139.808291][ T7178] do_fast_syscall_32+0x32/0x70 [ 139.810273][ T7178] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.812918][ T7178] [ 139.812918][ T7178] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 139.815936][ T7178] lock_acquire+0x1b9/0x370 [ 139.817814][ T7178] __mutex_lock+0x1a4/0x1bd0 [ 139.819717][ T7178] uvcg_streaming_class_allow_link+0x100/0x6b0 [ 139.822290][ T7178] configfs_symlink+0x540/0x11f0 [ 139.824412][ T7178] vfs_symlink+0x178/0x4d0 [ 139.826341][ T7178] filename_symlinkat+0x2a6/0x560 [ 139.828480][ T7178] __ia32_sys_symlinkat+0x9b/0xe0 [ 139.830627][ T7178] __do_fast_syscall_32+0xe7/0x970 [ 139.832791][ T7178] do_fast_syscall_32+0x32/0x70 [ 139.834862][ T7178] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.837495][ T7178] [ 139.837495][ T7178] -> #0 (&default_group_class[depth - 1]#9){+.+.}-{4:4}: [ 139.841030][ T7178] check_prev_add+0xeb/0xe60 [ 139.843026][ T7178] __lock_acquire+0x136c/0x1a40 [ 139.845122][ T7178] lock_acquire+0x1b9/0x370 [ 139.847080][ T7178] down_write+0x8b/0x1f0 [ 139.848941][ T7178] configfs_detach_group+0x21c/0x440 [ 139.851131][ T7178] configfs_detach_group+0x224/0x440 [ 139.853408][ T7178] configfs_detach_group+0x224/0x440 [ 139.855699][ T7178] configfs_rmdir+0x598/0x950 [ 139.857704][ T7178] vfs_rmdir+0x328/0x8a0 [ 139.859576][ T7178] filename_rmdir+0x31a/0x5c0 [ 139.861611][ T7178] __ia32_sys_rmdir+0x45/0x60 [ 139.863621][ T7178] __do_fast_syscall_32+0xe7/0x970 [ 139.865813][ T7178] do_fast_syscall_32+0x32/0x70 [ 139.867924][ T7178] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.870589][ T7178] [ 139.870589][ T7178] other info that might help us debug this: [ 139.870589][ T7178] [ 139.874150][ T7178] Chain exists of: [ 139.874150][ T7178] &default_group_class[depth - 1]#9 --> &default_group_class[depth - 1]#2 --> &default_group_class[depth - 1]#8 [ 139.874150][ T7178] [ 139.879751][ T7178] Possible unsafe locking scenario: [ 139.879751][ T7178] [ 139.882038][ T7178] CPU0 CPU1 [ 139.883706][ T7178] ---- ---- [ 139.885379][ T7178] lock(&default_group_class[depth - 1]#8); [ 139.887249][ T7178] lock(&default_group_class[depth - 1]#2); [ 139.889855][ T7178] lock(&default_group_class[depth - 1]#8); [ 139.892455][ T7178] lock(&default_group_class[depth - 1]#9); [ 139.894309][ T7178] [ 139.894309][ T7178] *** DEADLOCK *** [ 139.894309][ T7178] [ 139.896835][ T7178] 5 locks held by syz.3.304/7178: [ 139.898400][ T7178] #0: ffff88802250c450 (sb_writers#15){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 139.901291][ T7178] #1: ffff888013f76e80 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 139.904735][ T7178] #2: ffff8880005e0f80 (&sb->s_type->i_mutex_key#26){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 139.907868][ T7178] #3: ffff8880005e6e80 (&default_group_class[depth - 1]#2){+.+.}-{4:4}, at: configfs_detach_group+0x21c/0x440 [ 139.911468][ T7178] #4: ffff8880005e1900 (&default_group_class[depth - 1]#8){++++}-{4:4}, at: configfs_detach_group+0x21c/0x440 [ 139.915054][ T7178] [ 139.915054][ T7178] stack backtrace: [ 139.916883][ T7178] CPU: 3 UID: 0 PID: 7178 Comm: syz.3.304 Not tainted syzkaller #0 PREEMPT(full) [ 139.916897][ T7178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.916904][ T7178] Call Trace: [ 139.916909][ T7178] [ 139.916915][ T7178] dump_stack_lvl+0x100/0x190 [ 139.916929][ T7178] print_circular_bug.cold+0x178/0x1c7 [ 139.916948][ T7178] check_noncircular+0x146/0x160 [ 139.916967][ T7178] check_prev_add+0xeb/0xe60 [ 139.916984][ T7178] __lock_acquire+0x136c/0x1a40 [ 139.917002][ T7178] ? lockdep_unlock+0x5a/0xc0 [ 139.917016][ T7178] lock_acquire+0x1b9/0x370 [ 139.917032][ T7178] ? configfs_detach_group+0x21c/0x440 [ 139.917045][ T7178] ? __pfx___might_resched+0x10/0x10 [ 139.917064][ T7178] down_write+0x8b/0x1f0 [ 139.917081][ T7178] ? configfs_detach_group+0x21c/0x440 [ 139.917093][ T7178] ? __pfx_down_write+0x10/0x10 [ 139.917108][ T7178] ? do_raw_spin_unlock+0x145/0x1e0 [ 139.917120][ T7178] configfs_detach_group+0x21c/0x440 [ 139.917134][ T7178] configfs_detach_group+0x224/0x440 [ 139.917147][ T7178] configfs_detach_group+0x224/0x440 [ 139.917160][ T7178] configfs_rmdir+0x598/0x950 [ 139.917174][ T7178] ? __pfx_configfs_rmdir+0x10/0x10 [ 139.917186][ T7178] ? __pfx_down_write+0x10/0x10 [ 139.917202][ T7178] vfs_rmdir+0x328/0x8a0 [ 139.917218][ T7178] filename_rmdir+0x31a/0x5c0 [ 139.917230][ T7178] ? __pfx_filename_rmdir+0x10/0x10 [ 139.917244][ T7178] ? do_getname+0x191/0x390 [ 139.917257][ T7178] __ia32_sys_rmdir+0x45/0x60 [ 139.917269][ T7178] __do_fast_syscall_32+0xe7/0x970 [ 139.917284][ T7178] ? lockdep_hardirqs_on+0x78/0x100 [ 139.917298][ T7178] do_fast_syscall_32+0x32/0x70 [ 139.917313][ T7178] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.917329][ T7178] RIP: 0023:0xf7ff3fec [ 139.917343][ T7178] Code: Unable to access opcode bytes at 0xf7ff3fc2. [ 139.917348][ T7178] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000028 [ 139.917358][ T7178] RAX: ffffffffffffffda RBX: 0000000080000200 RCX: 0000000000000000 [ 139.917365][ T7178] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.917371][ T7178] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.917377][ T7178] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 139.917383][ T7178] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.917397][ T7178] [ 140.142482][ T10] usb 7-1: USB disconnect, device number 11 [ 140.150823][ T10] SPCP8x5 ttyUSB1: SPCP8x5 converter now disconnected from ttyUSB1 [ 140.160783][ T10] spcp8x5 7-1:1.0: device disconnected