last executing test programs: 2m16.285340258s ago: executing program 1 (id=532): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="450000000600"/31], 0x45) 2m16.256797149s ago: executing program 1 (id=533): setns(0xc9, 0x0) r0 = socket(0x8, 0x3, 0x800) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f00000002c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) ppoll(&(0x7f0000000080)=[{r2, 0x1000}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0x3) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x42}, 0x94) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x34a, 0x100000000002, 0xfffffffffffffffd, 0x20000000008, 0x40, 0x8001, 0x2, 0x8, 0x5, 0x1a28eb1, 0x1, 0x1932be21, 0x100000000, 0x57c, 0x4], 0x4000, 0x40600}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x3, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m15.042417126s ago: executing program 1 (id=537): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={0x0, 0x0, 0x5f, 0x0, 0x1, 0x205b93f3}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0xb}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xe93be89, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='hybla', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f00000003c0)}, {0x0}], 0x2) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r4 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r4, &(0x7f0000002400)=""/4083, 0xff3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000023, 0x0, 0x7fffffffffffffff}]}) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r8, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40400d4) syz_open_dev$loop(&(0x7f0000000240), 0x2, 0x161281) 2m13.984419391s ago: executing program 2 (id=541): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="450000000600"/33], 0x45) 2m13.828276639s ago: executing program 2 (id=543): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_retopts={{0x10, 0x0, 0x7, {[@ra={0x94, 0x4, 0x500}]}}}], 0x10}, 0x0) (async) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_retopts={{0x10, 0x0, 0x7, {[@ra={0x94, 0x4, 0x500}]}}}], 0x10}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}}, 0x20000080) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}}, 0x20000080) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0) ioctl$CDROM_SET_OPTIONS(r3, 0x5320, 0x16) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) syz_open_dev$loop(0x0, 0x22, 0x0) (async) syz_open_dev$loop(0x0, 0x22, 0x0) open(0x0, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0xffff7fff, @empty, 0x9}}, 0x100, 0x8, 0x8001, 0xa8, 0x20, 0x4, 0x7}, &(0x7f00000000c0)=0x9c) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0xffff7fff, @empty, 0x9}}, 0x100, 0x8, 0x8001, 0xa8, 0x20, 0x4, 0x7}, &(0x7f00000000c0)=0x9c) 2m13.669000613s ago: executing program 1 (id=544): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x4, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bic', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x4, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bic', 0x3) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async) 2m13.385035943s ago: executing program 2 (id=545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x122}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x5]}, 0x8) close(r1) fcntl$setstatus(r1, 0x4, 0x42600) r2 = gettid() fcntl$setown(r1, 0x8, r2) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd, 0x20800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000080)={0x20000003}) 2m12.852366616s ago: executing program 2 (id=546): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000000)={r3}, &(0x7f0000000080)=0x8) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x40010) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)={0x38, r5, 0x1, 0x4070bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "d8dfd91b"}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4807}, 0x8080) (async) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x80000000, 0x7}]}}}}}}}, 0x0) (async) r12 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r12, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) syz_emit_ethernet(0x36, &(0x7f0000000400)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x7, 0x0, 0xe}}}}}}, 0x0) 2m12.681154146s ago: executing program 2 (id=548): syz_open_dev$video(&(0x7f0000000140), 0x18d, 0x100) r0 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x18f) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write(r1, &(0x7f0000000800)='0', 0x1) lsetxattr$system_posix_acl(&(0x7f0000000100)='./cgroup\x00', 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0x1, 0x4, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x7fffffffffffffff, 0x0, 0x10000, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='1\n', 0x2) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x18, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r7 = syz_clone(0x200100, &(0x7f0000000300)="e2368884c4137659ede4a3b3a9c38a9cf4431eb8d9c28da4fff2156f079f983867b9ad969b7e08339a84fc4843f3ab9c2f8a5be228a94361566da18b2cd6d1409917df74c67531bd7ec7fea969f31a198bb0fa717dfb6f64796a8a0a8ed9276367512d9c8ce3ae0d07d6cc06481f53a9b3d7514fe0e901c217834774cfdf5ab21b5259b623f0f10d0c98ef869b05eedb375c0a0019212fe316b6a38246948c34105c322d1229c6b1c9f8bf620355a3be4498961c5563b56e5e32f797feae2c452906bb8300", 0xc5, &(0x7f0000000400), &(0x7f0000000440), &(0x7f00000005c0)="d22cbcb991cf83103a4973b480ea76d0a237b95e34d69955d057db9c9e22fd51e5584f91916ab44d6e78b5810268d123fc20cb7390733106f7a9021bd5b9f219375eaaf06ad82ab1daa617dd169daf0b6e0d83e7c8124c7d09166d7defcb8ec0da4c91dfa33b9c669d091824e3efe073f4ed54f2416607341fe1468bd9eccc781c531f17a40c2c2b6836bee611d74d677741f69f1ea7cf458245a6082153a7659e43431d3915dfdb7fa9cd0c520e06855c5d3c55f9f5ea7781daea4e7b6e73a750749579cb4ae4b9686fa9b5ee70419ce19088a122dcab27e18ba9f094851161e5") ioctl$BLKTRACESETUP(r5, 0xc0401273, &(0x7f00000006c0)={'\x00', 0x7, 0x10000, 0xfa, 0x9, 0x5, r7}) r8 = syz_io_uring_setup(0x6d87, &(0x7f0000000540)={0x0, 0x69ee, 0x20, 0xc, 0x50, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r8, 0x521c, 0x1, 0x61, 0x0, 0x18) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) 2m12.583592705s ago: executing program 1 (id=549): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./proc/fs/nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x5d3, 0xfffffffffffffffd, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x14}}}}}}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') readv(r5, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/167, 0xa7}, {&(0x7f0000000200)=""/70, 0x46}, {&(0x7f0000000400)=""/98, 0x62}, {&(0x7f0000000480)=""/67, 0x43}, {&(0x7f0000000500)=""/136, 0x88}], 0x5) sendmmsg$inet6(r5, 0x0, 0x0, 0x8000) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000600)={{0x21, @private=0xa010100, 0x4e21, 0x2, 'wlc\x00', 0x22, 0x474d, 0x18}, {@private=0xa010100, 0x4e21, 0x3, 0xffff, 0x2, 0xa9}}, 0x44) write(r2, &(0x7f00000002c0)='tcp 2', 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, 0x0, {0xe, 0x5}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8011}, 0x40804) 2m11.704447252s ago: executing program 2 (id=551): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="450000000600"/33], 0x45) 2m11.324275766s ago: executing program 1 (id=553): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000300)={0x2, 0x86e, 0x0, &(0x7f0000000340)="0000040000cf3b2ba333ffff956e6e6551b5d99f85", 0x0, 0x15}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) prlimit64(0x0, 0x1, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) syz_open_dev$usbfs(0x0, 0x77, 0x101301) (async) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) io_uring_setup(0x7, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000000a0601010000000d00000000010000002c000880100007800c0014ab86a3904ab41f018008000140ac14000780e444064aa32337af40810ebfe24607800900120073797a7a32000000000800090000000000ae06409100"/104], 0x68}}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x100000, 0x0, 0x77, 0x8, 0x0, 0xc8, 0x2, 0x0, 0x4, 0x6}, {0x1000, 0x9000, 0xc, 0xeb, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}, {0xeeee0000, 0x1000, 0x10, 0x0, 0x7, 0xc4, 0x0, 0x1, 0x45, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x1, 0x0, 0x9, 0x81, 0x3, 0x0, 0x4}, {0x1000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x34, 0x7}, {0x1000, 0x0, 0x0, 0x78, 0x80, 0x0, 0x0, 0x1c, 0xa3, 0xff, 0x5, 0xf7}, {0xeeee8000, 0x80a0000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x36, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0x5000}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0x40000, [0x7ffffffe, 0x0, 0x1, 0x40]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m55.692625523s ago: executing program 32 (id=553): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000300)={0x2, 0x86e, 0x0, &(0x7f0000000340)="0000040000cf3b2ba333ffff956e6e6551b5d99f85", 0x0, 0x15}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) prlimit64(0x0, 0x1, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) syz_open_dev$usbfs(0x0, 0x77, 0x101301) (async) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) io_uring_setup(0x7, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000000a0601010000000d00000000010000002c000880100007800c0014ab86a3904ab41f018008000140ac14000780e444064aa32337af40810ebfe24607800900120073797a7a32000000000800090000000000ae06409100"/104], 0x68}}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x100000, 0x0, 0x77, 0x8, 0x0, 0xc8, 0x2, 0x0, 0x4, 0x6}, {0x1000, 0x9000, 0xc, 0xeb, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}, {0xeeee0000, 0x1000, 0x10, 0x0, 0x7, 0xc4, 0x0, 0x1, 0x45, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x1, 0x0, 0x9, 0x81, 0x3, 0x0, 0x4}, {0x1000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x34, 0x7}, {0x1000, 0x0, 0x0, 0x78, 0x80, 0x0, 0x0, 0x1c, 0xa3, 0xff, 0x5, 0xf7}, {0xeeee8000, 0x80a0000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x36, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0x5000}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0x40000, [0x7ffffffe, 0x0, 0x1, 0x40]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m55.43819581s ago: executing program 33 (id=551): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="450000000600"/33], 0x45) 1m29.857097965s ago: executing program 3 (id=728): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x8, &(0x7f0000000240)=0x0) connect$can_bcm(r1, &(0x7f0000000040), 0x10) io_submit(r2, 0x1, &(0x7f00000012c0)=[&(0x7f00000000c0)={0x400000, 0x47b8, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)="0500000093cb1faf16da39de706f646800580f02000000003f420f0000000000ff030f02000000003f420f00000000003bf81b05ff000000", 0x38, 0x0, 0x0, 0x2}]) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(r0, 0xffffffffffffffff, 0x0) r3 = msgget(0x3, 0x374) msgrcv(r3, 0x0, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='\t'], 0x24}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x44, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x0) msgsnd(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="03a4b6eafd3c184965793d9a94c46f"], 0x8, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x282, 0x102) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x32ee890e7d6e3754, 0x0) close_range(r6, r6, 0x0) 1m29.307442567s ago: executing program 3 (id=730): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0x9403, 0x0, 0x1e0, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1bc, 0x1e0, 0x0, {}, [@common=@srh1={{0x8c}, {0x6, 0x8a, 0x1, 0xb, 0x3, @mcast2, @local, @local, [0x0, 0xffffffff, 0x0, 0xffffffff], [0xffffff00, 0xff000000, 0xffffff00, 0xff], [0xffffffff, 0xff000000, 0x0, 0x7550ccb710be24b3], 0x4000, 0x6}}, @common=@srh1={{0x8c}, {0x16, 0xb9, 0x50, 0x40, 0x3, @remote, @private2={0xfc, 0x2, '\x00', 0xfe}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, [0xff, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xff000000, 0xff000000], [0x0, 0xffffffff, 0x0, 0xff000000], 0x407, 0x1060}}]}, @common=@unspec=@CLASSIFY={0x24}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x414) write(r0, &(0x7f0000000280)="336556bfafe78e47af8168d93b37cb796f2b049d35c388b10f5f64ab3549d7f4f0230cf700000000000000000000000000000075f0f8f88786997629dfc6fb4d6d84ea87e0d25e9dedf9f0fa789663f582de32f7e3dbd66add82613aa0736635c462f4889f4d0557addfaa9b9520fbc294aed81597c26b8d5ff51d", 0xd6) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000040)={0x400, 0x6, 0x9, 0x2, 0x6, "c5fc989c9480ef1f0282fe15b73d2ee4ca5261", 0x8e0a, 0x21674875}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r4 = openat$autofs(0xffffff9c, &(0x7f0000000180), 0x315000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {r3}}, './proc\x00'}) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000840)={0x1, 0x1, 0x1f, 0x20, 0xf2, &(0x7f0000000440)}) socketpair(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) 1m28.767373256s ago: executing program 3 (id=731): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a010400000000000000000a0000000900010073797a300008000044000000030a010100000000000000000a0000000900010073797a300000000008000b4000000001140004800800014000000003080002400000000008000540ff"], 0x1c4}}, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002600)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0xeeee8000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000080)=0x2) 1m28.566261729s ago: executing program 3 (id=732): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) flock(r0, 0x8) 1m28.543440601s ago: executing program 3 (id=733): modify_ldt$write2(0x11, &(0x7f0000000480)={0x5, 0x20000800, 0x2000, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_emit_ethernet(0x6e, &(0x7f00000024c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6008000800382b00fc020000000000000000000000000000fe8000000000000000000000000000aa67000000000000002100000300309078210100018fbab2e630c3e6a031fd2ad926544bd968f1028b8c7271bda9f785aa6887dd17aea49bf2"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x0) write(r0, &(0x7f0000000960)='.', 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x8000000, @local}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340), 0x3) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x304}, "b673841043bea2fd", "ce76d95489837cc046030957b5fbd248", "9a211f81", "d722ab1506ff3796"}, 0x28) shutdown(0xffffffffffffffff, 0x1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="5fdb2e8db0daea7f6166189c448d823e618efe7424894eb0dc9207a7f7675ce092a8134e49a0ee80ad84fa3e7b982cd44488e38723e5626da93d0e32c30837d2772ee3b2388e9d648e68fc0ce023ebd8cdd2ec2fc235f12dad6fda33341c2edfbbd5bc330abd3ee21eb3a61499bccc9cf30cb50cd0f27199f8b46a7e1729150cfe1c866e201ad417e12dfd1ff86b451f525af0d372769f0c8e460e5042d1968be0f00ea6e733322465cf24fd634bc9804cfae78b16e33bb22658dfa502d308cfaeba6cf339438d2fa9d4ef498b2108a2efd7dfc4a20f6a41af3b734fda3dff818426022c9f8471eb39d2b6bd750629396c9b3bd6b798963a", @ANYRES16=r1, @ANYBLOB="080025bd7000fcdbdf2509000000050005008f000160433ce8c69b85e35fa1e78ae7476601563a405a3bf1256c2c8d044fe925e3f36a3a7030327b0964623160fec068d0313811ee77f849d9b250b83c276a044434dc6bf58e56117349a89464c87b7c7e041cad29013767ad01087ba0d5"], 0x1c}, 0x1, 0x0, 0x0, 0x40408c0}, 0x20000000) r2 = syz_clone(0x48020100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000380)={0xa, 0x3, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r3, 0x11a, 0x5, 0x0, &(0x7f0000000040)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000180)={0x0, 0xf, 0xc, 0x1000, 0x4, "5a1c966bcd4b7448"}) write$UHID_INPUT(r4, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000300)=@ccm_128={{0x303}, "fa840e2fa1d09051", "efbf2ffdc02ad333eff00eeeae2c9bfc", "cc04abb3", "0000000100"}, 0x28) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000580)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r1, @ANYRESOCT=r4, @ANYRES8=r3, @ANYRES16=r5, @ANYBLOB="48c762552b3a7b1eae91da188988a30f42f514aacf3b0f6061376e63df67e4a8552ca141049a2803ff0bc8298f1c41cd1ff97f9349bfdc3de0c4640050b38326ee35d98af54a4947fe9144e86720c1a40c5b1b25a371caf3d2ad062afbdbaecae14b6229d0d7759da99e9d48a4a4e4166e4e547bcc8d7de0", @ANYBLOB="77266796b17b2648c9df50", @ANYRES64=r4, @ANYRESOCT=r5, @ANYRES32=r2], 0x1c}], 0x1, 0x0, 0x0, 0x20040804}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x3, 0x20000000, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000000040)=""/2, 0x2) 1m28.302750961s ago: executing program 3 (id=735): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04023a02000000cd880000000068df34bc0750350404cfe9450ccb2de99ad912cac04a8a0990e602df670c901e7c928cf634b7f38b642d322fc003a6b4c63d8354147bf947f5beb8382a9189ede07311a4acee8001409eb5525a071041ce6e6d27ef356eb35901449781000fd964653961c8e605e37a8801d18c5385a9d35b26a587256f0b251ede001aed2bcf618d448e0e7d7993b9a0d6bd6c51bcbed924e473"], 0xd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0xc4}, 0x4000958) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000161, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25", 0x6}], 0x1}}], 0x1, 0x20008000) shutdown(r2, 0x1) recvfrom$inet(r2, &(0x7f0000000140)=""/5, 0x5, 0x101c0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f00000000c0)=""/4, 0x1000}, 0x1c) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000001100)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) bind$xdp(r4, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f00000001c0)={0x7f, 0x0, 0x0, 0xbf1, 0x0, 0xffff7ffffffffffa, 0x8}, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0x2004}) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000600)={'comedi_parport\x00', [0x78, 0xfffffffe, 0x0, 0xc, 0x8, 0x6, 0x100002, 0x3e1, 0x5, 0x100, 0x4, 0x1, 0x1, 0x4020003, 0x0, 0x101, 0x83, 0x80000000, 0x3, 0x1b18, 0x16, 0x4, 0x0, 0xffffffff, 0x91, 0x4, 0x3b, 0xc, 0x10000006, 0x664, 0xfffffff8]}) 1m13.077270794s ago: executing program 34 (id=735): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04023a02000000cd880000000068df34bc0750350404cfe9450ccb2de99ad912cac04a8a0990e602df670c901e7c928cf634b7f38b642d322fc003a6b4c63d8354147bf947f5beb8382a9189ede07311a4acee8001409eb5525a071041ce6e6d27ef356eb35901449781000fd964653961c8e605e37a8801d18c5385a9d35b26a587256f0b251ede001aed2bcf618d448e0e7d7993b9a0d6bd6c51bcbed924e473"], 0xd) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0xc4}, 0x4000958) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000161, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25", 0x6}], 0x1}}], 0x1, 0x20008000) shutdown(r2, 0x1) recvfrom$inet(r2, &(0x7f0000000140)=""/5, 0x5, 0x101c0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f00000000c0)=""/4, 0x1000}, 0x1c) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000001100)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) bind$xdp(r4, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f00000001c0)={0x7f, 0x0, 0x0, 0xbf1, 0x0, 0xffff7ffffffffffa, 0x8}, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0x2004}) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000600)={'comedi_parport\x00', [0x78, 0xfffffffe, 0x0, 0xc, 0x8, 0x6, 0x100002, 0x3e1, 0x5, 0x100, 0x4, 0x1, 0x1, 0x4020003, 0x0, 0x101, 0x83, 0x80000000, 0x3, 0x1b18, 0x16, 0x4, 0x0, 0xffffffff, 0x91, 0x4, 0x3b, 0xc, 0x10000006, 0x664, 0xfffffff8]}) 3.639995494s ago: executing program 4 (id=1310): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000020c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x2, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0804000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x1, 0xfffffffd, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000001b00)={'syz1\x00', {0x401, 0x9, 0xf02, 0x5}, 0x4f, [0xff, 0x1, 0x7, 0x9, 0x7fff, 0xffffff80, 0x66f, 0x4, 0x6, 0xf, 0x1, 0x3, 0xa, 0x8, 0x0, 0x1, 0xc0, 0xd6, 0x67fffe, 0x5, 0x3, 0xfffff800, 0x10, 0x8, 0xffff, 0x5, 0x3, 0xf, 0x2, 0x3, 0x5, 0x3, 0x80, 0x4, 0xff, 0x0, 0x81, 0x0, 0x21, 0x7, 0x40, 0x9, 0x81, 0x5, 0x4, 0xffffff81, 0xffffffff, 0x554, 0x9, 0x6, 0xffffffff, 0x2, 0x6790, 0x0, 0xc63, 0xb92, 0x9, 0x6, 0x800000, 0x0, 0xffffffff, 0xfff, 0x2, 0x9], [0xffffff7b, 0x0, 0x3f, 0xc8, 0x9, 0x10, 0x3, 0xff, 0x9, 0x2, 0xffffff4d, 0x4, 0x16e0, 0x2, 0x9517, 0x2, 0x100, 0x800, 0x3, 0x5, 0x29, 0x4, 0x7, 0xb21, 0x8, 0x1, 0xaaa, 0x6, 0xfff, 0xb, 0x8001, 0x3cbd, 0x5, 0x4, 0x7, 0x1, 0x5, 0x0, 0xa, 0x1d, 0x7, 0x1, 0x10001, 0x5, 0x3, 0x7, 0x6, 0x4, 0x7ff, 0x0, 0x0, 0x1, 0x81, 0x6, 0x35, 0x10000, 0x0, 0x6, 0x9, 0x1, 0x0, 0x2, 0x7fffffff, 0x3], [0x5, 0x20000, 0x6, 0xfffffffe, 0x6, 0x6, 0x9, 0x80, 0x0, 0xfffffffd, 0x6, 0x2, 0x8, 0x8, 0x5, 0x40, 0xf329, 0x9, 0xe, 0x8, 0x7, 0xfff, 0x1000, 0x4, 0x1, 0x6, 0x1, 0xfffffffd, 0xfffff001, 0x9, 0x6, 0xfffffb93, 0x10000, 0x7, 0x80000002, 0x1, 0x5, 0xd, 0x200000, 0x101, 0x75095896, 0x9d, 0x7, 0x2, 0x9, 0x7, 0xfffffffe, 0x0, 0x3, 0x6, 0x0, 0x41a5, 0xe7, 0x12, 0x9a, 0x8e, 0xfffff7f1, 0x800, 0x4, 0x1f4e, 0xecb, 0x40, 0x1000, 