last executing test programs: 4m9.129279131s ago: executing program 2 (id=44): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x80, 0x8, 0x8, 0x8, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x44) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$nci(0xffffff9c, 0x0, 0x2, 0x0) write$nci(r1, &(0x7f0000000880)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x9, {{0x1, 0x7, 0x7, "abeb064067264b"}, {0x6, 0x3, 0x3, 0x3, 0x8, 0x752a}}}, 0x1b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d4, 0x100, 0x111, 0x4b4, 0x100, 0xd4feffff, 0x20c, 0x20a, 0x278, 0x20c, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0x0, 0xff0001fe], 0x4e21, 0x4e20, 0x4e24, 0x4e21, 0x2d90b2e5, 0x4, 0xfffffffc, 0x7, 0x1}}}, {{@ipv6={@loopback, @loopback, [], [0xffffffff, 0x0, 0x0, 0xff], 'veth1_to_hsr\x00', 'pim6reg1\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x330) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000340)='.\x00', 0x850003d1) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0xf, 0x420000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, &(0x7f00000006c0)={{0x4, 0x2, 0xfffffffe, 0x6, '\x00', 0x5}, 0x0, 0x20000000, 0x7fffffff, 0xffffffffffffffff, 0x4, 0xfffffffc, 'syz0\x00', &(0x7f0000000680)=['\\\\\x97:-@),]+', 'syz1\x00', '\x00', 'gact\x00'], 0x15}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xf0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4048004) 4m8.590919414s ago: executing program 2 (id=50): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x15, 0xb4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xff00000000000000}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x5, 0x9, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x866, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @remote}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r1, 0x14, 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0]}, 0x40) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=@newtclass={0x90, 0x28, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xa, 0xfffd}, {0xffff, 0x3}, {0x4, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x7f}}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0xff}, @TCA_QFQ_LMAX={0x8, 0x2, 0x2}]}}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @TCA_RATE={0x6, 0x5, {0x38, 0xc}}, @tclass_kind_options=@c_fq_codel={0xd}]}, 0x90}, 0x1, 0x0, 0x0, 0x4804}, 0x20000880) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getchain={0x3c, 0x66, 0x4, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xf, 0x10}, {0x9, 0xd}, {0x2, 0x1}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x800}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x2}, {0xffff, 0xfff1}, {0x4, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x20000000) 4m7.370410614s ago: executing program 2 (id=59): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000240)={'das16m1\x00', [0x10f, 0x4, 0x13600, 0x6, 0x0, 0x10005, 0x79, 0x3, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0xca9f, 0x1, 0x20001e58, 0x8, 0xf39e, 0x3, 0x1539b804, 0x5, 0x1, 0x2]}) 4m7.299232471s ago: executing program 2 (id=60): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x40, r2, 0x1, 0x70bd28, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xea8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) mkdirat(0xffffffffffffff9c, &(0x7f0000005a00)='./gadget\x00', 0x930aa59063c1a109) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r7, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r8) close(0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2, 0x0, &(0x7f0000000480)='\a\x00', 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r10, &(0x7f0000008400)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1, &(0x7f0000000080)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r4) 4m7.149626313s ago: executing program 2 (id=61): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x6b0ac9633503c2a7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xbc1, &(0x7f0000001d00)=ANY=[], 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x120, 0xd, 0x1}, 0x30, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x10004, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r9 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x1, &(0x7f0000000200)={0x100, r10}, 0x0) close(r10) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r11 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r11, 0x4040ae9e, &(0x7f0000000100)={0x8000000000000000, 0xf7e83000, 0x1000, 0x0, 0x1}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) landlock_restrict_self(r5, 0xe) r12 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r12, 0x0, 0x0, 0x80, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @remote}, 0x1c) r13 = syz_open_dev$video4linux(&(0x7f0000000280), 0x40, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r13, 0xc0305602, &(0x7f00000001c0)={0x0, 0xc, 0x200b}) 4m5.578443856s ago: executing program 2 (id=71): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000200)={@remote, @multicast2}, &(0x7f0000000240)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000400100018df0000a4e2000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000000000000000000000000000000d9c4aac84c48195e5e7794367600000000000000"], 0x50) socketpair(0x19, 0x1002, 0xfff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000280), 0x4) ioctl$sock_ifreq(r1, 0x894a, &(0x7f00000001c0)={'veth0_virt_wifi\x00', @ifru_flags=0x2000}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) socket$netlink(0x10, 0x3, 0x0) 4m5.509265662s ago: executing program 32 (id=71): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000200)={@remote, @multicast2}, &(0x7f0000000240)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000400100018df0000a4e2000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000000000000000000000000000000d9c4aac84c48195e5e7794367600000000000000"], 0x50) socketpair(0x19, 0x1002, 0xfff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000280), 0x4) ioctl$sock_ifreq(r1, 0x894a, &(0x7f00000001c0)={'veth0_virt_wifi\x00', @ifru_flags=0x2000}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) socket$netlink(0x10, 0x3, 0x0) 3m36.648079316s ago: executing program 0 (id=207): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a3, &(0x7f0000000000)={'team_slave_0\x00', @random="0100c3201000"}) 3m36.58679896s ago: executing program 0 (id=209): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a000000000440000000060a010400000000000000000a0000000900010073797a31000000000900020073797a320000000014000480100001800c000100636f756e746572006c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000100000000001c0002801800028008000100ff"], 0x15c}}, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf255400000008000300", @ANYRES32=r4, @ANYBLOB="a738b1da53e5d01cda34d8724c39dc66b1900c6cd466bb5c79d948fc784917db5aa5e416dd1591c9dfde7a747e8564566aab88088a71e1412be43a637783d750af3734d4e76aea66e54976ec076b940381759e7483670a3d9308f855d5c56e9a38cc79254da9969b791973072800b901c907f20abaa418cc522c3303e6b3d98ced5146defa38148ee564af9bcfe3dc"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8800) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) add_key(&(0x7f0000000140)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000034000000030a01080000000000000000010000000900030073797a320000000008000a40000000040900010073797a30000000002c000000060a01fdffffffffffffff00010000000900020073797a32000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x4040035}, 