last executing test programs: 1m4.460696311s ago: executing program 3 (id=428): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000360b0a0002"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) (fail_nth: 2) 1m4.460357267s ago: executing program 3 (id=429): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x6b) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000040), 0x8, 0xda, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000440)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x29) 1m4.248278225s ago: executing program 3 (id=431): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000280)="9eb8a2c0e241fb0402ac67d48d04ecbc724648d79b443d2838", 0x19}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="18"], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) 1m4.169193513s ago: executing program 3 (id=432): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000285000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000009500000000000000"], 0x0, 0x20000, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x1d8, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1a8, 0x2, {{0x3, 0x81, 0x6361, 0x7, 0x6, 0x2}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xf2, 0x9}}, @TCA_NETEM_LOSS={0x8c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x0, 0x4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x7, 0x7, 0x29, 0xa23}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x1, 0x0, 0x3, 0x9707}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x8, 0x7fffffff, 0xfcad, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0xb8, 0xd7, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x6, 0x7f, 0x4, 0x7f, 0xc}}]}, @TCA_NETEM_RATE64={0xc, 0x8, 0x830253aa280e859}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x400}, @TCA_NETEM_LOSS={0xa0, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x4, 0x3, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffe0, 0x3, 0x2, 0x2}}, @NETEM_LOSS_GI={0x18, 0x1, {0x9, 0x9, 0x0, 0x5ab, 0x2}}, @NETEM_LOSS_GI={0x18, 0x1, {0x99, 0x80, 0xe, 0x3d922a61, 0x1ff}}, @NETEM_LOSS_GI={0x18, 0x1, {0xf51e, 0x3ff, 0x4, 0x8001, 0xcd}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8000, 0xfffffff7, 0x5, 0x10}}, @NETEM_LOSS_GI={0x18, 0x1, {0x101, 0xfffffffb, 0x1, 0xab, 0x10001}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xc078}, @TCA_NETEM_CORR={0x10, 0x1, {0x10, 0x2, 0x3}}, @TCA_NETEM_DELAY_DIST={0xc, 0x2, "75e737a3fcfab023"}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x1, 0x7fffffff}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x2400c881}, 0x20) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1m4.030376635s ago: executing program 3 (id=433): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000080)={0x4, 0x8}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000010000306050000000300000000000000", @ANYRES32=0x0, @ANYBLOB="03050000080001003800128009000100766c616e000000002800028006000100030000001c0003800c16cb307cdb746e6e00010004000000090000000c00010004000000", @ANYRES32=r2, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r6, r5, 0x25, 0x8, @void}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000001) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d657461"], 0xdc}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x1000000) 1m3.756685768s ago: executing program 3 (id=436): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00ffdbdf2502000000000000210000000000000080753040bb6f08696731665e58a342ed191d382216ddf49bd9e74d4713a7779a6c25ff162ca5e5a8b001153f20566f24260b5ffef5cdadc9e09952d3be7c936a9f"], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x24004910) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x10000, 0x0, 0x1, 0x0, 0x0, 0x1}, [@TCA_NETEM_RATE={0x14, 0xd, {0xf}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x8000000000000001, 0x7, 0x0, 0x7, 0x4, 0xffffffffffffd019}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000040)="a1c0dacfc28d14ae5a1dcb7439552aaf56612cf27f548f4397ee09ace9b8f4e3f0", 0x21) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r6 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd35, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 48.679390529s ago: executing program 32 (id=436): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00ffdbdf2502000000000000210000000000000080753040bb6f08696731665e58a342ed191d382216ddf49bd9e74d4713a7779a6c25ff162ca5e5a8b001153f20566f24260b5ffef5cdadc9e09952d3be7c936a9f"], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x24004910) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x10000, 0x0, 0x1, 0x0, 0x0, 0x1}, [@TCA_NETEM_RATE={0x14, 0xd, {0xf}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x8000000000000001, 0x7, 0x0, 0x7, 0x4, 0xffffffffffffd019}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000040)="a1c0dacfc28d14ae5a1dcb7439552aaf56612cf27f548f4397ee09ace9b8f4e3f0", 0x21) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r6 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd35, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 32.220315645s ago: executing program 2 (id=554): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x144, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x6eb0}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38f33c131", 0x8}], 0x1, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x24000004}], 0x1, 0x40800) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) 29.73265162s ago: executing program 2 (id=559): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000ec0)="56c2d0a8", &(0x7f0000002280)=""/196, &(0x7f00000021c0), &(0x7f0000000440), 0x3, r1}, 0x38) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xffffff5a, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0xc) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_tables_matches\x00') preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000480)=""/179, 0xb3}], 0x1, 0x4f, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000340)) mount(0x0, 0x0, 0x0, 0x8, 0x0) r7 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) ioctl$FE_GET_PROPERTY(r7, 0x80086f53, &(0x7f0000000000)={0x3, &(0x7f0000000300)=[{0x3a, '\x00', @st={0x4, [{0x3, @svalue=0xdff9}, {0x2, @uvalue=0x7}, {0x1, @uvalue=0x5}, {0x3, @uvalue=0x7}]}, 0xffff16c8}, {0x38, '\x00', @st={0x4, [{0x1, @uvalue=0x5}, {0x2, @uvalue=0x8000000000000001}, {0x1, @svalue=0xfff}, {0x1, @uvalue=0x6}]}, 0x17d}, {0x34, '\x00', @st={0x4, [{0x1, @uvalue=0x7}, {0x2, @svalue=0xc48}, {0x2, @uvalue=0x2}, {0x3, @svalue=0x3}]}}]}) socket$inet_udp(0x2, 0x2, 0x0) 28.760912637s ago: executing program 2 (id=561): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r2, 0x0, r1, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2, 0x6}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 28.530311965s ago: executing program 2 (id=562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$unix(0x1, 0x1, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000189000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x40) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f0000000280)='\xf8\xd7\xd7\x8c;o\rfx\xae\xbb%u\xae7', 0x0, r8) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x2) fchdir(r10) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r12 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r12, r12) setpgid(0x0, r12) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 28.478879057s ago: executing program 2 (id=563): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000ec0)="56c2d0a8", &(0x7f0000002280)=""/196, &(0x7f00000021c0), &(0x7f0000000440), 0x3, r1}, 0x38) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xffffff5a, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0xc) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_tables_matches\x00') preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000480)=""/179, 0xb3}], 0x1, 0x4f, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000340)) mount(0x0, 0x0, 0x0, 0x8, 0x0) r7 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) ioctl$FE_GET_PROPERTY(r7, 0x80086f53, &(0x7f0000000000)={0x3, &(0x7f0000000300)=[{0x3a, '\x00', @st={0x4, [{0x3, @svalue=0xdff9}, {0x2, @uvalue=0x7}, {0x1, @uvalue=0x5}, {0x3, @uvalue=0x7}]}, 0xffff16c8}, {0x38, '\x00', @st={0x4, [{0x1, @uvalue=0x5}, {0x2, @uvalue=0x8000000000000001}, {0x1, @svalue=0xfff}, {0x1, @uvalue=0x6}]}, 0x17d}, {0x34, '\x00', @st={0x4, [{0x1, @uvalue=0x7}, {0x2, @svalue=0xc48}, {0x2, @uvalue=0x2}, {0x3, @svalue=0x3}]}}]}) socket$inet_udp(0x2, 0x2, 0x0) 28.064276016s ago: executing program 2 (id=564): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400f2000000000009000000850000000f000000850000000700000095"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)="010000000000220010000000000000010000000000020800450000740001400040063c817f0000017f000001", 0x2c}, {&(0x7f0000000240)="2e8432b37f08756fa02bb02e548215c4759c31f6", 0x14}], 0x2) 27.877767345s ago: executing program 33 (id=564): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400f2000000000009000000850000000f000000850000000700000095"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)="010000000000220010000000000000010000000000020800450000740001400040063c817f0000017f000001", 0x2c}, {&(0x7f0000000240)="2e8432b37f08756fa02bb02e548215c4759c31f6", 0x14}], 0x2) 10.02066165s ago: executing program 0 (id=655): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000280)="9eb8a2c0e241fb0402ac67d48d04ec", 0xf}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) 9.900270237s ago: executing program 0 (id=656): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@rand_addr, @local, 0x0}, &(0x7f0000000300)=0xc) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={r1, @broadcast, @dev={0xac, 0x14, 0x14, 0x20}}, 0xc) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r2, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x2}) r3 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x2}], 0x1, 0x40800) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xcffb, 0xe, "0062ba7d0400"}) syz_open_pts(r4, 0xa0200) epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1c0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa8}]}, 0x0}, 0x94) syz_usb_connect(0x0, 0x47, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000200000040cd0607013e1bea1c03010902350001010080fa0904000005ff00000007058102400001070501024000010705830240000107050302"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x102, 0x0) 7.24019988s ago: executing program 5 (id=666): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000100)=0x90c3ff, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x4533, 0x4) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x2, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000005cc0), 0x1, 0x40012000, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000080)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e26, 0x7, @loopback, 0x2000009}, {0xa, 0x4e23, 0x6, @mcast1, 0x7fffffff}, 0xffffffffffffffff, 0x80d}}, 0x48) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000000)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="a109a81b133d", 0x0, 0x2, 0x10012, 0x1, 0x0}) 6.549541674s ago: executing program 5 (id=670): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, 0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="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"], 0x18}}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000e80), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r1, 0x8008973) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r4, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8000, 0x0, 0x0, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/77, 0x50}, {&(0x7f0000000700)=""/255, 0xfffffffffffffe3c}, {&(0x7f0000000680)=""/31, 0x1f}, {&(0x7f0000000800)=""/86, 0x56}], 0x4) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002380)={0x2020}, 0x2020) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000280)=""/102) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x20004040) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x40086602, &(0x7f0000000080)={0x17e}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1ff) 6.433189105s ago: executing program 0 (id=672): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@rand_addr, @local, 0x0}, &(0x7f0000000300)=0xc) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={r1, @broadcast, @dev={0xac, 0x14, 0x14, 0x20}}, 0xc) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r2, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x2}) r3 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x2}], 0x1, 0x40800) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xcffb, 0xe, "0062ba7d0400"}) syz_open_pts(r4, 0xa0200) epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1c0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa8}]}, 0x0}, 0x94) syz_usb_connect(0x0, 0x47, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000200000040cd0607013e1bea1c03010902350001010080fa0904000005ff00000007058102400001070501024000010705830240000107050302"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x102, 0x0) 5.625083771s ago: executing program 4 (id=673): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000280)="9eb8a2c0e241fb0402ac67d48d04ec", 0xf}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) 5.559469628s ago: executing program 4 (id=675): socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40080c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r4, 0x289e0cb5, 0x0) 4.650336169s ago: executing program 1 (id=676): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x6b) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000040), 0x8, 0xda, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000640)={'gretap0\x00', 0x0, 0x8, 0x40, 0x30, 0x6, {{0xa, 0x4, 0x3, 0x1d, 0x28, 0x66, 0x0, 0xf4, 0x4, 0x0, @remote, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x14, 0x63, 0x3, 0x6, [{@multicast1, 0x9}, {@broadcast, 0x9}]}]}}}}}) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000440)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e", 0x24) 4.56040946s ago: executing program 1 (id=677): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00ffdbdf2502000000000000210000000000000080753040bb6f08696731665e58a342ed191d382216ddf49bd9e74d4713a7779a6c25ff162ca5e5a8b001153f20566f24260b5ffef5cdadc9e09952d3be7c936a9f"], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x24004910) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x10000, 0x0, 0x1, 0x0, 0x0, 0x1}, [@TCA_NETEM_RATE={0x14, 0xd, {0xf}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x8000000000000001, 0x7, 0x0, 0x7, 0x4, 0xffffffffffffd019}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000040)="a1c0dacfc28d14ae5a1dcb7439552aaf56612cf27f548f4397ee09ace9b8f4e3f0", 0x21) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r6 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd35, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 4.276053237s ago: executing program 4 (id=678): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(r2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x144, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x6eb0}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38f33c131", 0x8}], 0x1, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x24000004}], 0x1, 0x40800) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) 3.368409143s ago: executing program 1 (id=679): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x1d8, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1a8, 0x2, {{0x3, 0x81, 0x6361, 0x7, 0x6, 0x2}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xf2, 0x9}}, @TCA_NETEM_LOSS={0x8c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x0, 0x4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x7, 0x7, 0x29, 0xa23}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x1, 0x0, 0x3, 0x9707}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x8, 0x7fffffff, 0xfcad, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0xb8, 0xd7, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x6, 0x7f, 0x4, 0x7f, 0xc}}]}, @TCA_NETEM_RATE64={0xc, 0x8, 0x830253aa280e859}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x400}, @TCA_NETEM_LOSS={0xa0, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x4, 0x3, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffe0, 0x3, 0x2, 0x2}}, @NETEM_LOSS_GI={0x18, 0x1, {0x9, 0x9, 0x0, 0x5ab, 0x2}}, @NETEM_LOSS_GI={0x18, 0x1, {0x99, 0x80, 0xe, 0x3d922a61, 0x1ff}}, @NETEM_LOSS_GI={0x18, 0x1, {0xf51e, 0x3ff, 0x4, 0x8001, 0xcd}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8000, 0xfffffff7, 0x5, 0x10}}, @NETEM_LOSS_GI={0x18, 0x1, {0x101, 0xfffffffb, 0x1, 0xab, 0x10001}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xc078}, @TCA_NETEM_CORR={0x10, 0x1, {0x10, 0x2, 0x3}}, @TCA_NETEM_DELAY_DIST={0xc, 0x2, "75e737a3fcfab023"}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x1, 0x7fffffff}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x2400c881}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @multicast}, 0x14) 3.292655764s ago: executing program 1 (id=680): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000ec0)="56c2d0a8", &(0x7f0000002280)=""/196, &(0x7f00000021c0), &(0x7f0000000440), 0x3, r1}, 0x38) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xffffff5a, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0xc) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_tables_matches\x00') preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000480)=""/179, 0xb3}], 0x1, 0x4f, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000340)) mount(0x0, 0x0, 0x0, 0x8, 0x0) r7 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) ioctl$FE_GET_PROPERTY(r7, 0x80086f53, &(0x7f0000000000)={0x3, &(0x7f0000000300)=[{0x3a, '\x00', @st={0x4, [{0x3, @svalue=0xdff9}, {0x2, @uvalue=0x7}, {0x1, @uvalue=0x5}, {0x3, @uvalue=0x7}]}, 0xffff16c8}, {0x38, '\x00', @st={0x4, [{0x1, @uvalue=0x5}, {0x2, @uvalue=0x8000000000000001}, {0x1, @svalue=0xfff}, {0x1, @uvalue=0x6}]}, 0x17d}, {0x34, '\x00', @st={0x4, [{0x1, @uvalue=0x7}, {0x2, @svalue=0xc48}, {0x2, @uvalue=0x2}, {0x3, @svalue=0x3}]}}]}) socket$inet_udp(0x2, 0x2, 0x0) 