0xaaf], [0x4, 0x7, 0x6, 0x4ee3ae5c, 0x7f, 0x0, 0xf2c, 0x6, 0x9, 0x0, 0x9, 0x7, 0x2, 0x7f00000, 0xffff, 0x2, 0x3, 0xeb, 0x4, 0xfffffff7, 0x3, 0xfffffff8, 0x5, 0x9, 0x0, 0xd, 0x3, 0x5, 0x7, 0x1, 0x3, 0xe2, 0x101, 0xf, 0xa, 0x1, 0x3d9, 0xef9, 0x9, 0x9, 0xfffffffe, 0x88a1, 0x9f, 0xb, 0x7, 0x800, 0x1, 0xff, 0x80000000, 0x1, 0x81, 0x9, 0xffffffff, 0xc8000000, 0x10000, 0x6, 0x4, 0x4, 0x1, 0x400, 0x7, 0x23e1, 0x3, 0x8]}, 0x45c) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) (async) write$uinput_user_dev(r0, &(0x7f00000020c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x2, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0804000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x1, 0xfffffffd, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) (async) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) write$uinput_user_dev(r0, &(0x7f0000001b00)={'syz1\x00', {0x401, 0x9, 0xf02, 0x5}, 0x4f, [0xff, 0x1, 0x7, 0x9, 0x7fff, 0xffffff80, 0x66f, 0x4, 0x6, 0xf, 0x1, 0x3, 0xa, 0x8, 0x0, 0x1, 0xc0, 0xd6, 0x67fffe, 0x5, 0x3, 0xfffff800, 0x10, 0x8, 0xffff, 0x5, 0x3, 0xf, 0x2, 0x3, 0x5, 0x3, 0x80, 0x4, 0xff, 0x0, 0x81, 0x0, 0x21, 0x7, 0x40, 0x9, 0x81, 0x5, 0x4, 0xffffff81, 0xffffffff, 0x554, 0x9, 0x6, 0xffffffff, 0x2, 0x6790, 0x0, 0xc63, 0xb92, 0x9, 0x6, 0x800000, 0x0, 0xffffffff, 0xfff, 0x2, 0x9], [0xffffff7b, 0x0, 0x3f, 0xc8, 0x9, 0x10, 0x3, 0xff, 0x9, 0x2, 0xffffff4d, 0x4, 0x16e0, 0x2, 0x9517, 0x2, 0x100, 0x800, 0x3, 0x5, 0x29, 0x4, 0x7, 0xb21, 0x8, 0x1, 0xaaa, 0x6, 0xfff, 0xb, 0x8001, 0x3cbd, 0x5, 0x4, 0x7, 0x1, 0x5, 0x0, 0xa, 0x1d, 0x7, 0x1, 0x10001, 0x5, 0x3, 0x7, 0x6, 0x4, 0x7ff, 0x0, 0x0, 0x1, 0x81, 0x6, 0x35, 0x10000, 0x0, 0x6, 0x9, 0x1, 0x0, 0x2, 0x7fffffff, 0x3], [0x5, 0x20000, 0x6, 0xfffffffe, 0x6, 0x6, 0x9, 0x80, 0x0, 0xfffffffd, 0x6, 0x2, 0x8, 0x8, 0x5, 0x40, 0xf329, 0x9, 0xe, 0x8, 0x7, 0xfff, 0x1000, 0x4, 0x1, 0x6, 0x1, 0xfffffffd, 0xfffff001, 0x9, 0x6, 0xfffffb93, 0x10000, 0x7, 0x80000002, 0x1, 0x5, 0xd, 0x200000, 0x101, 0x75095896, 0x9d, 0x7, 0x2, 0x9, 0x7, 0xfffffffe, 0x0, 0x3, 0x6, 0x0, 0x41a5, 0xe7, 0x12, 0x9a, 0x8e, 0xfffff7f1, 0x800, 0x4, 0x1f4e, 0xecb, 0x40, 0x1000, 0xaaf], [0x4, 0x7, 0x6, 0x4ee3ae5c, 0x7f, 0x0, 0xf2c, 0x6, 0x9, 0x0, 0x9, 0x7, 0x2, 0x7f00000, 0xffff, 0x2, 0x3, 0xeb, 0x4, 0xfffffff7, 0x3, 0xfffffff8, 0x5, 0x9, 0x0, 0xd, 0x3, 0x5, 0x7, 0x1, 0x3, 0xe2, 0x101, 0xf, 0xa, 0x1, 0x3d9, 0xef9, 0x9, 0x9, 0xfffffffe, 0x88a1, 0x9f, 0xb, 0x7, 0x800, 0x1, 0xff, 0x80000000, 0x1, 0x81, 0x9, 0xffffffff, 0xc8000000, 0x10000, 0x6, 0x4, 0x4, 0x1, 0x400, 0x7, 0x23e1, 0x3, 0x8]}, 0x45c) (async) 3.500300479s ago: executing program 4 (id=1312): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r5 = openat$vicodec1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r5, 0xc0245628, &(0x7f0000000100)={0x0, 0x4, 0x8, '\x00', &(0x7f0000000080)=0x3}) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x8081}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0xfffffffffffffd5e) ioctl$XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f0000000000)={r5, 0x3ff}) 3.401050726s ago: executing program 4 (id=1313): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) (async) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f00000001c0), 0x4) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) (async) sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000004165be"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x20000003}) (async) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000001580)={0x8}) close_range(r5, r2, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a310000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) syz_emit_ethernet(0x60, &(0x7f00000018c0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x2a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @mcast1, [{0x1, 0x2, "e7ba164fd9e69c482fd90cc7801b26ee"}]}}}}}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x58, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @loopback, 0x3}}}}]}]}, 0x58}}, 0xc1004) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="632b21b3", @ANYRES16=r8, @ANYBLOB="0100000000000000000002000000140001800d0001007564703a73797a3000000000"], 0x28}}, 0x0) 3.17966527s ago: executing program 4 (id=1315): mknod(&(0x7f0000000280)='./file0\x00', 0xc000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) setns(0xc9, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000004900070425bd7000ffdbdf250a008000", @ANYRES32=0x0, @ANYBLOB="0700000014000100fe80000000000000000000000000004107000200"], 0x38}, 0x1, 0x0, 0x0, 0x404c040}, 0x8000002) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$BSG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)=0x1000) close_range(r3, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x8e000) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, &(0x7f0000000240)="0005001ac402", 0x6, r4) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f00000003c0), 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x80040, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000040)={0x18, 0x0, {0x5, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r7, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000023c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000084000000840000000b000000030000000000000905000000090000000000100700000000000000000200000d00000000090000000000000000000000040000000e0000000000001104000000070000000b0000000000000c0500000003000000000000110400000003000000000000000000000300000000030000000200000009000000100000000000000700000000002e30612e2e30612eb400"], &(0x7f0000002300)=""/185, 0xa7, 0xb9, 0x1, 0x6, 0x10000, @value=r0}, 0x28) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x80, 0x4) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r6, 0xc008aec1, &(0x7f0000000380)={0xa00}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x9}}, 0x20) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) 2.916876621s ago: executing program 4 (id=1317): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000100)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000006000079b005"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) r3 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, &(0x7f0000000040)) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000340)={&(0x7f0000000380)=[{0x1e, 0x5011, 0x0, 0x0}], 0x1}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1415, 0x103, 0x70bd2a, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}}, 0x4000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r7, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0xfffffffffffffff9, 0x0, 0x100, 0x0, 0x200400}}]}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x81}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='1\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) 1.47027403s ago: executing program 0 (id=1323): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) setns(0xc9, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async, rerun: 64) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (rerun: 64) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x6c, r4, 0x2, 0x0, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040084}, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xa, &(0x7f00000010c0)=@raw=[@generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4, 0x0, 0x0, 0x81}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r5, 0x0, 0xe, 0x0, &(0x7f0000002280)="0011223344550011223344560800", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x40}]}, 0x20}}, 0x20000800) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x11e, 0x1b, 0x0, &(0x7f0000000000)=0xfffffffffffffe8c) (async) write(r0, &(0x7f0000000000)="0600000000000000010000000000000000000000000000006c733100"/104, 0x68) 1.350959913s ago: executing program 0 (id=1324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRESHEX, @ANYRESOCT=r4], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r6}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r6, 0x0, 0x100000000000000}, 0x38) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r8, &(0x7f0000000100)={0x14}, 0x14) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000a0500010b25d7bb3a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000012000/0x3000)=nil], 0x0, 0x0, 0x6) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r9, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r10}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback, 0xffffffffffffffff, 0x22, 0x38, 0x0, @void, @void, @void, @value=r10}, 0x20) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000011f000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\x00') 1.130976583s ago: executing program 5 (id=1325): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x1, 'veth0_to_batadv\x00', {}, 0xe}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8004}, 0xffc4) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x804, 0x0, 0x0) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 1.130766745s ago: executing program 5 (id=1326): mount$bpf(0x0, &(0x7f0000016540)='.\x00', &(0x7f0000016580), 0x2000411, &(0x7f0000018740)={[{@mode={'mode', 0x3d, 0xffffffffffffffff}}]}) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x140e, 0x8, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 1.069876664s ago: executing program 5 (id=1327): r0 = syz_open_dev$video4linux(&(0x7f0000000480), 0x7fffffff, 0x2a600) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000040)={0x0, 0x0, {0xc3ecff0, 0x2, 0x0, 0x9}}) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x8000037, 0x2, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000180)={0x2, 0x4, 0x10001, 0x4005, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$kcm(0x10, 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xb9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d118db0049d90491c3248040000dbb8", 0x27}, {&(0x7f0000000200)="b63f4c5d6875b765c3810f2211704a357d14e8", 0x13}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='ntfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000500)=' 294967 95 2\\000 0-00 0\n', 0x18) r7 = eventfd2(0x74a6, 0x80001) writev(r7, &(0x7f0000001780)=[{&(0x7f0000000280)="00ffffffffffffff", 0x8}], 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x8210, 0x2, 0x0, 0x42}, &(0x7f00000000c0), &(0x7f0000011000), &(0x7f0000000000)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) map_shadow_stack(&(0x7f00000f3000/0x2000)=nil, 0x2000, 0x0) memfd_create(&(0x7f0000000240)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x00\xa7\x9d\x80\x14b\xfak\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\xbf\xc8\x9f]}7\x9d\xacme2D\xad\x1a\x1c\x11K4\xaf5X\xb3l-\xba\xfc\x04\xed\xf7\xa1\xf0\xc2r\xa5\x1b-(y\x15\xb3\xfb\xcd[\x01\x1a,\x8c\x1e\xa8U\xcd0\xb1\x0f\xb6io\x1f_\xa2\x9f\x00\xcejk\x9d\xcd\x88\xc0\xa7c\xeb\x1aj\xe1l\x95\xe5nm\xfd\xde\xf1\x02\xad\xbde\xf2\xbe#\xf8\x1c\xd5(\xca)Z', 0x3) 660.726667ms ago: executing program 4 (id=1328): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000280)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000340)="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", 0x110, r0) 461.040695ms ago: executing program 0 (id=1330): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'lo\x00', 0x3}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x0, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008080) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0x20, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xfff3, 0xffff}, {0xf, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @private=0xa010102}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$sock(r3, &(0x7f0000002640)={0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001000010429bd700000000000e0000000", @ANYRES32=0x0, @ANYBLOB="00010000316f0600300012800b00010067656e657665000020000280080011"], 0x64}}, 0x20000000) 351.034749ms ago: executing program 6 (id=1332): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000003c0)={0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21ac6, 0x71a07}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000081}, 0x20040040) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x0, 0x180) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r8 = syz_open_pts(r3, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000080)=0x6) ioctl$TCFLSH(r8, 0x540b, 0x2) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r9, 0x800, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 349.361136ms ago: executing program 0 (id=1333): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7bee, 0x4, 0x0, 0x14200, 0x0, 0x2}, 0x30, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f0000000180)=0x8, 0x4) landlock_restrict_self(r0, 0xe) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 279.174676ms ago: executing program 0 (id=1334): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = open$dir(&(0x7f0000000440)='./file0\x00', 0x42800, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000f40)=""/4096, 0x1000}], 0x1) connect$inet6(r0, &(0x7f0000000700)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}, 0x1c) r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x10001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000840)={0x2, @pix={0x0, 0x4000, 0x4f565559, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x1}}) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x80000003, 0x0, 0xffffffff, 0x1, 0x5, 0xe, 0xc, 0x10031e}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000001"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = fsmount(r3, 0x1, 0xe) fchdir(r7) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r6}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_VDPA_GET_VRING_NUM(r7, 0x8002af76, &(0x7f0000000140)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x3f, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) 278.495738ms ago: executing program 6 (id=1335): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x3}, 0x8}, 0x94) mkdir(&(0x7f0000000000)='./my_sysfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_sysfs\x00', &(0x7f0000000300)='sysfs\x00', 0x3800040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_sysfs/bus/pci/devices/0000:00:03.0/resource0\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000240)=""/1, 0x1, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 218.966334ms ago: executing program 6 (id=1336): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat2$dir(0xffffff9c, &(0x7f0000000180)='./proc/sys/net/sctp/udp_port\x00', &(0x7f00000001c0)={0xd0000, 0x11, 0x2}, 0x18) r1 = openat(r0, &(0x7f0000000100)='./proc/sys/net/sctp/udp_port\x00', 0x101, 0x0) write(r1, &(0x7f0000000140)='9', 0x1) write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[], 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffeffff}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff06a660001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000a40)={0x3, 'vlan1\x00', {0x6}, 0xf8}) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x200) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f0000000040)=0x12) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f00000000c0)=0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 217.041778ms ago: executing program 0 (id=1337): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, 0x0, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_ext={0x1c, 0x1b, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xdff7}, @ldst={0x2, 0x0, 0x3, 0xb, 0x5e86774d38e97b52, 0xffffffffffffffe0, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000940)='syzkaller\x00', 0x10000, 0x14, &(0x7f0000000980)=""/20, 0x41100, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xca09, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00), 0x10, 0x52}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000a00)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x150002, 0x104) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000700)={0x13}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000000000000, 0x4, &(0x7f0000006680)) mount$9p_rdma(&(0x7f0000000500), &(0x7f0000000540)='./proc/mtrr\x00', &(0x7f00000005c0), 0x800844, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e21,timeout=0x0000000000000005,timeout=0xfffffffffffffffa,directio,rq=0x0000000000000005,rq=0x0000000000000003,rq=0x000000000000811f,uid>', @ANYRESDEC, @ANYBLOB=',fsma\tic=0w000000*0000005b']) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x34, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000740)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x12) utimes(0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0x9}]}) 209.865723ms ago: executing program 6 (id=1338): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRES8=r1, @ANYRESOCT, @ANYRESDEC=r2, @ANYRESOCT, @ANYRES32=r0, @ANYRES8=r2, @ANYRESDEC=r1], 0x24}}, 0x0) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) (rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) (async, rerun: 64) mkdirat(r3, &(0x7f0000000100)='./file1\x00', 0x102) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) (async, rerun: 32) r4 = socket$inet(0x2, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x888e, r5, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000280)={0x5, 0x0, [{0x40000000, 0x1000, 0x2, 0x4, 0x0, 0x8, 0x3}, {0xa, 0x2, 0x0, 0x6, 0x1ff, 0x8, 0x5}, {0x0, 0x2, 0x2, 0x2a7, 0x6, 0x701, 0x5}, {0x40000000, 0xfffffffa, 0x0, 0x791a, 0x4177, 0x9, 0xc97}, {0x40000000, 0x4, 0x2, 0x100, 0x1000, 0x3, 0x2}]}) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) (async) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) (async) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async, rerun: 64) r10 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r8, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$tipc(r10, &(0x7f00000000c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48001}, 0x20044095) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0xfffffffffffffff8, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0xa}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x70}}, 0x0) (rerun: 64) 160.073953ms ago: executing program 5 (id=1339): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x23b, @empty, 0x2}, {0xa, 0x4e20, 0x5, @empty, 0x7ff}, 0xffffffffffffffff, 0x7}}, 0x48) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1400000000000000290000003e00000050798e000000000000180000000000000029000000040000003200000040"], 0x30}}], 0x1, 0x4000080) (async) r1 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000005c0)=0x4000, 0x4) (async) sendmsg$rds(r1, &(0x7f0000002e40)={&(0x7f0000000080)={0x2, 0x4e28, @empty}, 0x10, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x400c064}, 0xf94b9f7a267cf39b) (async) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003"], 0x10c}}, 0x44014) 158.20666ms ago: executing program 5 (id=1340): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000080)=0x10000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0x0, 0x6, 0x0, 0x2, 0x1], [0x20000000, 0x500, 0x4], [0x3]], '\x00', [{0xffffffff, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xe}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x4000000}], '\x00', 0x6b4}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f00000000c0)=0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) 90.747244ms ago: executing program 6 (id=1341): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc17}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xfffffffa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff1, 0xc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x5}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x1, 0x1) r3 = accept4$packet(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x14, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @local}, 0x10) lstat64(&(0x7f0000001240)='./cgroup\x00', &(0x7f0000000a00)) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc17}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xfffffffa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff1, 0xc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x5}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) lseek(r2, 0x1, 0x1) (async) accept4$packet(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x14, 0x0) (async) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @local}, 0x10) (async) lstat64(&(0x7f0000001240)='./cgroup\x00', &(0x7f0000000a00)) (async) 284.88µs ago: executing program 5 (id=1342): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1111, @loopback}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000380)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) listen(r0, 0x2) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r1, &(0x7f0000000200)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,hdr_digest,data_digest', 