0x4008090) r6 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000000c000c000000020000000000000000000009000010000000"], 0x0, 0x26}, 0x28) (async) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'bridge0\x00'}) (async) openat$snapshot(0xffffff9c, &(0x7f0000000100), 0x8000, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x44) (async) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendto$inet6(r7, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r7, &(0x7f0000000c80)="7cffa9061b2f8b082b6f69ae50430c8a8b6aa3162ba083c4a52e1ab0ac50ed4a19b1a69988000d5bed4433daaa4932dbb1cb3550dee8b23579d76ce37d574b43fca1eed8ebd38d1303240ed0d84517692128dd5aef5c4d60a6659952a1437c6f0ac3ed75806011ccbaa504f41a7e0abcf8823bc4a71ef8c52c2b297b539eaf752c56ebfe9b0542543069257dafcbf76c958d4cbf4eaaa67c5c2bd9e6518be34b56add7613ab83d389724b664e62c154e1a5aac073a53a0e8cadcf51ef495ebbcc77d5e36ff24c3f282289cc077374b714e08fbfecbdc8f14ef3fd409af4caf6fcb7d663beab335f239a1e93b399c93d7c036e1b39a7c477945f82b6dde53b1c21b590a58ba688ac4fb530d2c5b1195a127d2eaec840ab59f090d7047c278611e080cebe7b28588c11a44be99fe6f88c73441bf625b70565669997f4c3cda5afe1d6429908a69a459d35ba8c2f28076d8711f2667de749a783fac94ebd02680f20fb723c35c287a1f45064846385750665ffa74579083fbb1b1d6b7c90168252b1c5313544569203e7adb8e271a94f7413e5cfd6aa3157c4fc29bddba3683fcd032aecb513b2f27530fbefa0000000000000003c058e812d8db87de5e3eceae268b91f7d59daf77646fa4df99877dd5a9540934c7af91b96486eea62897be6acbe1bae8e46b112f1385e7cea9e4daccc6f1b98ce3b4322af8299a45ddcb5be8d3e469fdde9896ca324a2f3c88c616a7dccde331698ce2d39f96220251011b4dfbec953b5c30e94adb5586cec0af234859805bb7df1101ae80318ff127e913178d79cfa918d54585b6184255e872e2dc33a5c7c30a756bbd63c32a3e6a22863781747d185acb64583976c4289394d642b07d18e2932d0a78bd2ccf92b3e94e82f1e9239fa272402f4c9efcf068709a44d6f652a4f23df89f9a15e6bf0c7e65d8f3e32c35e83d30298074d16cb5ff4ded1df81009bbae888fceb9a8109ba319605e1776e52d2069b5cd7de07cf8dc488ba6a9c7559ff49674a490991f323736f302004007d0ccf2e5eaceac6b56f48f2b00592d7a378f118d8b3e5ecd2035c8252374c91bc79cf26ac11ddffe2c09e1aa032da0713732387f950e3f4e301eb1d26e5a2b19318e50d555c832e279894d8c9b03e8940738c0fe391b29907d0d5f9214d6e697a19247f4e8221aca2ac47debd7c45b8344941cbecbaf44af343b24a4f88caf207d72002fb8b7d156997cb7275f535e6a9d6480046246e60bea0cf6f54abc69ff9418b6cb9301eb6890227215b633a886fb13c89698e51e482c42ca99613b20e22e5ce15272f5bda8b18cf53d49130a94135dd8a9692c", 0x34000, 0xbcff, 0x0, 0x0) (async) writev(r7, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) (async) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r9, 0x0, 0x43, &(0x7f00000002c0)={'IDLETIMER\x00'}, &(0x7f0000000300)=0x1e) 3m36.402646618s ago: executing program 0 (id=211): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FE_SET_FRONTEND_TUNE_MODE(0xffffffffffffffff, 0x6f51, &(0x7f00000000c0)=0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2c5082, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r2, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x80, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000640)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, &(0x7f0000000000)={0x5, 0x9}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x8, &(0x7f0000000280)) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x106f) 3m34.623375143s ago: executing program 0 (id=216): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x68}}, 0x8000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b0404000000ffc28a2e604c9949e6ab54ffffff125bacf58f4c173a7d001400028008141e000000"], 0x40}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001a40)=""/100, 0x64}, {&(0x7f0000000000)=""/98, 0x62}, {&(0x7f0000001ac0)=""/4099, 0x1003}, {&(0x7f0000000280)=""/114, 0x72}, {&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000100)=""/95, 0x5f}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000340)=""/17, 0x11}], 0x8}, 0xfffffff8}], 0x16, 0x7000000, 0x0) syz_io_uring_setup(0x209a, &(0x7f0000000400)={0x0, 0x595c, 0x0, 0x100000, 0x51}, 0x0, 0x0, 0x0) eventfd(0x3) r3 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x4205, 0x8, 0x0, 0x327}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x55ca, 0x9c25, 0x1, 0x0, 0x0) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x558}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x1, 0x52a, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x1}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) r11 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x13, r11, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 3m34.446858203s ago: executing program 0 (id=217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000001080)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mount$9p_fd(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000180), 0x2000098, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES32=r6, @ANYBLOB="0000a947ff65cd4a93b59cc3b6e63e4fae0721964e87ccd31e1fcc70", @ANYRES16=r6, @ANYBLOB=',\x00']) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000900)={r6, 0x6}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 3m34.345300889s ago: executing program 0 (id=218): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@userptr={0xe, 0x1, 0x4, 0x0, 0x2, {}, {0x5, 0x1, 0x4, 0x0, 0x0, 0x0, "1e0037e0"}, 0x0, 0x2, {0x0}}) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@userptr={0xe, 0x1, 0x4, 0x0, 0x2, {}, {0x5, 0x1, 0x4, 0x0, 0x0, 0x0, "1e0037e0"}, 0x0, 0x2, {0x0}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket(0x2b, 0x1, 0x1) listen(r2, 0x5) (async) listen(r2, 0x5) accept4$inet6(r1, 0x0, 0x0, 0x800) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000080)=0x101, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x10000000, 0x1, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000080)=['\x00\x00\x00\x00\x00\"C\xd7\x84\x9f5\xa81\xd0\x80\xb0\xf4~\xa8S\xa5m\xc4W381u\xf1\xbf\xb0MRW\x05\x85\xad\xac*a\x90\xe9\xc6\x86\xba\xa2\x8c\x8c\x8c\x97t\x1aV\xf1\f\xde\x8dV/-\xe16\xe9\"\x82\xb2c!y\xe2\xb4\x90$\xb9M\xdef\\\x19\xfflBTRO\xa2\xcb\xd0:\x02*\x1aA\xf2<\x0fk\xd0\xdc\xdc\x1f\b\xc9\x063\bk\xf6 \xcaS\x96\xa8i\xab\nh\xd9\x10D\xde\x85HJ\x9e\xa0*\xfc\xc9\xbc//\xd7\xba\x02\x12 \x99\br^\xfe\x90\x9c\x1c\xdd\xa02\xed(\xa8\xc48\xab\xff\xe1)\x9b\xd1\xd5nFq-wq\xc1|\x19m\x1d\xa0V\x97\x92\xdc\xdeRY\x17\x89\x979:\xdf\x04G\xac\xc0zw', '/dev/snd/controlC#\x00'], 0xffffffffffffff3b}) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2}]}}}]}, 0x3c}}, 0x0) 3m34.155226036s ago: executing program 33 (id=218): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@userptr={0xe, 0x1, 0x4, 0x0, 0x2, {}, {0x5, 0x1, 0x4, 0x0, 0x0, 0x0, "1e0037e0"}, 0x0, 0x2, {0x0}}) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@userptr={0xe, 0x1, 0x4, 0x0, 0x2, {}, {0x5, 0x1, 0x4, 0x0, 0x0, 0x0, "1e0037e0"}, 0x0, 0x2, {0x0}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket(0x2b, 0x1, 0x1) listen(r2, 0x5) (async) listen(r2, 0x5) accept4$inet6(r1, 0x0, 0x0, 0x800) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000080)=0x101, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x10000000, 0x1, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000080)=['\x00\x00\x00\x00\x00\"C\xd7\x84\x9f5\xa81\xd0\x80\xb0\xf4~\xa8S\xa5m\xc4W381u\xf1\xbf\xb0MRW\x05\x85\xad\xac*a\x90\xe9\xc6\x86\xba\xa2\x8c\x8c\x8c\x97t\x1aV\xf1\f\xde\x8dV/-\xe16\xe9\"\x82\xb2c!y\xe2\xb4\x90$\xb9M\xdef\\\x19\xfflBTRO\xa2\xcb\xd0:\x02*\x1aA\xf2<\x0fk\xd0\xdc\xdc\x1f\b\xc9\x063\bk\xf6 \xcaS\x96\xa8i\xab\nh\xd9\x10D\xde\x85HJ\x9e\xa0*\xfc\xc9\xbc//\xd7\xba\x02\x12 \x99\br^\xfe\x90\x9c\x1c\xdd\xa02\xed(\xa8\xc48\xab\xff\xe1)\x9b\xd1\xd5nFq-wq\xc1|\x19m\x1d\xa0V\x97\x92\xdc\xdeRY\x17\x89\x979:\xdf\x04G\xac\xc0zw', '/dev/snd/controlC#\x00'], 0xffffffffffffff3b}) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2}]}}}]}, 0x3c}}, 0x0) 2m11.524990763s ago: executing program 5 (id=648): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) (fail_nth: 3) 2m11.469918785s ago: executing program 5 (id=649): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) socket$inet(0xa, 0x801, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @broadcast, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) sendmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="0281", 0x2}], 0x1}}], 0x1, 0x24005805) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00), 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0xf, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x44, 0x2, 0x200, "4649f6441214bdf0c12f00007f9d0000310fa145d5dbff7fff00", 0x32314d56}) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 2m11.025286457s ago: executing program 5 (id=653): socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x10}}, 0x4080811) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) listen(r1, 0x1) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000019080)={{0x2, 0x4e23, @loopback}, {0x6, @broadcast}, 0x30, {0x2, 0x4e22, @multicast1}, 'bridge0\x00'}) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 2m9.959120217s ago: executing program 5 (id=655): r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x84, 0x1, 0x2, 0xe, 0x4}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast1, @loopback}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000340)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) lseek(r3, 0xab07, 0x1) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') ioctl$sock_proto_private(r4, 0x89e5, &(0x7f0000000100)="46114cc2ab3f4bfc465103652d8dde09a563bbc3282d0cfb2f386d0d961f") read$FUSE(r4, &(0x7f0000003240)={0x2020}, 0x2020) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f0000000580)={0xb6, 0x0, 0x800}) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r6, &(0x7f0000000240)='oom_score_adj < 1|', 0x12) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000000)={{0x2f, @dev={0xac, 0x14, 0x14, 0x18}, 0x4e23, 0x1, 'fo\x00', 0x13, 0x4, 0x27}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x10000, 0x6, 0x0, 0x2}}, 0x44) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007ff17e5ffff0800040000000001000000", 0x39}], 0x1) writev(r7, &(0x7f0000001c80)=[{&(0x7f00000001c0)="30aa645c20bef5c35a44431ebca06fb626b527da74c411b5d05b1a7af971e63ecaace70ac7b2523b421c8e6d988e09cfa309c3e15e2bdac3c978a1fd337e432da9aedcaa92d85c2f43930175b327844121fb216199c931b273d38e0c8206a93091ca5ad34904c3811421fb7208bc91e0c68b94a7807847813ef9e9fbfbebb78f95551511c47d", 0x86}, {&(0x7f0000000280)="481efc84cadd9009ec4a0ec68120d9a1731cac8ae4a65cf2cb8795dfe5378690ef75615bd791f6e2948b56f0f11a7f5d1c58792c753452b41b1754d2a0c337e7098e1110f5a3515b62fa054b33389cc8121fcefae1c2b33f464e58bbf3eb659905e117bf43bbcbe5d557eddd6b6b6557888007b2beaccac7ae9c807969512e8a83ba7a5febce6caef3858ebb", 0x8c}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000500)="9be270a192270abc1dd3c16e1dd05d46886b4aea33c2f6b05dc7d2ee83b4f57510bd21f03617b6c8d241ce623b6c3d980aff11f7f396365bbe8049ac12858953a70f3f02ed0ab9", 0x47}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="5608399bac6e78047e2f67270c744ae6a730b6fe739d8d9e288b02916ad5", 0x1e}, {&(0x7f0000001a40)="f93d1d8b35bc211260dd1506af86f7f9b9376a2e3711b4600103f5f2add5b7a28a1fab9b9e8701a16821f64be0901f6d3b274f4fb1827878e256d4e4ba4bd636678d6fbe701acdcadc1b8f19b58d7f8f5d18f06e8caa30d74c4d071dc3f6bc50289af341dd9cfdd0ef6df3e07d133b2ab31e46dee88ef235cad0a29f8871292e2093805972734107605baaac221d280cab09bdbe37b97b74916b7c", 0x9b}, {&(0x7f0000001b00)="4f6ae49f7b2f3d42f43d4f5599ad521da3741ffb26134f9cd2153ba6751a1880c30473b9cd3118c9a7b5f0f15471c337aabdf86c19bb33b4621ca1e19f748d8407d1de55f955d9b34dca5fb967f36d446aaae34a6d254aa9c8bfbb39e33f92497298accdb06ab76601fbbbba437d7f0f9dec36f6f84686e31585a3265edc0ec1caa76196b765bf", 0x87}, {&(0x7f0000001bc0)="6f856ab32b9fa2e815e74a1779eeb7a91065beebb39022ce8210a5c885cd9ecd2a8ec59a117ec5a57150e8ca088a3df62c047f4421008a9420a2dc3c", 0x3c}, {&(0x7f0000001c00)="4a5b33a7ca935b60157944fef3098e1f79223a069c225e92e1f541e8874ba078fbd83c5ce379ff57b1c8935bc8c932f2b4da1c3637090ff7a57d548a521542b15be9e66e2b737a4ac548326099b11484594fada7f5ef882e1d9a71d38e1197a0ba15153f961e7d28097fbc32b6108cdaf3f631ce", 0x74}], 0xa) 2m9.399482629s ago: executing program 5 (id=659): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x4e}], 0x2) r2 = msgget$private(0x0, 0x6c2) msgsnd(r2, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x2000, 0x8cff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="340100001a000100feffffff00010000ac1e0101000000000000000000000000fc010000000000000099df4f9a000001000107174e2300050a0000203a000100", @ANYRES32=0x0, @ANYRES32=0x0], 0x134}}, 0x844) r4 = creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) acct(0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r9, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r9, r10, &(0x7f0000000340)={0x0, 0xfb7e, 0x800, 0x2, 0x321, 0x0, r5}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x10d3db, 0x200, 0x0, 0x3de, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9a00, 0x200, 0x2, 0x278, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb60e, 0x1000, 0xffffffff, 0x321, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd7e5, 0x200, 0x3, 0xc4, 0x0, r4}}], 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0) (fail_nth: 3) 2m8.629415624s ago: executing program 5 (id=664): r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161b02) writev(r0, &(0x7f0000000840), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffeff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="319121bd70209fff0000190000000c00018008001e0007000000"], 0x20}, 0x1, 0x0, 0x0, 0x24004041}, 0x4008000) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xdb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x4) r8 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r8, &(0x7f0000004580)=[{{&(0x7f0000000180)=@un=@abs, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000900)=""/232, 0xe2}, {&(0x7f0000000740)=""/110, 0x6e}, {&(0x7f00000007c0)=""/240, 0xf0}], 0x3, &(0x7f0000005640)=""/4103, 0x1007}, 0x9d}, {{&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000001880)=[{&(0x7f00000016c0)=""/243, 0xfe}, {&(0x7f00000017c0)=""/135, 0x87}], 0x2, &(0x7f00000018c0)=""/19, 0x13}, 0x7fff}, {{0x0, 0x3d, &(0x7f0000001a80)=[{&(0x7f0000001900)=""/113, 0x71}, {&(0x7f0000001980)=""/218, 0xda}], 0x2, &(0x7f0000001ac0)=""/252, 0xfc}, 0x83}, {{&(0x7f0000001bc0)=@isdn, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001c40)=""/159, 0x9f}, {&(0x7f0000001d00)=""/138, 0x8a}, {&(0x7f0000001dc0)=""/164, 0xa4}], 0x3, &(0x7f0000000640)=""/193, 0xc1}, 0xd}, {{&(0x7f0000001fc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002040), 0x0, &(0x7f0000002080)=""/135, 0x87}, 0x5}, {{&(0x7f0000002140)=@pptp, 0x80, &(0x7f0000004480), 0x0, &(0x7f0000003480)=""/176, 0xb0}, 0x40}], 0x2, 0x0, 0x0) setgroups(0x0, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x810, 