3.2712066s ago: executing program 4 (id=681): syz_emit_ethernet(0x7e, &(0x7f0000000440)=ANY=[], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x3, 'none\x00', 0x0, 0x7ff, 0x1}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x80000000, 0x440, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x40, 0x3}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x4008630a, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1040}], 0x0, 0x0, 0x0}) close(r3) syz_fuse_handle_req(r1, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0x0) 3.162496856s ago: executing program 0 (id=682): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r5, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4f3bf5835e00000000225121d6958c78cfc0e1f14f1b257f4031f897f3b12ffaada8201e50923df2bb7d50bc559759ae785f8c8564bd270f568b646cf58cb2837303a1d7ad57d8c24d461e2a9eaf1158603987f8e315e14c", 0x58}], 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r7, &(0x7f0000000100)={0x14}, 0x14) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000023c0)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x0, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x23}}, 0x0) sendmsg$IPSET_CMD_LIST(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000706010400"/28], 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000012000/0x3000)=nil], 0x0, 0x0, 0x6) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000011f000/0x2000)=nil, 0x2000, 0x0) 3.143658536s ago: executing program 4 (id=683): mkdir(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18) renameat2(r1, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000480)=""/74, 0x49) renameat2(r0, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8402, 0x0) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x48d, 0x0, 0x5b}]}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x494, &(0x7f0000000040)=ANY=[@ANYRESOCT=r3]) 2.277180111s ago: executing program 1 (id=684): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000ec0)="56c2d0a8", &(0x7f0000002280)=""/196, &(0x7f00000021c0), &(0x7f0000000440), 0x3, r1}, 0x38) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xffffff5a, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0xc) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_tables_matches\x00') preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000480)=""/179, 0xb3}], 0x1, 0x4f, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000340)) mount(0x0, 0x0, 0x0, 0x8, 0x0) r7 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) ioctl$FE_GET_PROPERTY(r7, 0x80086f53, &(0x7f0000000000)={0x3, &(0x7f0000000300)=[{0x3a, '\x00', @st={0x4, [{0x3, @svalue=0xdff9}, {0x2, @uvalue=0x7}, {0x1, @uvalue=0x5}, {0x3, @uvalue=0x7}]}, 0xffff16c8}, {0x38, '\x00', @st={0x4, [{0x1, @uvalue=0x5}, {0x2, @uvalue=0x8000000000000001}, {0x1, @svalue=0xfff}, {0x1, @uvalue=0x6}]}, 0x17d}, {0x34, '\x00', @st={0x4, [{0x1, @uvalue=0x7}, {0x2, @svalue=0xc48}, {0x2, @uvalue=0x2}, {0x3, @svalue=0x3}]}}]}) socket$inet_udp(0x2, 0x2, 0x0) 2.208897269s ago: executing program 5 (id=685): socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40080c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r3, 0x0, 0x0, 0x720, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r4, 0x289e0cb5, 0x0) 2.185201823s ago: executing program 0 (id=686): mkdirat(0xffffffffffffff9c, 0x0, 0x1d0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x4c8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000009c0)=ANY=[], 0x1000f) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x51, 0x6, 0x40004, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x6, 0xfc, 0x8}}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0b080510"], 0xe) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8947, &(0x7f0000000240)={'vlan0\x00', 0x1}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000180)={0x0, @local, @local}, &(0x7f0000000200)=0xc) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x4040) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.270722275s ago: executing program 1 (id=687): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) unshare(0x42000000) r0 = openat$iommufd(0xffffff9c, &(0x7f0000000140), 0x200, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x40002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x0, 0x0, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000001880)={0x30, r3, 0x1, 0x0, 0x6, 0x5, 0x7ff, &(0x7f0000000880)=""/4096}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000080)='bpf_lsm_inode_follow_link\x00') r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r4, r5, 0x2d, 0x10, @val=@perf_event={0x2}}, 0x18) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40042, 0x1) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r7, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r12, &(0x7f0000000000), 0x560c89bb) r13 = creat(&(0x7f0000000080)='./file0\x00', 0x0) splice(r11, 0x0, r13, 0x0, 0x8000, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r6, 0x4) 1.209218267s ago: executing program 5 (id=688): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x1d8, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1a8, 0x2, {{0x3, 0x81, 0x6361, 0x7, 0x6, 0x2}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xf2, 0x9}}, @TCA_NETEM_LOSS={0x8c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x0, 0x4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x7, 0x7, 0x29, 0xa23}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x1, 0x0, 0x3, 0x9707}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x8, 0x7fffffff, 0xfcad, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0xb8, 0xd7, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x6, 0x7f, 0x4, 0x7f, 0xc}}]}, @TCA_NETEM_RATE64={0xc, 0x8, 0x830253aa280e859}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x400}, @TCA_NETEM_LOSS={0xa0, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x4, 0x3, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0xffe0, 0x3, 0x2, 0x2}}, @NETEM_LOSS_GI={0x18, 0x1, {0x9, 0x9, 0x0, 0x5ab, 0x2}}, @NETEM_LOSS_GI={0x18, 0x1, {0x99, 0x80, 0xe, 0x3d922a61, 0x1ff}}, @NETEM_LOSS_GI={0x18, 0x1, {0xf51e, 0x3ff, 0x4, 0x8001, 0xcd}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8000, 0xfffffff7, 0x5, 0x10}}, @NETEM_LOSS_GI={0x18, 0x1, {0x101, 0xfffffffb, 0x1, 0xab, 0x10001}}]}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xc078}, @TCA_NETEM_CORR={0x10, 0x1, {0x10, 0x2, 0x3}}, @TCA_NETEM_DELAY_DIST={0xc, 0x2, "75e737a3fcfab023"}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x1, 0x7fffffff}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x2400c881}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @multicast}, 0x14) 773.618403ms ago: executing program 0 (id=689): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range(r2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x144, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x6eb0}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38f33c131", 0x8}], 0x1, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x24000004}], 0x1, 0x40800) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) 773.385817ms ago: executing program 5 (id=690): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r2 = socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) close(0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r3, 0x4}, 0x38) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e03006d0c"], 0x7) shutdown(r0, 0x1) writev(r2, &(0x7f0000002300)=[{&(0x7f0000002200)="3c30226c334f9de69b", 0x9}, {&(0x7f0000002240)="e2a2acc0a7819275a2a71b31a9f905b3a1b89da6cacaa66c9f783a2fbe476ce8603c4d21e1a773735961cbd857fd702633cfc573f4052a1573792078f1dc3dd0e86d61bd46329e682eac946842e013191255c7a1f4d8e46bfc167da3e851c413f528f3c60d48b84cbcb6da645dcfc5b215a8a5ebb70f4bd047d80f21afe93250754c067299d59426be5dbe469a9682", 0x8f}], 0x2) writev(r0, &(0x7f00000021c0)=[{&(0x7f0000000000)="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", 0x1000}, {&(0x7f0000001000)="5423df93bea010ff6e7689fff40d08e90f83a64d7072e3927c8eeacafa286ba892f5eae8bd769135846698bed49d6c601fd3d5fdf16d691213775c7f", 0x3c}, {&(0x7f0000001040)="408993382782cce5b1302cde30a86076d0e942563bded01a119125b71bd4fe71348a7b0c29693b45f105c0cff2ccd9b963f1845303a348a14b1016e9cb350167e33cd126eb4824402f411d2cc80884ad1e9f8df54baf6c9c1eb11ff083b6c77f4d1b52ec0051c253db760438df3b255990f54e2ce957b6caf85eb9dda9fb93867320e9a5b2e60f7d79b8fbc8e0671c8b6df38d0378bd0f215fe7cb1c62d4a65520f2d694c2bc113ae5d3b68ba45d02477c0b4dd721e90346beda1ee4d3", 0xbd}, {&(0x7f0000001100)="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", 0x1000}, {&(0x7f0000002100)="08ef3bb5c7a06bba483bd7bef9a46afe4d921b1859e65e116f83bc8bddbdb85924b64833beeda3df6cd3d95e29ce4732ab0f14d883076807eb76f704d0376dac491ecc8da2122c25d34c21ec445e45918fd55503f956b7eb8b84c9a792d96d154b482b9ec1609284688a3cc8ea8e102d38a8b6b791bb74a749f165ca3dc755cbe214e92ce1f0b768c676e64a3c90da47c167f7f1", 0x94}], 0x5) 151.146386ms ago: executing program 5 (id=691): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x101040, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000400), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='1', 0x1) (fail_nth: 4) 0s ago: executing program 4 (id=692): socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40080c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r4, 0x289e0cb5, 0x0) kernel console output (not intermixed with test programs): name failslab, interval 1, probability 0, space 0, times 0 [ 150.944004][ T7365] CPU: 2 UID: 0 PID: 7365 Comm: syz.0.391 Not tainted syzkaller #0 PREEMPT(full) [ 150.944028][ T7365] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.944041][ T7365] Call Trace: [ 150.944048][ T7365] [ 150.944056][ T7365] dump_stack_lvl+0x100/0x190 [ 150.944102][ T7365] should_fail_ex.cold+0x5/0xa [ 150.944130][ T7365] should_failslab+0xc2/0x120 [ 150.944160][ T7365] __kmalloc_flags_noprof+0x122/0x8e0 [ 150.944183][ T7365] ? find_held_lock+0x2b/0x80 [ 150.944206][ T7365] ? __pcs_replace_empty_main+0x132/0x650 [ 150.944232][ T7365] ? __pcs_replace_empty_main+0x3fa/0x650 [ 150.944257][ T7365] __pcs_replace_empty_main+0x3fa/0x650 [ 150.944279][ T7365] kmem_cache_alloc_noprof+0x4c4/0x6a0 [ 150.944301][ T7365] ? lock_acquire+0x1d1/0x380 [ 150.944327][ T7365] ? mpol_new+0x11b/0x2d0 [ 150.944355][ T7365] mpol_new+0x11b/0x2d0 [ 150.944380][ T7365] do_mbind+0x210/0xfd0 [ 150.944407][ T7365] ? __pfx_do_mbind+0x10/0x10 [ 150.944431][ T7365] ? find_held_lock+0x2b/0x80 [ 150.944451][ T7365] ? ksys_write+0x190/0x250 [ 150.944483][ T7365] ? __pfx_get_nodes+0x10/0x10 [ 150.944509][ T7365] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 150.944540][ T7365] ? __fget_files+0x21f/0x3d0 [ 150.944686][ T7365] kernel_mbind+0x1b7/0x200 [ 150.944713][ T7365] ? __pfx_kernel_mbind+0x10/0x10 [ 150.944733][ T7365] ? ksys_write+0x1ac/0x250 [ 150.944756][ T7365] ? __pfx_ksys_write+0x10/0x10 [ 150.944785][ T7365] __do_fast_syscall_32+0x13a/0x8b0 [ 150.944814][ T7365] ? lockdep_hardirqs_on+0x7d/0x110 [ 150.944843][ T7365] do_fast_syscall_32+0x32/0x70 [ 150.944861][ T7365] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.944885][ T7365] RIP: 0023:0xf73befec [ 150.944906][ T7365] Code: Unable to access opcode bytes at 0xf73befc2. [ 150.944915][ T7365] RSP: 002b:00000000f53b550c EFLAGS: 00000292 ORIG_RAX: 0000000000000112 [ 150.944934][ T7365] RAX: ffffffffffffffda RBX: 0000000080400000 RCX: 0000000000c00000 [ 150.944947][ T7365] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00000000fefffffe [ 150.944958][ T7365] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 150.944970][ T7365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.944981][ T7365] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.945007][ T7365] [ 151.550461][ T7383] syzkaller0: entered promiscuous mode [ 151.550474][ T7383] syzkaller0: entered allmulticast mode [ 151.974674][ T7394] program syz.3.401 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.359455][ T7401] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.453243][ T7401] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.529237][ T7401] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.579136][ T7401] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.722395][ T5787] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.735252][ T5787] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.735279][ T5787] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.735296][ T5787] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.869730][ T6693] cxacru 7-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 152.869764][ T7192] cxacru 8-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 152.886720][ T6515] cxacru 6-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x89000) [ 153.073668][ T1128] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 153.073691][ T1128] ata1: failed to read log page 10h (errno=-5) [ 153.073708][ T1128] ata1.00: exception Emask 0x1 SAct 0x60e00003 SErr 0x0 action 0x0 [ 153.073726][ T1128] ata1.00: irq_stat 0x41000000 [ 153.073740][ T1128] ata1.00: failed command: WRITE FPDMA QUEUED [ 153.073752][ T1128] ata1.00: cmd 61/18:00:36:e1:08/00:00:00:00:00/40 tag 0 ncq dma 12288 out [ 153.073752][ T1128] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 153.073801][ T1128] ata1.00: status: { DRDY } [ 153.073818][ T1128] ata1.00: failed command: WRITE FPDMA QUEUED [ 153.073827][ T1128] ata1.00: cmd 61/38:08:36:31:08/00:00:00:00:00/40 tag 1 ncq dma 28672 out [ 153.073827][ T1128] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 153.073878][ T1128] ata1.00: status: { DRDY } [ 153.073893][ T1128] ata1.00: failed command: WRITE FPDMA QUEUED [ 153.073904][ T1128] ata1.00: cmd 61/08:a8:36:41:09/00:00:00:00:00/40 tag 21 ncq dma 4096 out [ 153.073904][ T1128] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 153.073952][ T1128] ata1.00: status: { DRDY } [ 153.073968][ T1128] ata1.00: failed command: WRITE FPDMA QUEUED [ 153.073977][ T1128] ata1.00: cmd 61/08:b0:2e:43:09/00:00:00:00:00/40 tag 22 ncq dma 4096 out [ 153.073977][ T1128] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 153.074026][ T1128] ata1.00: status: { DRDY } [ 153.074042][ T1128] ata1.00: failed command: WRITE FPDMA QUEUED [ 153.074051][ T1128] ata1.00: cmd 61/48:b8:ee:60:09/00:00:00:00:00/40 tag 23 ncq dma 36864 out [ 153.074051][ T1128] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 153.074101][ T1128] ata1.00: status: { DRDY } [ 153.074116][ T1128] ata1.00: failed command: WRITE FPDMA QUEUED [ 153.074125][ T1128] ata1.00: cmd 61/30:e8:06:6f:09/02:00:00:00:00/40 tag 29 ncq dma 286720 out [ 153.074125][ T1128] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 153.074175][ T1128] ata1.00: status: { DRDY } [ 153.074189][ T1128] ata1.00: failed command: WRITE FPDMA QUEUED [ 153.074205][ T1128] ata1.00: cmd 61/48:f0:ce:2b:0a/04:00:00:00:00/40 tag 30 ncq dma 561152 out [ 153.074205][ T1128] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 153.074253][ T1128] ata1.00: status: { DRDY } [ 153.076637][ T1128] ata1.00: configured for UDMA/100 [ 153.076980][ T1128] ata1: EH complete [ 153.192363][ T6055] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 153.238988][ T7408] syzkaller0: entered promiscuous mode [ 153.239002][ T7408] syzkaller0: entered allmulticast mode [ 153.253589][ T43] kauditd_printk_skb: 160 callbacks suppressed [ 153.253600][ T43] audit: type=1326 audit(1791442561.163:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.1.395" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 153.332828][ T43] audit: type=1326 audit(1791442561.243:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.1.395" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 153.346165][ T6055] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 153.347301][ T6055] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.347324][ T6055] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 153.347337][ T6055] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 153.347356][ T6055] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.392477][ T10] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 153.394338][ T43] audit: type=1326 audit(1791442561.303:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.1.395" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 153.394926][ T43] audit: type=1326 audit(1791442561.303:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.1.395" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 153.395100][ T43] audit: type=1326 audit(1791442561.303:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.1.395" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 153.462960][ T43] audit: type=1326 audit(1791442561.373:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.1.395" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 153.531396][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.407'. [ 153.553003][ T43] audit: type=1326 audit(1791442561.463:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.1.395" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 153.553345][ T10] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 153.553720][ T43] audit: type=1326 audit(1791442561.463:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.1.395" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 153.553907][ T43] audit: type=1326 audit(1791442561.463:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.1.395" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 153.554522][ T43] audit: type=1326 audit(1791442561.463:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.1.395" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 153.558859][ T10] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 153.558882][ T10] usb 6-1: Product: syz [ 153.558895][ T10] usb 6-1: Manufacturer: syz [ 153.558907][ T10] usb 6-1: SerialNumber: syz [ 153.561320][ T10] usb 6-1: config 0 descriptor?? [ 153.811270][ T854] usb 6-1: USB disconnect, device number 6 [ 153.904624][ T7418] cxacru 7-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 153.904650][ T7418] cxacru 7-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 154.132414][ T854] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 154.283429][ T854] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 154.285276][ T854] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.285316][ T854] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 154.285337][ T854] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 154.285370][ T854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.870330][ T6055] usb 7-1: USB disconnect, device number 6 [ 154.874229][ T854] usb 6-1: USB disconnect, device number 7 [ 155.976730][ T7442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.976747][ T7442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.977877][ T7442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.977961][ T7442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.932713][ T5815] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 157.083349][ T5815] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 157.088824][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 157.088847][ T5815] usb 5-1: Product: syz [ 157.088860][ T5815] usb 5-1: Manufacturer: syz [ 157.088872][ T5815] usb 5-1: SerialNumber: syz [ 157.092028][ T5815] usb 5-1: config 0 descriptor?? [ 157.319128][ T5843] usb 5-1: USB disconnect, device number 15 [ 157.484283][ T7471] pci_bus 0000:01: busn_res: [bus 01] is released [ 157.691657][ T7479] jffs2: notice: (7479) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 157.713251][ T5843] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 157.758011][ T7479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.426'. [ 157.759004][ T7479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.426'. [ 157.769213][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.426'. [ 157.824824][ T7481] netlink: 'syz.1.426': attribute type 1 has an invalid length. [ 157.885299][ T5843] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 157.890699][ T5843] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.890725][ T5843] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 157.890739][ T5843] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 157.890758][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.057029][ T7484] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 158.215984][ T7487] FAULT_INJECTION: forcing a failure. [ 158.215984][ T7487] name failslab, interval 1, probability 0, space 0, times 0 [ 158.216004][ T7487] CPU: 1 UID: 0 PID: 7487 Comm: syz.3.428 Not tainted syzkaller #0 PREEMPT(full) [ 158.216017][ T7487] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.216023][ T7487] Call Trace: [ 158.216028][ T7487] [ 158.216033][ T7487] dump_stack_lvl+0x100/0x190 [ 158.216106][ T7487] should_fail_ex.cold+0x5/0xa [ 158.216121][ T7487] should_failslab+0xc2/0x120 [ 158.216157][ T7487] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 158.216173][ T7487] ? __alloc_skb+0x5b7/0x710 [ 158.216203][ T7487] ? __alloc_skb+0x140/0x710 [ 158.216216][ T7487] __alloc_skb+0x140/0x710 [ 158.216226][ T7487] ? __alloc_skb+0x5b7/0x710 [ 158.216237][ T7487] ? __pfx___alloc_skb+0x10/0x10 [ 158.216252][ T7487] netlink_alloc_large_skb+0x69/0x150 [ 158.216265][ T7487] netlink_sendmsg+0x680/0xda0 [ 158.216279][ T7487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.216291][ T7487] ? apparmor_socket_sendmsg+0x165/0x280 [ 158.216312][ T7487] ____sys_sendmsg+0xa4d/0xbe0 [ 158.216326][ T7487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.216338][ T7487] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.216360][ T7487] ___sys_sendmsg+0x190/0x1e0 [ 158.216377][ T7487] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.216400][ T7487] ? find_held_lock+0x2b/0x80 [ 158.216422][ T7487] __sys_sendmsg+0x160/0x210 [ 158.216435][ T7487] ? __pfx___sys_sendmsg+0x10/0x10 [ 158.216451][ T7487] ? __pfx_ksys_write+0x10/0x10 [ 158.216468][ T7487] __do_fast_syscall_32+0x13a/0x8b0 [ 158.216504][ T7487] ? lockdep_hardirqs_on+0x7d/0x110 [ 158.216522][ T7487] do_fast_syscall_32+0x32/0x70 [ 158.216533][ T7487] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.216547][ T7487] RIP: 0023:0xf73cefec [ 158.216559][ T7487] Code: Unable to access opcode bytes at 0xf73cefc2. [ 158.216565][ T7487] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 158.216576][ T7487] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001300 [ 158.216583][ T7487] RDX: 0000000020040010 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.216589][ T7487] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.216596][ T7487] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 158.216602][ T7487] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.216616][ T7487] [ 158.289826][ T7492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.430'. [ 158.289894][ T7492] bridge: RTM_NEWNEIGH with invalid ether address [ 158.315141][ T43] kauditd_printk_skb: 168 callbacks suppressed [ 158.315158][ T43] audit: type=1326 audit(1791442566.223:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.0.418" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befec code=0x7ffc0000 [ 158.315225][ T43] audit: type=1326 audit(1791442566.223:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.0.418" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befec code=0x7ffc0000 [ 158.315432][ T43] audit: type=1326 audit(1791442566.223:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.0.418" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73befec code=0x7ffc0000 [ 158.315523][ T43] audit: type=1326 audit(1791442566.223:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.0.418" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befec code=0x7ffc0000 [ 158.315602][ T43] audit: type=1326 audit(1791442566.223:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.0.418" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befec code=0x7ffc0000 [ 158.316127][ T43] audit: type=1326 audit(1791442566.223:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.0.418" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf73befec code=0x7ffc0000 [ 158.317946][ T43] audit: type=1326 audit(1791442566.223:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.0.418" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befec code=0x7ffc0000 [ 158.317989][ T43] audit: type=1326 audit(1791442566.223:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.0.418" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befec code=0x7ffc0000 [ 158.318026][ T43] audit: type=1326 audit(1791442566.223:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.0.418" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf73befec code=0x7ffc0000 [ 158.318063][ T43] audit: type=1326 audit(1791442566.223:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.0.418" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befec code=0x7ffc0000 [ 158.335159][ T7455] cgroup: Invalid name [ 158.501202][ T7504] syzkaller0: entered promiscuous mode [ 158.501216][ T7504] syzkaller0: entered allmulticast mode [ 158.644564][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'. [ 158.644803][ T7507] netlink: 24 bytes leftover after parsing attributes in process `syz.3.433'. [ 158.849433][ T7509] netlink: 20 bytes leftover after parsing attributes in process `syz.3.433'. [ 158.849469][ T7509] netlink: 20 bytes leftover after parsing attributes in process `syz.3.433'. [ 158.870291][ T5843] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 158.870304][ T5843] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 158.871388][ T5843] cxacru 5-1:1.0: probe with driver cxacru failed with error -71 [ 158.875628][ T5843] usb 5-1: USB disconnect, device number 16 [ 158.912278][ T7512] FAULT_INJECTION: forcing a failure. [ 158.912278][ T7512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.912461][ T7512] CPU: 1 UID: 0 PID: 7512 Comm: syz.0.434 Not tainted syzkaller #0 PREEMPT(full) [ 158.912476][ T7512] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.912483][ T7512] Call Trace: [ 158.912487][ T7512] [ 158.912492][ T7512] dump_stack_lvl+0x100/0x190 [ 158.912512][ T7512] should_fail_ex.cold+0x5/0xa [ 158.912540][ T7512] _copy_to_iter+0x1f3/0x1720 [ 158.912560][ T7512] ? mark_held_locks+0x40/0x70 [ 158.912577][ T7512] ? __pfx__copy_to_iter+0x10/0x10 [ 158.912593][ T7512] ? lockdep_hardirqs_on+0x7d/0x110 [ 158.912609][ T7512] ? llc_get_sk_idx+0x123/0x1d0 [ 158.912624][ T7512] ? __local_bh_enable_ip+0xa5/0x120 [ 158.912645][ T7512] ? __local_bh_enable_ip+0xa5/0x120 [ 158.912664][ T7512] seq_read_iter+0xdab/0x1270 [ 158.912685][ T7512] proc_reg_read_iter+0x220/0x310 [ 158.912702][ T7512] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 158.912719][ T7512] vfs_read+0x82e/0xb40 [ 158.912734][ T7512] ? __pfx_vfs_read+0x10/0x10 [ 158.912747][ T7512] ? find_held_lock+0x2b/0x80 [ 158.912769][ T7512] ksys_read+0x12a/0x250 [ 158.912783][ T7512] ? __pfx_ksys_read+0x10/0x10 [ 158.912795][ T7512] ? ksys_write+0x1ac/0x250 [ 158.912809][ T7512] ? __pfx_ksys_write+0x10/0x10 [ 158.912826][ T7512] __do_fast_syscall_32+0x13a/0x8b0 [ 158.912843][ T7512] ? lockdep_hardirqs_on+0x7d/0x110 [ 158.912861][ T7512] do_fast_syscall_32+0x32/0x70 [ 158.912871][ T7512] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.912886][ T7512] RIP: 0023:0xf73befec [ 158.912898][ T7512] Code: Unable to access opcode bytes at 0xf73befc2. [ 158.912903][ T7512] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 158.912915][ T7512] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001640 [ 158.912922][ T7512] RDX: 00000000000000cd RSI: 0000000000000000 RDI: 0000000000000000 [ 158.912928][ T7512] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.912934][ T7512] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 158.912941][ T7512] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.912955][ T7512] [ 159.041927][ T7516] FAULT_INJECTION: forcing a failure. [ 159.041927][ T7516] name failslab, interval 1, probability 0, space 0, times 0 [ 159.041956][ T7516] CPU: 3 UID: 0 PID: 7516 Comm: syz.1.437 Not tainted syzkaller #0 PREEMPT(full) [ 159.041973][ T7516] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.041983][ T7516] Call Trace: [ 159.041988][ T7516] [ 159.041993][ T7516] dump_stack_lvl+0x100/0x190 [ 159.042021][ T7516] should_fail_ex.cold+0x5/0xa [ 159.042041][ T7516] should_failslab+0xc2/0x120 [ 159.042065][ T7516] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 159.042087][ T7516] ? __alloc_skb+0x5b7/0x710 [ 159.042101][ T7516] ? __alloc_skb+0x140/0x710 [ 159.042119][ T7516] __alloc_skb+0x140/0x710 [ 159.042133][ T7516] ? __alloc_skb+0x5b7/0x710 [ 159.042147][ T7516] ? __pfx___alloc_skb+0x10/0x10 [ 159.042168][ T7516] netlink_alloc_large_skb+0x69/0x150 [ 159.042185][ T7516] netlink_sendmsg+0x680/0xda0 [ 159.042203][ T7516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.042219][ T7516] ? apparmor_socket_sendmsg+0x165/0x280 [ 159.042247][ T7516] ____sys_sendmsg+0xa4d/0xbe0 [ 159.042266][ T7516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.042281][ T7516] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.042340][ T7516] ___sys_sendmsg+0x190/0x1e0 [ 159.042364][ T7516] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.042412][ T7516] ? find_held_lock+0x2b/0x80 [ 159.042445][ T7516] __sys_sendmsg+0x160/0x210 [ 159.042464][ T7516] ? __pfx___sys_sendmsg+0x10/0x10 [ 159.042486][ T7516] ? __pfx_ksys_write+0x10/0x10 [ 159.042509][ T7516] __do_fast_syscall_32+0x13a/0x8b0 [ 159.042533][ T7516] ? lockdep_hardirqs_on+0x7d/0x110 [ 159.042556][ T7516] do_fast_syscall_32+0x32/0x70 [ 159.042570][ T7516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.042589][ T7516] RIP: 0023:0xf7fe6fec [ 159.042606][ T7516] Code: Unable to access opcode bytes at 0xf7fe6fc2. [ 159.042613][ T7516] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 159.042628][ T7516] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000000 [ 159.042637][ T7516] RDX: 0000000000004040 RSI: 0000000000000000 RDI: 0000000000000000 [ 159.042645][ T7516] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.042654][ T7516] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 159.042663][ T7516] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.042684][ T7516] [ 159.356174][ T7524] netlink: 16 bytes leftover after parsing attributes in process `syz.1.439'. [ 159.533410][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'. [ 159.874540][ T7532] program syz.0.442 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.236163][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'. [ 160.408121][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.446'. [ 160.782461][ T6056] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 160.853633][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.450'. [ 160.933043][ T6056] usb 5-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 160.934023][ T6056] usb 5-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 160.934060][ T6056] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 160.934082][ T6056] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 160.934099][ T6056] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 160.934120][ T6056] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 160.934139][ T6056] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 160.934159][ T6056] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 160.959494][ T6056] usb 5-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 160.959509][ T6056] usb 5-1: Product: syz [ 160.959517][ T6056] usb 5-1: Manufacturer: syz [ 160.959524][ T6056] usb 5-1: SerialNumber: syz [ 160.961532][ T7552] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 160.961585][ T7552] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 160.961689][ T7552] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 160.962814][ T6056] keyspan 5-1:1.0: Keyspan 1 port adapter converter detected [ 160.963249][ T6056] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 160.963956][ T6056] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 82 [ 160.964000][ T6056] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 160.977750][ T6056] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 161.019013][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'. [ 162.085267][ T7569] fuse: Unknown parameter 'grgup«/Öö¡-<…<6Ùñ¥ùYÖø4' [ 162.304047][ T7577] program syz.2.456 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.579956][ T5822] usb 5-1: USB disconnect, device number 17 [ 163.585396][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 163.585412][ T43] audit: type=1326 audit(1791442568.489:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.1.460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 163.587514][ T43] audit: type=1326 audit(1791442568.489:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.1.460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 163.587688][ T43] audit: type=1326 audit(1791442568.489:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.1.460" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 163.587853][ T43] audit: type=1326 audit(1791442568.489:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.1.460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 163.588282][ T43] audit: type=1326 audit(1791442568.489:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.1.460" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 163.588492][ T43] audit: type=1326 audit(1791442568.489:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.1.460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 163.588667][ T43] audit: type=1326 audit(1791442568.489:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.1.460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 163.588925][ T43] audit: type=1326 audit(1791442568.489:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.1.460" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 163.589090][ T43] audit: type=1326 audit(1791442568.489:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.1.460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 163.589419][ T43] audit: type=1326 audit(1791442568.489:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.1.460" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6fec code=0x7ffc0000 [ 163.613993][ T5822] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 163.614763][ T5822] keyspan 5-1:1.0: device disconnected [ 163.756465][ T7592] __nla_validate_parse: 3 callbacks suppressed [ 163.756482][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 163.869478][ T7597] FAULT_INJECTION: forcing a failure. [ 163.869478][ T7597] name failslab, interval 1, probability 0, space 0, times 0 [ 163.869498][ T7597] CPU: 3 UID: 0 PID: 7597 Comm: syz.0.463 Not tainted syzkaller #0 PREEMPT(full) [ 163.869512][ T7597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.869519][ T7597] Call Trace: [ 163.869523][ T7597] [ 163.869528][ T7597] dump_stack_lvl+0x100/0x190 [ 163.869547][ T7597] should_fail_ex.cold+0x5/0xa [ 163.869562][ T7597] should_failslab+0xc2/0x120 [ 163.869581][ T7597] __kmalloc_noprof+0xfc/0x840 [ 163.869615][ T7597] ? bpf_prog_array_alloc+0x46/0x60 [ 163.869632][ T7597] bpf_prog_array_alloc+0x46/0x60 [ 163.869643][ T7597] netns_bpf_prog_attach+0x438/0x510 [ 163.869657][ T7597] __sys_bpf+0x47e6/0x4a30 [ 163.869675][ T7597] ? __pfx___sys_bpf+0x10/0x10 [ 163.869686][ T7597] ? lock_acquire+0x1d1/0x380 [ 163.869703][ T7597] ? get_pid_task+0x2a/0x250 [ 163.869715][ T7597] ? find_held_lock+0x2b/0x80 [ 163.869728][ T7597] ? get_pid_task+0xfc/0x250 [ 163.869745][ T7597] ? get_pid_task+0xfc/0x250 [ 163.869760][ T7597] ? proc_fail_nth_write+0x9f/0x220 [ 163.869775][ T7597] ? find_held_lock+0x2b/0x80 [ 163.869791][ T7597] ? rcu_read_lock_any_held+0x6a/0x90 [ 163.869805][ T7597] ? find_held_lock+0x2b/0x80 [ 163.869818][ T7597] ? ksys_write+0x190/0x250 [ 163.869831][ T7597] ? ksys_write+0x190/0x250 [ 163.869845][ T7597] ? lock_acquire+0x1d1/0x380 [ 163.869870][ T7597] ? fput+0x7c/0x100 [ 163.869888][ T7597] ? __ia32_sys_bpf+0xcc/0x170 [ 163.869901][ T7597] __ia32_sys_bpf+0xcc/0x170 [ 163.869915][ T7597] ? __do_fast_syscall_32+0xb3/0x8b0 [ 163.869933][ T7597] __do_fast_syscall_32+0x13a/0x8b0 [ 163.869950][ T7597] ? lockdep_hardirqs_on+0x7d/0x110 [ 163.869968][ T7597] do_fast_syscall_32+0x32/0x70 [ 163.869978][ T7597] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 163.869993][ T7597] RIP: 0023:0xf73befec [ 163.870006][ T7597] Code: Unable to access opcode bytes at 0xf73befc2. [ 163.870011][ T7597] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 163.870023][ T7597] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800002c0 [ 163.870030][ T7597] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000000 [ 163.870036][ T7597] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 163.870043][ T7597] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 163.870049][ T7597] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.870063][ T7597] [ 163.919838][ T7599] syzkaller0: entered promiscuous mode [ 163.919858][ T7599] syzkaller0: entered allmulticast mode [ 164.980101][ T7604] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.047830][ T7604] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.107751][ T7604] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.148550][ T7604] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.184249][ T5739] Bluetooth: hci0: command 0x0406 tx timeout [ 165.192725][ T5739] Bluetooth: hci1: command 0x0406 tx timeout [ 165.192747][ T5739] Bluetooth: hci3: command 0x0406 tx timeout [ 165.192761][ T5739] Bluetooth: hci2: command 0x0406 tx timeout [ 165.282188][ T5787] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.282223][ T5787] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.282249][ T5787] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.282363][ T5787] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.348902][ T7606] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.425087][ T7606] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.477391][ T7606] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.527825][ T7606] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.758557][ T7611] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.809737][ T7611] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.885930][ T7611] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.935835][ T7611] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.032420][ T5787] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.032461][ T5787] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.045980][ T5787] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.046020][ T5787] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.832433][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.832473][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.832500][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.864734][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.921495][ T7618] jffs2: notice: (7618) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 168.945023][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.470'. [ 168.947095][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.470'. [ 168.953285][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.470'. [ 169.005528][ T7620] netlink: 'syz.0.470': attribute type 1 has an invalid length. [ 169.136883][ T7623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.472'. [ 169.184511][ T7625] syzkaller0: entered promiscuous mode [ 169.184526][ T7625] syzkaller0: entered allmulticast mode [ 170.602567][ T5844] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 170.752808][ T5844] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 170.753655][ T5844] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.753678][ T5844] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 170.753691][ T5844] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 170.753710][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.026042][ T7632] macsec1: entered promiscuous mode [ 171.026056][ T7632] macsec1: entered allmulticast mode [ 171.037784][ T7632] netlink: 36 bytes leftover after parsing attributes in process `syz.0.476'. [ 171.049249][ T5844] cxacru_cm: 7 callbacks suppressed [ 171.049264][ T5844] cxacru 5-1:1.0: receive of cm 0x90 failed (-71) [ 171.055156][ T5844] usb 5-1: USB disconnect, device number 18 [ 171.326154][ T7638] FAULT_INJECTION: forcing a failure. [ 171.326154][ T7638] name failslab, interval 1, probability 0, space 0, times 0 [ 171.326183][ T7638] CPU: 0 UID: 0 PID: 7638 Comm: syz.1.478 Not tainted syzkaller #0 PREEMPT(full) [ 171.326205][ T7638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 171.326216][ T7638] Call Trace: [ 171.326229][ T7638] [ 171.326236][ T7638] dump_stack_lvl+0x100/0x190 [ 171.326266][ T7638] should_fail_ex.cold+0x5/0xa [ 171.326292][ T7638] should_failslab+0xc2/0x120 [ 171.326321][ T7638] __kmalloc_noprof+0xfc/0x840 [ 171.326344][ T7638] ? __pfx_dynamic_dname+0x10/0x10 [ 171.326365][ T7638] ? tomoyo_encode2+0xfb/0x3c0 [ 171.326395][ T7638] tomoyo_encode2+0xfb/0x3c0 [ 171.326421][ T7638] tomoyo_encode+0x29/0x50 [ 171.326443][ T7638] tomoyo_realpath_from_path+0x18c/0x690 [ 171.326473][ T7638] tomoyo_path_number_perm+0x23c/0x580 [ 171.326492][ T7638] ? tomoyo_path_number_perm+0x22e/0x580 [ 171.326514][ T7638] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 171.326536][ T7638] ? get_pid_task+0x106/0x250 [ 171.326563][ T7638] ? __lock_acquire+0x5c0/0x1f40 [ 171.326603][ T7638] ? __fget_files+0x34/0x3d0 [ 171.326627][ T7638] ? find_held_lock+0x2b/0x80 [ 171.326647][ T7638] ? __fget_files+0x215/0x3d0 [ 171.326669][ T7638] ? hook_file_ioctl_common+0x140/0x440 [ 171.326689][ T7638] ? __fget_files+0x215/0x3d0 [ 171.326717][ T7638] ? __fget_files+0x21f/0x3d0 [ 171.326745][ T7638] security_file_ioctl_compat+0xd3/0x230 [ 171.326767][ T7638] __ia32_compat_sys_ioctl+0xc2/0x360 [ 171.326792][ T7638] __do_fast_syscall_32+0x13a/0x8b0 [ 171.326820][ T7638] ? lockdep_hardirqs_on+0x7d/0x110 [ 171.326847][ T7638] do_fast_syscall_32+0x32/0x70 [ 171.326864][ T7638] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 171.326886][ T7638] RIP: 0023:0xf7fe6fec [ 171.326906][ T7638] Code: Unable to access opcode bytes at 0xf7fe6fc2. [ 171.326930][ T7638] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 171.326949][ T7638] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae41 [ 171.326961][ T7638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.326972][ T7638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 171.326982][ T7638] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 171.326993][ T7638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.327018][ T7638] [ 171.327144][ T7638] ERROR: Out of memory at tomoyo_realpath_from_path. [ 171.492360][ T7644] 9pnet_virtio: no channels available for device syz [ 171.523228][ T7647] overlayfs: workdir and upperdir must reside under the same mount [ 172.381873][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.482'. [ 172.537848][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.483'. [ 172.878389][ T7666] syzkaller0: entered promiscuous mode [ 172.878404][ T7666] syzkaller0: entered allmulticast mode [ 173.120103][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.487'. [ 173.992814][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.488'. [ 174.000010][ T66] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 174.073358][ T5748] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.077905][ T5748] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.079794][ T5748] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.081728][ T5748] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.093600][ T5748] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.177664][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.489'. [ 174.623368][ T7677] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.623454][ T7677] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.623513][ T7677] bridge_slave_0: entered allmulticast mode [ 174.624263][ T7677] bridge_slave_0: entered promiscuous mode [ 174.636044][ T7677] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.636135][ T7677] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.636204][ T7677] bridge_slave_1: entered allmulticast mode [ 174.638468][ T7677] bridge_slave_1: entered promiscuous mode [ 174.662782][ T7677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.664185][ T7677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.681603][ T7677] team0: Port device team_slave_0 added [ 174.684727][ T7677] team0: Port device team_slave_1 added [ 174.696884][ T7677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.696898][ T7677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.696917][ T7677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.697794][ T7677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.697802][ T7677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.697815][ T7677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.722960][ T7677] hsr_slave_0: entered promiscuous mode [ 174.723654][ T7677] hsr_slave_1: entered promiscuous mode [ 174.724134][ T7677] debugfs: 'hsr0' already exists in 'hsr' [ 174.724148][ T7677] Cannot create hsr debugfs directory [ 174.866757][ T7677] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 174.869337][ T7677] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.869939][ T7677] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 174.871518][ T7677] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.883358][ T7677] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 174.889626][ T7677] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.890170][ T7677] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 174.892134][ T7677] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.938208][ T7677] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.938255][ T7677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.938353][ T7677] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.938395][ T7677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.977832][ T13] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.031756][ T7677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.051046][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.052599][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.097137][ T13] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.101926][ T7677] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.113470][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.113514][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.119264][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.119307][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.174419][ T13] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.241336][ T13] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.368811][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'. [ 175.537476][ T7677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.587050][ T7721] syzkaller0: entered promiscuous mode [ 175.587065][ T7721] syzkaller0: entered allmulticast mode [ 176.222495][ T66] Bluetooth: hci4: command tx timeout [ 176.257884][ T13] bridge_slave_1: left allmulticast mode [ 176.259685][ T13] bridge_slave_1: left promiscuous mode [ 176.265903][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.279952][ T13] bridge_slave_0: left allmulticast mode [ 176.279967][ T13] bridge_slave_0: left promiscuous mode [ 176.280067][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.360475][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.497'. [ 176.540818][ T43] audit: type=1326 audit(1791442581.439:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.0.499" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befec code=0x7ffc0000 [ 176.540910][ T43] audit: type=1326 audit(1791442581.439:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.0.499" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befec code=0x7ffc0000 [ 176.559429][ T43] audit: type=1326 audit(1791442581.449:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.0.499" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73befec code=0x7ffc0000 [ 176.559458][ T43] audit: type=1326 audit(1791442581.449:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.0.499" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befec code=0x7ffc0000 [ 176.559478][ T43] audit: type=1326 audit(1791442581.449:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.0.499" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befec code=0x7ffc0000 [ 176.559497][ T43] audit: type=1326 audit(1791442581.449:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.0.499" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf73befec code=0x7ffc0000 [ 176.559517][ T43] audit: type=1326 audit(1791442581.449:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.0.499" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befec code=0x7ffc0000 [ 176.559537][ T43] audit: type=1326 audit(1791442581.449:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.0.499" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befec code=0x7ffc0000 [ 176.559557][ T43] audit: type=1326 audit(1791442581.449:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.0.499" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf73befec code=0x7ffc0000 [ 176.559576][ T43] audit: type=1326 audit(1791442581.449:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.0.499" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befec code=0x7ffc0000 [ 176.859780][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.500'. [ 176.879670][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.897775][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.903768][ T13] bond0 (unregistering): Released all slaves [ 176.918475][ T66] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 176.980037][ T7677] veth0_vlan: entered promiscuous mode [ 176.985937][ T7677] veth1_vlan: entered promiscuous mode [ 177.057260][ T7677] veth0_macvtap: entered promiscuous mode [ 177.061710][ T7677] veth1_macvtap: entered promiscuous mode [ 177.071940][ T7677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.077921][ T7677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.081530][ T7731] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.081635][ T7731] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.081703][ T7731] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.222831][ T5787] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.314475][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.314490][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.353032][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.353046][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.438199][ T5452] 8021q: adding VLAN 0 to HW filter on device eth2 [ 177.468263][ T13] hsr_slave_0: left promiscuous mode [ 177.468718][ T13] hsr_slave_1: left promiscuous mode [ 177.471388][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.471405][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.472111][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.472125][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.484362][ T13] veth1_macvtap: left promiscuous mode [ 177.484880][ T13] veth0_macvtap: left promiscuous mode [ 177.484964][ T13] veth1_vlan: left promiscuous mode [ 177.485031][ T13] veth0_vlan: left promiscuous mode [ 177.780598][ T13] team0 (unregistering): Port device team_slave_1 removed [ 177.798390][ T13] team0 (unregistering): Port device team_slave_0 removed [ 178.117691][ T5452] 8021q: adding VLAN 0 to HW filter on device eth3 [ 178.302351][ T66] Bluetooth: hci4: command tx timeout [ 178.413901][ T5452] 8021q: adding VLAN 0 to HW filter on device eth4 [ 178.598515][ T7781] syzkaller0: entered promiscuous mode [ 178.598530][ T7781] syzkaller0: entered allmulticast mode [ 178.718490][ T5452] 8021q: adding VLAN 0 to HW filter on device eth5 [ 178.822697][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 178.973218][ T10] usb 9-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 178.974291][ T10] usb 9-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 178.974321][ T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 178.974338][ T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 178.974353][ T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 178.974368][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 178.974382][ T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 178.974397][ T10] usb 9-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 178.976458][ T10] usb 9-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 178.976474][ T10] usb 9-1: Product: syz [ 178.976484][ T10] usb 9-1: Manufacturer: syz [ 178.976493][ T10] usb 9-1: SerialNumber: syz [ 178.984177][ T7780] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 178.984337][ T7780] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 178.984485][ T7780] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 178.987894][ T10] keyspan 9-1:1.0: Keyspan 1 port adapter converter detected [ 178.990340][ T10] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 178.992159][ T10] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 82 [ 178.992228][ T10] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 178.994433][ T10] usb 9-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 179.064510][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.506'. [ 179.307100][ T7802] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 179.328199][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.508'. [ 179.340277][ T7802] macvtap0: entered promiscuous mode [ 179.340292][ T7802] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 179.340450][ T7802] macvtap0: entered allmulticast mode [ 179.340460][ T7802] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 179.768129][ T7807] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.897777][ T7807] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.979009][ T7807] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.035598][ T7807] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.057177][ T7817] syzkaller0: entered promiscuous mode [ 180.057191][ T7817] syzkaller0: entered allmulticast mode [ 180.093018][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.196281][ T5811] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.196325][ T5811] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.196355][ T5811] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.392564][ T66] Bluetooth: hci4: command tx timeout [ 181.250795][ T7848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.519'. [ 181.255424][ T66] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 181.621926][ T7265] usb 9-1: USB disconnect, device number 2 [ 181.630055][ T7265] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 181.630424][ T7265] keyspan 9-1:1.0: device disconnected [ 181.710265][ T7860] FAULT_INJECTION: forcing a failure. [ 181.710265][ T7860] name failslab, interval 1, probability 0, space 0, times 0 [ 181.710286][ T7860] CPU: 1 UID: 0 PID: 7860 Comm: syz.4.521 Not tainted syzkaller #0 PREEMPT(full) [ 181.710299][ T7860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.710306][ T7860] Call Trace: [ 181.710310][ T7860] [ 181.710314][ T7860] dump_stack_lvl+0x100/0x190 [ 181.710333][ T7860] should_fail_ex.cold+0x5/0xa [ 181.710346][ T7860] ? __netlink_lookup+0x652/0x900 [ 181.710365][ T7860] should_failslab+0xc2/0x120 [ 181.710383][ T7860] kmem_cache_alloc_noprof+0x92/0x6a0 [ 181.710398][ T7860] ? skb_clone+0x190/0x400 [ 181.710413][ T7860] skb_clone+0x190/0x400 [ 181.710426][ T7860] netlink_deliver_tap+0xaed/0xcc0 [ 181.710446][ T7860] netlink_unicast+0x62b/0x850 [ 181.710459][ T7860] ? __pfx_netlink_unicast+0x10/0x10 [ 181.710474][ T7860] netlink_sendmsg+0x8b0/0xda0 [ 181.710487][ T7860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.710500][ T7860] ? apparmor_socket_sendmsg+0x165/0x280 [ 181.710520][ T7860] sock_write_iter+0x53a/0x5b0 [ 181.710535][ T7860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.710546][ T7860] ? __pfx_sock_write_iter+0x10/0x10 [ 181.710565][ T7860] ? bpf_lsm_file_permission+0x9/0x10 [ 181.710582][ T7860] ? security_file_permission+0x76/0x210 [ 181.710596][ T7860] ? rw_verify_area+0xce/0x6d0 [ 181.710610][ T7860] vfs_write+0x6af/0x1050 [ 181.710624][ T7860] ? __pfx_sock_write_iter+0x10/0x10 [ 181.710641][ T7860] ? __pfx_vfs_write+0x10/0x10 [ 181.710654][ T7860] ? find_held_lock+0x2b/0x80 [ 181.710676][ T7860] ksys_write+0x1f8/0x250 [ 181.710690][ T7860] ? __pfx_ksys_write+0x10/0x10 [ 181.710703][ T7860] ? ksys_write+0x1ac/0x250 [ 181.710716][ T7860] ? __pfx_ksys_write+0x10/0x10 [ 181.710733][ T7860] __do_fast_syscall_32+0x13a/0x8b0 [ 181.710751][ T7860] ? lockdep_hardirqs_on+0x7d/0x110 [ 181.710768][ T7860] do_fast_syscall_32+0x32/0x70 [ 181.710779][ T7860] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 181.710793][ T7860] RIP: 0023:0xf740efec [ 181.710806][ T7860] Code: Unable to access opcode bytes at 0xf740efc2. [ 181.710811][ T7860] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 181.710822][ T7860] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 181.710829][ T7860] RDX: 0000000000000024 RSI: 0000000000000000 RDI: 0000000000000000 [ 181.710835][ T7860] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 181.710842][ T7860] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 181.710848][ T7860] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 181.710862][ T7860] [ 181.767650][ T7864] syzkaller0: entered promiscuous mode [ 181.767663][ T7864] syzkaller0: entered allmulticast mode [ 181.941205][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.524'. [ 182.472410][ T66] Bluetooth: hci4: command tx timeout [ 183.718463][ T7885] FAULT_INJECTION: forcing a failure. [ 183.718463][ T7885] name failslab, interval 1, probability 0, space 0, times 0 [ 183.718483][ T7885] CPU: 2 UID: 0 PID: 7885 Comm: syz.1.530 Not tainted syzkaller #0 PREEMPT(full) [ 183.718497][ T7885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 183.718505][ T7885] Call Trace: [ 183.718509][ T7885] [ 183.718514][ T7885] dump_stack_lvl+0x100/0x190 [ 183.718533][ T7885] should_fail_ex.cold+0x5/0xa [ 183.718549][ T7885] should_failslab+0xc2/0x120 [ 183.718568][ T7885] __kmalloc_cache_noprof+0x91/0x6d0 [ 183.718581][ T7885] ? kfree+0x22b/0x6d0 [ 183.718593][ T7885] ? vgem_open+0x43/0xe0 [ 183.718610][ T7885] ? __pfx_vgem_open+0x10/0x10 [ 183.718626][ T7885] vgem_open+0x43/0xe0 [ 183.718644][ T7885] drm_file_alloc+0x623/0xb40 [ 183.718661][ T7885] drm_open_helper+0x1fc/0x540 [ 183.718680][ T7885] drm_open+0x1a0/0x3e0 [ 183.718699][ T7885] ? __pfx_drm_open+0x10/0x10 [ 183.718717][ T7885] drm_stub_open+0x20f/0x380 [ 183.718737][ T7885] ? __pfx_drm_stub_open+0x10/0x10 [ 183.718752][ T7885] chrdev_open+0x234/0x6a0 [ 183.718767][ T7885] ? __pfx_apparmor_file_open+0x10/0x10 [ 183.718788][ T7885] ? __pfx_chrdev_open+0x10/0x10 [ 183.718813][ T7885] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 183.718845][ T7885] do_dentry_open+0x6ab/0x14d0 [ 183.718867][ T7885] ? __pfx_chrdev_open+0x10/0x10 [ 183.718885][ T7885] vfs_open+0x82/0x3f0 [ 183.718897][ T7885] path_openat+0x19fa/0x2440 [ 183.718923][ T7885] ? __pfx_path_openat+0x10/0x10 [ 183.718953][ T7885] do_file_open+0x20e/0x430 [ 183.718970][ T7885] ? __pfx_do_file_open+0x10/0x10 [ 183.719007][ T7885] ? _raw_spin_unlock+0x28/0x50 [ 183.719031][ T7885] ? alloc_fd+0x471/0x7a0 [ 183.719061][ T7885] do_sys_openat2+0x10f/0x1e0 [ 183.719073][ T7885] ? __pfx_do_sys_openat2+0x10/0x10 [ 183.719087][ T7885] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 183.719102][ T7885] ? __ia32_sys_futex_time32+0x2fd/0x470 [ 183.719148][ T7885] __ia32_compat_sys_openat+0x12d/0x210 [ 183.719172][ T7885] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 183.719200][ T7885] do_int80_emulation+0x166/0x650 [ 183.719228][ T7885] asm_int80_emulation+0x1a/0x20 [ 183.719246][ T7885] RIP: 0023:0xf71d75eb [ 183.719261][ T7885] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 183.719278][ T7885] RSP: 002b:00000000f549603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 183.719297][ T7885] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5496100 [ 183.719306][ T7885] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.719312][ T7885] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.719319][ T7885] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 183.719326][ T7885] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.719342][ T7885] [ 183.849918][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'. [ 184.722953][ T7890] FAULT_INJECTION: forcing a failure. [ 184.722953][ T7890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.722976][ T7890] CPU: 1 UID: 0 PID: 7890 Comm: syz.4.531 Not tainted syzkaller #0 PREEMPT(full) [ 184.722989][ T7890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 184.722995][ T7890] Call Trace: [ 184.723000][ T7890] [ 184.723005][ T7890] dump_stack_lvl+0x100/0x190 [ 184.723024][ T7890] should_fail_ex.cold+0x5/0xa [ 184.723040][ T7890] _copy_from_iter+0x1f4/0x1690 [ 184.723061][ T7890] ? __pfx__copy_from_iter+0x10/0x10 [ 184.723081][ T7890] ? __pfx___might_resched+0x10/0x10 [ 184.723096][ T7890] ? kfree+0x1e5/0x6d0 [ 184.723110][ T7890] file_tty_write.isra.0+0x45b/0x890 [ 184.723127][ T7890] vfs_write+0x6af/0x1050 [ 184.723142][ T7890] ? __pfx_tty_write+0x10/0x10 [ 184.723154][ T7890] ? __pfx_vfs_write+0x10/0x10 [ 184.723167][ T7890] ? find_held_lock+0x2b/0x80 [ 184.723194][ T7890] ksys_write+0x12a/0x250 [ 184.723208][ T7890] ? __pfx_ksys_write+0x10/0x10 [ 184.723221][ T7890] ? ksys_write+0x1ac/0x250 [ 184.723234][ T7890] ? __pfx_ksys_write+0x10/0x10 [ 184.723251][ T7890] __do_fast_syscall_32+0x13a/0x8b0 [ 184.723269][ T7890] ? lockdep_hardirqs_on+0x7d/0x110 [ 184.723287][ T7890] do_fast_syscall_32+0x32/0x70 [ 184.723297][ T7890] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.723312][ T7890] RIP: 0023:0xf740efec [ 184.723325][ T7890] Code: Unable to access opcode bytes at 0xf740efc2. [ 184.723330][ T7890] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 184.723341][ T7890] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001040 [ 184.723348][ T7890] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 184.723354][ T7890] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 184.723361][ T7890] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 184.723367][ T7890] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.723382][ T7890] [ 185.530137][ T7904] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 186.424554][ T43] kauditd_printk_skb: 43 callbacks suppressed [ 186.424572][ T43] audit: type=1326 audit(1791442591.329:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.2.538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fec code=0x7ffc0000 [ 186.424616][ T43] audit: type=1326 audit(1791442591.329:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.2.538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fec code=0x7ffc0000 [ 186.425130][ T43] audit: type=1326 audit(1791442591.329:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.2.538" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f66fec code=0x7ffc0000 [ 186.425240][ T43] audit: type=1326 audit(1791442591.329:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.2.538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fec code=0x7ffc0000 [ 186.425398][ T43] audit: type=1326 audit(1791442591.329:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.2.538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fec code=0x7ffc0000 [ 186.425980][ T43] audit: type=1326 audit(1791442591.329:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.2.538" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f66fec code=0x7ffc0000 [ 186.426019][ T43] audit: type=1326 audit(1791442591.329:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.2.538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fec code=0x7ffc0000 [ 186.426054][ T43] audit: type=1326 audit(1791442591.329:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.2.538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fec code=0x7ffc0000 [ 186.426222][ T43] audit: type=1326 audit(1791442591.329:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.2.538" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f66fec code=0x7ffc0000 [ 186.426319][ T43] audit: type=1326 audit(1791442591.329:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.2.538" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66fec code=0x7ffc0000 [ 187.439869][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.541'. [ 188.909257][ T7909] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 189.101807][ T7943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.544'. [ 189.181180][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'. [ 189.532400][ T5822] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 189.695113][ T5822] usb 9-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 189.700847][ T5822] usb 9-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 189.701003][ T5822] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 189.701133][ T5822] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 189.701297][ T5822] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 189.701548][ T5822] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 189.701758][ T5822] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 189.701828][ T5822] usb 9-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 189.715751][ T5822] usb 9-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 189.716747][ T5822] usb 9-1: Product: syz [ 189.716756][ T5822] usb 9-1: Manufacturer: syz [ 189.716934][ T5822] usb 9-1: SerialNumber: syz [ 189.733407][ T7954] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 189.733888][ T7954] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 189.734293][ T7954] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 189.741134][ T5822] keyspan 9-1:1.0: Keyspan 1 port adapter converter detected [ 189.742458][ T5822] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 189.748092][ T5822] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 82 [ 189.748334][ T5822] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 189.759194][ T5822] usb 9-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 190.569024][ T7980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.554'. [ 192.318908][ T7752] usb 9-1: USB disconnect, device number 3 [ 192.330980][ T7752] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 192.331660][ T7752] keyspan 9-1:1.0: device disconnected [ 192.366485][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.555'. [ 192.756537][ T8009] FAULT_INJECTION: forcing a failure. [ 192.756537][ T8009] name failslab, interval 1, probability 0, space 0, times 0 [ 192.756566][ T8009] CPU: 3 UID: 0 PID: 8009 Comm: syz.1.556 Not tainted syzkaller #0 PREEMPT(full) [ 192.756586][ T8009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.756596][ T8009] Call Trace: [ 192.756604][ T8009] [ 192.756611][ T8009] dump_stack_lvl+0x100/0x190 [ 192.756642][ T8009] should_fail_ex.cold+0x5/0xa [ 192.756666][ T8009] should_failslab+0xc2/0x120 [ 192.756695][ T8009] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 192.756721][ T8009] ? __alloc_skb+0x5b7/0x710 [ 192.756741][ T8009] ? __alloc_skb+0x140/0x710 [ 192.756764][ T8009] __alloc_skb+0x140/0x710 [ 192.756782][ T8009] ? __alloc_skb+0x5b7/0x710 [ 192.756801][ T8009] ? __pfx___alloc_skb+0x10/0x10 [ 192.756821][ T8009] ? is_bpf_text_address+0x8a/0x1a0 [ 192.756850][ T8009] ? bpf_ksym_find+0x124/0x1c0 [ 192.756892][ T8009] alloc_skb_with_frags+0xdd/0x760 [ 192.756914][ T8009] ? __lock_acquire+0x5c0/0x1f40 [ 192.756940][ T8009] ? unwind_get_return_address+0x59/0xa0 [ 192.756967][ T8009] sock_alloc_send_pskb+0x801/0x980 [ 192.756989][ T8009] ? do_raw_spin_lock+0x128/0x260 [ 192.757011][ T8009] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 192.757030][ T8009] ? __lock_acquire+0x5c0/0x1f40 [ 192.757059][ T8009] ? __lock_acquire+0x5c0/0x1f40 [ 192.757089][ T8009] __ip_append_data+0x23a5/0x44d0 [ 192.757119][ T8009] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 192.757141][ T8009] ? find_held_lock+0x2b/0x80 [ 192.757168][ T8009] ? ip_dst_mtu_maybe_forward.constprop.0+0x3e9/0x750 [ 192.757196][ T8009] ? __pfx___ip_append_data+0x10/0x10 [ 192.757230][ T8009] ip_make_skb+0x28b/0x310 [ 192.757256][ T8009] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 192.757309][ T8009] ? __pfx_ip_make_skb+0x10/0x10 [ 192.757349][ T8009] ? udp_sendmsg+0x171c/0x2710 [ 192.757370][ T8009] udp_sendmsg+0x171c/0x2710 [ 192.757401][ T8009] ? __pfx_udp_sendmsg+0x10/0x10 [ 192.757423][ T8009] ? __lock_acquire+0x5c0/0x1f40 [ 192.757481][ T8009] ? release_sock+0x21/0x280 [ 192.757504][ T8009] ? inet_autobind+0x145/0x1a0 [ 192.757529][ T8009] ? find_held_lock+0x2b/0x80 [ 192.757555][ T8009] ? lockdep_hardirqs_on+0x7d/0x110 [ 192.757580][ T8009] ? inet_autobind+0x145/0x1a0 [ 192.757602][ T8009] ? __local_bh_enable_ip+0xa5/0x120 [ 192.757631][ T8009] ? inet_autobind+0x14a/0x1a0 [ 192.757654][ T8009] ? __pfx_udp_sendmsg+0x10/0x10 [ 192.757676][ T8009] inet_sendmsg+0x105/0x140 [ 192.757704][ T8009] __sys_sendto+0x453/0x4e0 [ 192.757723][ T8009] ? __pfx_inet_sendmsg+0x10/0x10 [ 192.757749][ T8009] ? __pfx___sys_sendto+0x10/0x10 [ 192.757784][ T8009] ? fput+0x7c/0x100 [ 192.757811][ T8009] ? ksys_write+0x1ac/0x250 [ 192.757836][ T8009] __ia32_sys_sendto+0xdd/0x1b0 [ 192.757853][ T8009] ? __do_fast_syscall_32+0xb3/0x8b0 [ 192.757879][ T8009] ? lockdep_hardirqs_on+0x7d/0x110 [ 192.757906][ T8009] __do_fast_syscall_32+0x13a/0x8b0 [ 192.757933][ T8009] ? lockdep_hardirqs_on+0x7d/0x110 [ 192.757959][ T8009] do_fast_syscall_32+0x32/0x70 [ 192.757977][ T8009] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.758000][ T8009] RIP: 0023:0xf7fe6fec [ 192.758019][ T8009] Code: Unable to access opcode bytes at 0xf7fe6fc2. [ 192.758027][ T8009] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 192.758044][ T8009] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 192.758056][ T8009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080000900 [ 192.758067][ T8009] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 192.758078][ T8009] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 192.758088][ T8009] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.758112][ T8009] [ 192.924630][ T7972] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 192.984287][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 192.984300][ T43] audit: type=1326 audit(1791442597.889:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.0.558" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befec code=0x7ffc0000 [ 192.984682][ T43] audit: type=1326 audit(1791442597.889:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.0.558" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befec code=0x7ffc0000 [ 192.984996][ T43] audit: type=1326 audit(1791442597.889:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.0.558" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73befec code=0x7ffc0000 [ 192.985176][ T43] audit: type=1326 audit(1791442597.889:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.0.558" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befec code=0x7ffc0000 [ 192.985198][ T43] audit: type=1326 audit(1791442597.889:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.0.558" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befec code=0x7ffc0000 [ 192.985420][ T43] audit: type=1326 audit(1791442597.889:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.0.558" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf73befec code=0x7ffc0000 [ 192.985631][ T43] audit: type=1326 audit(1791442597.889:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.0.558" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befec code=0x7ffc0000 [ 192.985654][ T43] audit: type=1326 audit(1791442597.889:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.0.558" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befec code=0x7ffc0000 [ 192.985804][ T43] audit: type=1326 audit(1791442597.889:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.0.558" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf73befec