0x4b) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c050) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r2, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}, 0x10009}], 0x1, 0x10000, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000740)={""/32, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x3b8, 0xffffffff, 0x1bc, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0xffffffff, 0xff, 0xffffff00], [0xff, 0xffffffff, 0xff, 0xff], 'team0\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x2b, 0x8, 0x6, 0xc}, 0x0, 0xd0, 0xf4, 0x0, {}, [@common=@srh={{0x2c}, {0x11, 0x1a, 0x40, 0x2, 0x9, 0x8a, 0x48}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0x10c, 0x134, 0x0, {}, [@common=@unspec=@limit={{0x3c}, {0x1, 0x2e, 0x0, 0x4, 0x2, 0x8000, 0x8}}, @common=@inet=@udp={{0x2c}, {[0x4e21, 0x4e21], [0x4e20, 0x4e20], 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2e, 0x4, 0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x414) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x0, @ANYRESHEX=r5, @ANYRES32=0x77359400, @ANYRES32=0x0, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000280)='./file0\x00', 0x8, 0x3) 0s ago: executing program 6 (id=1343): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$sndtimer(0xffffffffffffff9c, 0x0, 0xa1001) map_shadow_stack(&(0x7f00003fd000/0x2000)=nil, 0x2000, 0x0) r4 = syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x5cec, 0x2, 0x3432564e, 0x7, 0x0, [{0x0, 0xfffffffd}, {0xf, 0xe}, {0x7, 0x6c4}, {0x1, 0x3}, {0x9, 0xd9c}, {0x6, 0x6}, {0x282}, {0x2, 0x8cb}], 0x8, 0x8, 0x1, 0x0, 0x4}}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, 0x0) r5 = socket(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000580)={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000018c0)={{r4, &(0x7f0000000000)='choke\x00', 0x0, 0x0, 0x7fffffff, 0x0, 0x0}, 0x0, 0x0}) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99925bd700000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x0, 0x0, 0x1}, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x18, 0x1, 0x7, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFACCT_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4010) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x8000}) io_submit(r6, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) kernel console output (not intermixed with test programs): nect, device number 5 [ 204.913209][ T9781] netlink: 'syz.5.874': attribute type 21 has an invalid length. [ 204.913230][ T9781] netlink: 'syz.5.874': attribute type 22 has an invalid length. [ 204.913241][ T9781] netlink: 'syz.5.874': attribute type 23 has an invalid length. [ 204.913252][ T9781] netlink: 'syz.5.874': attribute type 25 has an invalid length. [ 204.913262][ T9781] netlink: 'syz.5.874': attribute type 26 has an invalid length. [ 204.913272][ T9781] netlink: 16 bytes leftover after parsing attributes in process `syz.5.874'. [ 205.024579][ T43] kauditd_printk_skb: 49 callbacks suppressed [ 205.024596][ T43] audit: type=1800 audit(1789380596.826:1127): pid=6785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34740 res=0 errno=0 [ 205.025081][ T43] audit: type=1800 audit(1789380596.826:1128): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34763 res=0 errno=0 [ 205.027763][ T43] audit: type=1800 audit(1789380596.826:1129): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 205.048438][ T43] audit: type=1800 audit(1789380596.846:1130): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 205.051308][ T42] logitech-hidpp-device 0005:046D:B012.000A: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 205.051317][ T43] audit: type=1800 audit(1789380596.846:1131): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=189505 res=0 errno=0 [ 205.055022][ T43] audit: type=1800 audit(1789380596.856:1132): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4812 res=0 errno=0 [ 205.100028][ T43] audit: type=1800 audit(1789380596.896:1133): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 205.195487][ T43] audit: type=1800 audit(1789380596.996:1134): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 205.226391][ T43] audit: type=1800 audit(1789380597.026:1135): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 205.247989][ T9785] fido_id[9785]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 205.272168][ T9792] sctp: [Deprecated]: syz.5.877 (pid 9792) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.272168][ T9792] Use struct sctp_sack_info instead [ 205.367336][ T9795] sctp: [Deprecated]: syz.5.877 (pid 9795) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.367336][ T9795] Use struct sctp_sack_info instead [ 205.371083][ T43] audit: type=1800 audit(1789380597.166:1136): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 205.622178][ T5741] Bluetooth: hci1: command 0x0419 tx timeout [ 205.716914][ T9811] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 205.722517][ T9811] netlink: 16 bytes leftover after parsing attributes in process `syz.5.879'. [ 206.316278][ T9819] cgroup: fork rejected by pids controller in /syz0 [ 206.907269][ T58] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 206.926359][ T58] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 207.004052][ T9900] netlink: 17 bytes leftover after parsing attributes in process `syz.0.890'. [ 207.120702][ T9901] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 207.184979][ T58] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 207.702779][ T5746] Bluetooth: hci1: command 0x0419 tx timeout [ 207.705821][ T58] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 207.706868][ T6463] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 207.790318][ T9920] netlink: 28 bytes leftover after parsing attributes in process `syz.4.897'. [ 207.793272][ T9922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.897'. [ 207.889817][ T6463] usb 10-1: unable to get BOS descriptor or descriptor too short [ 207.889843][ T6463] usb 10-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 207.892362][ T6463] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 207.892389][ T6463] usb 10-1: can't read configurations, error -71 [ 207.946516][ T9894] ceph: No mds server is up or the cluster is laggy [ 208.133430][ T9929] tipc: Started in network mode [ 208.133447][ T9929] tipc: Node identity da3207824665, cluster identity 4711 [ 208.133521][ T9929] tipc: Enabled bearer , priority 0 [ 208.133810][ T9930] syzkaller0: entered promiscuous mode [ 208.133819][ T9930] syzkaller0: entered allmulticast mode [ 208.154453][ T9930] tipc: Resetting bearer [ 208.195994][ T9928] tipc: Resetting bearer [ 208.217359][ T9928] tipc: Disabling bearer [ 208.274608][ T9937] netlink: 36 bytes leftover after parsing attributes in process `syz.0.902'. [ 208.309694][ T9939] nvme_fabrics: missing parameter 'transport=%s' [ 208.309763][ T9939] nvme_fabrics: missing parameter 'nqn=%s' [ 208.317889][ T9939] jfs: Unknown parameter 'usi&8êbdlÒ€Íúðí*ï÷^e l' [ 208.319327][ T9940] jfs: Unknown parameter 'usi&8êbdlÒ€Íúðí*ï÷^e l' [ 208.321425][ T9939] ./cgroup: Can't lookup blockdev [ 208.353146][ T9943] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 208.553961][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.906'. [ 208.602570][ T9958] team0: Port device team_slave_0 removed [ 208.637074][ T9944] ima: policy update failed [ 208.776796][ T9969] ima: policy update failed [ 208.919313][ T9980] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 208.925812][ T9980] netlink: 'syz.6.912': attribute type 8 has an invalid length. [ 209.773978][ T9999] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 209.774011][ T9999] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 209.779412][ T9999] vhci_hcd vhci_hcd.0: Device attached [ 209.784653][ T5746] Bluetooth: hci1: command 0x0419 tx timeout [ 209.838319][ T42] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 210.071703][ T5618] usb 48-1: SetAddress Request (2) to port 0 [ 210.071762][ T5618] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 210.172053][ T42] usb 9-1: not running at top speed; connect to a high speed hub [ 210.172346][ T42] usb 9-1: New USB device found, idVendor=0543, idProduct=1529, bcdDevice=b5.75 [ 210.174379][ T42] usb 9-1: config 251 has an invalid interface number: 109 but max is 2 [ 210.174475][ T42] usb 9-1: config 251 has an invalid interface number: 136 but max is 2 [ 210.174572][ T42] usb 9-1: config 251 has an invalid interface number: 185 but max is 2 [ 210.174668][ T42] usb 9-1: config 251 has no interface number 0 [ 210.174769][ T42] usb 9-1: config 251 has no interface number 1 [ 210.174836][ T42] usb 9-1: config 251 has no interface number 2 [ 210.175127][ T42] usb 9-1: config 251 interface 109 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 210.175199][ T42] usb 9-1: config 251 interface 109 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 210.175250][ T42] usb 9-1: config 251 interface 109 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 210.175264][ T42] usb 9-1: config 251 interface 109 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 210.175315][ T42] usb 9-1: config 251 interface 109 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 210.175328][ T42] usb 9-1: config 251 interface 109 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 210.175425][ T42] usb 9-1: config 251 interface 109 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 210.175523][ T42] usb 9-1: config 251 interface 109 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 210.175621][ T42] usb 9-1: config 251 interface 109 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 210.175717][ T42] usb 9-1: config 251 interface 109 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 210.175853][ T42] usb 9-1: config 251 interface 136 altsetting 238 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 210.175907][ T42] usb 9-1: config 251 interface 136 altsetting 238 endpoint 0xE has an invalid bInterval 63, changing to 4 [ 210.175948][ T42] usb 9-1: config 251 interface 136 altsetting 238 has a duplicate endpoint with address 0x8, skipping [ 210.176045][ T42] usb 9-1: config 251 interface 136 altsetting 238 has a duplicate endpoint with address 0xD, skipping [ 210.176116][ T42] usb 9-1: config 251 interface 136 altsetting 238 has a duplicate endpoint with address 0x4, skipping [ 210.176211][ T42] usb 9-1: config 251 interface 136 altsetting 238 has a duplicate endpoint with address 0xE, skipping [ 210.176309][ T42] usb 9-1: config 251 interface 136 altsetting 238 has a duplicate endpoint with address 0xA, skipping [ 210.176406][ T42] usb 9-1: config 251 interface 136 altsetting 238 has an invalid descriptor for endpoint zero, skipping [ 210.176476][ T42] usb 9-1: config 251 interface 136 altsetting 238 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 210.176527][ T42] usb 9-1: config 251 interface 136 altsetting 238 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 210.176541][ T42] usb 9-1: config 251 interface 136 altsetting 238 endpoint 0x84 has invalid maxpacket 23129, setting to 64 [ 210.176593][ T42] usb 9-1: config 251 interface 136 altsetting 238 has a duplicate endpoint with address 0x8, skipping [ 210.176605][ T42] usb 9-1: config 251 interface 136 altsetting 238 has a duplicate endpoint with address 0x7, skipping [ 210.176701][ T42] usb 9-1: config 251 interface 136 altsetting 238 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 210.176837][ T42] usb 9-1: config 251 interface 185 altsetting 250 has a duplicate endpoint with address 0x7, skipping [ 210.176890][ T42] usb 9-1: config 251 interface 136 has no altsetting 0 [ 210.176900][ T42] usb 9-1: config 251 interface 185 has no altsetting 0 [ 210.188009][ T42] usb 9-1: Dual-Role OTG device on HNP port [ 210.188463][ T42] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.188534][ T42] usb 9-1: Product: syz [ 210.188627][ T42] usb 9-1: Manufacturer: syz [ 210.188696][ T42] usb 9-1: SerialNumber: syz [ 210.199946][ T43] kauditd_printk_skb: 65 callbacks suppressed [ 210.199958][ T43] audit: type=1800 audit(1789380601.996:1202): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=190063 res=0 errno=0 [ 210.201156][ T43] audit: type=1800 audit(1789380601.996:1203): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=190095 res=0 errno=0 [ 210.201745][ T43] audit: type=1800 audit(1789380602.006:1204): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=190070 res=0 errno=0 [ 210.202474][ T43] audit: type=1800 audit(1789380602.006:1205): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=190071 res=0 errno=0 [ 210.208854][ T9990] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 210.264565][ T43] audit: type=1800 audit(1789380602.066:1206): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 210.332118][ T43] audit: type=1800 audit(1789380602.136:1207): pid=10008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.919" name="quirks" dev="sysfs" ino=62326 res=0 errno=0 [ 210.336533][ T43] audit: type=1800 audit(1789380602.136:1208): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=190125 res=0 errno=0 [ 210.406462][T10000] vhci_hcd: connection reset by peer [ 210.407686][ T5811] vhci_hcd vhci_hcd.5: stop threads [ 210.407709][ T5811] vhci_hcd vhci_hcd.5: release socket [ 210.408910][ T43] audit: type=1800 audit(1789380602.206:1209): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=190137 res=0 errno=0 [ 210.409372][ T5811] vhci_hcd vhci_hcd.5: disconnect device [ 210.427079][ T43] audit: type=1800 audit(1789380602.226:1210): pid=6893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=190137 res=0 errno=0 [ 210.443191][ T43] audit: type=1800 audit(1789380602.246:1211): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=190149 res=0 errno=0 [ 210.636349][T10016] autofs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬( IrÝ\•žu}ibˆŒÞêT0;´Œmy´[Gc¯î#Ï>QkÏübYü&“àÌ#“w„@/VV¼Lë~1ƒ2§÷lÿh–O„h'®ÈûrK1‚\kU{!e½úó¬Üš7»ßß [ 210.636349][T10016] ÄUúeâ[¦ÓÎ%#s' [ 210.638345][T10016] autofs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬( IrÝ\•žu}ibˆŒÞêT0;´Œmy´[Gc¯î#Ï>QkÏübYü&“àÌ#“w„@/VV¼Lë~1ƒ2§÷lÿh–O„h'®ÈûrK1‚\kU{!e½úó¬Üš7»ßß [ 210.638345][T10016] ÄUúeâ[¦ÓÎ%#s' [ 210.693329][T10019] netlink: 'syz.0.922': attribute type 10 has an invalid length. [ 210.732013][T10019] team0: Port device dummy0 added [ 210.753844][ T58] bridge0: port 3(vlan3) entered blocking state [ 210.753929][ T58] bridge0: port 3(vlan3) entered forwarding state [ 210.757227][T10021] input: syz1 as /devices/virtual/input/input12 [ 210.803011][ T42] usb 9-1: USB disconnect, device number 8 [ 211.098948][T10045] netlink: zone id is out of range [ 211.098958][T10045] netlink: zone id is out of range [ 211.458651][T10062] netlink: 'syz.5.932': attribute type 4 has an invalid length. [ 211.476442][T10062] netlink: 'syz.5.932': attribute type 4 has an invalid length. [ 211.611081][T10062] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.611328][T10062] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.682170][T10062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.686136][T10062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.723724][T10070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.934'. [ 211.723820][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.934'. [ 211.766170][T10070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.934'. [ 211.768198][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.934'. [ 211.772522][T10069] FAULT_INJECTION: forcing a failure. [ 211.772522][T10069] name fail_futex, interval 1, probability 0, space 0, times 1 [ 211.772551][T10069] CPU: 0 UID: 0 PID: 10069 Comm: syz.0.934 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.772575][T10069] Tainted: [L]=SOFTLOCKUP [ 211.772582][T10069] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 211.772591][T10069] Call Trace: [ 211.772598][T10069] [ 211.772605][T10069] dump_stack_lvl+0x100/0x190 [ 211.772645][T10069] should_fail_ex.cold+0x5/0xa [ 211.772668][T10069] get_futex_key+0x1d0/0x14f0 [ 211.772697][T10069] ? __pfx_get_futex_key+0x10/0x10 [ 211.772730][T10069] futex_wake+0xf4/0x5e0 [ 211.772771][T10069] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 211.772798][T10069] ? rcu_is_watching+0x13/0xc0 [ 211.772815][T10069] ? __pfx_futex_wake+0x10/0x10 [ 211.772836][T10069] ? finish_task_switch.isra.0+0x3b3/0x10d0 [ 211.772861][T10069] ? rcu_is_watching+0x13/0xc0 [ 211.772880][T10069] ? trace_sched_exit_tp+0x120/0x160 [ 211.772900][T10069] do_futex+0x2b2/0x440 [ 211.772918][T10069] ? __pfx_do_futex+0x10/0x10 [ 211.772941][T10069] __ia32_sys_futex_time32+0x2f4/0x470 [ 211.772962][T10069] ? xfd_validate_state+0x129/0x190 [ 211.772987][T10069] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 211.773015][T10069] __do_fast_syscall_32+0x13a/0x8b0 [ 211.773052][T10069] do_fast_syscall_32+0x32/0x70 [ 211.773078][T10069] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.773098][T10069] RIP: 0023:0xf709efec [ 211.773118][T10069] Code: Unable to access opcode bytes at 0xf709efc2. [ 211.773126][T10069] RSP: 002b:00000000f548d5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 211.773145][T10069] RAX: ffffffffffffffda RBX: 00000000f7494f8c RCX: 0000000000000081 [ 211.773155][T10069] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 211.773166][T10069] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 211.773177][T10069] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 211.773186][T10069] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.773209][T10069] [ 211.776111][T10066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.776362][T10066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.781771][ T5811] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.781833][ T5811] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.781963][ T5811] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.782093][ T5811] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.785139][T10069] 9pnet_fd: p9_fd_create_unix (10069): problem connecting socket: ./proc: -111 [ 211.863456][ T5746] Bluetooth: hci1: command 0x0419 tx timeout [ 212.002106][ T6470] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 212.046970][T10074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.047326][T10074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.086853][T10077] PKCS7: Unsupported SignerInfo version [ 212.087056][T10077] PKCS7: Unsupported SignerInfo version [ 212.087240][T10077] PKCS7: Unsupported SignerInfo version [ 212.087425][T10077] PKCS7: Unsupported SignerInfo version [ 212.087616][T10077] PKCS7: Unsupported SignerInfo version [ 212.087800][T10077] PKCS7: Unsupported SignerInfo version [ 212.087984][T10077] PKCS7: Unsupported SignerInfo version [ 212.088165][T10077] PKCS7: Unsupported SignerInfo version [ 212.088358][T10077] PKCS7: Unsupported SignerInfo version [ 212.120277][T10077] PKCS7: Unsupported SignerInfo version [ 212.120393][T10077] PKCS7: Unsupported SignerInfo version [ 212.120485][T10077] PKCS7: Unsupported SignerInfo version [ 212.120582][T10077] PKCS7: Unsupported SignerInfo version [ 212.120674][T10077] PKCS7: Unsupported SignerInfo version [ 212.120793][T10077] PKCS7: Unsupported SignerInfo version [ 212.120888][T10077] PKCS7: Unsupported SignerInfo version [ 212.123096][T10077] PKCS7: Unsupported SignerInfo version [ 212.123274][T10077] PKCS7: Unsupported SignerInfo version [ 212.123441][T10077] PKCS7: Unsupported SignerInfo version [ 212.123602][T10077] PKCS7: Unsupported SignerInfo version [ 212.123758][T10077] PKCS7: Unsupported SignerInfo version [ 212.123913][T10077] PKCS7: Unsupported SignerInfo version [ 212.124069][T10077] PKCS7: Unsupported SignerInfo version [ 212.124224][T10077] PKCS7: Unsupported SignerInfo version [ 212.124383][T10077] PKCS7: Unsupported SignerInfo version [ 212.124547][T10077] PKCS7: Unsupported SignerInfo version [ 212.124706][T10077] PKCS7: Unsupported SignerInfo version [ 212.124884][T10077] PKCS7: Unsupported SignerInfo version [ 212.125038][T10077] PKCS7: Unsupported SignerInfo version [ 212.125131][T10077] PKCS7: Unsupported SignerInfo version [ 212.125256][T10077] PKCS7: Unsupported SignerInfo version [ 212.135232][ T6470] usb 9-1: device descriptor read/64, error -71 [ 212.141596][T10077] PKCS7: Unsupported SignerInfo version [ 212.141839][T10077] PKCS7: Unsupported SignerInfo version [ 212.142019][T10077] PKCS7: Unsupported SignerInfo version [ 212.142176][T10077] PKCS7: Unsupported SignerInfo version [ 212.142327][T10077] PKCS7: Unsupported SignerInfo version [ 212.142492][T10077] PKCS7: Unsupported SignerInfo version [ 212.143495][T10077] PKCS7: Unsupported SignerInfo version [ 212.143597][T10077] PKCS7: Unsupported SignerInfo version [ 212.143709][T10077] PKCS7: Unsupported SignerInfo version [ 212.145146][T10077] PKCS7: Unsupported SignerInfo version [ 212.145298][T10077] PKCS7: Unsupported SignerInfo version [ 212.145442][T10077] PKCS7: Unsupported SignerInfo version [ 212.145593][T10077] PKCS7: Unsupported SignerInfo version [ 212.145748][T10077] PKCS7: Unsupported SignerInfo version [ 212.146165][T10077] PKCS7: Unsupported SignerInfo version [ 212.146316][T10077] PKCS7: Unsupported SignerInfo version [ 212.146482][T10077] PKCS7: Unsupported SignerInfo version [ 212.146636][T10077] PKCS7: Unsupported SignerInfo version [ 212.146797][T10077] PKCS7: Unsupported SignerInfo version [ 212.146947][T10077] PKCS7: Unsupported SignerInfo version [ 212.147096][T10077] PKCS7: Unsupported SignerInfo version [ 212.150799][T10077] PKCS7: Unsupported SignerInfo version [ 212.150962][T10077] PKCS7: Unsupported SignerInfo version [ 212.151112][T10077] PKCS7: Unsupported SignerInfo version [ 212.151283][T10077] PKCS7: Unsupported SignerInfo version [ 212.151869][T10077] PKCS7: Unsupported SignerInfo version [ 212.152030][T10077] PKCS7: Unsupported SignerInfo version [ 212.152240][T10077] PKCS7: Unsupported SignerInfo version [ 212.152376][T10077] PKCS7: Unsupported SignerInfo version [ 212.152469][T10077] PKCS7: Unsupported SignerInfo version [ 212.152787][T10077] PKCS7: Unsupported SignerInfo version [ 212.152952][T10077] PKCS7: Unsupported SignerInfo version [ 212.153104][T10077] PKCS7: Unsupported SignerInfo version [ 212.153263][T10077] PKCS7: Unsupported SignerInfo version [ 212.312709][T10074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.312930][T10074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.371410][ T6470] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 212.513288][ T6470] usb 9-1: device descriptor read/64, error -71 [ 213.076785][ T6470] usb usb9-port1: attempt power cycle [ 213.302620][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 213.505405][T10112] lo: entered allmulticast mode [ 213.506060][T10112] tunl0: entered allmulticast mode [ 213.506588][T10112] gre0: entered allmulticast mode [ 213.507074][T10112] gretap0: entered allmulticast mode [ 213.507332][T10112] erspan0: entered allmulticast mode [ 213.516613][T10112] ip_vti0: entered allmulticast mode [ 213.517139][T10112] ip6_vti0: entered allmulticast mode [ 213.517666][T10112] sit0: entered allmulticast mode [ 213.518251][T10112] ip6tnl0: entered allmulticast mode [ 213.528435][T10112] ip6gre0: entered allmulticast mode [ 213.529001][T10112] syz_tun: entered allmulticast mode [ 213.529477][T10112] ip6gretap0: entered allmulticast mode [ 213.529977][T10112] bridge0: entered allmulticast mode [ 213.533574][T10112] vcan0: entered allmulticast mode [ 213.544035][T10112] bond0: entered allmulticast mode [ 213.544056][T10112] bond_slave_0: entered allmulticast mode [ 213.544072][T10112] bond_slave_1: entered allmulticast mode [ 213.545266][T10112] team0: entered allmulticast mode [ 213.545282][T10112] team_slave_0: entered allmulticast mode [ 213.545297][T10112] team_slave_1: entered allmulticast mode [ 213.546120][T10112] dummy0: entered allmulticast mode [ 213.546752][T10112] nlmon0: entered allmulticast mode [ 213.547605][T10112] batadv0: entered allmulticast mode [ 213.548329][T10112] vxcan0: entered allmulticast mode [ 213.548814][T10112] vxcan1: entered allmulticast mode [ 213.551849][ T6470] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 213.557729][T10112] veth0: entered allmulticast mode [ 213.558304][T10112] veth1: entered allmulticast mode [ 213.558774][T10112] wg0: entered allmulticast mode [ 213.559423][T10112] wg1: entered allmulticast mode [ 213.560103][T10112] wg2: entered allmulticast mode [ 213.560644][T10112] veth0_to_bridge: entered allmulticast mode [ 213.561709][T10112] bridge_slave_0: left promiscuous mode [ 213.561876][T10112] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.570371][T10112] veth1_to_bridge: entered allmulticast mode [ 213.573494][ T6470] usb 9-1: device descriptor read/8, error -71 [ 213.573822][T10112] bridge_slave_1: left promiscuous mode [ 213.574001][T10112] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.579967][T10112] veth0_to_bond: entered allmulticast mode [ 213.592834][T10112] bond0: (slave bond_slave_0): Releasing backup interface [ 213.596379][T10112] veth1_to_bond: entered allmulticast mode [ 213.603763][T10112] bond0: (slave bond_slave_1): Releasing backup interface [ 213.611188][T10112] veth0_to_team: entered allmulticast mode [ 213.617892][T10112] team0: Port device team_slave_0 removed [ 213.618302][T10112] veth1_to_team: entered allmulticast mode [ 213.624341][T10112] team0: Port device team_slave_1 removed [ 213.625021][T10112] veth0_to_batadv: entered allmulticast mode [ 213.625522][T10112] batadv_slave_0: entered allmulticast mode [ 213.625771][T10112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.625787][T10112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.628703][T10112] veth1_to_batadv: entered allmulticast mode [ 213.629220][T10112] batadv_slave_1: entered allmulticast mode [ 213.629467][T10112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.629482][T10112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.633433][T10112] xfrm0: entered allmulticast mode [ 213.634050][T10112] veth0_to_hsr: entered allmulticast mode [ 213.634535][T10112] hsr_slave_0: entered allmulticast mode [ 213.635848][T10112] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 213.708728][T10122] netlink: 260 bytes leftover after parsing attributes in process `syz.6.944'. [ 213.821705][ T6470] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 213.842766][ T6470] usb 9-1: device descriptor read/8, error -71 [ 213.953355][ T6470] usb usb9-port1: unable to enumerate USB device [ 214.339854][T10132] netlink: 'syz.6.947': attribute type 10 has an invalid length. [ 214.340046][T10132] dummy0: left allmulticast mode [ 214.355356][T10132] dummy0: entered allmulticast mode [ 214.355796][T10132] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 214.374457][ T5746] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 214.482171][T10145] jffs2: notice: (10145) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 214.616031][T10156] netlink: 92 bytes leftover after parsing attributes in process `syz.6.953'. [ 215.153344][ T5618] usb 48-1: device descriptor read/8, error -110 [ 215.545719][ T5618] usb usb48-port1: attempt power cycle [ 215.639240][ T43] kauditd_printk_skb: 166 callbacks suppressed [ 215.639258][ T43] audit: type=1326 audit(1789380607.407:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.5.954" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700efec code=0x7ffc0000 [ 215.655479][ T43] audit: type=1800 audit(1789380607.457:1379): pid=10179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.956" name="bus" dev="ramfs" ino=37230 res=0 errno=0 [ 215.667871][ T43] audit: type=1800 audit(1789380607.467:1380): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 215.711950][ T43] audit: type=1326 audit(1789380607.517:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.5.954" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700efec code=0x7ffc0000 [ 215.732092][ T43] audit: type=1800 audit(1789380607.537:1382): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 215.893534][ T6470] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 216.051278][ T43] audit: type=1800 audit(1789380607.847:1383): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 216.139614][ T5618] usb usb48-port1: unable to enumerate USB device [ 216.362433][ T43] audit: type=1326 audit(1789380608.167:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.5.954" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700efec code=0x7ffc0000 [ 216.370803][ T43] audit: type=1326 audit(1789380608.167:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.5.954" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700efec code=0x7ffc0000 [ 216.392694][ T43] audit: type=1326 audit(1789380608.187:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.5.954" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700efec code=0x7ffc0000 [ 216.435797][ T43] audit: type=1326 audit(1789380608.237:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.5.954" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700efec code=0x7ffc0000 [ 216.537582][ T6470] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 216.778742][ T6470] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 135, changing to 11 [ 216.778771][ T6470] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58457, setting to 1024 [ 216.778788][ T6470] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 216.778819][ T6470] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.795698][ T5746] Bluetooth: hci1: unexpected event for opcode 0x0c1b [ 216.803677][T10193] netlink: 20 bytes leftover after parsing attributes in process `syz.6.959'. [ 216.948037][T10196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.013639][ T6470] usb 10-1: config 0 descriptor?? [ 217.084297][T10171] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 217.314538][T10198] FAULT_INJECTION: forcing a failure. [ 217.314538][T10198] name failslab, interval 1, probability 0, space 0, times 0 [ 217.314570][T10198] CPU: 2 UID: 0 PID: 10198 Comm: syz.4.960 Tainted: G L syzkaller #0 PREEMPT(full) [ 217.314594][T10198] Tainted: [L]=SOFTLOCKUP [ 217.314601][T10198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 217.314612][T10198] Call Trace: [ 217.314617][T10198] [ 217.314625][T10198] dump_stack_lvl+0x100/0x190 [ 217.314652][T10198] should_fail_ex.cold+0x5/0xa [ 217.314676][T10198] should_failslab+0xc2/0x120 [ 217.314712][T10198] __kvmalloc_node_noprof+0x113/0x9b0 [ 217.314736][T10198] ? io_alloc_cache_init+0x38/0x170 [ 217.314760][T10198] io_alloc_cache_init+0x38/0x170 [ 217.314779][T10198] io_rsrc_cache_init+0x40/0x50 [ 217.314805][T10198] io_uring_setup.cold+0x4c0/0x1c5e [ 217.314834][T10198] ? do_vfs_ioctl+0x226/0x13e0 [ 217.314863][T10198] ? __pfx_io_uring_setup+0x10/0x10 [ 217.314893][T10198] ? do_futex+0x190/0x440 [ 217.314912][T10198] ? __pfx_do_futex+0x10/0x10 [ 217.314942][T10198] ? xfd_validate_state+0x129/0x190 [ 217.314994][T10198] __ia32_sys_io_uring_setup+0xc2/0x170 [ 217.315027][T10198] __do_fast_syscall_32+0x13a/0x8b0 [ 217.315064][T10198] do_fast_syscall_32+0x32/0x70 [ 217.315090][T10198] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 217.315112][T10198] RIP: 0023:0xf6feefec [ 217.315132][T10198] Code: Unable to access opcode bytes at 0xf6feefc2. [ 217.315140][T10198] RSP: 002b:00000000f53dd4bc EFLAGS: 00000282 ORIG_RAX: 00000000000001a9 [ 217.315158][T10198] RAX: ffffffffffffffda RBX: 0000000000000f00 RCX: 0000000080000400 [ 217.315169][T10198] RDX: 00000000f7150fd7 RSI: 0000000000000001 RDI: 00000000f53dd53c [ 217.315179][T10198] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.315189][T10198] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 217.315200][T10198] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 217.315225][T10198] [ 218.101606][ T42] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 218.245946][ T42] usb 9-1: device descriptor read/64, error -71 [ 218.481473][ T42] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 218.611525][ T42] usb 9-1: device descriptor read/64, error -71 [ 218.733488][ T42] usb usb9-port1: attempt power cycle [ 218.774604][T10216] vivid-002: disconnect [ 219.101854][ T42] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 219.122008][ T42] usb 9-1: device descriptor read/8, error -71 [ 219.154249][ T6470] usbhid 10-1:0.0: can't add hid device: -71 [ 219.154335][ T6470] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 219.157397][ T6470] usb 10-1: USB disconnect, device number 8 [ 219.391419][ T42] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 219.455704][ T42] usb 9-1: device descriptor read/8, error -71 [ 219.561987][ T42] usb usb9-port1: unable to enumerate USB device [ 219.593869][T10214] vivid-002: reconnect [ 219.692451][T10267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.692869][T10267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.699547][T10266] syzkaller0: entered promiscuous mode [ 219.699566][T10266] syzkaller0: entered allmulticast mode [ 219.706361][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.977'. [ 219.706472][T10267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.977'. [ 219.861060][ T6470] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 219.991033][ T6470] usb 11-1: device descriptor read/64, error -71 [ 220.232748][ T6470] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 220.361122][ T6470] usb 11-1: device descriptor read/64, error -71 [ 220.471360][ T6470] usb usb11-port1: attempt power cycle [ 220.485004][T10277] kAFS: bad VL server IP address [ 220.725502][ T43] kauditd_printk_skb: 664 callbacks suppressed [ 220.725553][ T43] audit: type=1800 audit(1789380612.527:2052): pid=10280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.980" name="wakeup_count" dev="sysfs" ino=580 res=0 errno=0 [ 220.856932][ T43] audit: type=1800 audit(1789380612.657:2053): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 220.880957][ T6470] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 220.958300][ T6470] usb 11-1: device descriptor read/8, error -71 [ 221.049659][ T43] audit: type=1800 audit(1789380612.847:2054): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 221.405199][ T6470] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 221.424950][ T43] audit: type=1800 audit(1789380613.227:2055): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 221.531322][ T6470] usb 11-1: device descriptor read/8, error -71 [ 221.642593][ T6470] usb usb11-port1: unable to enumerate USB device [ 221.676304][ T43] audit: type=1800 audit(1789380613.477:2056): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 221.688333][ T43] audit: type=1326 audit(1789380613.487:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10308 comm="syz.5.985" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 221.688461][ T43] audit: type=1326 audit(1789380613.487:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10308 comm="syz.5.985" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 221.699822][ T43] audit: type=1326 audit(1789380613.487:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10308 comm="syz.5.985" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 221.699853][ T43] audit: type=1326 audit(1789380613.487:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10308 comm="syz.5.985" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 221.699882][ T43] audit: type=1326 audit(1789380613.487:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10308 comm="syz.5.985" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf700efec code=0x7ffc0000 [ 221.749424][T10312] syzkaller0: entered promiscuous mode [ 221.749489][T10312] syzkaller0: entered allmulticast mode [ 221.945051][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.5.987'. [ 222.437858][T10323] bridge0: port 3(vlan3) entered disabled state [ 222.437954][T10323] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.438163][T10323] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.521897][T10323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.529659][T10323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.703320][ T5835] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.703350][ T5835] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.703386][ T5835] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.703406][ T5835] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.703433][ T5835] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.703452][ T5835] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.703478][ T5835] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.703498][ T5835] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.771404][T10335] xt_time: unknown flags 0xf4 [ 222.843785][T10337] LUN: removable file: (no medium) [ 222.845698][T10337] netlink: 'syz.0.992': attribute type 1 has an invalid length. [ 222.874249][T10337] bond5: entered promiscuous mode [ 222.874575][T10337] 8021q: adding VLAN 0 to HW filter on device bond5 [ 222.921614][T10337] bond5: (slave bridge3): making interface the new active one [ 222.921630][T10337] bridge3: entered promiscuous mode [ 222.922259][T10337] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 222.997651][T10352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.995'. [ 223.372791][T10367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.998'. [ 223.372811][T10367] netlink: 5 bytes leftover after parsing attributes in process `syz.4.998'. [ 223.372830][T10367] netlink: 6104 bytes leftover after parsing attributes in process `syz.4.998'. [ 223.672010][T10375] lo speed is unknown, defaulting to 1000 [ 223.926282][T10379] netlink: 'syz.5.1002': attribute type 13 has an invalid length. [ 224.154401][T10399] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1008'. [ 224.158999][T10394] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.168334][T10394] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.178243][T10396] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1008'. [ 224.184491][T10400] team0: No ports can be present during mode change [ 224.184859][T10398] netlink: 'syz.0.1007': attribute type 10 has an invalid length. [ 224.185214][T10400] tipc: Started in network mode [ 224.185229][T10400] tipc: Node identity aaaaaaaaaa3b, cluster identity 4711 [ 224.185370][T10400] tipc: Enabled bearer , priority 0 [ 224.207862][T10394] Console: switching to colour dummy device 80x25 [ 224.298870][T10408] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 224.333924][T10408] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 224.334026][T10408] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 224.334200][T10408] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 224.334540][T10408] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 224.375315][T10408] pci 0000:00:01.0: Adding to iommu group 1 [ 224.377660][T10408] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 224.377672][T10408] pci 0000:00:01.0: vgaarb: bridge control possible [ 224.377679][T10408] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 224.390541][T10408] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 224.393503][T10408] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 224.394491][T10408] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 224.399074][T10408] [drm] Found bochs VGA, ID 0xb0c5. [ 224.399085][T10408] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 224.434945][T10408] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 224.528589][T10408] Console: switching to colour frame buffer device 160x50 [ 224.590594][T10408] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 224.999749][T10415] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1010'. [ 225.001034][T10415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'. [ 225.001371][T10415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'. [ 225.077825][T10423] digital: digital_start_poll: Unknown protocol [ 225.286009][ T156] Bluetooth: hci3: Frame reassembly failed (-84) [ 225.302107][ T58] tipc: Node number set to 9546410 [ 225.558600][T10460] FAULT_INJECTION: forcing a failure. [ 225.558600][T10460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.558624][T10460] CPU: 3 UID: 0 PID: 10460 Comm: syz.4.1020 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.558639][T10460] Tainted: [L]=SOFTLOCKUP [ 225.558655][T10460] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 225.558662][T10460] Call Trace: [ 225.558666][T10460] [ 225.558671][T10460] dump_stack_lvl+0x100/0x190 [ 225.558739][T10460] should_fail_ex.cold+0x5/0xa [ 225.558753][T10460] save_fsave_header+0x14c/0x2f0 [ 225.558768][T10460] ? __pfx_save_fsave_header+0x10/0x10 [ 225.558788][T10460] ? copy_fpstate_to_sigframe+0x2b8/0xae0 [ 225.558803][T10460] ? __local_bh_enable_ip+0xa5/0x120 [ 225.558821][T10460] copy_fpstate_to_sigframe+0x755/0xae0 [ 225.558838][T10460] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 225.558856][T10460] ? posixtimer_deliver_signal+0x1a0/0x6e0 [ 225.558869][T10460] ? x86_task_fpu+0x5f/0x90 [ 225.558882][T10460] get_sigframe+0x3fb/0x940 [ 225.558899][T10460] ? __pfx_get_sigframe+0x10/0x10 [ 225.558912][T10460] ? rcu_is_watching+0x13/0xc0 [ 225.558923][T10460] ? siginfo_layout+0x156/0x290 [ 225.558942][T10460] ia32_setup_rt_frame+0xe7/0xaf0 [ 225.558963][T10460] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 225.558981][T10460] ? do_futex+0x190/0x440 [ 225.558993][T10460] arch_do_signal_or_restart+0x459/0x7a0 [ 225.559008][T10460] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 225.559027][T10460] ? fput+0x7c/0x100 [ 225.559063][T10460] exit_to_user_mode_loop+0x139/0x700 [ 