0x4}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) 2m8.553675573s ago: executing program 34 (id=664): r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161b02) writev(r0, &(0x7f0000000840), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffeff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="319121bd70209fff0000190000000c00018008001e0007000000"], 0x20}, 0x1, 0x0, 0x0, 0x24004041}, 0x4008000) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xdb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x4) r8 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r8, &(0x7f0000004580)=[{{&(0x7f0000000180)=@un=@abs, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000900)=""/232, 0xe2}, {&(0x7f0000000740)=""/110, 0x6e}, {&(0x7f00000007c0)=""/240, 0xf0}], 0x3, &(0x7f0000005640)=""/4103, 0x1007}, 0x9d}, {{&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000001880)=[{&(0x7f00000016c0)=""/243, 0xfe}, {&(0x7f00000017c0)=""/135, 0x87}], 0x2, &(0x7f00000018c0)=""/19, 0x13}, 0x7fff}, {{0x0, 0x3d, &(0x7f0000001a80)=[{&(0x7f0000001900)=""/113, 0x71}, {&(0x7f0000001980)=""/218, 0xda}], 0x2, &(0x7f0000001ac0)=""/252, 0xfc}, 0x83}, {{&(0x7f0000001bc0)=@isdn, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001c40)=""/159, 0x9f}, {&(0x7f0000001d00)=""/138, 0x8a}, {&(0x7f0000001dc0)=""/164, 0xa4}], 0x3, &(0x7f0000000640)=""/193, 0xc1}, 0xd}, {{&(0x7f0000001fc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002040), 0x0, &(0x7f0000002080)=""/135, 0x87}, 0x5}, {{&(0x7f0000002140)=@pptp, 0x80, &(0x7f0000004480), 0x0, &(0x7f0000003480)=""/176, 0xb0}, 0x40}], 0x2, 0x0, 0x0) setgroups(0x0, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x810, 0x4}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) 1m55.276968529s ago: executing program 6 (id=740): r0 = socket$inet6(0xa, 0x80002, 0xffffffff) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @empty, 0xffff8000}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa1a0800450000780006000000119078000000000000000000004e20006490780200000002000000010000005680a5441a99f362cd24e0a1ac22915007330000000000000000000000000000467f517bd818d5a4a8d26ae61b4cbf1331ffc21d2e9bfb1eb3c03976ed837b6f876605ac29dcb96a8901e07138be4b1b20061afb3db3"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0100000004000000040000000a"], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x20, &(0x7f0000000800)={&(0x7f00000006c0)=""/242, 0xf2, 0x0, &(0x7f00000007c0)=""/43, 0x2b}}, 0x10) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x14, &(0x7f0000000880)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB="180000000000000000000000000000001801000020646c2100010000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000cc5e11117b966e6cab857dd4722f13b3e30e9d5864943f0f08e6dc4d271503b18af206658e35fc6a9b25004098cf43c62e6fa3317c3bf8682cbaefe0245ee83d9cbc036d2e180e66d9c7823c5460f8c009135082d4f780085a381cddf19f86dbcad5417b21dda179fe4bb811297fd279d05d6cee36496a141756291e5c17cdceff034ad46122bcfacf1ca3e64c46b490f434a637c68b237532578b4c9dfe356ec4e432e5", @ANYRESHEX=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m54.126125943s ago: executing program 6 (id=745): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x60000, 0x156) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x9, 0x2) r1 = msgget(0x3, 0x710) msgget(0x2, 0x624) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x8040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x20) r2 = syz_io_uring_setup(0x34ba, &(0x7f0000000540)={0x0, 0xa77f, 0x800, 0x1, 0x121}, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r7, 0x3}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r2}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) set_robust_list(&(0x7f00000000c0), 0xc) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$unix(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) msgget(0x1, 0x240) msgctl$IPC_RMID(r1, 0x0) msgget(0x3, 0x693) 1m53.979833736s ago: executing program 6 (id=747): unshare(0x6a060000) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c00000002060102000034e40000000000000000050001000400000005000100070000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f727400000061a4b33b763632933b2a9c44a08ec8ffbed5af5e03a75509a85592f3fb3ffaa30a5fa90a85de266eb72765467134ba19764629b309761ac0b146d339e0b5e67169306e1cbea0a82f67a336307f3dd04469bfb93c8a14d147ffae"], 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902", @ANYRES16=r2], 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc0bc5310, &(0x7f0000000700)={0x18, 0x101, 0x0, 'queue1\x00', 0x6}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) unshare(0x28020700) r4 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x800, 0x408003) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000300)={{0x1, 0x6, 0x7, 0x1ff, '\x00', 0x8}, 0x3, 0x0, 0x1ff, 0x0, 0x9, 0x0, 'syz1\x00', &(0x7f0000000200)=['syz1\x00', '}/@\x9f-$\'\x00', '\x00', '\x00', '\x00', '\x03&!]\x99\x00', 'hash:net,port\x00', 'hash:net,port\x00', '\\\x00'], 0x34}) socket$inet6_icmp(0xa, 0x2, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r6, &(0x7f0000000300)='127.0.0.1', 0x9) r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config\x00', 0x70382, 0xe0) write(r7, &(0x7f0000000380)='8', 0x1) r8 = openat(r5, &(0x7f00000007c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x8a80875c861402e8, 0x0) write(r8, &(0x7f0000000400)='ipv', 0x3) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') bind$inet6(r8, &(0x7f0000000240)={0xa, 0x4, 0xe, @dev={0xfe, 0x80, '\x00', 0x40}, 0xffff7ffc}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1m52.053441079s ago: executing program 6 (id=762): mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$rds(0x15, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100) ptrace(0x10, 0x0) ptrace$poke(0x4, 0x0, &(0x7f0000000000), 0xffffffffffffdbda) r2 = getuid() pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r4, &(0x7f00000024c0)={0x90, 0xfffffffffffffffe, 0x0, {0x0, 0x0, 0x9, 0x8, 0x0, 0x0, {0x0, 0xffff, 0x0, 0x0, 0x20000000000007f, 0x0, 0x9, 0x9, 0x0, 0xa000, 0x0, 0x0, r5, 0x3, 0x2}}}, 0x90) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) stat(&(0x7f0000004a00)='./file1\x00', &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="aa8e9df36226466e888b39901e75023156b5530e75c1e203314842ea78a6048cdec3383c60dcd8fa24f6928f6e02ab1090989c59ae38dceda05af132af4546a298837c63ea70975feb0919d7f7766791d530b90d522b23c58776ac7a4035383c5a0dd90d8b766c96816631f1742a0da0ce6ddd053a05966f6b6ec22dd28a0a2636d07696a307496b0b0d8bb370227dca3c96838e556681409be388f1dfbf500f1aee82b374f4473aecbdb77cf567fece7f8ec733fa91aa92a186f9768d16d0257ef826959fb3a73e4976a019bde8a82e9bb0a0443cbb1ab2c6e8f8748489948710294efb79d70edec2271491bc1cddc9c9d2713cc3063761f2bea07f5577bbe5224302ef23adcc96cb5ecee406c7977c97d7000000006e28198954bba79006fd58b2a2b43047e7f3ead143ccb6b27043d7a7512e9d3bad0138554f4b465ab6d1cec9b40cb301ac6491ee7fcdc0588e53eb2510471de91e3e73c98f0a3cc9929eac63f477a1208a80f8c75d0a1d9edb895d675d036a1863dddea98b18c846ac253b2470324b21eaaa6e69389b91bcd470995cd6835c6fac80d5ca41b66562c910f893124cf0f20dc65d90aa0f9cd1a7c88f755aaf33875d7639ae1b7413834636de57f44302b723646257ee7456bdfee10f2eaf0c05f2cf01a115ed8ac2908827af3d85da2f1bcf53d87ee830dc5e98fcfc1a22e547ce57508f606945a7599d8e1cc0268987cb7b3d00a6bfacea7bd05430255bc8b473a071b83695783944ef856fc89906e0b44a13166309bc8cc1dbae68399e1e8e4a2ea265c1a104dd862563cdaeee2b37e72fbda323cc72360b6d4fad2fd2409397f90422bbe6e