code=0x7ffc0000 [ 192.985954][ T43] audit: type=1326 audit(1791442597.889:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8012 comm="syz.0.558" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73befec code=0x7ffc0000 [ 193.200565][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 193.319142][ T8020] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 193.319171][ T8020] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 193.322201][ T8020] vhci_hcd vhci_hcd.0: Device attached [ 193.583478][ T5885] usb 40-1: SetAddress Request (2) to port 0 [ 193.583518][ T5885] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 193.842763][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.842793][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.540809][ T8021] vhci_hcd: connection reset by peer [ 194.548774][ T5811] vhci_hcd vhci_hcd.1: stop threads [ 194.549522][ T5811] vhci_hcd vhci_hcd.1: release socket [ 194.550611][ T5811] vhci_hcd vhci_hcd.1: disconnect device [ 194.645692][ T5811] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.759061][ T5811] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.839068][ T5811] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.885235][ T5748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 194.888160][ T5748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 194.890142][ T5748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 194.898742][ T5748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 194.903566][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 194.917756][ T5811] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.997701][ T8047] netlink: 'syz.4.567': attribute type 21 has an invalid length. [ 194.997722][ T8047] netlink: 128 bytes leftover after parsing attributes in process `syz.4.567'. [ 194.997812][ T8047] netlink: 'syz.4.567': attribute type 4 has an invalid length. [ 194.997824][ T8047] netlink: 'syz.4.567': attribute type 3 has an invalid length. [ 194.997883][ T8047] netlink: 3 bytes leftover after parsing attributes in process `syz.4.567'. [ 195.098688][ T5811] bridge_slave_1: left allmulticast mode [ 195.098713][ T5811] bridge_slave_1: left promiscuous mode [ 195.098953][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.108856][ T5811] bridge_slave_0: left allmulticast mode [ 195.108879][ T5811] bridge_slave_0: left promiscuous mode [ 195.109044][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.393362][ T5811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.408154][ T5811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.414471][ T5811] bond0 (unregistering): Released all slaves [ 195.915219][ T5452] 8021q: adding VLAN 0 to HW filter on device eth6 [ 195.921794][ T8061] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.034746][ T8041] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.034888][ T8041] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.035036][ T8041] bridge_slave_0: entered allmulticast mode [ 196.037640][ T8041] bridge_slave_0: entered promiscuous mode [ 196.125158][ T8041] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.125294][ T8041] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.125429][ T8041] bridge_slave_1: entered allmulticast mode [ 196.193216][ T8041] bridge_slave_1: entered promiscuous mode [ 196.361157][ T8061] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.374254][ T5452] 8021q: adding VLAN 0 to HW filter on device eth7 [ 196.391491][ T5811] hsr_slave_0: left promiscuous mode [ 196.392489][ T5811] hsr_slave_1: left promiscuous mode [ 196.392940][ T5811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.392952][ T5811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.401726][ T5811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.401738][ T5811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.415700][ T5811] veth1_macvtap: left promiscuous mode [ 196.415733][ T5811] veth0_macvtap: left promiscuous mode [ 196.415792][ T5811] veth1_vlan: left promiscuous mode [ 196.415830][ T5811] veth0_vlan: left promiscuous mode [ 196.592167][ T5811] team0 (unregistering): Port device team_slave_1 removed [ 196.608337][ T5811] team0 (unregistering): Port device team_slave_0 removed [ 196.690765][ T8041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.694916][ T8041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.734865][ T8061] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.746392][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.572'. [ 196.760524][ T8041] team0: Port device team_slave_0 added [ 196.765950][ T8041] team0: Port device team_slave_1 added [ 196.816272][ T8061] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.863818][ T8041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.863834][ T8041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.863855][ T8041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.866568][ T8041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.866581][ T8041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.866604][ T8041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.907061][ T8041] hsr_slave_0: entered promiscuous mode [ 196.907836][ T8041] hsr_slave_1: entered promiscuous mode [ 196.942384][ T66] Bluetooth: hci0: command tx timeout [ 197.096147][ T5811] IPVS: stop unused estimator thread 0... [ 197.182403][ T5811] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.182431][ T5811] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.182448][ T5811] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.182465][ T5811] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.264045][ T8099] jffs2: notice: (8099) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 197.378238][ T8041] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 197.395333][ T8041] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 197.395826][ T8041] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 197.399021][ T8041] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 197.404046][ T8041] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 197.419512][ T8041] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 197.419949][ T8041] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 197.428583][ T8041] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 197.429833][ T5452] 8021q: adding VLAN 0 to HW filter on device eth8 [ 197.468692][ T8118] netlink: 20 bytes leftover after parsing attributes in process `syz.1.576'. [ 197.468707][ T8118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.576'. [ 197.471217][ T8118] FAULT_INJECTION: forcing a failure. [ 197.471217][ T8118] name failslab, interval 1, probability 0, space 0, times 0 [ 197.471235][ T8118] CPU: 2 UID: 0 PID: 8118 Comm: syz.1.576 Not tainted syzkaller #0 PREEMPT(full) [ 197.471249][ T8118] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.471256][ T8118] Call Trace: [ 197.471261][ T8118] [ 197.471266][ T8118] dump_stack_lvl+0x100/0x190 [ 197.471286][ T8118] should_fail_ex.cold+0x5/0xa [ 197.471301][ T8118] should_failslab+0xc2/0x120 [ 197.471321][ T8118] __kmalloc_noprof+0xfc/0x840 [ 197.471336][ T8118] ? __register_sysctl_table+0xbc8/0x1650 [ 197.471355][ T8118] ? __register_sysctl_table+0xbe4/0x1650 [ 197.471377][ T8118] __register_sysctl_table+0xbe4/0x1650 [ 197.471400][ T8118] ? __pfx___register_sysctl_table+0x10/0x10 [ 197.471418][ T8118] ? is_module_address+0x5f/0xf0 [ 197.471429][ T8118] ? is_module_address+0x5f/0xf0 [ 197.471443][ T8118] register_net_sysctl_sz+0x325/0x420 [ 197.471460][ T8118] __devinet_sysctl_register+0x1b9/0x360 [ 197.471476][ T8118] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 197.471490][ T8118] ? inetdev_init+0x245/0x570 [ 197.471504][ T8118] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 197.471520][ T8118] ? netlink_unicast+0x585/0x850 [ 197.471531][ T8118] ? netlink_sendmsg+0x8b0/0xda0 [ 197.471542][ T8118] ? ____sys_sendmsg+0xa4d/0xbe0 [ 197.471557][ T8118] ? ___sys_sendmsg+0x190/0x1e0 [ 197.471573][ T8118] ? __sys_sendmsg+0x160/0x210 [ 197.471584][ T8118] ? __do_fast_syscall_32+0x13a/0x8b0 [ 197.471601][ T8118] ? do_fast_syscall_32+0x32/0x70 [ 197.471613][ T8118] devinet_sysctl_register+0x17b/0x210 [ 197.471630][ T8118] inetdev_init+0x2b8/0x570 [ 197.471646][ T8118] inetdev_event+0x827/0x17f0 [ 197.471662][ T8118] ? ib_netdevice_event+0xfc/0x330 [ 197.471676][ T8118] ? __pfx_inetdev_event+0x10/0x10 [ 197.471693][ T8118] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 197.471712][ T8118] notifier_call_chain+0x99/0x3f0 [ 197.471729][ T8118] call_netdevice_notifiers_info+0xbe/0x110 [ 197.471746][ T8118] register_netdevice+0x1998/0x25a0 [ 197.471763][ T8118] ? __pfx_register_netdevice+0x10/0x10 [ 197.471781][ T8118] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 197.471793][ T8118] batadv_meshif_newlink+0x8f/0xc0 [ 197.471805][ T8118] rtnl_newlink+0x1697/0x2620 [ 197.471825][ T8118] ? __pfx_rtnl_newlink+0x10/0x10 [ 197.471840][ T8118] ? rcu_is_watching+0x13/0xc0 [ 197.471864][ T8118] ? find_held_lock+0x2b/0x80 [ 197.471880][ T8118] ? lock_acquire+0x1d1/0x380 [ 197.471897][ T8118] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 197.471911][ T8118] ? find_held_lock+0x2b/0x80 [ 197.471924][ T8118] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 197.471937][ T8118] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 197.471952][ T8118] ? __pfx_rtnl_newlink+0x10/0x10 [ 197.471967][ T8118] rtnetlink_rcv_msg+0x95e/0xe90 [ 197.471982][ T8118] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 197.472001][ T8118] ? ref_tracker_free+0x37e/0x6c0 [ 197.472017][ T8118] netlink_rcv_skb+0x159/0x420 [ 197.472028][ T8118] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 197.472043][ T8118] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 197.472060][ T8118] ? netlink_deliver_tap+0x1ae/0xcc0 [ 197.472080][ T8118] netlink_unicast+0x585/0x850 [ 197.472101][ T8118] ? __pfx_netlink_unicast+0x10/0x10 [ 197.472118][ T8118] netlink_sendmsg+0x8b0/0xda0 [ 197.472132][ T8118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.472145][ T8118] ? apparmor_socket_sendmsg+0x165/0x280 [ 197.472167][ T8118] ____sys_sendmsg+0xa4d/0xbe0 [ 197.472182][ T8118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.472195][ T8118] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.472219][ T8118] ___sys_sendmsg+0x190/0x1e0 [ 197.472237][ T8118] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.472255][ T8118] ? futex_wait+0x11e/0x370 [ 197.472291][ T8118] ? find_held_lock+0x2b/0x80 [ 197.472319][ T8118] __sys_sendmsg+0x160/0x210 [ 197.472333][ T8118] ? __pfx___sys_sendmsg+0x10/0x10 [ 197.472356][ T8118] __do_fast_syscall_32+0x13a/0x8b0 [ 197.472378][ T8118] do_fast_syscall_32+0x32/0x70 [ 197.472390][ T8118] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 197.472405][ T8118] RIP: 0023:0xf7fe6fec [ 197.472419][ T8118] Code: Unable to access opcode bytes at 0xf7fe6fc2. [ 197.472424][ T8118] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 197.472436][ T8118] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 197.472443][ T8118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 197.472450][ T8118] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 197.472457][ T8118] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 197.472464][ T8118] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 197.472479][ T8118] [ 197.477593][ T8118] sysctl could not get directory: /net/ipv4/conf/batadv1 -12 [ 197.669322][ T5452] 8021q: adding VLAN 0 to HW filter on device eth9 [ 197.698796][ T8127] ubi0: attaching mtd0 [ 197.706505][ T8127] ubi0: scanning is finished [ 197.706626][ T8127] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 197.731753][ T8041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.750701][ T8041] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.761719][ T235] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.761806][ T235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.767065][ T235] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.767147][ T235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.805183][ T8041] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.876698][ T8127] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 198.018456][ T8041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.073028][ T8149] FAULT_INJECTION: forcing a failure. [ 198.073028][ T8149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.073048][ T8149] CPU: 0 UID: 0 PID: 8149 Comm: syz.4.579 Not tainted syzkaller #0 PREEMPT(full) [ 198.073061][ T8149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 198.073067][ T8149] Call Trace: [ 198.073071][ T8149] [ 198.073076][ T8149] dump_stack_lvl+0x100/0x190 [ 198.073094][ T8149] should_fail_ex.cold+0x5/0xa [ 198.073109][ T8149] _copy_from_iter+0x1f4/0x1690 [ 198.073128][ T8149] ? __asan_memset+0x23/0x50 [ 198.073142][ T8149] ? __pfx__copy_from_iter+0x10/0x10 [ 198.073160][ T8149] ? __pfx___alloc_skb+0x10/0x10 [ 198.073182][ T8149] netlink_sendmsg+0x808/0xda0 [ 198.073196][ T8149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.073208][ T8149] ? apparmor_socket_sendmsg+0x165/0x280 [ 198.073229][ T8149] ____sys_sendmsg+0xa4d/0xbe0 [ 198.073243][ T8149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.073255][ T8149] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.073277][ T8149] ___sys_sendmsg+0x190/0x1e0 [ 198.073294][ T8149] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.073317][ T8149] ? find_held_lock+0x2b/0x80 [ 198.073339][ T8149] __sys_sendmsg+0x160/0x210 [ 198.073351][ T8149] ? __pfx___sys_sendmsg+0x10/0x10 [ 198.073367][ T8149] ? __pfx_ksys_write+0x10/0x10 [ 198.073385][ T8149] __do_fast_syscall_32+0x13a/0x8b0 [ 198.073402][ T8149] ? lockdep_hardirqs_on+0x7d/0x110 [ 198.073420][ T8149] do_fast_syscall_32+0x32/0x70 [ 198.073431][ T8149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 198.073466][ T8149] RIP: 0023:0xf740efec [ 198.073478][ T8149] Code: Unable to access opcode bytes at 0xf740efc2. [ 198.073483][ T8149] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 198.073495][ T8149] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000200 [ 198.073502][ T8149] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 198.073508][ T8149] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 198.073514][ T8149] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 198.073521][ T8149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 198.073534][ T8149] [ 198.316427][ T8041] veth0_vlan: entered promiscuous mode [ 198.327368][ T8041] veth1_vlan: entered promiscuous mode [ 198.351449][ T8041] veth0_macvtap: entered promiscuous mode [ 198.366370][ T8041] veth1_macvtap: entered promiscuous mode [ 198.479516][ T8041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.502768][ T8041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.612522][ T5811] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.612563][ T5811] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.612601][ T5811] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.612630][ T5811] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.622638][ T5885] usb 40-1: device descriptor read/8, error -110 [ 198.905454][ T8164] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.946605][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.946672][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.989301][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.989315][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.024146][ T66] Bluetooth: hci0: command tx timeout [ 199.030818][ T5885] usb usb40-port1: attempt power cycle [ 199.040496][ T8164] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.098725][ T8164] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.110261][ T8170] capability: warning: `syz.5.566' uses deprecated v2 capabilities in a way that may be insecure [ 199.220229][ T8164] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.375778][ T8181] netlink: 8 bytes leftover after parsing attributes in process `syz.5.585'. [ 199.604326][ T5885] usb usb40-port1: unable to enumerate USB device [ 199.940027][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.587'. [ 200.187651][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 200.187669][ T43] audit: type=1326 audit(1791442605.089:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.4.588" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 200.187796][ T43] audit: type=1326 audit(1791442605.089:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.4.588" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 200.188802][ T43] audit: type=1326 audit(1791442605.089:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.4.588" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf740efec code=0x7ffc0000 [ 200.188895][ T43] audit: type=1326 audit(1791442605.089:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.4.588" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 200.189007][ T43] audit: type=1326 audit(1791442605.089:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.4.588" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 200.189491][ T43] audit: type=1326 audit(1791442605.089:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.4.588" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf740efec code=0x7ffc0000 [ 200.189583][ T43] audit: type=1326 audit(1791442605.089:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.4.588" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 200.189697][ T43] audit: type=1326 audit(1791442605.089:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.4.588" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 200.189979][ T43] audit: type=1326 audit(1791442605.089:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.4.588" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf740efec code=0x7ffc0000 [ 200.190070][ T43] audit: type=1326 audit(1791442605.089:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.4.588" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740efec code=0x7ffc0000 [ 200.442416][ T5885] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 