225.559081][T10460] ? rcu_is_watching+0x13/0xc0 [ 225.559094][T10460] __do_fast_syscall_32+0x59f/0x8b0 [ 225.559130][T10460] ? lockdep_hardirqs_on+0x7d/0x110 [ 225.559146][T10460] do_fast_syscall_32+0x32/0x70 [ 225.559163][T10460] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 225.559178][T10460] RIP: 0023:0xf6feefea [ 225.559188][T10460] Code: 19 85 d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 225.559198][T10460] RSP: 002b:00000000f53dd5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 225.559210][T10460] RAX: 00000000000000f0 RBX: 00000000f73e4f88 RCX: 0000000000000080 [ 225.559216][T10460] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73e4f8c [ 225.559227][T10460] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 225.559235][T10460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.559241][T10460] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 225.559256][T10460] [ 225.628922][T10462] binder_alloc_mmap_handler: 22 callbacks suppressed [ 225.628939][T10462] binder_alloc: binder_alloc_mmap_handler: 10461 80ffd000-81000000 already mapped failed -16 [ 226.204076][ T43] kauditd_printk_skb: 105 callbacks suppressed [ 226.204092][ T43] audit: type=1800 audit(1789380617.997:2167): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 226.217124][ T43] audit: type=1800 audit(1789380618.007:2168): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34790 res=0 errno=0 [ 226.219044][ T43] audit: type=1800 audit(1789380618.007:2169): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34813 res=0 errno=0 [ 226.271479][ T43] audit: type=1800 audit(1789380618.067:2170): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 226.461094][ T6470] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 226.533398][ T43] audit: type=1800 audit(1789380618.327:2171): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 226.569798][T10473] FAULT_INJECTION: forcing a failure. [ 226.569798][T10473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.569820][T10473] CPU: 0 UID: 0 PID: 10473 Comm: syz.4.1024 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.569853][T10473] Tainted: [L]=SOFTLOCKUP [ 226.569859][T10473] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.569868][T10473] Call Trace: [ 226.569874][T10473] [ 226.569881][T10473] dump_stack_lvl+0x100/0x190 [ 226.569909][T10473] should_fail_ex.cold+0x5/0xa [ 226.569928][T10473] save_fsave_header+0x14c/0x2f0 [ 226.569944][T10473] ? __pfx_save_fsave_header+0x10/0x10 [ 226.569963][T10473] ? copy_fpstate_to_sigframe+0x2b8/0xae0 [ 226.569978][T10473] ? __local_bh_enable_ip+0xa5/0x120 [ 226.569996][T10473] copy_fpstate_to_sigframe+0x755/0xae0 [ 226.570013][T10473] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 226.570030][T10473] ? posixtimer_deliver_signal+0x1a0/0x6e0 [ 226.570042][T10473] ? x86_task_fpu+0x5f/0x90 [ 226.570055][T10473] get_sigframe+0x3fb/0x940 [ 226.570071][T10473] ? __pfx_get_sigframe+0x10/0x10 [ 226.570085][T10473] ? rcu_is_watching+0x13/0xc0 [ 226.570096][T10473] ? siginfo_layout+0x156/0x290 [ 226.570114][T10473] ia32_setup_rt_frame+0xe7/0xaf0 [ 226.570134][T10473] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 226.570151][T10473] ? do_futex+0x190/0x440 [ 226.570163][T10473] arch_do_signal_or_restart+0x459/0x7a0 [ 226.570179][T10473] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 226.570196][T10473] ? fput+0x7c/0x100 [ 226.570213][T10473] exit_to_user_mode_loop+0x139/0x700 [ 226.570231][T10473] ? rcu_is_watching+0x13/0xc0 [ 226.570243][T10473] __do_fast_syscall_32+0x59f/0x8b0 [ 226.570259][T10473] ? lockdep_hardirqs_on+0x7d/0x110 [ 226.570276][T10473] do_fast_syscall_32+0x32/0x70 [ 226.570293][T10473] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 226.570306][T10473] RIP: 0023:0xf6feefea [ 226.570316][T10473] Code: 19 85 d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 226.570327][T10473] RSP: 002b:00000000f53dd5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 226.570339][T10473] RAX: 00000000000000f0 RBX: 00000000f73e4f88 RCX: 0000000000000080 [ 226.570345][T10473] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73e4f8c [ 226.570351][T10473] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 226.570358][T10473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.570364][T10473] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 226.570378][T10473] [ 226.600386][ T43] audit: type=1800 audit(1789380618.387:2172): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 226.610628][ T6470] usb 11-1: Using ep0 maxpacket: 16 [ 226.611177][ T6470] usb 11-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 226.612198][ T6470] usb 11-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 249, changing to 7 [ 226.614094][ T6470] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.614113][ T6470] usb 11-1: Product: syz [ 226.614123][ T6470] usb 11-1: Manufacturer: syz [ 226.614133][ T6470] usb 11-1: SerialNumber: syz [ 226.618622][ T43] audit: type=1800 audit(1789380618.407:2173): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=193368 res=0 errno=0 [ 226.622501][ T43] audit: type=1800 audit(1789380618.417:2174): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=193400 res=0 errno=0 [ 226.623273][ T43] audit: type=1800 audit(1789380618.417:2175): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=193375 res=0 errno=0 [ 226.623906][ T43] audit: type=1800 audit(1789380618.417:2176): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=193376 res=0 errno=0 [ 226.969329][T10481] max out of range [ 227.300800][ T5746] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 227.300816][ T5741] Bluetooth: hci3: command 0x1003 tx timeout [ 227.505143][ T5746] Bluetooth: hci0: unexpected event for opcode 0x0428 [ 227.926203][T10503] __nla_validate_parse: 7 callbacks suppressed [ 227.926224][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1034'. [ 227.926236][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1034'. [ 227.930721][ T42] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 228.080608][ T42] usb 10-1: Using ep0 maxpacket: 32 [ 228.081369][ T42] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 228.082305][ T42] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 228.082324][ T42] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 228.082339][ T42] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 228.082375][ T42] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 228.082391][ T42] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 228.082409][ T42] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 228.082432][ T42] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.084267][ T42] usb 10-1: config 0 descriptor?? [ 228.220545][ T5834] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 228.293151][ T42] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 228.380996][ T5834] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 228.383390][ T5834] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.383404][ T5834] usb 9-1: Product: syz [ 228.383411][ T5834] usb 9-1: Manufacturer: syz [ 228.383418][ T5834] usb 9-1: SerialNumber: syz [ 228.416542][ T63] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 229.259947][ T6470] usb 11-1: Audio class v2/v3 interfaces need an interface association [ 229.358861][ T6470] snd-usb-audio 11-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 229.366773][ T6470] usb 11-1: USB disconnect, device number 10 [ 229.470753][ T63] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 229.470926][ T63] ath9k_htc: Failed to initialize the device [ 229.488280][ T6781] udevd[6781]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.541988][ T63] usb 9-1: ath9k_htc: USB layer deinitialized [ 230.858222][ T58] usb 10-1: USB disconnect, device number 9 [ 230.863972][ T58] usblp0: removed [ 231.086330][ T6036] usb 9-1: USB disconnect, device number 17 [ 231.293073][T10562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1050'. [ 231.293631][T10562] lo speed is unknown, defaulting to 1000 [ 231.303350][T10564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1050'. [ 231.303367][T10564] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1050'. [ 231.319299][ T43] kauditd_printk_skb: 116 callbacks suppressed [ 231.319315][ T43] audit: type=1800 audit(1789380623.108:2293): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 231.389523][ T43] audit: type=1800 audit(1789380623.178:2294): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 231.424751][ T43] audit: type=1800 audit(1789380623.208:2295): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 231.502008][ T43] audit: type=1800 audit(1789380623.298:2296): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 231.770348][ T58] usb 9-1: new low-speed USB device number 18 using dummy_hcd [ 231.790363][ T6316] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 231.940297][ T43] audit: type=1800 audit(1789380623.728:2297): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=194250 res=0 errno=0 [ 231.942687][T10572] input: syz1 as /devices/virtual/input/input14 [ 231.945961][ T43] audit: type=1800 audit(1789380623.738:2298): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=194265 res=0 errno=0 [ 231.953425][ T43] audit: type=1800 audit(1789380623.758:2299): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=194268 res=0 errno=0 [ 231.961194][ T43] audit: type=1800 audit(1789380623.758:2300): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=194267 res=0 errno=0 [ 231.961306][ T6316] usb 11-1: Using ep0 maxpacket: 8 [ 231.963204][ T6316] usb 11-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=61.17 [ 231.966800][ T6316] usb 11-1: config 49 has an invalid interface number: 209 but max is 3 [ 231.966822][ T6316] usb 11-1: config 49 contains an unexpected descriptor of type 0x2, skipping [ 231.966894][ T6316] usb 11-1: config 49 has an invalid interface number: 14 but max is 3 [ 231.966910][ T6316] usb 11-1: config 49 has an invalid interface number: 100 but max is 3 [ 231.966926][ T6316] usb 11-1: config 49 has an invalid interface number: 33 but max is 3 [ 231.966941][ T6316] usb 11-1: config 49 has an invalid interface number: 89 but max is 3 [ 231.966956][ T6316] usb 11-1: config 49 has 5 interfaces, different from the descriptor's value: 4 [ 231.966973][ T6316] usb 11-1: config 49 has no interface number 0 [ 231.966985][ T6316] usb 11-1: config 49 has no interface number 1 [ 231.966994][ T6316] usb 11-1: config 49 has no interface number 2 [ 231.967051][ T6316] usb 11-1: config 49 has no interface number 3 [ 231.967065][ T6316] usb 11-1: config 49 has no interface number 4 [ 231.967115][ T6316] usb 11-1: config 49 interface 209 altsetting 8 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 231.967137][ T6316] usb 11-1: config 49 interface 209 altsetting 8 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 231.967157][ T6316] usb 11-1: config 49 interface 209 altsetting 8 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 231.967232][ T6316] usb 11-1: config 49 interface 209 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 231.967261][ T6316] usb 11-1: config 49 interface 14 altsetting 13 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 231.967276][ T6316] usb 11-1: config 49 interface 14 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 231.967292][ T6316] usb 11-1: config 49 interface 14 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 231.967307][ T6316] usb 11-1: config 49 interface 14 altsetting 13 has a duplicate endpoint with address 0x6, skipping [ 231.967325][ T6316] usb 11-1: config 49 interface 14 altsetting 13 endpoint 0xF has invalid maxpacket 42731, setting to 64 [ 231.967411][ T6316] usb 11-1: config 49 interface 100 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 231.967433][ T6316] usb 11-1: config 49 interface 100 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 231.967450][ T6316] usb 11-1: config 49 interface 100 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 231.967472][ T6316] usb 11-1: config 49 interface 33 altsetting 32 has an invalid descriptor for endpoint zero, skipping [ 231.967487][ T6316] usb 11-1: config 49 interface 33 altsetting 32 endpoint 0x8 has an invalid bInterval 56, changing to 7 [ 231.967507][ T6316] usb 11-1: config 49 interface 33 altsetting 32 has a duplicate endpoint with address 0x8, skipping [ 231.967582][ T6316] usb 11-1: config 49 interface 33 altsetting 32 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 231.967603][ T6316] usb 11-1: config 49 interface 209 has no altsetting 0 [ 231.967617][ T6316] usb 11-1: config 49 interface 14 has no altsetting 0 [ 231.967630][ T6316] usb 11-1: config 49 interface 100 has no altsetting 0 [ 231.967642][ T6316] usb 11-1: config 49 interface 33 has no altsetting 0 [ 231.967652][ T6316] usb 11-1: config 49 interface 89 has no altsetting 0 [ 231.967821][ T43] audit: type=1800 audit(1789380623.758:2301): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=194266 res=0 errno=0 [ 231.970653][ T43] audit: type=1800 audit(1789380623.768:2302): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=194257 res=0 errno=0 [ 231.981520][ T6316] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.981537][ T6316] usb 11-1: Product: syz [ 231.981548][ T6316] usb 11-1: Manufacturer: 瞤딴ážîᩳâ¿á““郶婱⵼쪠客笨嘺ì²ã¿ î¶î·‚＂쳕담㊔㧧棊⤆覣ìƒìŒ«æ¯£ä›žè­ï’…詢㥪âƒêŽéˆ—痂뾹ꤶê©ë˜¼é–⩃쭊î†ã›ê¤¦æ´«áµ ä½†ê–Œî—ˆè¾‘盒앿烼è¼í™µî©¯Õ‚ꛅ陼쑽繴㥩⟫ꥅꤠ襭鄭歮褿ᴻ缿꿕纡î€ï‹¸è¤¸äšì¥£çžœå–Œï‘§é£¹í…®å¯¾î€é¨²ì¦Ø´â™–íšé¾´çˆŽåŠ¹å§£â™Žï–¹ä¡ è«œâž¹æ››æ…©áŸ¢à°œå¸“曞 [ 231.981575][ T6316] usb 11-1: SerialNumber: syz [ 232.110435][T10577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1049'. [ 232.212303][ T6316] ttusb_dec_send_command: command bulk message failed: error -22 [ 232.212400][ T6316] ttusb-dec 11-1:49.209: probe with driver ttusb-dec failed with error -22 [ 232.218126][ T6316] ttusb_dec_send_command: command bulk message failed: error -22 [ 232.218245][ T6316] ttusb-dec 11-1:49.14: probe with driver ttusb-dec failed with error -22 [ 232.225498][ T6316] ttusb_dec_send_command: command bulk message failed: error -22 [ 232.225672][ T6316] ttusb-dec 11-1:49.100: probe with driver ttusb-dec failed with error -22 [ 232.231278][ T6316] ttusb_dec_send_command: command bulk message failed: error -22 [ 232.231495][ T6316] ttusb-dec 11-1:49.33: probe with driver ttusb-dec failed with error -22 [ 232.235193][ T6316] ttusb_dec_send_command: command bulk message failed: error -22 [ 232.235272][ T6316] ttusb-dec 11-1:49.89: probe with driver ttusb-dec failed with error -22 [ 232.238275][ T6316] usb 11-1: USB disconnect, device number 11 [ 232.263790][T10576] syz.5.1048 (10576): drop_caches: 3 [ 233.186149][T10579] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 233.448283][T10585] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 233.509377][T10588] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 233.518577][T10588] pci 0000:00:03.0: BAR 0 [io 0xc0a0-0xc0bf] [ 233.518638][T10588] pci 0000:00:03.0: BAR 1 [mem 0xfeaf5000-0xfeaf5fff] [ 233.518904][T10588] pci 0000:00:03.0: BAR 4 [mem 0xfe200000-0xfe203fff 64bit pref] [ 233.543527][T10588] pci 0000:00:03.0: Adding to iommu group 3 [ 233.566709][T10588] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 233.574033][T10546] Process accounting resumed [ 233.578281][T10588] pci 0000:00:03.0: BAR 1 [mem 0x81001000-0x81001fff]: assigned [ 233.584818][T10588] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f]: assigned [ 233.639296][T10591] vivid-000: disconnect [ 233.645575][T10590] vivid-000: reconnect [ 233.720343][ T8575] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 233.860294][ T8575] usb 10-1: device descriptor read/64, error -71 [ 234.100458][ T8575] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 234.230448][ T8575] usb 10-1: device descriptor read/64, error -71 [ 234.340712][ T8575] usb usb10-port1: attempt power cycle [ 234.555569][ T58] usb 9-1: unable to get BOS descriptor or descriptor too short [ 234.555595][ T58] usb 9-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 234.556272][ T58] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 234.556288][ T58] usb 9-1: can't read configurations, error -71 [ 234.680370][ T8575] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 234.702112][ T8575] usb 10-1: device descriptor read/8, error -71 [ 234.708576][T10603] ubi0: attaching mtd0 [ 234.718060][T10603] ubi0: scanning is finished [ 234.718106][T10603] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 234.896288][T10603] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 235.010303][ T8575] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 235.102929][ T8575] usb 10-1: device descriptor read/8, error -71 [ 235.251474][ T8575] usb usb10-port1: unable to enumerate USB device [ 235.698776][T10624] IPVS: Error connecting to the multicast addr [ 236.355439][ T43] kauditd_printk_skb: 33 callbacks suppressed [ 236.355453][ T43] audit: type=1800 audit(1789380628.148:2336): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 236.444143][ T43] audit: type=1800 audit(1789380628.238:2337): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 236.571587][ T43] audit: type=1800 audit(1789380628.368:2338): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 236.610871][ T43] audit: type=1800 audit(1789380628.408:2339): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 236.644261][ T43] audit: type=1800 audit(1789380628.438:2340): pid=10636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1069" name="file0" dev="tmpfs" ino=658 res=0 errno=0 [ 236.654725][T10642] /dev/nullb0: Can't open blockdev [ 236.681710][T10639] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1070'. [ 236.852171][ T43] audit: type=1800 audit(1789380628.648:2341): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 236.947038][T10646] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1072'. [ 237.103680][ T43] audit: type=1800 audit(1789380628.898:2342): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 237.117532][T10650] tipc: Started in network mode [ 237.117712][T10650] tipc: Node identity 4279bcb75ae7, cluster identity 4711 [ 237.117833][T10650] tipc: Enabled bearer , priority 0 [ 237.127936][T10650] tipc: Disabling bearer [ 237.254733][ T43] audit: type=1800 audit(1789380629.048:2343): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 237.369513][ T43] audit: type=1800 audit(1789380629.158:2344): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 237.401350][ T8575] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 237.444236][T10659] netlink: 'syz.6.1077': attribute type 7 has an invalid length. [ 237.455587][T10659] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1077'. [ 237.540483][ T8575] usb 9-1: device descriptor read/64, error -71 [ 237.892825][ T8575] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 237.946254][ T43] audit: type=1800 audit(1789380629.738:2345): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 238.020566][ T8575] usb 9-1: device descriptor read/64, error -71 [ 238.124224][T10670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1081'. [ 238.124251][T10670] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1081'. [ 238.124260][T10670] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1081'. [ 238.130524][ T8575] usb usb9-port1: attempt power cycle [ 238.370284][ T5834] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 238.488568][ T8575] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 238.510511][ T5834] usb 10-1: device descriptor read/64, error -71 [ 238.526130][ T8575] usb 9-1: device descriptor read/8, error -71 [ 238.749980][ T5834] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 238.769984][ T8575] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 238.790943][ T8575] usb 9-1: device descriptor read/8, error -71 [ 238.793814][ T156] nvmet: connect request for invalid subsystem testsubsys! [ 238.793948][T10679] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 238.879987][ T5834] usb 10-1: device descriptor read/64, error -71 [ 238.907281][ T8575] usb usb9-port1: unable to enumerate USB device [ 238.995617][T10694] misc userio: The device must be registered before sending interrupts [ 239.006356][ T5834] usb usb10-port1: attempt power cycle [ 239.012278][T10698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1087'. [ 239.350081][ T5834] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 239.366948][T10711] syzkaller0: entered promiscuous mode [ 239.370446][ T5834] usb 10-1: device descriptor read/8, error -71 [ 239.609990][ T5834] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 239.630579][ T5834] usb 10-1: device descriptor read/8, error -71 [ 239.740204][ T5834] usb usb10-port1: unable to enumerate USB device [ 241.720512][ T58] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 241.822412][ T43] kauditd_printk_skb: 24 callbacks suppressed [ 241.822430][ T43] audit: type=1800 audit(1789380633.618:2370): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 241.893025][ T58] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 241.920268][ T58] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 241.920326][ T58] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.920415][ T58] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 241.920760][ T58] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.963547][ T58] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 241.963963][ T58] usb 10-1: Product: syz [ 241.964101][ T58] usb 10-1: Manufacturer: syz [ 242.018921][ T43] audit: type=1800 audit(1789380633.808:2371): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=195550 res=0 errno=0 [ 242.025464][ T43] audit: type=1800 audit(1789380633.818:2372): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=195581 res=0 errno=0 [ 242.027652][ T43] audit: type=1800 audit(1789380633.818:2373): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=195557 res=0 errno=0 [ 242.042384][ T43] audit: type=1800 audit(1789380633.838:2374): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=195558 res=0 errno=0 [ 242.073384][ T58] cdc_wdm 10-1:1.0: skipping garbage [ 242.073420][ T58] cdc_wdm 10-1:1.0: skipping garbage [ 242.176262][ T58] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 242.176304][ T58] cdc_wdm 10-1:1.0: Unknown control protocol [ 242.182520][ T43] audit: type=1800 audit(1789380633.978:2375): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=195579 res=0 errno=0 [ 242.183110][ T43] audit: type=1800 audit(1789380633.978:2376): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=195580 res=0 errno=0 [ 242.183535][ T43] audit: type=1800 audit(1789380633.978:2377): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=195559 res=0 errno=0 [ 242.191833][ T43] audit: type=1800 audit(1789380633.988:2378): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=195601 res=0 errno=0 [ 242.202203][ T43] audit: type=1800 audit(1789380633.998:2379): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=195618 res=0 errno=0 [ 242.298194][ T58] usb 10-1: USB disconnect, device number 18 [ 242.513005][ T6463] usb 11-1: new low-speed USB device number 12 using dummy_hcd [ 242.611695][T10772] syz.4.1105 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 242.661645][ T6463] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 242.662652][ T6463] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 242.662674][ T6463] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 242.665351][ T6463] usb 11-1: string descriptor 0 read error: -22 [ 242.665445][ T6463] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.832257][ T58] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 242.883613][ T6463] cdc_ncm 11-1:1.0: bind() failure [ 242.924998][ T6463] cdc_ncm 11-1:1.1: CDC Union missing and no IAD found [ 242.925034][ T6463] cdc_ncm 11-1:1.1: bind() failure [ 242.936006][ T6463] usb 11-1: USB disconnect, device number 12 [ 242.980975][ T58] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 242.983599][ T58] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 242.983615][ T58] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.983624][ T58] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 242.983647][ T58] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.984923][ T58] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 242.984940][ T58] usb 10-1: Product: syz [ 242.984951][ T58] usb 10-1: Manufacturer: syz [ 242.989013][ T58] cdc_wdm 10-1:1.0: skipping garbage [ 242.989029][ T58] cdc_wdm 10-1:1.0: skipping garbage [ 242.991007][ T58] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 242.991021][ T58] cdc_wdm 10-1:1.0: Unknown control protocol [ 243.280826][T10788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1109'. [ 243.288741][T10788] syzkaller0: entered promiscuous mode [ 243.288766][T10788] syzkaller0: entered allmulticast mode [ 244.187352][T10811] tipc: Cannot configure node identity twice [ 244.665448][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1120'. [ 244.743303][T10833] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1120'. [ 245.025426][ T5834] usb 10-1: USB disconnect, device number 19 [ 245.433129][T10858] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1127'. [ 245.539637][ T5834] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 245.712163][ T5834] usb 10-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 245.713127][ T5834] usb 10-1: config 0 has an invalid interface number: 143 but max is 0 [ 245.713142][ T5834] usb 10-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 245.713151][ T5834] usb 10-1: config 0 has no interface number 0 [ 245.713164][ T5834] usb 10-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 245.713181][ T5834] usb 10-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 245.713194][ T5834] usb 10-1: config 0 interface 143 has no altsetting 0 [ 245.715672][ T5834] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.715685][ T5834] usb 10-1: Product: syz [ 245.715692][ T5834] usb 10-1: Manufacturer: syz [ 245.715699][ T5834] usb 10-1: SerialNumber: syz [ 245.717203][ T5834] usb 10-1: config 0 descriptor?? [ 245.768346][T10867] 9pnet_virtio: no channels available for device syz [ 245.933595][ T5834] usb 10-1: USB disconnect, device number 20 [ 246.220981][T10874] netlink: 'syz.4.1130': attribute type 39 has an invalid length. [ 246.338885][T10877] FAULT_INJECTION: forcing a failure. [ 246.338885][T10877] name fail_futex, interval 1, probability 0, space 0, times 0 [ 246.338914][T10877] CPU: 3 UID: 0 PID: 10877 Comm: syz.4.1131 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.338934][T10877] Tainted: [L]=SOFTLOCKUP [ 246.338939][T10877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 246.338948][T10877] Call Trace: [ 246.338954][T10877] [ 246.338960][T10877] dump_stack_lvl+0x100/0x190 [ 246.338982][T10877] should_fail_ex.cold+0x5/0xa [ 246.339002][T10877] get_futex_key+0x1d0/0x14f0 [ 246.339029][T10877] ? __pfx_get_futex_key+0x10/0x10 [ 246.339054][T10877] ? find_held_lock+0x2b/0x80 [ 246.339073][T10877] ? futex_wake+0x4ea/0x5e0 [ 246.339095][T10877] futex_wake+0xf4/0x5e0 [ 246.339116][T10877] ? futex_wait+0x11e/0x370 [ 246.339140][T10877] ? __pfx_futex_wake+0x10/0x10 [ 246.339163][T10877] ? rcu_read_lock_any_held+0x6a/0x90 [ 246.339183][T10877] ? find_held_lock+0x2b/0x80 [ 246.339201][T10877] ? ksys_write+0x190/0x250 [ 246.339218][T10877] ? ksys_write+0x190/0x250 [ 246.339237][T10877] do_futex+0x2b2/0x440 [ 246.339255][T10877] ? __pfx_do_futex+0x10/0x10 [ 246.339271][T10877] ? __pfx_do_sys_openat2+0x10/0x10 [ 246.339305][T10877] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 246.339338][T10877] __ia32_sys_futex_time32+0x2f4/0x470 [ 246.339365][T10877] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 246.339386][T10877] ? ksys_write+0x1ac/0x250 [ 246.339433][T10877] __do_fast_syscall_32+0x13a/0x8b0 [ 246.339469][T10877] do_fast_syscall_32+0x32/0x70 [ 246.339497][T10877] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 246.339521][T10877] RIP: 0023:0xf6feefec [ 246.339541][T10877] Code: Unable to access opcode bytes at 0xf6feefc2. [ 246.339550][T10877] RSP: 002b:00000000f53dd5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 246.339569][T10877] RAX: ffffffffffffffda RBX: 00000000f73e4f8c RCX: 0000000000000081 [ 246.339581][T10877] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 246.339593][T10877] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 246.339605][T10877] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 246.339616][T10877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.339637][T10877] [ 246.361510][ T58] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 246.487240][T10882] fuse: Unknown parameter '0x00000000000000060x000000000000000600000000000000000000004' [ 246.539628][ T58] usb 10-1: Using ep0 maxpacket: 16 [ 246.540082][ T58] usb 10-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 246.540859][ T58] usb 10-1: config 0 has an invalid interface number: 143 but max is 0 [ 246.540872][ T58] usb 10-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 246.540881][ T58] usb 10-1: config 0 has no interface number 0 [ 246.540894][ T58] usb 10-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 246.540912][ T58] usb 10-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 246.540926][ T58] usb 10-1: config 0 interface 143 has no altsetting 0 [ 246.542493][ T58] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.542505][ T58] usb 10-1: Product: syz [ 246.542512][ T58] usb 10-1: Manufacturer: syz [ 246.542520][ T58] usb 10-1: SerialNumber: syz [ 246.543687][ T58] usb 10-1: config 0 descriptor?? [ 246.763897][T10841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.764262][T10841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.778277][ T58] usb 10-1: USB disconnect, device number 21 [ 246.851500][ T43] kauditd_printk_skb: 63 callbacks suppressed [ 246.851517][ T43] audit: type=1800 audit(1789380638.648:2443): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 246.872948][ T43] audit: type=1800 audit(1789380638.668:2444): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 246.978293][ T43] audit: type=1800 audit(1789380638.768:2445): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 246.999064][T10902] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1138'. [ 246.999119][T10902] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1138'. [ 246.999170][T10902] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1138'. [ 246.999246][T10902] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1138'. [ 246.999295][T10902] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1138'. [ 246.999339][T10902] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1138'. [ 247.020408][ T5835] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.020433][ T5835] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.020450][ T5835] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.020467][ T5835] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.062561][ T43] audit: type=1800 audit(1789380638.858:2446): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 247.087527][T10906] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 247.311598][ T43] audit: type=1800 audit(1789380639.109:2447): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 247.387376][ T43] audit: type=1800 audit(1789380639.179:2448): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 247.450660][ T43] audit: type=1800 audit(1789380639.249:2449): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 247.500749][ T43] audit: type=1800 audit(1789380639.299:2450): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 247.534543][ T43] audit: type=1800 audit(1789380639.329:2451): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 247.681291][ T43] audit: type=1800 audit(1789380639.479:2452): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=197037 res=0 errno=0 [ 247.852108][T10946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.852348][T10946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.863988][T10946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.864412][T10946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.865436][T10946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.868013][T10946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.879543][T10946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.879955][T10946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.881618][T10946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.881946][T10946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.889022][T10946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.892042][T10946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.934919][T10956] random: crng reseeded on system resumption [ 248.187772][T10988] binder: 10987:10988 ioctl 4018620d 0 returned -22 [ 248.188039][T10988] binder: 10987:10988 ioctl c0306201 80000180 returned -14 [ 248.188140][T10988] binder: 10987:10988 ioctl c0306201 80000180 returned -14 [ 249.043241][T11031] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.044190][T11031] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 249.059373][ T5746] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 249.190003][ T8575] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 249.330812][T11038] FAULT_INJECTION: forcing a failure. [ 249.330812][T11038] name failslab, interval 1, probability 0, space 0, times 0 [ 249.330835][T11038] CPU: 3 UID: 0 PID: 11038 Comm: syz.0.1160 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.330850][T11038] Tainted: [L]=SOFTLOCKUP [ 249.330855][T11038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.330861][T11038] Call Trace: [ 249.330865][T11038] [ 249.330869][T11038] dump_stack_lvl+0x100/0x190 [ 249.330888][T11038] should_fail_ex.cold+0x5/0xa [ 249.330904][T11038] should_failslab+0xc2/0x120 [ 249.330921][T11038] __kmalloc_noprof+0xfc/0x840 [ 249.330934][T11038] ? ima_alloc_init_template+0x19d/0x6d0 [ 249.330952][T11038] ima_alloc_init_template+0x19d/0x6d0 [ 249.330967][T11038] ? take_dentry_name_snapshot+0x310/0x7c0 [ 249.330986][T11038] ima_store_measurement+0x1e3/0x5b0 [ 249.331002][T11038] ? __pfx_ima_store_measurement+0x10/0x10 [ 249.331023][T11038] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 249.331037][T11038] process_measurement+0x19cc/0x2350 [ 249.331056][T11038] ? __pfx_process_measurement+0x10/0x10 [ 249.331069][T11038] ? __kasan_slab_alloc+0x89/0x90 [ 249.331082][T11038] ? security_file_alloc+0x34/0x2c0 [ 249.331100][T11038] ? alloc_empty_file+0x79/0x1c0 [ 249.331114][T11038] ? do_file_open+0x20e/0x430 [ 249.331126][T11038] ? do_open_execat+0xd1/0x360 [ 249.331135][T11038] ? alloc_bprm+0x2d/0x9e0 [ 249.331145][T11038] ? __ia32_compat_sys_execveat+0xe4/0x130 [ 249.331156][T11038] ? __do_fast_syscall_32+0x13a/0x8b0 [ 249.331172][T11038] ? do_fast_syscall_32+0x32/0x70 [ 249.331190][T11038] ? hook_file_open+0x248/0x8e0 [ 249.331216][T11038] ? __pfx_apparmor_file_open+0x10/0x10 [ 249.331232][T11038] ? path_get+0x61/0x80 [ 249.331245][T11038] ? path_get+0x61/0x80 [ 249.331258][T11038] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 249.331275][T11038] ima_file_check+0xcc/0x120 [ 249.331290][T11038] ? __pfx_ima_file_check+0x10/0x10 [ 249.331307][T11038] security_file_post_open+0xc4/0x210 [ 249.331324][T11038] path_openat+0x5cd/0x2440 [ 249.331338][T11038] ? __pfx_path_openat+0x10/0x10 [ 249.331351][T11038] ? stack_trace_save+0x8e/0xc0 [ 249.331364][T11038] ? __pfx_stack_trace_save+0x10/0x10 [ 249.331379][T11038] do_file_open+0x20e/0x430 [ 249.331393][T11038] ? __pfx_do_file_open+0x10/0x10 [ 249.331405][T11038] ? kasan_save_track+0x14/0x30 [ 249.331417][T11038] ? __kasan_slab_alloc+0x89/0x90 [ 249.331429][T11038] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 249.331455][T11038] do_open_execat+0xd1/0x360 [ 249.331465][T11038] ? __pfx_do_open_execat+0x10/0x10 [ 249.331477][T11038] ? __might_fault+0xc5/0x140 [ 249.331493][T11038] ? __might_fault+0xc5/0x140 [ 249.331510][T11038] alloc_bprm+0x2d/0x9e0 [ 249.331522][T11038] do_execveat_common.isra.0+0x19c/0x580 [ 249.331534][T11038] ? do_getname+0x191/0x390 [ 249.331550][T11038] __ia32_compat_sys_execveat+0xe4/0x130 [ 249.331563][T11038] __do_fast_syscall_32+0x13a/0x8b0 [ 249.331581][T11038] do_fast_syscall_32+0x32/0x70 [ 249.331597][T11038] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 249.331611][T11038] RIP: 0023:0xf709efec [ 249.331625][T11038] Code: Unable to access opcode bytes at 0xf709efc2. [ 249.331630][T11038] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000166 [ 249.331641][T11038] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 249.331647][T11038] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 249.331654][T11038] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 249.331660][T11038] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 249.331666][T11038] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 249.331679][T11038] [ 249.349487][ T8575] usb 11-1: Using ep0 maxpacket: 8 [ 249.350179][ T8575] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 249.351141][ T8575] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10 [ 249.351165][ T8575] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24624, setting to 1024 [ 249.351196][ T8575] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.356279][ T8575] usb 11-1: config 0 descriptor?? [ 249.567374][ T8575] iowarrior 11-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 249.577849][ T5834] usb 11-1: USB disconnect, device number 13 [ 249.809328][ T63] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 249.949497][ T63] usb 9-1: device descriptor read/64, error -71 [ 250.067365][T11073] F2FS-fs: Conflicting test_dummy_encryption options [ 250.199369][ T63] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 250.339325][ T63] usb 9-1: device descriptor read/64, error -71 [ 250.390975][T11094] 9pnet_virtio: no channels available for device syz [ 250.461922][ T63] usb usb9-port1: attempt power cycle [ 250.809324][ T63] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 250.840640][ T63] usb 9-1: device descriptor read/8, error -71 [ 251.089301][ T63] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 251.119982][ T63] usb 9-1: device descriptor read/8, error -71 [ 251.230178][ T63] usb usb9-port1: unable to enumerate USB device [ 251.667102][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 251.669841][T11170] 9p: Bad value for 'rfdno' [ 251.909279][ T8575] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 252.061900][ T8575] usb 11-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 252.063258][ T8575] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.068154][ T43] kauditd_printk_skb: 47 callbacks suppressed [ 252.068172][ T43] audit: type=1800 audit(1789380643.859:2500): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=197646 res=0 errno=0 [ 252.073794][ T43] audit: type=1800 audit(1789380643.869:2501): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=197675 res=0 errno=0 [ 252.074651][ T43] audit: type=1800 audit(1789380643.869:2502): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=197653 res=0 errno=0 [ 252.075467][ T43] audit: type=1800 audit(1789380643.869:2503): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=197654 res=0 errno=0 [ 252.076324][ T43] audit: type=1800 audit(1789380643.869:2504): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=197655 res=0 errno=0 [ 252.080268][ T43] audit: type=1800 audit(1789380643.879:2505): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=197695 res=0 errno=0 [ 252.393057][ T43] audit: type=1800 audit(1789380644.189:2506): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 252.408464][T11174] openvswitch: netlink: IPv4 tun info is not correct [ 252.412307][T11175] netlink: 'syz.0.1179': attribute type 1 has an invalid length. [ 252.427974][T11175] 8021q: adding VLAN 0 to HW filter on device bond6 [ 252.434832][T11176] 8021q: adding VLAN 0 to HW filter on device bond6 [ 252.434990][T11176] bond6: (slave sit2): The slave device specified does not support setting the MAC address [ 252.435271][T11176] bond6: (slave sit2): Error -95 calling set_mac_address [ 252.495621][T11170] __nla_validate_parse: 28 callbacks suppressed [ 252.495635][T11170] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1178'. [ 252.505870][ T43] audit: type=1800 audit(1789380644.299:2507): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 252.506830][ T43] audit: type=1800 audit(1789380644.299:2508): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=198036 res=0 errno=0 [ 252.537011][ T43] audit: type=1800 audit(1789380644.329:2509): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 252.561610][ T8575] input: HID 04d8:c002 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/0003:04D8:C002.000B/input/input16 [ 252.649207][ T8575] rc_core: IR keymap rc-rc6-mce not found [ 252.649220][ T8575] Registered IR keymap rc-empty [ 252.656883][ T8575] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/0003:04D8:C002.000B/rc/rc0 [ 252.658450][ T8575] input: HID 04d8:c002 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/0003:04D8:C002.000B/rc/rc0/input17 [ 252.666623][ T8575] hid-picolcd 0003:04D8:C002.000B: No report with id 0x92 found [ 252.759216][T11198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.759426][T11198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.919371][ T63] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 253.079968][ T63] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 