9068aaf38e18918736e6357a6caac59ae803ffbe853ff716a388423bbc93bb2d6b1222bb94c96a3bddf421288d47039fa1b73573dbed87e1f6b280f8b045f9be8e0d85f6cf416bfc0f3f4ce988aefa2382cccf39e40b2a1657814b7953d0a0aea45d50d02d66982e5269f1ededd6a9f8f9e212314a4bb5c2f4898278fd3a585c1ff60e435b186c552134e5ddb0f2cc95dac405bc4bd32ccda41b05c6a376070c8ef2d6eb3ea7fce97da8f09440d47dc5faca6271d1ce4f4201b315d1cc3fa1d4cc2baa14e4c57bafb7b5bb2e9e859505360e1738a36100dd6c2fb6610fc0ed88e452148ecd8b73517f69c28f0c979525d21ba4fef353eebb2326f48217c44a322e9f1f08f92af1ff5ee5f2dc563f1a0edb09d0646105be0c46ddc8b71301e68013e863d539af5b3a2b11f770d8c0c086988216602619ec440f98d434add23bc7f54d145260773e53121188ca179832d5c406f2b4a91045edca91232416219fade02bf6ba002352943850294b05d9a142889205e6b69336cecfe8a7cfc88688368d54b475f3915eea851334395f80b41177ed4d17d91880a22c1c0cf33a550e32fbf76505458d07ebccc4e77bafae1700c9997f6fe28452f011e370642f228bbf0e2f3dc05741127f6d73e96c073b26e730ac19cb17dfc63c0ed4b5d53ffd6e312e3e80822c8bbea3cf2914f3f8ee53fb4edde1d4507fa9d7de54eecb75132befab6bf486cb05bc8727dadac49c83bf08d9eb94621b42241f9eb8fd1e6fbf969d932a023760faa62c178b7f0a1d43adbf5c21a35a58d381442ecdfc2dcce2d11e5efae8433b14fc9fc28294ae76eaa95f38ac121f255d9b478c81a1caf5c606c34e6efa80dd3aa77cc4001b9fceebcc77a1efea7bf9f749f62c7a8bd5deb0f70c54ab5daab010cf14b2f1012516dc1639edb2d890638b73559d060be47f594f322efdd40c5945148fe1690585923488910fcb3159006f935f7d184e4b4c404ccb6e2a799cc67aa2b56a13c16e3ad92b85a12060881c1d140708ffece6965f9746ed4eef74d37424e760f4b266c80c93390523eadc65494962bed4efc86a0fead2fe25c9108c5d591770cee92f9ff2d916ba0dedc6551a47ce3a4dbc97043e588b3483f0793786fe9f32f1b79ba3f4c4ccabba52a59861c8024bcdfc8ecb0acc821160b060d5dc24f0ade14d08b56218a32a03f9eba729c02fc6b714bc72b11cc7fe47b51b3a174cfa2d8f5df80a0fd4d1dd2ed36b868b46ee5a8cc72e91b57bd05005b5142b5531650813fb5496af379f9e7b1b73c49c64dead9725af0742a41b770205390791de856715c0138ca22f134911a28d2caf22ef21049d1ba721d278bcf675317c5303cbaf96535414fd92c55d741120200d49729e01e399e4c30fa8da659654196af7991a3d294c775a610f242a56c88d542641036de7eccbd64f9f306a3920596d350637a6409f667110b46c6d85ab94df4d7b0af12318522ba1e745e7de45176789a53213b9b3d23b2599275e4f1858fdb2fd63f8c6f7990235e2fb3c4c8f215715973b60b1e56d1f061b6ff33510d08fa403559cbcc21bd141b41f1e9ab4e163a0f80a918ba13031c483931a9dcdb790ad77fbdf5634662cb75e79d986e4724f64c80203600df7ac9950330431b83777bd968a86be5698b13c37513235ac89a0a1dcb799112a86a2d96b1708e0c5e983756d8243927fc7d42be6ff4c946c0763a9745897726f38b65920363b7c32051bf9e770ab1ec140ff11fc639f36fa760afcfd6ba2f609df8cb0949f26119895b69c8ffd0836a01da1e407ba08f37a1144674f5a71b3499ffcccb21e75f19cdfb33c7eded5fa5c264784a78edc5f6de17da15317a66fea522b6e92a52efa5013797212d816c3229c7dd523e2165f9f042c3b3b16e608a1d87ab9c46c2b291bf547e1f4312913b16e39a714c24ebc5cb4f4f80bb20ce4efdf2921db45b7389fef98bd0e8aa40be16758b0d7755ab631b27c5d49225e84fea63e3f031c665851ef4ed18628b26445da2cad4741800cf72a401ad79a7462657068e0f2ee65eeb86da66890247cb45b31d3ad06ea7500eac5be65528c55bf190b0ec27673b67b36117344097a0dbb9db47a2b5144218002d14cbb98629c2ed35db5cdcf93994e3e3d1a1673ff60ec0d9bae1217ba6f39ae4ac4c9e5a19f85634f3091150c4724aaabe3bd1445cfa33fac93b86c5871ca168a728899e2e0062a596fba22b962764420f1268bb8ae0a894559c488cfce6b71aa8478964d2eef5086b2cee891ca031b6543bb7ba55006621f1d80e17abcba9f9d05fc5e61c6c4a890aba4b205f5570e7866ec4de380420c4758de63ff0f7b1acb0521e45cd9bc54df1a4614c04c524f43e86f58757eddb645bbc56a63de5bb560f56a31796dc344d58e2ff2d3fe5228d87c0439e6353943c92160fb847a172eea37ad0c22de5d1e7cd66730218832c87b73366131e29a1545b26d4c500a9afd75864b460cea1ba33a5dca6e5585e9c78a8ee3361f20e2b79489ed2ef1c935d7deeef6de0d009b72a0751929209b351331c0225c29341f5d476b278061a0a33c1e455815bbb83eebf5f5c3fe97c4b3df32846a094501a157196b6c1db1e05cec4f2dee823ebea7da05f5ee63aee1670128471465ae83defcf26aba78f18544146fcc9305ed5899965edbcf9f677c499a52d984db346c12faf02553338e6553488c29c9f3f4537a9437b5eb7382f95f9e844d27fa0b1ffc48d2b44e383b1fdb567b7f23863e8e10b6210f8031859cea410d52f99b5a8d2f218e7c92e231904b171dc077c636db15087cfb0ca6a2cd09f6b7973627a03ebfb4772daddc8ad7c9e534d8bc58cfc6d1305374b589a2a85c8a3c471c7408712ff5cfd7a50bee627d0417a5667dba71866320857cdb84e071a37e477f1b5ac16bdd464d8bf3ae31860ad19722bea1d85d1a5c09e1ab36dcd6c4bf524ed2137745e3562147081027d7852bee1ccc9563e4ff0ce72affa7002e9a066591ddf31abc4388281d98d2d88fa1c5f22cb60523e72e3d838fc6b0163fe0082ce0d8d59098363a174818113182d40cdb6367cb4a867c5aaa480c95f4a98439a2b58291fedcbfedfc3ebb41fe6b0a12fce36518ea6082fb919cdff23e3b40aa26eac8d634e03fc3a1e0fafe402c875709b15b622f35bfdd233ea8d7989ec38dfa1e5b5688d76c615b5efba62dd7d50be97b92f16c838edecd426e18dd270ddda42121d7ad8d26ec28df29580e6dcd7f968885d1cbc5f573efda890a408b45701bdf5cb2e3c54f8481710145ac1f5bdb1b53a1e9a7efd8a3ad7dad7bd0fa017e080854913beda2ccc95631a5c1da5c5afaa84bcc3f1a7041208fac9e09ef52140f142bed882b8988ea062cc8ecd7fd78fd33aeee8e8d5cc891514e3407fbb171e84e45fa14713e995513e16763424e356032ac81047c8e2bfe05dfecc510b55866d4a8696c91afd7b6b809fcf2e0f8a21834f43149d8e2b5dc5fddacb8ff9341376281e8f7d762fdb61a8e6536529b0d4d3cd8217fdb4f0b8341587737da7f50dbe4e5b7851a25d52066bd0e3ad11aed47ee02bec11d0f125cdee1f505cc5c1223d386b2fda556331cf57d8df433927cf12a5fbff853be266c5a64b6424f7b106931d312f0fd447206d21c1945579915e7e21627c7fc423a813823ce5fa2c6f3114303d0995c5706418a088535c62eda2a60c82b727c31177252f8ea025c16a3676ea0ccec24ea57e68c7e0f1b0e06f78a8ccead63eb4c0ef5c59b1d3a805644f8089e604a5bd3aa4494ff7fca02dd5894a6f02e572edd487af04ace3e37f19074325613d6f7d2af73062607b45a3c9365337a1c5e6bae9702a65f0a1b9ce75e43f6381efd9d610ad37532b62c6ab5957ded77a5d01604f67d7ccaa495266ab7fe161268b9a6156643ab6289fa0be75ac433a0204df164c02d3d0cb1b7bf0acd92ca8ff19b710b0b511820d0500fdf58f598fc611380a0f7dffce7bbc934edc967ba0094a0281750176748a4e2c99684c1c4a40258b0da77a0bfb9a4b808d5932443389f0f346dad998cee519624aeb07ea4446064282b1448bfa2e5ac3393d30b5c3865a8995869f69bab0747cfcbbd2bfd407c82e198da326f36be9a508e12d6d73fb262b37fcd7ff70b372c966b7198a9f2364012ff8127f200c079cb70d550f9483c1bf9fba69ebc961c989a82fc38cffe853e4738f33f1fa42fe7167e4bb79110f237d7e4989d2f6f4bd21905e491e2d4b6ac5a66025c11a93ab1eddcade3c3e78c270eaf6a0a6ed43df6e35bcaea9aa716d547d2136c2388379abf645e3f7cad1cc1fdc92b882729ff92b0612302970bd9ca7e36d76b2eb4d9dfe35116bb7771e448867e57026e622e1e54422b064fdb707fef339aa16fde808f622a7269b77c292c7e85fade6dcde475c2f61d71370209bc0e46ba7c7b71e41df246d283f5574205ca6b4819c63d97193eb084fd6b0c20b956cfc4b45b51fd46b2e034ff0f003179c7539fbc4e888c0633767604ed0f07beb4fe00f5a3b56ad9f3997cb49c7a8b92a719411b20874686a8a5ab462914baa85d016df99796a868af3dfa6ad98ceaaa18af2f2fad2ebf3dee1df8c8863e84ed83d6da5e283ca9cc385e0ded20531f127ff4aa974b91634d8f367154d3e23ebb04571a5a453d1265e873d00d40be7e1eb7e74529822b4c81d742c981a988fb786084cbd1e721358c7a1ea5293aa609773b890a5c9de4d1349588def4232d41fa5d7cfbc3dd130754891c304118a895268555874613e9c89c66bceea609e7ca1a914ea327db1f85a3809098e801289d8ab71997c2ad5bd1f3fd4b3c6b80667ac2b6b23b35018206dbf708284f0e0fac58d0b6d72c0d0034b6ed37b1f9931158f2443f045f65e33084ebc6aac93d8c0e3c1c52878dd3f54b9f88a40821090cdeb3bdbb61f0be16338a2a7ba0f77e9ecd5400b6f809a49eee78346c69e7ab560fcc32f2d19e665bb91fbc00e4c00838a1385d5156d1696f694027a9e6a7ef66933202012caca81c1b3ebe64976a9d000e28a6aae5d6f061c5acf8e4bca00bc5ecc547ab1664cdb2125300130a5a92abc0d36cf911fb3123034e925ea097fde14253dd3de52bf5c8a6bf01436c92dbbf5450a9b7775a981b09eab05406dae83f8ddcf898b1bace4b8487f0b4ec5b5316a9b7e3bcd6da41caa23604b3932ff3daf31bb19e74c687773bb54503f6b3ed74aef1410