200.603011][ T5885] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 200.609053][ T5885] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 200.609077][ T5885] usb 9-1: Product: syz [ 200.609089][ T5885] usb 9-1: Manufacturer: syz [ 200.609102][ T5885] usb 9-1: SerialNumber: syz [ 200.611233][ T5885] usb 9-1: config 0 descriptor?? [ 200.827901][ T5885] usb 9-1: USB disconnect, device number 4 [ 200.947609][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.5.589'. [ 201.012385][ T5787] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.022062][ T5787] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.052511][ T5787] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.052548][ T5787] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.163424][ T5885] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 201.171775][ T8199] FAULT_INJECTION: forcing a failure. [ 201.171775][ T8199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.171802][ T8199] CPU: 3 UID: 0 PID: 8199 Comm: syz.1.592 Not tainted syzkaller #0 PREEMPT(full) [ 201.171822][ T8199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.171833][ T8199] Call Trace: [ 201.171839][ T8199] [ 201.171846][ T8199] dump_stack_lvl+0x100/0x190 [ 201.171875][ T8199] should_fail_ex.cold+0x5/0xa [ 201.171899][ T8199] strncpy_from_user+0x3b/0x2d0 [ 201.171921][ T8199] do_getname+0x78/0x390 [ 201.171943][ T8199] __ia32_sys_symlinkat+0x8a/0xe0 [ 201.171972][ T8199] __do_fast_syscall_32+0x13a/0x8b0 [ 201.172000][ T8199] ? lockdep_hardirqs_on+0x7d/0x110 [ 201.172029][ T8199] do_fast_syscall_32+0x32/0x70 [ 201.172047][ T8199] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.172069][ T8199] RIP: 0023:0xf7fe6fec [ 201.172090][ T8199] Code: Unable to access opcode bytes at 0xf7fe6fc2. [ 201.172098][ T8199] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 201.172116][ T8199] RAX: ffffffffffffffda RBX: 0000000080000400 RCX: 00000000ffffff9c [ 201.172127][ T8199] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 0000000000000000 [ 201.172138][ T8199] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 201.172148][ T8199] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 201.172159][ T8199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 201.172184][ T8199] [ 201.178079][ T8199] UDC core: g1: couldn't find an available UDC or it's busy [ 201.186054][ T8199] UDC core: g1: couldn't find an available UDC or it's busy [ 201.306775][ T8201] wg2 speed is unknown, defaulting to 1000 [ 201.306812][ T8201] wg2 speed is unknown, defaulting to 1000 [ 201.308964][ T8201] wg2 speed is unknown, defaulting to 1000 [ 201.309684][ T8201] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 201.309705][ T8201] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 201.309727][ T8201] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 201.311174][ T8201] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 201.317086][ T8201] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 201.324705][ T5885] usb 9-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 201.327670][ T5885] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.327696][ T5885] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 201.327709][ T5885] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 201.327728][ T5885] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.373227][ T8201] wg2 speed is unknown, defaulting to 1000 [ 201.381782][ T8201] wg2 speed is unknown, defaulting to 1000 [ 201.394031][ T8201] wg2 speed is unknown, defaulting to 1000 [ 201.396715][ T8201] wg2 speed is unknown, defaulting to 1000 [ 201.653856][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.594'. [ 201.982390][ T66] Bluetooth: hci0: command tx timeout [ 202.205298][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'. [ 202.486842][ T5885] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 202.487164][ T5885] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 202.529202][ T5885] cxacru 9-1:1.0: probe with driver cxacru failed with error -71 [ 202.537134][ T5885] usb 9-1: USB disconnect, device number 5 [ 202.632173][ T8223] FAULT_INJECTION: forcing a failure. [ 202.632173][ T8223] name failslab, interval 1, probability 0, space 0, times 0 [ 202.632192][ T8223] CPU: 2 UID: 0 PID: 8223 Comm: syz.0.602 Not tainted syzkaller #0 PREEMPT(full) [ 202.632205][ T8223] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 202.632212][ T8223] Call Trace: [ 202.632216][ T8223] [ 202.632220][ T8223] dump_stack_lvl+0x100/0x190 [ 202.632241][ T8223] should_fail_ex.cold+0x5/0xa [ 202.632256][ T8223] should_failslab+0xc2/0x120 [ 202.632274][ T8223] __kmalloc_cache_noprof+0x91/0x6d0 [ 202.632301][ T8223] ? bus_add_driver+0x92/0x5b0 [ 202.632321][ T8223] bus_add_driver+0x92/0x5b0 [ 202.632340][ T8223] driver_register+0x1e2/0x360 [ 202.632355][ T8223] usb_gadget_register_driver_owner+0x132/0x210 [ 202.632376][ T8223] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 202.632392][ T8223] configfs_write_iter+0x302/0x4e0 [ 202.632413][ T8223] vfs_write+0x6af/0x1050 [ 202.632427][ T8223] ? __pfx_configfs_write_iter+0x10/0x10 [ 202.632446][ T8223] ? __pfx_vfs_write+0x10/0x10 [ 202.632459][ T8223] ? find_held_lock+0x2b/0x80 [ 202.632483][ T8223] ksys_write+0x12a/0x250 [ 202.632497][ T8223] ? __pfx_ksys_write+0x10/0x10 [ 202.632515][ T8223] ? ksys_write+0x1ac/0x250 [ 202.632528][ T8223] ? __pfx_ksys_write+0x10/0x10 [ 202.632559][ T8223] __do_fast_syscall_32+0x13a/0x8b0 [ 202.632577][ T8223] ? lockdep_hardirqs_on+0x7d/0x110 [ 202.632596][ T8223] do_fast_syscall_32+0x32/0x70 [ 202.632606][ T8223] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.632621][ T8223] RIP: 0023:0xf73befec [ 202.632633][ T8223] Code: Unable to access opcode bytes at 0xf73befc2. [ 202.632638][ T8223] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 202.632649][ T8223] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000600 [ 202.632656][ T8223] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000000 [ 202.632663][ T8223] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 202.632669][ T8223] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 202.632676][ T8223] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 202.632691][ T8223] [ 202.702629][ T8223] UDC core: g1: driver registration failed: -12 [ 202.706071][ T8228] udc dummy_udc.0: failed to start g1: -19 [ 202.707550][ T8228] UDC core: g1: couldn't find an available UDC or it's busy [ 203.118076][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.606'. [ 203.302015][ T8256] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.729020][ T8256] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.968285][ T8256] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.133500][ T42] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 204.142088][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.610'. [ 204.146580][ T8262] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.343532][ T42] usb 9-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 204.346472][ T42] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.346937][ T42] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 204.347467][ T42] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 204.347603][ T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.719785][ T8262] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.879770][ T8264] netlink: 36 bytes leftover after parsing attributes in process `syz.4.609'. [ 204.994897][ T8273] macsec1: entered promiscuous mode [ 204.994916][ T8273] macsec1: entered allmulticast mode [ 205.009472][ T8256] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.020167][ T42] usb 9-1: USB disconnect, device number 6 [ 205.052380][ T8262] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.112547][ T8262] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.163386][ T5787] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.163428][ T5787] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.163461][ T5787] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.163491][ T5787] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.188610][ T8281] udc dummy_udc.0: failed to start g1: -19 [ 205.190592][ T8281] UDC core: g1: couldn't find an available UDC or it's busy [ 205.193765][ T8281] udc dummy_udc.0: failed to start g1: -19 [ 205.195130][ T8281] UDC core: g1: couldn't find an available UDC or it's busy [ 205.223011][ T8283] syzkaller0: entered promiscuous mode [ 205.223029][ T8283] syzkaller0: entered allmulticast mode [ 205.292390][ T5787] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.292417][ T5787] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.292435][ T5787] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.292452][ T5787] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.791298][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.617'. [ 207.690019][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.5.621'. [ 208.243091][ T8285] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 208.536625][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.624'. [ 208.912606][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.625'. [ 209.597736][ T43] kauditd_printk_skb: 104 callbacks suppressed [ 209.597754][ T43] audit: type=1326 audit(1791442614.499:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.5.629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 209.597946][ T43] audit: type=1326 audit(1791442614.499:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.5.629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 209.599322][ T43] audit: type=1326 audit(1791442614.499:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.5.629" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 209.599363][ T43] audit: type=1326 audit(1791442614.499:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.5.629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 209.599398][ T43] audit: type=1326 audit(1791442614.499:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.5.629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 209.600150][ T43] audit: type=1326 audit(1791442614.499:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.5.629" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 209.600182][ T43] audit: type=1326 audit(1791442614.499:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.5.629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 209.600209][ T43] audit: type=1326 audit(1791442614.499:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.5.629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 209.600591][ T43] audit: type=1326 audit(1791442614.499:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.5.629" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 209.600747][ T43] audit: type=1326 audit(1791442614.499:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.5.629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5fec code=0x7ffc0000 [ 209.852637][ T35] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 209.975172][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.631'. [ 210.018567][ T35] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 210.047942][ T35] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 210.048124][ T35] usb 10-1: Product: syz [ 210.048618][ T35] usb 10-1: Manufacturer: syz [ 210.048885][ T35] usb 10-1: SerialNumber: syz [ 210.087775][ T35] usb 10-1: config 0 descriptor?? [ 210.345611][ T7265] usb 10-1: USB disconnect, device number 2 [ 210.369868][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.692593][ T7265] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 210.821873][ T8398] block2mtd: error: cannot open device /d [ 210.857601][ T7265] usb 10-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 210.859280][ T7265] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.859321][ T7265] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 210.859344][ T7265] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 210.859414][ T7265] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.926000][ T8400] syzkaller0: entered promiscuous mode [ 210.926025][ T8400] syzkaller0: entered allmulticast mode [ 211.219716][ T7265] usb 10-1: USB disconnect, device number 3 [ 211.319001][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.644'. [ 211.793610][ T8432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.650'. [ 212.071078][ T8438] syzkaller0: entered promiscuous mode [ 212.071091][ T8438] syzkaller0: entered allmulticast mode [ 212.463518][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.653'. [ 213.458968][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.660'. [ 213.464141][ T66] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 214.304794][ T7424] cxacru 6-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 214.304822][ T7636] cxacru 5-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 214.304948][ T8406] cxacru 10-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 214.306428][ T8275] cxacru 9-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 214.328017][ T7418] cxacru 7-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 214.427030][ T8470] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.472656][ T8470] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.528841][ T8470] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.588797][ T8470] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.602797][ T42] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 214.603371][ T43] kauditd_printk_skb: 123 callbacks suppressed [ 214.603381][ T43] audit: type=1326 audit(1791442619.509:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.4.654" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740efec code=0x7ffc0000 [ 214.603745][ T43] audit: type=1326 audit(1791442619.509:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.4.654" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740efec code=0x7ffc0000 [ 214.603948][ T43] audit: type=1326 audit(1791442619.509:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.4.654" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740efec code=0x7ffc0000 [ 214.622676][ T5844] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 214.682756][ T43] audit: type=1326 audit(1791442619.589:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.4.654" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740efec code=0x7ffc0000 [ 214.702477][ T13] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.703131][ T13] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.703243][ T13] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.703743][ T13] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.774689][ T5844] usb 5-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 214.775104][ T43] audit: type=1326 audit(1791442619.679:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.4.654" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740efec code=0x7ffc0000 [ 214.775312][ T43] audit: type=1326 audit(1791442619.679:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.4.654" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740efec code=0x7ffc0000 [ 214.775377][ T42] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 214.775734][ T43] audit: type=1326 audit(1791442619.679:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.4.654" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740efec code=0x7ffc0000 [ 214.776054][ T43] audit: type=1326 audit(1791442619.679:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.4.654" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740efec code=0x7ffc0000 [ 214.776380][ T43] audit: type=1326 audit(1791442619.679:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.4.654" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740efec code=0x7ffc0000 [ 214.776758][ T43] audit: type=1326 audit(1791442619.679:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.4.654" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf740efec code=0x7ffc0000 [ 214.777193][ T5844] usb 5-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 214.777228][ T5844] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 214.777249][ T5844] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 214.777268][ T5844] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 214.777285][ T5844] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 214.777303][ T5844] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 214.777320][ T5844] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 214.779562][ T5844] usb 5-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 214.779581][ T5844] usb 5-1: Product: syz [ 214.779591][ T5844] usb 5-1: Manufacturer: syz [ 214.779600][ T5844] usb 5-1: SerialNumber: syz [ 214.780038][ T42] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 214.780051][ T42] usb 9-1: Product: syz [ 214.780059][ T42] usb 9-1: Manufacturer: syz [ 214.780066][ T42] usb 9-1: SerialNumber: syz [ 214.786864][ T42] usb 9-1: config 0 descriptor?? [ 214.804083][ T8450] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 214.804240][ T8450] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 214.804325][ T8450] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 214.827415][ T5844] keyspan 5-1:1.0: Keyspan 1 port adapter converter detected [ 214.827840][ T5844] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 214.917275][ T5844] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 82 [ 214.917383][ T5844] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 214.919493][ T5844] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 215.016566][ T5885] usb 9-1: USB disconnect, device number 7 [ 215.358520][ T8474] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 215.376296][ T8481] tmpfs: Using encoding : utf8-12.1.0 [ 215.387033][ T8481] netlink: 'syz.5.665': attribute type 29 has an invalid length. [ 215.429402][ T5836] wg2 speed is unknown, defaulting to 1000 [ 215.502360][ T5885] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 215.663542][ T5885] usb 9-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 215.665203][ T5885] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.665241][ T5885] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 215.665264][ T5885] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 215.665294][ T5885] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.025525][ T8492] cxacru 9-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 216.025549][ T8492] cxacru 9-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 216.037206][ T5885] usb 9-1: USB disconnect, device number 8 [ 216.111355][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.669'. [ 216.240544][ T42] usb 5-1: USB disconnect, device number 19 [ 216.264574][ T42] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 216.270752][ T42] keyspan 5-1:1.0: device disconnected [ 216.300697][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'. [ 216.762408][ T42] usb 5-1: new high-speed USB device number 20 using dummy_hcd qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x80000) [ 216.925545][ T42] usb 5-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 216.928079][ T42] usb 5-1: config 1 has an invalid descriptor of length 21, skipping remainder of the config [ 216.928103][ T42] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 216.928117][ T42] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 216.928130][ T42] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 216.928143][ T42] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 216.928155][ T42] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 216.928167][ T42] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 216.931507][ T42] usb 5-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 216.931526][ T42] usb 5-1: Product: syz [ 216.931534][ T42] usb 5-1: Manufacturer: syz [ 216.931542][ T42] usb 5-1: SerialNumber: syz [ 216.936559][ T8511] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 216.936612][ T8511] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 216.936710][ T8511] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 216.937728][ T42] keyspan 5-1:1.0: Keyspan 1 port adapter converter detected [ 216.937951][ T42] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 216.938637][ T42] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 82 [ 216.938682][ T42] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 216.943764][ T42] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 216.950750][ T1128] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 216.950762][ T1128] ata1: failed to read log page 10h (errno=-5) [ 216.950772][ T1128] ata1.00: exception Emask 0x1 SAct 0x40000000 SErr 0x0 action 0x0 [ 216.950783][ T1128] ata1.00: irq_stat 0x40000008 [ 216.950793][ T1128] ata1.00: failed command: WRITE FPDMA QUEUED [ 216.950799][ T1128] ata1.00: cmd 61/00:f0:36:ad:08/04:00:00:00:00/40 tag 30 ncq dma 524288 out [ 216.950799][ T1128] res 50/04:00:00:00:00/00:00:00:00:00/a0 Emask 0x1 (device error) [ 216.950829][ T1128] ata1.00: status: { DRDY } [ 216.950836][ T1128] ata1.00: error: { ABRT } [ 216.961321][ T1128] ata1.00: configured for UDMA/100 [ 216.961602][ T1128] ata1: EH complete [ 218.256771][ T8532] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.332126][ T8532] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.342566][ T42] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 218.425468][ T8532] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.492588][ T42] usb 10-1: Using ep0 maxpacket: 8 [ 218.497687][ T42] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 218.509030][ T42] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 218.509137][ T42] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 218.509203][ T42] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 218.509273][ T42] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 218.509363][ T42] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 218.509469][ T42] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.509552][ T42] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.515655][ T8532] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.591653][ T8535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.678'. [ 218.615001][ T42] usbtmc 10-1:16.0: probe with driver usbtmc failed with error -22 [ 219.112888][ T5787] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.194749][ T5787] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.200088][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.205357][ T5787] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.430827][ T38] IPVS: starting estimator thread 0... [ 219.469117][ T7265] usb 5-1: USB disconnect, device number 20 [ 219.511258][ T8545] binder: BC_ATTEMPT_ACQUIRE not supported [ 219.511268][ T8545] binder: 8544:8545 ioctl c0306201 80000000 returned -22 [ 219.522967][ T8546] IPVS: using max 30 ests per chain, 72000 per kthread [ 219.548811][ T7265] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 219.564619][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'. [ 219.564894][ T7265] keyspan 5-1:1.0: device disconnected [ 219.764545][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.682'. [ 220.423330][ T25] usb 10-1: USB disconnect, device number 4 [ 220.531089][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.686'. [ 220.535141][ T66] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 220.607677][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.684'. [ 221.496237][ T8571] wg2 speed is unknown, defaulting to 1000 [ 221.662236][ T8571] wg2 speed is unknown, defaulting to 1000 [ 222.025406][ T8585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'. [ 222.557198][ T8587] FAULT_INJECTION: forcing a failure. [ 222.557198][ T8587] name failslab, interval 1, probability 0, space 0, times 0 [ 222.557226][ T8587] CPU: 3 UID: 0 PID: 8587 Comm: syz.5.691 Not tainted syzkaller #0 PREEMPT(full) [ 222.557247][ ** replaying previous printk message ** [ 222.557247][ T8587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 222.557259][ T8587] Call Trace: [ 222.557266][ T8587] [ 222.557274][ T8587] dump_stack_lvl+0x100/0x190 [ 222.557304][ T8587] should_fail_ex.cold+0x5/0xa [ 222.557352][ T8587] should_failslab+0xc2/0x120 [ 222.557381][ T8587] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 222.557408][ T8587] ? kvasprintf_const+0x66/0x1a0 [ 222.557432][ T8587] kvasprintf+0xbc/0x150 [ 222.557449][ T8587] ? __pfx_kvasprintf+0x10/0x10 [ 222.557468][ T8587] ? acpi_dev_for_each_child+0x88/0xc0 [ 222.557491][ T8587] ? find_held_lock+0x2b/0x80 [ 222.557516][ T8587] kvasprintf_const+0x66/0x1a0 [ 222.557536][ T8587] kobject_set_name_vargs+0x5a/0x140 [ 222.557561][ T8587] dev_set_name+0xc7/0x100 [ 222.557586][ T8587] ? __pfx_dev_set_name+0x10/0x10 [ 222.557617][ T8587] ? set_primary_fwnode+0x11a/0x2a0 [ 222.557638][ T8587] ? pci_dev_assign_slot+0x1ea/0x270 [ 222.557681][ T8587] pci_setup_device+0x5f5/0x2500 [ 222.557702][ T8587] ? __pfx_pci_setup_device+0x10/0x10 [ 222.557719][ T8587] ? kasan_save_track+0x14/0x30 [ 222.557735][ T8587] ? __kasan_kmalloc+0xaa/0xb0 [ 222.557751][ T8587] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 222.557764][ T8587] ? lockdep_init_map_type+0x5c/0x250 [ 222.557782][ T8587] ? __raw_spin_lock_init+0x3a/0x110 [ 222.557797][ T8587] pci_scan_single_device+0x1ac/0x240 [ 222.557812][ T8587] ? __pfx_pci_scan_single_device+0x10/0x10 [ 222.557833][ T8587] pci_scan_slot+0x1c9/0x7c0 [ 222.557851][ T8587] ? __pfx_pci_scan_slot+0x10/0x10 [ 222.557867][ T8587] ? rcu_is_watching+0x13/0xc0 [ 222.557882][ T8587] pci_scan_child_bus_extend+0x6b/0x7b0 [ 222.557898][ T8587] ? pci_find_next_bus+0x60/0xb0 [ 222.557926][ T8587] pci_rescan_bus+0x18/0x40 [ 222.557952][ T8587] rescan_store+0xfb/0x130 [ 222.557978][ T8587] ? __pfx_rescan_store+0x10/0x10 [ 222.558005][ T8587] ? sysfs_file_kobj+0xe4/0x290 [ 222.558031][ T8587] ? __pfx_rescan_store+0x10/0x10 [ 222.558058][ T8587] bus_attr_store+0x74/0xb0 [ 222.558088][ T8587] ? __pfx_bus_attr_store+0x10/0x10 [ 222.558111][ T8587] sysfs_kf_write+0xf2/0x150 [ 222.558138][ T8587] kernfs_fop_write_iter+0x3e0/0x5f0 [ 222.558156][ T8587] ? __pfx_sysfs_kf_write+0x10/0x10 [ 222.558180][ T8587] vfs_write+0x6af/0x1050 [ 222.558205][ T8587] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 222.558228][ T8587] ? __pfx_vfs_write+0x10/0x10 [ 222.558248][ T8587] ? find_held_lock+0x2b/0x80 [ 222.558282][ T8587] ksys_write+0x12a/0x250 [ 222.558297][ T8587] ? __pfx_ksys_write+0x10/0x10 [ 222.558310][ T8587] ? ksys_write+0x1ac/0x250 [ 222.558323][ T8587] ? __pfx_ksys_write+0x10/0x10 [ 222.558340][ T8587] __do_fast_syscall_32+0x13a/0x8b0 [ 222.558358][ T8587] ? lockdep_hardirqs_on+0x7d/0x110 [ 222.558376][ T8587] do_fast_syscall_32+0x32/0x70 [ 222.558387][ T8587] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.558402][ T8587] RIP: 0023:0xf7fe5fec [ 222.558416][ T8587] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 222.558421][ T8587] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 222.558434][ T8587] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000600 [ 222.558445][ T8587] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 222.558455][ T8587] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 222.558466][ T8587] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 222.558476][ T8587] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.558503][ T8587] [ 222.561236][ T8587] pci (null): [8086:3420] type 01 class 0x060400 PCIe Root Port [ 222.569884][ T8587] pci (null): PCI bridge to [bus 01] [ 222.570079][ T8587] pci (null): bridge window [io 0x1000-0x1fff] [ 222.570188][ T8587] pci (null): bridge window [mem 0xfe800000-0xfe9fffff] [ 222.571724][ T8587] pci (null): bridge window [mem 0xfe000000-0xfe1fffff 64bit pref] [ 222.572829][ T8587] pci (null): enabling Extended Tags [ 222.577069][ T8587] ------------[ cut here ]------------ [ 222.577076][ T8587] ret < 0 [ 222.577079][ T8587] WARNING: drivers/pci/probe.c:2770 at pci_device_add+0x1343/0x1820, CPU#3: syz.5.691/8587 [ 222.704296][ T8587] Modules linked in: [ 222.705700][ T8587] CPU: 3 UID: 0 PID: 8587 Comm: syz.5.691 Not tainted syzkaller #0 PREEMPT(full) [ 222.708635][ T8587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 222.711766][ T8587] RIP: 0010:pci_device_add+0x1343/0x1820 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 222.713613][ T8587] Code: e5 04 83 e0 8f 09 e8 88 83 c8 00 00 00 e9 20 f4 ff ff e8 a0 f8 a2 fc 90 0f 0b 90 90 0f 0b 90 e9 06 f7 ff ff e8 8e f8 a2 fc 90 <0f> 0b 90 e9 7e fa ff ff e8 80 f8 a2 fc 90 0f 0b 90 e9 11 fa ff ff [ 222.719776][ T8587] RSP: 0000:ffffc90002d37910 EFLAGS: 00010293 [ 222.721686][ T8587] RAX: 0000000000000000 RBX: 00000000ffffffea RCX: 0000000000000000 [ 222.724181][ T8587] RDX: ffff888044450000 RSI: ffffffff8568ada2 RDI: ffff888044450000 [ 222.726639][ T8587] RBP: ffff88801d6e5000 R08: 0000000000000005 R09: 0000000000000000 [ 222.729341][ T8587] R10: 00000000ffffffea R11: 0000000000000001 R12: ffff888022a3e028 [ 222.731808][ T8587] R13: ffff888022a3e000 R14: 0000000000000001 R15: ffff888022abc000 [ 222.734362][ T8587] FS: 0000000000000000(0000) GS:ffff888095a4d000(0063) knlGS:00000000f5496b40 [ 222.737115][ T8587] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 222.739235][ T8587] CR2: 00000000f7fe6000 CR3: 0000000022060000 CR4: 0000000000352ef0 [ 222.741787][ T8587] Call Trace: [ 222.742997][ T8587] [ 222.743945][ T8587] ? __pfx_pci_device_add+0x10/0x10 [ 222.745593][ T8587] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 222.747511][ T8587] ? __raw_spin_lock_init+0x3a/0x110 [ 222.749338][ T8587] pci_scan_single_device+0x1d0/0x240 [ 222.751237][ T8587] ? __pfx_pci_scan_single_device+0x10/0x10 [ 222.753167][ T8587] pci_scan_slot+0x1c9/0x7c0 [ 222.755040][ T8587] ? __pfx_pci_scan_slot+0x10/0x10 [ 222.757085][ T8587] ? rcu_is_watching+0x13/0xc0 [ 222.758715][ T8587] pci_scan_child_bus_extend+0x6b/0x7b0 [ 222.760509][ T8587] ? pci_find_next_bus+0x60/0xb0 [ 222.762250][ T8587] pci_rescan_bus+0x18/0x40 [ 222.763813][ T8587] rescan_store+0xfb/0x130 [ 222.765181][ T8587] ? __pfx_rescan_store+0x10/0x10 [ 222.766733][ T8587] ? sysfs_file_kobj+0xe4/0x290 [ 222.768394][ T8587] ? __pfx_rescan_store+0x10/0x10 [ 222.770207][ T8587] bus_attr_store+0x74/0xb0 [ 222.771667][ T8587] ? __pfx_bus_attr_store+0x10/0x10 [ 222.773509][ T8587] sysfs_kf_write+0xf2/0x150 [ 222.774974][ T8587] kernfs_fop_write_iter+0x3e0/0x5f0 [ 222.776629][ T8587] ? __pfx_sysfs_kf_write+0x10/0x10 [ 222.778311][ T8587] vfs_write+0x6af/0x1050 [ 222.779732][ T8587] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 222.781567][ T8587] ? __pfx_vfs_write+0x10/0x10 [ 222.783127][ T8587] ? find_held_lock+0x2b/0x80 [ 222.784642][ T8587] ksys_write+0x12a/0x250 [ 222.786012][ T8587] ? __pfx_ksys_write+0x10/0x10 [ 222.787583][ T8587] ? ksys_write+0x1ac/0x250 [ 222.789149][ T8587] ? __pfx_ksys_write+0x10/0x10 [ 222.790709][ T8587] __do_fast_syscall_32+0x13a/0x8b0 [ 222.792452][ T8587] ? lockdep_hardirqs_on+0x7d/0x110 [ 222.794183][ T8587] do_fast_syscall_32+0x32/0x70 [ 222.795746][ T8587] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.797725][ T8587] RIP: 0023:0xf7fe5fec [ 222.799071][ T8587] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 222.801265][ T8587] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 222.803927][ T8587] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000600 [ 222.806421][ T8587] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 222.809082][ T8587] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 222.811578][ T8587] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 222.814144][ T8587] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.816620][ T8587] [ 222.817634][ T8587] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 222.820018][ T8587] CPU: 3 UID: 0 PID: 8587 Comm: syz.5.691 Not tainted syzkaller #0 PREEMPT(full) [ 222.822848][ T8587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 222.825963][ T8587] Call Trace: [ 222.827025][ T8587] [ 222.827971][ T8587] dump_stack_lvl+0x100/0x190 [ 222.829564][ T8587] vpanic+0x553/0x970 [ 222.830882][ T8587] ? __pfx_vpanic+0x10/0x10 [ 222.832313][ T8587] panic+0xd1/0xe0 [ 222.833524][ T8587] ? __pfx_panic+0x10/0x10 [ 222.834931][ T8587] check_panic_on_warn.cold+0x19/0x34 [ 222.836602][ T8587] ? pci_device_add+0x1343/0x1820 [ 222.838236][ T8587] __warn.cold+0x191/0x318 [ 222.839658][ T8587] __report_bug+0x30f/0x440 [ 222.841125][ T8587] ? pci_device_add+0x1343/0x1820 [ 222.842706][ T8587] ? __pfx___report_bug+0x10/0x10 [ 222.844284][ T8587] ? kasan_quarantine_put+0x104/0x240 [ 222.845999][ T8587] ? lockdep_hardirqs_on+0x7d/0x110 [ 222.847628][ T8587] ? device_add+0x320/0x1970 [ 222.849127][ T8587] ? pci_device_add+0x1343/0x1820 [ 222.850748][ T8587] report_bug+0xb3/0x220 [ 222.852085][ T8587] ? pci_device_add+0x1343/0x1820 [ 222.853679][ T8587] handle_bug+0x16a/0x2a0 [ 222.855037][ T8587] exc_invalid_op+0x17/0x50 [ 222.856464][ T8587] asm_exc_invalid_op+0x1a/0x20 [ 222.858006][ T8587] RIP: 0010:pci_device_add+0x1343/0x1820 [ 222.859831][ T8587] Code: e5 04 83 e0 8f 09 e8 88 83 c8 00 00 00 e9 20 f4 ff ff e8 a0 f8 a2 fc 90 0f 0b 90 90 0f 0b 90 e9 06 f7 ff ff e8 8e f8 a2 fc 90 <0f> 0b 90 e9 7e fa ff ff e8 80 f8 a2 fc 90 0f 0b 90 e9 11 fa ff ff [ 222.866203][ T8587] RSP: 0000:ffffc90002d37910 EFLAGS: 00010293 [ 222.868595][ T8587] RAX: 0000000000000000 RBX: 00000000ffffffea RCX: 0000000000000000 [ 222.871736][ T8587] RDX: ffff888044450000 RSI: ffffffff8568ada2 RDI: ffff888044450000 [ 222.874865][ T8587] RBP: ffff88801d6e5000 R08: 0000000000000005 R09: 0000000000000000 [ 222.877980][ T8587] R10: 00000000ffffffea R11: 0000000000000001 R12: ffff888022a3e028 [ 222.881107][ T8587] R13: ffff888022a3e000 R14: 0000000000000001 R15: ffff888022abc000 [ 222.884230][ T8587] ? pci_device_add+0x1342/0x1820 [ 222.886242][ T8587] ? __pfx_pci_device_add+0x10/0x10 [ 222.888301][ T8587] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 222.890494][ T8587] ? __raw_spin_lock_init+0x3a/0x110 [ 222.892582][ T8587] pci_scan_single_device+0x1d0/0x240 [ 222.894734][ T8587] ? __pfx_pci_scan_single_device+0x10/0x10 [ 222.897072][ T8587] pci_scan_slot+0x1c9/0x7c0 [ 222.898921][ T8587] ? __pfx_pci_scan_slot+0x10/0x10 [ 222.900947][ T8587] ? rcu_is_watching+0x13/0xc0 [ 222.902861][ T8587] pci_scan_child_bus_extend+0x6b/0x7b0 [ 222.905015][ T8587] ? pci_find_next_bus+0x60/0xb0 [ 222.906597][ T8587] pci_rescan_bus+0x18/0x40 [ 222.908031][ T8587] rescan_store+0xfb/0x130 [ 222.909450][ T8587] ? __pfx_rescan_store+0x10/0x10 [ 222.911024][ T8587] ? sysfs_file_kobj+0xe4/0x290 [ 222.912571][ T8587] ? __pfx_rescan_store+0x10/0x10 [ 222.914175][ T8587] bus_attr_store+0x74/0xb0 [ 222.915602][ T8587] ? __pfx_bus_attr_store+0x10/0x10 [ 222.917227][ T8587] sysfs_kf_write+0xf2/0x150 [ 222.918693][ T8587] kernfs_fop_write_iter+0x3e0/0x5f0 [ 222.920340][ T8587] ? __pfx_sysfs_kf_write+0x10/0x10 [ 222.921972][ T8587] vfs_write+0x6af/0x1050 [ 222.923343][ T8587] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 222.925163][ T8587] ? __pfx_vfs_write+0x10/0x10 [ 222.926674][ T8587] ? find_held_lock+0x2b/0x80 [ 222.928166][ T8587] ksys_write+0x12a/0x250 [ 222.929533][ T8587] ? __pfx_ksys_write+0x10/0x10 [ 222.931185][ T8587] ? ksys_write+0x1ac/0x250 [ 222.932727][ T8587] ? __pfx_ksys_write+0x10/0x10 [ 222.934309][ T8587] __do_fast_syscall_32+0x13a/0x8b0 [ 222.936036][ T8587] ? lockdep_hardirqs_on+0x7d/0x110 [ 222.937673][ T8587] do_fast_syscall_32+0x32/0x70 [ 222.939203][ T8587] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.941169][ T8587] RIP: 0023:0xf7fe5fec [ 222.942465][ T8587] Code: Unable to access opcode bytes at 0xf7fe5fc2. [ 222.944516][ T8587] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 222.947096][ T8587] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000600 [ 222.949567][ T8587] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 222.952004][ T8587] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 222.954467][ T8587] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 222.956898][ T8587] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.959364][ T8587] [ 222.960888][ T8587] Kernel Offset: disabled [ 222.962246][ T8587] Rebooting in 86400 seconds..