253.080887][ T63] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 253.080906][ T63] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 253.080923][ T63] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 253.080955][ T63] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 253.080976][ T63] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 253.082298][ T63] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 253.082315][ T63] usb 9-1: Product: syz [ 253.082329][ T63] usb 9-1: Manufacturer: syz [ 253.089490][ T63] cdc_wdm 9-1:1.0: skipping garbage [ 253.089506][ T63] cdc_wdm 9-1:1.0: skipping garbage [ 253.094349][ T63] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 253.094361][ T63] cdc_wdm 9-1:1.0: Unknown control protocol [ 253.347295][ C2] wdm_int_callback: 20 callbacks suppressed [ 253.347312][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 253.347320][ C2] wdm_int_callback: 20 callbacks suppressed [ 253.347326][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 253.347541][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 253.347550][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 253.347676][ T58] usb 9-1: USB disconnect, device number 28 [ 253.347768][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 253.347777][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 253.347784][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 253.382765][T11204] jffs2: notice: (11204) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 253.431787][T11207] mac80211_hwsim hwsim17 wlan0: entered allmulticast mode [ 254.373479][ T5746] Bluetooth: hci2: unexpected event for opcode 0x2035 [ 254.693716][ T6463] usb 11-1: USB disconnect, device number 14 [ 255.142353][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.189274][ T58] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 255.361242][ T58] usb 11-1: unable to get BOS descriptor or descriptor too short [ 255.361269][ T58] usb 11-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 255.361944][ T58] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 255.361960][ T58] usb 11-1: can't read configurations, error -71 [ 255.487400][T11253] bond7: entered allmulticast mode [ 255.498596][T11253] 8021q: adding VLAN 0 to HW filter on device bond8 [ 255.500943][T11253] bond8: entered allmulticast mode [ 255.501131][T11253] bond7: (slave bond8): Enslaving as an active interface with an up link [ 255.509829][T11255] 8021q: adding VLAN 0 to HW filter on device bond9 [ 255.510616][T11255] bond9: entered allmulticast mode [ 255.510906][T11255] bond7: (slave bond9): Enslaving as an active interface with an up link [ 255.513669][T11253] bond7 (unregistering): (slave bond8): Releasing backup interface [ 255.514172][T11253] bond8: left allmulticast mode [ 255.517569][T11253] bond7 (unregistering): (slave bond9): Releasing backup interface [ 255.518224][T11253] bond9: left allmulticast mode [ 255.520188][T11253] bond7 (unregistering): Released all slaves [ 255.904324][T11267] veth3: entered promiscuous mode [ 255.904346][T11267] veth3: entered allmulticast mode [ 256.040249][T11272] lo: entered allmulticast mode [ 256.040700][T11272] bond0: entered allmulticast mode [ 256.041216][T11272] dummy0: entered allmulticast mode [ 256.041500][T11272] eql: entered allmulticast mode [ 256.041745][T11272] ifb0: entered allmulticast mode [ 256.041983][T11272] ifb1: entered allmulticast mode [ 256.045800][T11272] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 256.054495][T11272] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 256.057677][T11272] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 256.057760][T11272] hwsim0: entered allmulticast mode [ 256.057858][T11272] ieee802154 phy0 wpan0: entered allmulticast mode [ 256.058022][T11272] teql0: entered allmulticast mode [ 256.058114][T11272] tunl0: entered allmulticast mode [ 256.058211][T11272] gre0: entered allmulticast mode [ 256.058278][T11272] gretap0: entered allmulticast mode [ 256.058345][T11272] erspan0: entered allmulticast mode [ 256.058414][T11272] ip_vti0: entered allmulticast mode [ 256.058513][T11272] ip6_vti0: entered allmulticast mode [ 256.058586][T11272] sit0: entered allmulticast mode [ 256.058660][T11272] ip6tnl0: entered allmulticast mode [ 256.058738][T11272] ip6gre0: entered allmulticast mode [ 256.058810][T11272] lapb0: entered allmulticast mode [ 256.058959][T11272] lapb1: entered allmulticast mode [ 256.061258][T11272] lapb2: entered allmulticast mode [ 256.061457][T11272] lapb3: entered allmulticast mode [ 256.061697][T11272] lapb4: entered allmulticast mode [ 256.062017][T11272] lapb6: entered allmulticast mode [ 256.062270][T11272] lowpan0: entered allmulticast mode [ 256.062349][T11272] bridge0: entered allmulticast mode [ 256.062552][T11272] lapb5: entered allmulticast mode [ 256.062694][T11272] netdevsim netdevsim1 eth2: entered allmulticast mode [ 256.062939][T11272] netdevsim netdevsim1 eth3: entered allmulticast mode [ 256.063155][T11272] netdevsim netdevsim1 eth4: entered allmulticast mode [ 256.063372][T11272] netdevsim netdevsim1 eth5: entered allmulticast mode [ 256.063734][T11272] netdevsim netdevsim2 eth6: entered allmulticast mode [ 256.064485][T11272] netdevsim netdevsim2 eth7: entered allmulticast mode [ 256.064756][T11272] netdevsim netdevsim2 eth8: entered allmulticast mode [ 256.064986][T11272] netdevsim netdevsim2 eth9: entered allmulticast mode [ 256.065414][T11272] ieee802154 phy0 wpan3: entered allmulticast mode [ 256.065475][T11272] syztnl1: entered allmulticast mode [ 256.376763][T11294] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3952. macoff=96 [ 256.779023][T11306] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1213'. [ 256.779360][T11302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1213'. [ 257.082612][ T43] kauditd_printk_skb: 65 callbacks suppressed [ 257.082631][ T43] audit: type=1800 audit(1789380648.879:2575): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=199449 res=0 errno=0 [ 257.086742][ T43] audit: type=1800 audit(1789380648.879:2576): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=199464 res=0 errno=0 [ 257.327265][ T43] audit: type=1800 audit(1789380649.119:2577): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 257.385798][ T43] audit: type=1800 audit(1789380649.179:2578): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 257.465124][T11332] Trying to write to read-only block-device nullb0 [ 257.491188][T11330] netlink: 11148 bytes leftover after parsing attributes in process `syz.4.1222'. [ 257.491435][T11330] netlink: 11148 bytes leftover after parsing attributes in process `syz.4.1222'. [ 257.491621][T11330] netlink: 11148 bytes leftover after parsing attributes in process `syz.4.1222'. [ 257.491944][T11330] netlink: 11148 bytes leftover after parsing attributes in process `syz.4.1222'. [ 257.492125][T11330] netlink: 11148 bytes leftover after parsing attributes in process `syz.4.1222'. [ 257.492306][T11330] netlink: 11148 bytes leftover after parsing attributes in process `syz.4.1222'. [ 257.492482][T11330] netlink: 11148 bytes leftover after parsing attributes in process `syz.4.1222'. [ 257.526150][T11330] __nla_validate_parse: 16 callbacks suppressed [ 257.526162][T11330] netlink: 11148 bytes leftover after parsing attributes in process `syz.4.1222'. [ 257.526732][T11330] netlink: 11148 bytes leftover after parsing attributes in process `syz.4.1222'. [ 257.526838][T11330] netlink: 11148 bytes leftover after parsing attributes in process `syz.4.1222'. [ 257.527018][T11330] netlink: 11148 bytes leftover after parsing attributes in process `syz.4.1222'. [ 257.527121][T11330] netlink: 11148 bytes leftover after parsing attributes in process `syz.4.1222'. [ 257.527223][T11330] netlink: 11148 bytes leftover after parsing attributes in process `syz.4.1222'. [ 257.527318][T11330] netlink: 11148 bytes leftover after parsing attributes in process `syz.4.1222'. [ 257.527416][T11330] netlink: 11148 bytes leftover after parsing attributes in process `syz.4.1222'. [ 257.527507][T11330] netlink: 11148 bytes leftover after parsing attributes in process `syz.4.1222'. [ 257.527930][T11330] netlink: 11148 bytes leftover after parsing attributes in process `syz.4.1222'. [ 257.654289][ T43] audit: type=1326 audit(1789380649.449:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.4.1223" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 257.654742][ T43] audit: type=1326 audit(1789380649.449:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.4.1223" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 257.654905][ T43] audit: type=1326 audit(1789380649.449:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.4.1223" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 257.655139][ T43] audit: type=1326 audit(1789380649.449:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.4.1223" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 257.655571][ T43] audit: type=1326 audit(1789380649.449:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.4.1223" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 257.655814][ T43] audit: type=1326 audit(1789380649.449:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.4.1223" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 257.666493][T11344] 9p: Bad value for 'wfdno' [ 257.756012][T11346] IPVS: Error joining to the multicast group [ 257.873430][T11351] fuse: Bad value for 'fd' [ 258.240323][T11327] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 258.240591][T11327] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 258.240679][T11327] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 258.502898][T11387] 9pnet_virtio: no channels available for device syz [ 258.947670][T11405] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 259.105212][T11411] 8021q: adding VLAN 0 to HW filter on device bond7 [ 259.124762][T11411] macvlan2: entered promiscuous mode [ 259.124781][T11411] macvlan2: entered allmulticast mode [ 259.127522][T11411] bond7: (slave macvlan2): Opening slave failed [ 259.144769][T11414] netlink: 'syz.4.1241': attribute type 4 has an invalid length. [ 259.144862][T11415] netlink: 'syz.4.1241': attribute type 4 has an invalid length. [ 259.539246][ T5746] Bluetooth: hci2: command 0x0406 tx timeout [ 260.259589][ T5746] Bluetooth: hci1: command 0x0419 tx timeout [ 260.270226][ T5746] Bluetooth: hci4: command 0x0c1a tx timeout [ 260.406742][T11439] Scaler: ================= START STATUS ================= [ 260.406754][T11439] Scaler: ================== END STATUS ================== [ 260.823531][T11461] mac80211_hwsim hwsim20 syzkaller0: entered promiscuous mode [ 260.823547][T11461] mac80211_hwsim hwsim20 syzkaller0: entered allmulticast mode [ 260.823737][T11460] tipc: Enabled bearer , priority 0 [ 260.830479][T11463] tipc: Resetting bearer [ 260.853458][T11457] IPv6: NLM_F_CREATE should be specified when creating new route [ 261.386689][T11478] syzkaller1: entered promiscuous mode [ 261.386759][T11478] syzkaller1: entered allmulticast mode [ 261.690340][T11499] ubi0: attaching mtd0 [ 261.690360][T11499] ubi0 error: ubi_attach_mtd_dev: bad VID header (12402) or data offsets (12466) [ 261.810083][T11508] netlink: 'syz.0.1257': attribute type 10 has an invalid length. [ 261.822592][T11509] netlink: 'syz.0.1257': attribute type 10 has an invalid length. [ 261.838450][T11508] team0 (unregistering): Port device team_slave_1 removed [ 261.847908][T11508] team0 (unregistering): Port device dummy0 removed [ 261.912090][T11511] veth1: entered promiscuous mode [ 261.922599][T11511] veth1: left promiscuous mode [ 261.971404][ T58] tipc: Node number set to 413056183 [ 262.238930][ T43] kauditd_printk_skb: 65 callbacks suppressed [ 262.238947][ T43] audit: type=1800 audit(1789380654.029:2650): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 262.240092][T11533] loop5: detected capacity change from 0 to 7 [ 262.244717][T11533] Dev loop5: unable to read RDB block 7 [ 262.244738][T11533] loop5: unable to read partition table [ 262.244828][T11533] loop5: partition table beyond EOD, truncated [ 262.244837][T11533] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 262.250319][ T43] audit: type=1326 audit(1789380654.049:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11532 comm="syz.4.1263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 262.252707][ T43] audit: type=1326 audit(1789380654.049:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11532 comm="syz.4.1263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 262.253800][ T43] audit: type=1326 audit(1789380654.049:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11532 comm="syz.4.1263" exe="/syz-executor" sig=0 arch=40000003 syscall=377 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 262.253823][ T43] audit: type=1326 audit(1789380654.049:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11532 comm="syz.4.1263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 262.253842][ T43] audit: type=1326 audit(1789380654.049:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11532 comm="syz.4.1263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 262.256401][ T43] audit: type=1326 audit(1789380654.049:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11532 comm="syz.4.1263" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 262.256425][ T43] audit: type=1326 audit(1789380654.049:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11532 comm="syz.4.1263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 262.256444][ T43] audit: type=1326 audit(1789380654.049:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11532 comm="syz.4.1263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 262.256636][ T43] audit: type=1326 audit(1789380654.049:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11532 comm="syz.4.1263" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 262.378257][ T5746] Bluetooth: hci4: unexpected event for opcode 0x0809 [ 262.378534][ T5746] Bluetooth: hci4: unexpected event for opcode 0x0809 [ 262.385255][T11541] input: syz1 as /devices/virtual/input/input18 [ 262.425497][T11541] db_root: cannot open: ./my_ [ 262.425592][T11542] db_root: cannot open: ./my_ [ 262.533986][T11560] netlink: 'syz.5.1269': attribute type 10 has an invalid length. [ 262.540026][T11560] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 263.054465][T11598] FAULT_INJECTION: forcing a failure. [ 263.054465][T11598] name failslab, interval 1, probability 0, space 0, times 0 [ 263.054487][T11598] CPU: 3 UID: 0 PID: 11598 Comm: syz.0.1278 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.054503][T11598] Tainted: [L]=SOFTLOCKUP [ 263.054507][T11598] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 263.054514][T11598] Call Trace: [ 263.054517][T11598] [ 263.054522][T11598] dump_stack_lvl+0x100/0x190 [ 263.054541][T11598] should_fail_ex.cold+0x5/0xa [ 263.054555][T11598] should_failslab+0xc2/0x120 [ 263.054570][T11598] __kmalloc_cache_noprof+0x91/0x6d0 [ 263.054588][T11598] ? resv_map_alloc+0x46/0x400 [ 263.054603][T11598] resv_map_alloc+0x46/0x400 [ 263.054617][T11598] hugetlbfs_get_inode+0x385/0x700 [ 263.054635][T11598] ? do_raw_spin_lock+0x128/0x260 [ 263.054654][T11598] hugetlb_file_setup+0x15b/0x5b0 [ 263.054666][T11598] memfd_alloc_file+0xc2/0x610 [ 263.054681][T11598] ? _raw_spin_unlock+0x28/0x50 [ 263.054696][T11598] ? __pfx_memfd_alloc_file+0x10/0x10 [ 263.054715][T11598] __do_sys_memfd_create+0x236/0x3d0 [ 263.054733][T11598] __do_fast_syscall_32+0x13a/0x8b0 [ 263.054751][T11598] do_fast_syscall_32+0x32/0x70 [ 263.054768][T11598] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 263.054781][T11598] RIP: 0023:0xf709efec [ 263.054793][T11598] Code: Unable to access opcode bytes at 0xf709efc2. [ 263.054810][T11598] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000164 [ 263.054822][T11598] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000004 [ 263.054829][T11598] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 263.054835][T11598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 263.054841][T11598] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 263.054847][T11598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 263.054861][T11598] [ 263.122868][T11601] dummy0: left allmulticast mode [ 263.136067][T11601] lapb0: left allmulticast mode [ 263.889293][ T6036] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 263.989705][T11610] Process accounting paused [ 264.059242][ T6036] usb 10-1: Using ep0 maxpacket: 16 [ 264.059796][ T6036] usb 10-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 264.062479][ T6036] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.062492][ T6036] usb 10-1: Product: syz [ 264.062500][ T6036] usb 10-1: Manufacturer: syz [ 264.062507][ T6036] usb 10-1: SerialNumber: syz [ 264.269997][ T6036] usb 10-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 264.274747][ T6036] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 264.275164][ T6036] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 264.275199][ T6036] usb 10-1: media controller created [ 264.289992][ T6036] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 264.299503][T11684] __nla_validate_parse: 41 callbacks suppressed [ 264.299520][T11684] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1294'. [ 264.301283][T11684] random: crng reseeded on system resumption [ 264.313997][T11685] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.314153][T11685] bridge0: port 2(bridge_slave_1) entered listening state [ 264.314364][T11685] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.314443][T11685] bridge0: port 1(bridge_slave_0) entered listening state [ 264.327047][T11685] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 264.492011][T11690] netlink: 'syz.5.1284': attribute type 1 has an invalid length. [ 264.576094][ T6036] zl10353_read_register: readreg error (reg=127, ret==-110) [ 264.598828][T11690] 8021q: adding VLAN 0 to HW filter on device bond4 [ 264.609738][T11647] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 264.618992][T11647] bond4: (slave batadv1): making interface the new active one [ 264.622806][T11647] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 264.884348][ T6036] dvb_usb_gl861 10-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 264.889711][ T5746] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 264.905681][ T6036] usb 10-1: USB disconnect, device number 22 [ 265.718726][T11739] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1307'. [ 265.770860][T11741] cgroup: none used incorrectly [ 265.846569][T11744] Cannot find add_set index 1 as target [ 265.904270][T11747] input: syz0 as /devices/virtual/input/input20 [ 266.170984][T11764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1313'. [ 266.170998][T11764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1313'. [ 266.267108][T11770] msr: Write to unrecognized MSR 0x1a0 by syz.5.1311 (pid: 11770), tainting CPU_OUT_OF_SPEC. [ 266.267122][T11770] msr: See https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/about for details. [ 266.539665][T11772] dns_resolver: Unsupported content type (5) [ 266.594515][T11773] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 266.594587][T11773] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 266.596074][T11773] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 266.596134][T11773] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 266.612056][ T1128] ata1.00: exception Emask 0x0 SAct 0x10 SErr 0x0 action 0x6 [ 266.612073][ T1128] ata1.00: waking up from sleep [ 266.612109][ T1128] ata1: hard resetting link [ 266.849307][ T5833] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 266.932699][ T1128] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 266.933679][ T1128] ata1.00: configured for UDMA/100 [ 266.933821][ T1128] ata1: EH complete [ 267.009530][ T5833] usb 9-1: Using ep0 maxpacket: 32 [ 267.012223][ T5833] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 267.013440][ T5833] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 267.013460][ T5833] usb 9-1: config 0 has no interface number 0 [ 267.015295][ T5833] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.015313][ T5833] usb 9-1: Product: syz [ 267.015324][ T5833] usb 9-1: Manufacturer: syz [ 267.015335][ T5833] usb 9-1: SerialNumber: syz [ 267.021867][ T5833] usb 9-1: config 0 descriptor?? [ 267.024847][ T5833] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 267.024860][ T5833] usb 9-1: selecting invalid altsetting 1 [ 267.024868][ T5833] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 267.041010][ T5833] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 267.041138][ T5833] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 267.041162][ T5833] usb 