dc4a9a72fa05b1e120e682a7e7f9b8c7b6836fa9d8f96d16fa17975bc3dd7784f0d621d5a69038b0947d1cb47381c82c6df030fc8033dd66b380d884b12991ef5d5283e552f723aaf791bf3af581423c57b536b91e5a158695b68f7eccfd72fd2af1016e261ec863215d1df0fe756366e56fa86c4495cd9a45e83227af93a5b431c5d33fea2b3d469aab08f57b85b3a14a47d7da8ca74dae34f963cf660057466dac3937ce00060f8db8099178944aa37474a37eaef3b9ca04bd0eb1d03c25887d530cd690625f5829830851a6a58a7b411bc87aa70f26e80514799664e35c44db243d61add5bcaba3695e45e9f1a3cbf8ebdfb87571c44b9dcddc5fd422e94cbeb02bb58abd14e140829e12f7f0c7e3cc1a1bcae8429775e531710bfa504e103b17c20c329f653c015ab514fd6cf162b96d871930de99413e148fa58c1ff262a997c6ed1bc008912c6b864031dc95b5a3ad6aa3521167a62fe771baff828cafaf178539048d2e91a62ee7a50df04062422150347774db320fb535ddd4c03a8cdfc3affd253c200e1d5678ff12eb6f5bd43da636778cd2f8551295f4cbbc902322e491c5c10fee144daeaec4cc2a2f855f5312f4c8cac1155c8d3b93a5fe6a60118a0a9912b16d583582b478e4f05c375247d4cd897c49a8cfd2540833311039d9b121e5d5779d71b206d0d862b95e0eab28005f86ddd6ec514d931a521fc035eaacfd10ec5f97af541cabf08512f6c79e7e0db5217bd14aab6d3e9458018c3e59769bcb689347d7e394b469e9c9d9da2be8fc7a54b1aab301b68c1faf7ba7bfd05b8a313c902ad3733e523fd64739d9af110e39a96f1048fd6a43d13045ec71ff3d1f64a904f3878cb18f58b3b84942331ec05d3372a328a83e8aab828574313964f6f6c5af246faf2c69a95e9ceca77c0fbf303103a2d38ef6da2929a3dbccae5823f82d9a37c989154c8a760df8e7d8589daf1fd69683cadd2c7ac13e285a7661c23913912ee272797e3a0808654fd0b9f74f2fe04cb34167aa630b8aa58efc2586bef8c7c2e354d7c8d08de7d25a80b08bae8d2326d16a15d537d8baffcbbae460ce608ded63a45bdf0caf9dc335aa8d2aac03a62a9c6c62ce7c2caa9a731baa549d1880d3facdb4bee43ae27ccd5a22f143da8e7b4deb5c2a194d450eb5ff6949a950115d4e1d60fc75115346a0aaaf1400a301dcc8a04f9d2762c093f88adac799f6bd5150ca9c7d3ac1f728b88b1b0807a7407ad9b8febd89a801c9845af62bf2fc98aea4835d52871774e72b9fc07d26d55ef163833fd2f5c951ff963f43fcdaf03995cf3f14360b05be587e7a19fb760a944166b1fbd04c0d02bda8ff5d92a23c4e683db1b2823a6b02a16a7bc7963aaeeec43d97a85752fa439544127fb71d8b4fee6a09b966bc4e7be67acca35bfe4acabf18f6e9cc938c1e0af43e11754cbe7b37738019d9a162083f5f1fcdd9299921a349f1e0ee840b19fed4c0b5273d5e71ff5f1f20dbb36c89e1edbbef78de1a6229a2cd22bcf2164a1b567f7c08c6ba78ff2e53bc348dd2ab53b9deffc9cf8726feaf9cb07b4f94d189314da8c0005f3bb031e44c402339588832779790e814c707fdbe0830d53b4d35812f27e7709bee185d6d6d67a65382dcf56d567180a4a74cb05b0f7d0202bf33b88729f2bab7003264a2d67ea93d022baea74d7ca54a0081923a82e56750f22f58bc997ea57afe1bce18405383055745f0c6bfbbc514df76107b3c5d04bfe033dace72bd5bead25e736a0052b6efe7eb1153d1afe9202e227d60e4e38f5f294894d2ef9b89998194492e427442a18506e24ddcc1952354fe0250ad949be08a63b6c0e206ecbac70415c36f1bf78d7068ce8eb804561eab2540c6c984e63d1217de1242ae70a5dd457d7a96f24ad9e8a59c060a2a95e9e04a6a4429f40d47d2770e9d3ece295d748aa30a7bbd2aec570733be7855c3a789d71d94b3c86ccdd3cca3ddcb35a969e8c2d5b17ded6ab8b81b90a4206ac2ff163c04ba9886b5ec6138db5eb6ffc19201f66a1057858e564960de679b2996bb93c8d2b440fde169d1fbb5886fe673639c514c2eb8bca75f79abbb73c4a125e5f4d7d4ccd5c9fc85cedc9fe6f2b2b75ec384fa6ecec37579a70bd29b4c9893badb36e1b33cf61b07ee7d2a5550ac9f23b5fe629297efe94eb8a8c2adce65a61ddae84544fe8f81455e2d053fdf7efde38b92b0b4d3e7ff9d81f5de7d571cb4db7e059cbe1ac2153b22b57b4d45d58fa50d152efa2d85d262238ce4816e40f93b65f53b6646297f69e3dde4ae7c57e9112054cb831eca5716863196db7667674b00be7c83f900c944ea2bc8e8e6b6b335a6e9f63e6f6635f6afc0889355aa4f0b928b90f76e6f03b5d40e9a0cace6243aff4590c0ef255860401b16da288687e890b1921b8ba63860df7aad86279c89d16cc4ad1ef4633639f203724c1958fb3b6a990f555e8df8f494fbdae25b353c14fe524541347c1d7f61c349f55773575fab73df09ebd1c635ad5f93fc8e075093ec3fd8b832e5331e329c2578d1f6f7a0a44838e578fe40db7d11645c2c73e0a438a80085988294d98a4ef4c5faa593dd5a9b0dec12d8a6dfd15cc4503bb2078739f26f9c10d0b1fc2634094cfd2ff6bec88a7513debde5fcabb85fd31df8d97bcfaf247edb89cb056fc52bc06f117a3e1022a57817b9abe1793cf279e163212f501681eb9ef08e39adb9ba80ec3cd45f5ae7afc0c256a3470e8ed3ca41c5502c510f0526eab848ec5a7115a53741cf05846989b9b5fc6d2ad74fb855a852e3fc7234bb0ed8b6937167133925dbeb4313a9895860e761300a0695e03e81c2c1e3fe3f4b8c42c946b010259ffa4c1d345350020cddc8e9697fb83c22fff5190558551584368e7a270f958bc72e2624c3e45bbef318b5134f0419e725945e445993f2f176f0a21f5dba86398529fe5159d57c0d75d64f950763b52935e778b20356615409dcb088514eeba3f811e9ce6ce2bd1ba6ac932bd79f7a518959f99d52acbc2a1d0c02c70b9ea46d662d39c315b36315f4220e5dce293275050a3e6df506d0c1d7786017572cd758ba4995963fa034ecd49cadb42bb1ee280600557ce2e17488e1dd4595b8c7d4f20f420a3a01b6228d764c5069222cc93e2091fd2053f05a50eda7840c13f45c6e2a2fbc0f9de4baefb7b40ea1fb7e9d30fb1fdb8f20eafca0c7c8c61c57dfcb8e2836e8d0ce546e8e37b9fc467e1bbeab314be171573398e0c2fb032049a99acf174a857c019609e83010dda8da078a4311efcaaff62fa908dde87cec4d41078c343eec5a80c42d0146d57e9a14f2b5611be05e3b665728c14ea9536d146926fe1e8d5acf12afca415ef5ad77bdfead7ea087183962592296d3d892c64a0a3b9fc95b50f03df7f4f50f950b43a289af09ca92a01a684e5c649b8da4a3365878273a00afd14b4fa2ddaeea5007f728899ba9f5fc9d1d7893a489e56c5fb152e5f775042f4b3bab6cea9cbf9a2b91647fe3c62d3ae4b5d065460b51d51b6e91f2f4fe90a3775e6312ffc805612fee8c314ee70c92de3feefb3cda56a59ddba83757b0e85cb0ee7ad1ac608a1e6a64656d9f586afc38fd1f6474b521724532d88cd351688db077dc9d229a78f8704b21f85324bf9c697874cac5f709c6701a421ac368edda0ec3a0b90268c449acf753d7e8cab501ae3d7e04788e899ec54a2517545b68fd928fb659349e1692bdeccca648fd13a7602868c44e77ed6fd587538a74adc6acdb1ebd1816af88ece2ca64f2603428a0aa842fe86be6b2b568fd29c23433c9e3f9f0e45bd13beb22ac06eb82ae0eb2b3b328aca4abba5e72a155e2cc82ac92c4697fdb9439511c1144fe2ba36f516fa181f7f8d58af69f87a6c936d1e561fff0509819e65a681aaea445a106f8ff3dfd987e2e24e977281cb85cc5e5eb987da2d17e73dacfd9880bd14ecad13d5705643f926303b389a61fd63139577de263a5fdef1facdac0068a9471fc17ac654e88e0a0d12c8aca1e850b64a88f2382e0cf3a4e3363827a06abc1eeb87216e3447dfbf8c04080ca2fe1a08cc2e2001eb386cf02ac0d3b328bcf1de009d048a03cd955c628971c30a137dc66879cbe938390a8f63251f55e559549dd11969b637876a20bc7c6f5fe2b753923d2f0269f2082206eb2312f40654cc95bb38add159104495018a5aa7b8f5836162de9a03b6981c662f2ee02a168d530a002616c09c4cc26c2a2726711e3e25b4e3acb6dcba25fde78ecede51f01e22a2f79409c77011a599ff57d81e70dbde5fcbdc841f9af0e49e8200cd2d3c73013e0e5608ee1951ac04a111864b545e7bc2434c2474286519feaff4da07324d1b13bb16d1daa1d485bcd5466b82c9622f92664f1153d08c6e644b3d0f5902b4d749895f7763015bf0e2849703ed920a3866a260f22fe40f46c76ca6ca10ae8994505fa613a6b1aec84ee6620c25ca4d002f56ddd21b12eed5132634a3194281283fe5fdac07d2fec091dc0f748fe25c6b08cf8d4ff893e863a43c4c92fba47d86c8dfbbabbdca0cec09f732bc0b8df2a97ee7208e64512249300aa4c44c10d4c4503bd76e7b4e2c9aa2e274166ef103d5c832a760f33b5a0eae4dab922f0fec5adbf409bff956b4ce40e6157d498d46ae053f1ad73655bfb0a3dfac6b96c09bac4d07e6bd7f3ac6337f58cccc631466985f6ad680d21a5fe9a9bde4b6980c689e6e8c7a413b6e3084997c089443ffaca9be80c96ce1d9b6de074b4aecfd2db3b679a2d5cf0523aa14414699d481eace4aa397d818ff4d3e73d82031849c7e4f1f1503b636728637f87cf7a7df5472abfcb7e5d77439e1018dba49a41e1c8e63942fe0d1a426f390e8e225fee14501a34762b8d835ca14d6a3a3d8042724ea9e6b568fe0eb84306397ffa8345935e9be8642e6ffbd96e636fd16cacae5d4b88fd0aa0bfbba8221f68eabc98c67de6f9eab2cca07b096b458bbfdc7f1da0bb845a1a6e19c6da87a958acb1aad0b74d6537e97fb0673a20178cbb963f909839e49ec593ddcfc3046aa54c22e3a54148c440d1f2ba1fa7417572c629e48e6d2e07760a87581971d1edccc03c0e465d4d6321d820b3346fb516c1813585a6a8462124f91428a90ed037f40cd6f23596dc90c03825636e55a061838964213c70104ec0c5909a0c62240e93314f9b67ce8fafa115251282a6ee7a036a861d1af11919dbfa7ceb7b2260e66be6300a536e78ebdf60a6f022574b35205341f3557e409d8ecc0c2304b372605c9284aebe1b92f13051db78210df83873b0496625507cf8e1ee5e90aa66f45be75e388d6e0a021b8af3787ee06cd710719b4d06ca5ba5f87de812a660f939584ea880d3c71bc58135e612431850180ee39b707bd98aff26d2c5e4396b43daefd82b2ec1004978637b8d389cc415d628fea6f66f28664f9409448e68a2d48a0a00", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x4000, 0x4, r8, r9, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000004ac0)={0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004b00)={0x0, 0x0}, &(0x7f0000004b40)=0xc) r12 = getegid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000005f40)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005fc0)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@remote}}, &(0x7f00000060c0)=0xe4) statx(r0, &(0x7f0000006100)='./file0\x00', 0x4000, 0x4, &(0x7f0000006140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000006240)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) getresgid(&(0x7f0000006280), &(0x7f00000062c0), &(0x7f0000006300)=0x0) sendmmsg$unix(r0, &(0x7f00000063c0)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000500)="b52daf47aed42afab2e0a6310240101c837f5e0189697e423601a4c857a4689177c1be9c7bf04289e8af6106f605dc6d4c8e1b063753088d994d126afd9a7cab577cf9413dc5b7eb879215a96cd06ba6c25e63322c1756d9d836230c2fa44ca6446abcd7f120b43a12d38f12bdb4cb5d33fb6fb6d20a2a92715df9040994b595e261d0647a1f235c2ae5980d2951bdae7ac0e3617b47df6e4971ef4bdba7d4a734593e82417c03f5fe4a5a2edc324bca2ab5", 0xb2}, {&(0x7f00000005c0)}], 0x2, &(0x7f0000000b00)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x18}}], 0x84, 0x8080}}, {{&(0x7f0000000bc0)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000000c40)="d838bcd8abbd63e6dd9618fba1f0cf8801b75d29e99104288a71f07381782051ac6efec1b05da705a42842f3e677aaccded28e7ba9eb60c781de75a47a8cd330baa50c9a8a8615396375c58ce6c2f26512ea60709aa8c50828d9cccd5427af873acf8985af2104f8ca9bd2ae3dfbd0a7beaa10c367fa5fece42ef2f52a16461d5c6302d3a84ec26829919e3e5e8273a01df0e517068489219e736911079cb588c57c99fcf19822446f7c8379a855c70799a2f54dd9aeda17848f51948be8edb2849a84f9992f2d210419ea2ff3370ebbbe4de8874437a20f920f9f6719733f5e058c377cba0981ab9e7e61fb145938816180a8a46903eceae7862eedfd9e6bcf276f33830558a78a5351dbb21e67463ef14348d2163f15117d1b5b5fff66b44a4bfa2792e18d3ca1fdb7228b674cbb09b791a1221637541f6216717362ce15709396ab39dffd23742d53811fed783590e148816ac458d22b0455610f99af0040848aba90c2afd77aa9dddfed7876697021390890f9e6bd7c2d1bdb8914c49525e51c4f4bbda7d8d0da7598b00ebb4ed402832006b038aab42021f975a8d48850fe7f61575e8d6add1b7f7b42d34dba41cc0f3fdc8f7475cab69ed178569e52917fb5699770c76a9925120f177d0a1040a71f2a34aea57b1586fdfb46d5fe6e139b2939d01cb44ca7608a4769a6ffde878c3f4f90acb94eab4b3d6d04c21d42023a23dd8762d33643b64502cec617c190998691cff976100971992e2eea24d151aafd1b13ec1266a1bd0a8c1b7c9fe315f52fe771535d0735b86b8da90e9b31eee11777078963aa924df80a83de4081240eb89f32f48c428a6e8516c700dc990ec89d202c28283eafc11c5103ff683702f7e2b4a322c6d762ec9a50616698c815df1ffbb9eea1ec61a56f0ec100be9173f87398f8371d6e59af501a133de1eb09790f1eaa8cc5710d2ae5aedf389b399a3a5eeffcff249593b7e74dcf6a83d4f5105694eefe946d3f65884c0f742645103b9079d092cfb44ec81808392ec3286ca4aaf2d282700ea5a7253b59c9489f8b0380413f55a5d5eb1aca9b4e065c88a304263b4129cefebd27ceb7155a8a24dba43070b6353debbad207da8eb6b3c9462a1d7f2bfe269814225bc92265f8e0909f9285604b8f21f9b15c71a68ebcfee8a22daba17bd509a6b31a66a103461c926f8abce00b754d91187ce608224910a894423ba48b9b1696db4a37342f471b8a511070366c3d3abccb1d7c5069b4b383fc1f7495305e67d51a0e25b8ad22a27fa6804111f143c04f7816e37190152e240aa3ad78f55b929cad306f078b7371cd51fa7ae3035ff075638bf4478f39dbbd25f5efb2abd79e3f7097d5c646d3f4f62e19e68ed5bb119b5b411160d4094c2b2d8adc36786a9f8ec461c916f47d972af0c4b0a20a2d242ec6a09ae42e52999d0b65d89fcdc083f06a960d6e9cc19d54b24303cbb69e98b45cf9470db3ad1ba4900dc7e07e9fd710cde21f5798c6f4716555512dd17a3c1f111ea29e21d40c7cbad963a11497368283f8c618a66c438b27f2be585bc98055e3201f29bf454857b64d111fb441b904d71b4aac1fe3d9a92f2611351b9ba587300a7821590199c6876c245d48d3dff7c65838f9f04cc9a9b2e391c7f338932040a7b83453de1184961e87cb759bd50e47829ac1b2113a3ddda9d6a20438e50121c4f870e424813a6b7127a20c410fb292b48ff4afc63bd39fd9991178833a8bdac0f83c5e0ee9d31529d3d530c11db60b6903121f657c449fc6831354e7c34edede7406f8e086113a0e6f3d687c3b4e147480d37f68ecd4fbfb62d7c362533bd8b86677f271b6aeab4731015f23ddfe3da808bb34f9be56340ade59b032eea029d61b4e1bc133981b5727d49edf1fe3444c786ce7c05f10fdfc19b946ea83514c1f47cc742e1048b16333e7265987a8239b3679b3e420ed872604475c9ffc8c0cb1a90060e92a04c7af51105bb4afc8e3fa2dde1a399138590ccc70ec69cc905438fec7b5ee356bd65e850c9cfcde473ba649bb7a7070810f53ff9340c22ded8a2d8bbc0ac2bacf80194e613e1acfc14b59f827b7ffaed34bdca893df46fddacf0e05f8a8634a38f2146fca6fe05854990078a55e018d9053563ac418f11095cdeeda93284d8987e74d3e796fe783717f4ee5ff7a6aaed70bb4f2729c58f19eda09bc0f0c5a2612c9eaad0dae62a2c3d2ae7eac4ae667e4c791d506bd71bf38404f09dcc58025ebe1114157c350c1b201f2ec10cbb2ec235cccfa3202c30ee684df30a6be805e6b75d59ce679cadbeee8598ee48d1283c38bb42ee985bf0de3a26ba8ea27ce88b1fb4e0782e734afca6e2b0942c7545a8f5918dc228a97d3c1e686984eb227b54c12bdade10823ec50881a50a434f9795c5e95b6e0d61d51c2675ad00801c3c726ce2172b3d4f9c70409d5d9aaa0e46be9f5924e6afce3a2ffccc47b522850c535407039f067be3ec4320807f545720cfc1b84dc6202030199fb5234cc836f8624afdb21af60edff571867b08ca4638b6730bdef43b254e8a53578bfc924fba419493357feb3ab0b845369fd6bd6472ec6ec62fc2591e8ee7c83caeaddbb34b97c0e9a6705c8da27caa24361294241c5c4b26525953e879fa09076f8e5f151c32632cc0a62ae3d12225b04b2b00eab545966d7ac6049cc05b3a64ed1805543c02e0abdb58e0d63bd4b8caa27dde3e525bdbbd9a8b7b5d6d4d8a08a792503faec76e781ed7b01aa7b180e5ef2800f1237b2482b76f4cb8b74386fd0e6c4d344412bbf917cdd3a5ec5755d9ed483ec21b14f4dd268cf52d185d3b6b3d53994cae8329846a2a91eabab86f9f9a2968bba891e420de0265a344f92fc31cfbde47adee35ba190795fe14b3c40440eaf3df4f09577ae6e62728ddb8a84a323bb4f5e320b807f1f2d5e811634ff2e9f77c9d2cff0f6f1c73744b186da925862a6ce207f21da5b2c6c06e93d887cfc6f49de48c40dd3495f7ff6d970f4b87dd68a76ccc8ac11f0df947dc2f91eef7676734f9f29cfdb243ea6bba0dcec2c1714bf0b34bd1e4413e55bc2eb90d76224fb1b66bd2888c0e0c473ffcc9cfd9a9687ec5e09d107cefc306c087788d6cb8c9b44d7ef1e4943e2b4ef3f1090fff83e05b1006d7dac87e412efbea6795c92fdb474d75607ccdfee7b029c484167e00688fb5175d3ac9e55555003029bf4fec0f59d8def59424b75682d41f26c910d924855bd41069cdbefeee8494684d7ac4cd603b65ed73c7812826796b1a3b296104d0f73051bbfb6e962435c3a92e55f5e4ec39fbb48279dcee91b100181e2f87a80c7c88f080f6030e22ef68275b9e39a4ea719db1d9ba5b6be2f70078338dab0c9f3b8656d73e8f5f9c06df631895b68097bed0233f96a003491e965682e96ae3f9a6ff4b973033222f252c7242f562a82ea0639faaa8140397644b16813a24c01b6501f3a372327e58c4d27973e40fcbfca2d23cd836cf3926ff4a717194cc4728c969b1650154d45632c5133eb04abef145c55c7e38434445cbcc45a20ab637e09b79784118a957d89655993ce1208e46ce076338e86460d0b26d8db3b7e78e5f9977a6540c438f16ad7bc0b7af0ff125767f4f44fc852e4ba74be7ff4a89211a948f78997cef4efbcc55b2601516b933a31245469911fb8b414e20d48983597e28d88ede06e407808c7bc877bdc9b100c8251ad4a1c40573d62451571eab3583322f7be793d352f1e10bb44c37de85f06e8a9fae42257586c4e4881b52d7f2459da200db379892e9213ff9a675d3625096c3ee4b064ca6967a3d8a1b788b8d0510b855ad506aead3f608139e5101296e0ff152c0e8183a6dc66be1c4fbc17863696f6d0df744b880f32edc60790c237c22cc06bf17454f40004083e5f02186afa491a730bf76a8f07474c9bbc45a77fe4c7e02045f14e087c5501572d649af44275b27e028bb7b31582afaea6c81abcbde8b6c4a9227928307a67bc03b9f5b113c4e