9-1: media controller created [ 267.051187][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.311392][T11791] kvm: apic: phys broadcast and lowest prio [ 267.320318][ T43] kauditd_printk_skb: 96 callbacks suppressed [ 267.320333][ T43] audit: type=1800 audit(1789380659.119:2756): pid=11791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1317" name="remove" dev="sysfs" ino=2121 res=0 errno=0 [ 267.854037][ T43] audit: type=1800 audit(1789380659.649:2757): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16051 res=0 errno=0 [ 267.892450][T11793] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 267.926362][ T43] audit: type=1800 audit(1789380659.719:2758): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16180 res=0 errno=0 [ 267.939403][ T5746] Bluetooth: hci2: command 0x0406 tx timeout [ 267.941330][ T58] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 267.941345][ T58] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 267.959967][ T43] audit: type=1800 audit(1789380659.759:2759): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=86320 res=0 errno=0 [ 267.974364][ T43] audit: type=1800 audit(1789380659.769:2760): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=202098 res=0 errno=0 [ 268.010197][ T43] audit: type=1800 audit(1789380659.809:2761): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 268.018975][T11799] tipc: Enabled bearer , priority 10 [ 268.023190][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.023258][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.023314][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.023370][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.023424][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.023485][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.023544][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.023603][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.023658][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.023715][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.023769][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.023824][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.023878][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.023932][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.023986][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.024041][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.024096][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.024156][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.024209][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.024265][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.024321][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.024413][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.024468][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.024544][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.024599][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.024653][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.024707][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.024762][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.024817][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.024870][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.024925][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.024979][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.025034][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.025087][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.025148][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.025215][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.025270][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.025324][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.028201][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.028456][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.030165][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.030453][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.030736][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.032431][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.032514][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.032573][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.032628][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.032683][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.032742][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.032796][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.032850][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.032904][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.032958][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.033012][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.033066][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.033120][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.033183][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.033237][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.033292][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.033352][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.033411][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.033466][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.033524][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.033579][T11799] tipc: Enabling of bearer rejected, already enabled [ 268.091809][T11800] dlm: Unknown command passed to DLM device : 0 [ 268.091809][T11800] [ 268.117513][ T5833] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 268.123118][ T43] audit: type=1800 audit(1789380659.919:2762): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15406 res=0 errno=0 [ 268.123208][ T5833] zl10353_read_register: readreg error (reg=127, ret==-110) [ 268.264440][ T5833] usb 9-1: USB disconnect, device number 29 [ 268.265937][ T43] audit: type=1800 audit(1789380660.059:2763): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=202007 res=0 errno=0 [ 268.273160][ T43] audit: type=1800 audit(1789380660.069:2764): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=202008 res=0 errno=0 [ 268.273197][ T43] audit: type=1800 audit(1789380660.069:2765): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=201987 res=0 errno=0 [ 268.376398][T11809] bpf: Bad value for 'mode' [ 269.017164][T11822] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 269.104248][T11821] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1330'. [ 269.104271][T11821] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1330'. [ 269.107469][T11821] geneve2: entered promiscuous mode [ 269.158353][T11827] bond1: entered allmulticast mode [ 269.581527][T11861] nvme nvme0: failed to connect socket: -512 [ 269.582499][T11861] [ 269.586178][T11861] ====================================================== [ 269.589137][T11861] WARNING: possible circular locking dependency detected [ 269.592117][T11861] syzkaller #0 Tainted: G L [ 269.594776][T11861] ------------------------------------------------------ [ 269.597730][T11861] syz.5.1342/11861 is trying to acquire lock: [ 269.600405][T11861] ffff888013527b00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 269.604723][T11861] [ 269.604723][T11861] but task is already holding lock: [ 269.607766][T11861] ffffffff8ff50980 (nvmf_dev_mutex){+.+.}-{4:4}, at: nvmf_dev_write+0xa6/0xb60 [ 269.611502][T11861] [ 269.611502][T11861] which lock already depends on the new lock. [ 269.611502][T11861] [ 269.615853][T11861] [ 269.615853][T11861] the existing dependency chain (in reverse order) is: [ 269.619578][T11861] [ 269.619578][T11861] -> #4 (nvmf_dev_mutex){+.+.}-{4:4}: [ 269.622729][T11861] lock_acquire+0x1d1/0x380 [ 269.624917][T11861] __mutex_lock+0x1a4/0x1bd0 [ 269.627095][T11861] nvmf_dev_show+0x26/0x210 [ 269.629256][T11861] traverse.part.0.constprop.0+0x107/0x650 [ 269.631926][T11861] seq_read_iter+0x93f/0x1270 [ 269.634084][T11861] seq_read+0x344/0x4d0 [ 269.636076][T11861] vfs_read+0x1e4/0xb40 [ 269.637814][T11861] ksys_pread64+0x161/0x1a0 [ 269.639411][T11861] __do_fast_syscall_32+0x13a/0x8b0 [ 269.641228][T11861] do_fast_syscall_32+0x32/0x70 [ 269.642914][T11861] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 269.645044][T11861] [ 269.645044][T11861] -> #3 (&p->lock){+.+.}-{4:4}: [ 269.647212][T11861] lock_acquire+0x1d1/0x380 [ 269.648822][T11861] __mutex_lock+0x1a4/0x1bd0 [ 269.650460][T11861] seq_read_iter+0xe1/0x1270 [ 269.651980][T11861] kernfs_fop_read_iter+0x46c/0x610 [ 269.653689][T11861] __kernel_read+0x397/0xad0 [ 269.655273][T11861] integrity_kernel_read+0x7e/0xb0 [ 269.657043][T11861] ima_calc_file_hash_tfm+0x25e/0x350 [ 269.658900][T11861] ima_calc_file_hash+0x1e3/0x380 [ 269.660673][T11861] ima_collect_measurement+0x94f/0xb30 [ 269.662544][T11861] process_measurement+0xdfe/0x2350 [ 269.664325][T11861] ima_file_check+0xcc/0x120 [ 269.665941][T11861] security_file_post_open+0xc4/0x210 [ 269.667787][T11861] path_openat+0x5cd/0x2440 [ 269.669388][T11861] do_file_open+0x20e/0x430 [ 269.670990][T11861] do_sys_openat2+0x10f/0x1e0 [ 269.672635][T11861] __ia32_compat_sys_openat+0x12d/0x210 [ 269.674536][T11861] do_int80_emulation+0x166/0x650 [ 269.676175][T11861] asm_int80_emulation+0x1a/0x20 [ 269.677841][T11861] [ 269.677841][T11861] -> #2 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 269.680520][T11861] lock_acquire+0x1d1/0x380 [ 269.682102][T11861] __mutex_lock+0x1a4/0x1bd0 [ 269.683716][T11861] process_measurement+0x5ab/0x2350 [ 269.685507][T11861] ima_file_check+0xcc/0x120 [ 269.687113][T11861] security_file_post_open+0xc4/0x210 [ 269.688981][T11861] path_openat+0x5cd/0x2440 [ 269.690573][T11861] do_file_open+0x20e/0x430 [ 269.692158][T11861] file_open_name+0x1c3/0x3e0 [ 269.693805][T11861] filp_open+0x2e/0x50 [ 269.695269][T11861] kernel_read_file_from_path_initns+0xec/0x240 [ 269.697381][T11861] _request_firmware+0x733/0x13c0 [ 269.699108][T11861] request_firmware+0x35/0x50 [ 269.700763][T11861] reg_reload_regdb+0x85/0x460 [ 269.702426][T11861] genl_family_rcv_msg_doit+0x214/0x300 [ 269.704331][T11861] genl_rcv_msg+0x560/0x800 [ 269.705921][T11861] netlink_rcv_skb+0x159/0x420 [ 269.707575][T11861] genl_rcv+0x28/0x40 [ 269.709022][T11861] netlink_unicast+0x585/0x850 [ 269.710682][T11861] netlink_sendmsg+0x8b0/0xda0 [ 269.712340][T11861] ____sys_sendmsg+0xa4d/0xbe0 [ 269.713998][T11861] ___sys_sendmsg+0x190/0x1e0 [ 269.715619][T11861] __sys_sendmsg+0x160/0x210 [ 269.717236][T11861] __do_fast_syscall_32+0x13a/0x8b0 [ 269.719009][T11861] do_fast_syscall_32+0x32/0x70 [ 269.720702][T11861] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 269.722814][T11861] [ 269.722814][T11861] -> #1 (cb_lock){++++}-{4:4}: [ 269.725022][T11861] lock_acquire+0x1d1/0x380 [ 269.726599][T11861] down_read+0x99/0x4c0 [ 269.728076][T11861] genl_release+0x7e/0x1d0 [ 269.729636][T11861] netlink_release+0x105e/0x2000 [ 269.731310][T11861] __sock_release+0xb3/0x260 [ 269.732871][T11861] sock_close+0x1c/0x30 [ 269.734246][T11861] __fput+0x3ff/0xb50 [ 269.735626][T11861] fput_close_sync+0x118/0x250 [ 269.737190][T11861] __x64_sys_close+0x8b/0x120 [ 269.738781][T11861] do_syscall_64+0x121/0x770 [ 269.740346][T11861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.742265][T11861] [ 269.742265][T11861] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}: [ 269.744834][T11861] check_prev_add+0xeb/0xe60 [ 269.746379][T11861] __lock_acquire+0x1528/0x1f40 [ 269.748062][T11861] lock_acquire+0x1d1/0x380 [ 269.749650][T11861] down_write+0x8b/0x1f0 [ 269.751172][T11861] __sock_release+0x86/0x260 [ 269.752779][T11861] sock_close+0x1c/0x30 [ 269.754251][T11861] __fput+0x3ff/0xb50 [ 269.755675][T11861] __fput_sync+0xd7/0x100 [ 269.757196][T11861] nvme_tcp_alloc_queue.isra.0+0xd6d/0x1770 [ 269.759192][T11861] nvme_tcp_configure_admin_queue+0x26/0x530 [ 269.761154][T11861] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 269.762844][T11861] nvme_tcp_create_ctrl+0x970/0xd90 [ 269.764620][T11861] nvmf_dev_write+0x4ee/0xb60 [ 269.766246][T11861] vfs_write+0x2aa/0x1050 [ 269.767766][T11861] ksys_write+0x12a/0x250 [ 269.769306][T11861] __do_fast_syscall_32+0x13a/0x8b0 [ 269.771098][T11861] do_fast_syscall_32+0x32/0x70 [ 269.772780][T11861] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 269.774883][T11861] [ 269.774883][T11861] other info that might help us debug this: [ 269.774883][T11861] [ 269.778003][T11861] Chain exists of: [ 269.778003][T11861] &sb->s_type->i_mutex_key#13 --> &p->lock --> nvmf_dev_mutex [ 269.778003][T11861] [ 269.782033][T11861] Possible unsafe locking scenario: [ 269.782033][T11861] [ 269.784232][T11861] CPU0 CPU1 [ 269.785830][T11861] ---- ---- [ 269.787445][T11861] lock(nvmf_dev_mutex); [ 269.788743][T11861] lock(&p->lock); [ 269.790616][T11861] lock(nvmf_dev_mutex); [ 269.792646][T11861] lock(&sb->s_type->i_mutex_key#13); [ 269.794312][T11861] [ 269.794312][T11861] *** DEADLOCK *** [ 269.794312][T11861] [ 269.796817][T11861] locks held by syz.5.1342/11861: 1, last CPU#1: [ 269.798770][T11861] #0: ffffffff8ff50980 (nvmf_dev_mutex){+.+.}-{4:4}, at: nvmf_dev_write+0xa6/0xb60 [ 269.801663][T11861] [ 269.801663][T11861] stack backtrace: [ 269.803490][T11861] CPU: 1 UID: 0 PID: 11861 Comm: syz.5.1342 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.806811][T11861] Tainted: [L]=SOFTLOCKUP [ 269.808174][T11861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 269.811216][T11861] Call Trace: [ 269.812248][T11861] [ 269.813172][T11861] dump_stack_lvl+0x100/0x190 [ 269.814601][T11861] print_circular_bug.cold+0x178/0x1be [ 269.816285][T11861] check_noncircular+0x146/0x160 [ 269.817939][T11861] check_prev_add+0xeb/0xe60 [ 269.819427][T11861] __lock_acquire+0x1528/0x1f40 [ 269.821007][T11861] ? do_fast_syscall_32+0x32/0x70 [ 269.822614][T11861] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 269.824774][T11861] lock_acquire+0x1d1/0x380 [ 269.826231][T11861] ? __sock_release+0x86/0x260 [ 269.827739][T11861] ? __pfx___might_resched+0x10/0x10 [ 269.829408][T11861] down_write+0x8b/0x1f0 [ 269.830746][T11861] ? __sock_release+0x86/0x260 [ 269.832190][T11861] ? __pfx_down_write+0x10/0x10 [ 269.833658][T11861] ? __pfx_locks_remove_file+0x10/0x10 [ 269.835297][T11861] __sock_release+0x86/0x260 [ 269.836707][T11861] ? __pfx_sock_close+0x10/0x10 [ 269.838242][T11861] sock_close+0x1c/0x30 [ 269.839655][T11861] __fput+0x3ff/0xb50 [ 269.840952][T11861] ? kfree+0x22b/0x6d0 [ 269.842230][T11861] __fput_sync+0xd7/0x100 [ 269.843570][T11861] nvme_tcp_alloc_queue.isra.0+0xd6d/0x1770 [ 269.845398][T11861] ? nvme_tcp_configure_admin_queue+0x26/0x530 [ 269.847400][T11861] nvme_tcp_configure_admin_queue+0x26/0x530 [ 269.849285][T11861] ? __wake_up+0x3f/0x60 [ 269.850646][T11861] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 269.852203][T11861] ? mark_held_locks+0x40/0x70 [ 269.853699][T11861] ? __pfx_nvme_tcp_setup_ctrl+0x10/0x10 [ 269.855406][T11861] ? lockdep_hardirqs_on+0x7d/0x110 [ 269.857080][T11861] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 269.858900][T11861] ? nvme_change_ctrl_state+0xc0/0x440 [ 269.860641][T11861] nvme_tcp_create_ctrl+0x970/0xd90 [ 269.862276][T11861] nvmf_dev_write+0x4ee/0xb60 [ 269.863759][T11861] vfs_write+0x2aa/0x1050 [ 269.865151][T11861] ? __pfx_nvmf_dev_write+0x10/0x10 [ 269.866777][T11861] ? lock_acquire+0x1d1/0x380 [ 269.868284][T11861] ? __fget_files+0x34/0x3d0 [ 269.869738][T11861] ? __pfx_vfs_write+0x10/0x10 [ 269.871249][T11861] ? find_held_lock+0x2b/0x80 [ 269.872730][T11861] ? __fget_files+0x215/0x3d0 [ 269.874308][T11861] ? __fget_files+0x215/0x3d0 [ 269.875813][T11861] ? __fget_files+0x21f/0x3d0 [ 269.877323][T11861] ksys_write+0x12a/0x250 [ 269.878701][T11861] ? __pfx_ksys_write+0x10/0x10 [ 269.880246][T11861] __do_fast_syscall_32+0x13a/0x8b0 [ 269.881860][T11861] ? lockdep_hardirqs_on+0x7d/0x110 [ 269.883455][T11861] do_fast_syscall_32+0x32/0x70 [ 269.884997][T11861] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 269.886959][T11861] RIP: 0023:0xf700efec [ 269.888259][T11861] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 269.894214][T11861] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 269.896799][T11861] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 269.899138][T11861] RDX: 000000000000004b RSI: 0000000000000000 RDI: 0000000000000000 [ 269.901619][T11861] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 269.903922][T11861] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 269.906211][T11861] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 269.908600][T11861] [ 270.008638][T11861] nvme_fabrics: missing parameter 'transport=%s' [ 270.008649][T11861] nvme_fabrics: missing parameter 'nqn=%s' [ 270.029820][ T58] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 270.029848][ T58] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 270.153177][T11861] ip6t_REJECT: ECHOREPLY is not supported [ 270.240822][T11876] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1343'. [ 270.259168][T11873] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1343'. [ 270.259183][T11873] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1343'. [ 272.099297][ T58] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 272.099321][ T58] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 272.099551][ T5746] Bluetooth: hci1: command 0x0419 tx timeout [ 272.363703][ T7188] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.419984][ T7188] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.471996][ T7188] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.512328][ T7188] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.567923][ T43] kauditd_printk_skb: 2014 callbacks suppressed [ 272.567934][ T43] audit: type=1800 audit(1789380664.359:4780): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=202655 res=0 errno=0 [ 272.567952][ T43] audit: type=1800 audit(1789380664.359:4781): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=202660 res=0 errno=0 [ 272.571159][ T43] audit: type=1800 audit(1789380664.369:4782): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=202664 res=0 errno=0 [ 272.571193][ T43] audit: type=1800 audit(1789380664.369:4783): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=202741 res=0 errno=0 [ 272.571219][ T43] audit: type=1800 audit(1789380664.369:4784): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=202663 res=0 errno=0 [ 272.571246][ T43] audit: type=1800 audit(1789380664.369:4785): pid=6893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=202746 res=0 errno=0 [ 272.571275][ T43] audit: type=1800 audit(1789380664.369:4786): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=202666 res=0 errno=0 [ 272.571718][ T43] audit: type=1800 audit(1789380664.369:4787): pid=6893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=202750 res=0 errno=0 [ 272.571867][ T43] audit: type=1800 audit(1789380664.369:4788): pid=6893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=202749 res=0 errno=0 [ 272.572597][ T43] audit: type=1800 audit(1789380664.369:4789): pid=6893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=202752 res=0 errno=0 [ 272.612171][ T7188] bridge_slave_1: left allmulticast mode [ 272.612194][ T7188] bridge_slave_1: left promiscuous mode [ 272.612340][ T7188] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.624899][ T7188] bridge_slave_0: left allmulticast mode [ 272.624917][ T7188] bridge_slave_0: left promiscuous mode [ 272.625052][ T7188] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.679121][ T7188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.682540][ T7188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.683122][ T7188] bond0 (unregistering): Released all slaves [ 272.742725][ T7188] tipc: Left network mode [ 272.796448][ T5452] 8021q: adding VLAN 0 to HW filter on device eth10 [ 272.890538][ T5452] 8021q: adding VLAN 0 to HW filter on device eth11 [ 272.975737][ T7188] hsr_slave_0: left promiscuous mode [ 272.976219][ T7188] hsr_slave_1: left promiscuous mode [ 272.976560][ T7188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.976573][ T7188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.977007][ T7188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.977021][ T7188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.983558][ T7188] veth1_macvtap: left promiscuous mode [ 272.983599][ T7188] veth0_macvtap: left promiscuous mode [ 272.983644][ T7188] veth1_vlan: left promiscuous mode [ 272.983688][ T7188] veth0_vlan: left promiscuous mode [ 273.065305][ T7188] team0 (unregistering): Port device team_slave_1 removed [ 273.069014][ T7188] team0 (unregistering): Port device team_slave_0 removed [ 273.135236][ T5452] 8021q: adding VLAN 0 to HW filter on device eth12 [ 273.278997][ T5452] 8021q: adding VLAN 0 to HW filter on device eth13 [ 273.305610][ T7188] IPVS: stop unused estimator thread 0...