4a17c34da42a260ee1b12f25c07e80050c4698549f68b0507c30707da67e4af04d0f2bee76fbcb7afd60c088dd225d1e7cb3956d66db9fb344d940e24f0cd4e89ed893a0b29a183e71dc1bec1b70e91fa34368bbf9dc5cfb46edbd3caf8d20b0368b1ce849ab4a6e02de1147c42c3142247ab8163a53f9394e293e1defeed98754d45e047f95fea19928552d760ea2c2921ff8bc4dd1d47e3ba1396d9054e456c8915037a4313d3974877b8c5937438c9f03be0a8dd71759a1c5db5d05ca6b7e6336e23974646c7283894898503703344c5f44c30e0d4b9b0603e09465ecf040118436cd7db56a4ed40982a236422654335eaf61e26a7bc9ac8fb6a3aa65358fe06daf667dc5481ad53c0afa90a0d688cc826b07936fe67bb0ec7757066bf8085624fff02d25ce598d5d60feb46475be3925739cbf2959593ea5584ed876aa0372790724740447606af3e94217c58c142d8b6dc1ec59e5f03dcc554cf6bff061b91022b7b7c6221f6b5bf46670429f75f6dfad18739ae96b329c616ac5ed04c0203b6ebfa6c6cfb1b10be2ef2ea803f46c06a8537845ca4ff8a7c38aa0a83e2eaa25e35bae3eed88ba737fcf6dfeef84051ab6c5be6925c544c75f7dd1f6d94457c69c50e3bf0710f027a93dbd9c9e59c9698398cfee91f69e0c04d5ad60ef68d19cba2f9704155f29571509f275de5300f99c612b44115c03dfcafb059fa183523aa367e2e599583a159bda2fdd313c4f07a2eea68e05dc00c55d919a35328db98bf9040817e4b0378536ff5552d9fa0ca539d087f285e3dc63a70042ebcfad9e51e0eece174444339b36f41ab6f2064e04a099a77bbac330a68344534413c63be0d901ec1268c7b15cf215bb86b4fca85164c2107816ae5febd99ad4bb42dc8522be24044f05e6cbf3254e9d130b7183b598c59b467a049b01ee31fbf38092dd0fa76afd80843c1c1493eefb99c7d16212d1ed280b2a246667a02f4c8ebf161f11f3006108c738a3661f239a13390dcf1fecc6a4ecf8553a2e35892c9713f33e177df32ece902b1ef3397ae440337188da4908017b8250f052b4a56ee6cca6e4613130a2688d85d37f6c2422592c40971035213efa3f4b2e056291a48b4b94633131274303009955496dadc8ad697edd0e4ef71143a2fac41819acdc5592eb8e3362b795e23159ed5f05ed52693002fc4db3c35949e0e0d3fa4ed1694036e263ed6b2e5eef969fff3b9123e539ccd05896f86c71d28e29b428b40871a38f0b11984191e7eec1a3fbb0ea9e0f5a798c01f8bf7d4d6d98349c24320db537268dfa8ada1cd9e2a6e4f87453f5f78817be2e3ac193c4d380b20871519a9efbfb80e184ca99a35a2a95705ade1061dc04b5f5cc2a769b5a6409c504c0d500aed359392ddf838d649ea9512d1d6431208b7ff9d67ae638e90e98d2e27dda13226eeda76c25f736eef43cc4702212a44e7ac1b1ab26ffa9c83dd25d32ed3e1b0b9d8407236128e0461b3f62c743202e42e504fdf6ca0115d509ae956a2f0b1eb8164b1b872de60b26a2cc41e9121c12baa8a3d51aa49e0bb74e3529b85a1b7d03ec923d9fb5a6b8e2a21af66fc47eae9a8c85ea16cc11bc64cb97655ccd3b5927b7865c419af0846692c5aeeb28095b5bad8ba05b78c9946dc2ae07a2c12d79def817dde2d78d8491b1dbdfc3285cb4b74d6482ab14818894a5e79b8bc8a74a0b5e539ef74cadb62dab321efa971d1143e8a3d25646db01c9f87a7149f5a2dbb4b889d8a3e", 0x1000}, {&(0x7f0000001c40)="1413ffcea435df81c20571ed1f36aca077929bb4f5f1967c1c3687f91416876bd252aad66c16973eaf3c0f089495e0251035aa4749f6ea1636489e3b4ab97f870f0d1386c66874154095c93f3fa0605d89b455da8506fb742361", 0x5a}, {&(0x7f0000001cc0)="9e8cfa6001891ced5135b52399f15648f2f618d77a32f068e8102ef518d05165b46f6893d21b485ec7c64a94473a262c0e4a0e82dc02069017909fa3eefb72b4e1f24bcfe20e0c30a95d8c2969484ab48bc44375156ddc897f45eee372bcf13131ebbd5c7bffd1d801386b9d1f46591b620d7658295c62ea4819cfb99b151fdc973711f24a5132cafade106dba6ea8763be8044575f6ac2f308c0905f0a4c13f83eb9d37df43b5bd7f50d5530ba7298113d9c4de5dd643ee808851e9a1ae", 0xbe}, {&(0x7f0000001d80)="d4d70ec61ae0f4556918f7fe1933135064bf76f2d9c0f0150556f6be555bb12fca83ce673b57295014ab6195a561e2b36f25c7ac5e5f941773614ad428a6387877aa471fc727b0c819042b22ff9875212d1ce3ee2fb0fa8f845ba3fd0fb3b6bb60e55ba4c13412932cf7db103383c05f51f245b9a64a1b40787f22d5ba7138ba13abc27909763892fbbeeff3ce6712c53f42e6b938b0fce294def1db21bb29143d2e6f3a34fffd4baaef7921c4673a11ec5fa0af16847290d17734c0f841b386f13898088f59a9d532c197183d82e1f75d83ca68a01e057f8d5a89d37e88587f8251309f64a82cc5e546e2c0", 0xec}, {&(0x7f0000001e80)="d9cac8c7175a6fc8951c4056d1ead5a25a5cf5e19c5a08c8b9cbfd2832cc5f67a7751f35877ed66b68f61efd31ee8efeeeb33e7398e28232c12a44e033e4bac9614c6a0a767cdab2570b5f33ff20", 0x4e}], 0x5, &(0x7f00000021c0)=[@rights={{0x30, 0x1, 0x1, [r1, r1, r1, r1, r1, r1, r1, r0, r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r1, r1]}}, @rights={{0x24, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, r1, r0, r0, r0, r0, 0xffffffffffffffff, r0]}}, @cred={{0x18}}], 0xd0, 0x1}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000022c0)="3df6ec13e99f336bd33d76672631ece0cd91ea0b12af629816898a40a6b4a0025371c52e3963c8c8ed9e4a6633208e4c298b34ca8580911aa1ae8aa1e44352c3bcf487653c78d1cc5087086a0600df4b89294f5d87f0bf6653cf24b87519a7fe02ed4e5244c50465c3c34c8ab2dfd47bee0c350d18be94983b6257cb84585d3a7073a6821e478f74ef09e6a6a7dc1cf404261f5218130ceb7bc01259b5dabe333a8eba618b85fb83b48b5dcb78f478a5", 0xb0}, {&(0x7f0000002380)="a87bb3d18272e6360d3bb422d08983ed818577e87a36ae8053aaafed74ad726becd03edf8889413d16a772d0f701c3208af5061a0be0125621c1862060af5f4aa21543d86963579361dd994ad7b00fdf8b5ec9db8cf1490deeca7fe67adb23c7aa0abf0ebd0ae5e3", 0x68}, {&(0x7f0000002400)="e992d6dc7dd4fad2c1864172645cf7cc4a4cefca6f825a", 0x17}, {&(0x7f0000002440)="7702b435fd4b5a0eb18041e8efbd5a3d740292732a99ae6d354f0a26e1262f3a71691751c7348466d4dacbdd0e83721ec63735a931b6701067d2afa7abee1f095642123216c501d11778a2950ede4ad9c131ab0515605408535940fb9f538084618a50d1a4a3285b5b411fefb4879748e7eb5493b0c5fdf462d49119f09f95ffba98", 0x82}, {&(0x7f0000002500)="281c7fbe614dc11f8c79774ffc891e63ff84e5bca01728185fa355f0d0c84776c0cc6dedd3ccd1327e948f0958f1e2c0e70c35cf0b6180be86906041f190952e64a1b6a7154025d67b62f4d16604521b80d9f7094870b33662e045238d8fa98b807555619c65de69f513168189e6155d1598aba6ba4e027632fda4faa17f9d47e33e327061760f32037a6a26449abbd2204d77d65fcff3080eddb3882eae454d2f49eb642262f3c615910377e7d03e83b41451f7bfe6dd8d701b88a75078dc5dd2b9c3822c00e80a74b70da8a0a84652a5112b5d4c4328169ff8eb884bd38f49682310fdda", 0xe5}, {&(0x7f0000002600)="7020d10b6af456d284efb185aa9ea7df74eeea180ca3c9ac57c400e1b126d6def40458c207226d0cbaa40b8cf36e6680b425b4d9a7c70e76c13af45962233670a8d3935fd6766f2392b4d0930d26e4e53e690f501bb1a7bd7e1b46c48a6dec05b90a44eb9ebd0989a70a459a10bdbcd8a8fed4da", 0x74}, {&(0x7f0000002680)="073d51637af6caf62a1edc17f4a4e03a5979f522c8cd89361c497d9d57be9f8d872d0c9a6ec6454408913dddb751c340246743ed92bb038c530a6cdec2baa5", 0x3f}, {&(0x7f00000026c0)="f8fd87b5ea2ebce39acffd961d79c434aa250f2ccc6db2d5d39ce95a", 0x1c}, {&(0x7f0000002700)="6c47eb2e7593e0b04ff65dfb0cad6fa8a71ea88ef2af5b1330f62e0f5cd6a592adb4c2ac9e3433e671dd6ded1abefd28f7d559600800a0a3a3ab923a23bcbc8b57eac48c5088ad2a5193b4214db5d5801d672bd290", 0x55}], 0x9, &(0x7f0000002b00)=[@rights={{0x10, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0, r1]}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r0, r0]}}, @cred={{0x18}}, @cred={{0x18}}], 0x90, 0x20040001}}, {{&(0x7f0000002bc0)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000003f00)=[{&(0x7f0000002c40)="b7aa08ee14ae0978a495786047706ebdaf04a080a68254fa66c46a4b23201c29e2fd1a7e009e6fe8b7ad02287940ee2c67c4b8a5af10d618b99f893f3fb389a7455a52e125f9ec8472831c5ec26eeff767aba51ccbae99c8cdd94d4955c5e3434414a3c3982bbe7c235111f8af1914d0181d81cff3e42908d1b64e86e8b0d37c8294bf9356ad1cffc8b63e72615ab01f3a9f687968f63b12", 0x98}, {&(0x7f0000002d00)="dda50534b375b00b8ac98f73a788b45e4c2e63bffad3063a586a3c76d7aff3698bc0d7b21c1b86ea328fa76af57937af82cc3822c4742f49dd4f9be3943479da7df598c6f7c1be", 0x47}, {&(0x7f0000002d80)="18da09b0cbfe499f7ba0f9fd47601063d4538514607b8f404fe22d3a9c83264590cfc975df2483267944257c1211c340a5205feba399c9e709ad013ca8a56c96d6af49d54f85aac4cf26bf3d83c4a0c008a0bd6d80385aee4ce89048691cc2ec9d59d8769b650cd776dad881d0ae629484d6724c3454cfffc95d76c2623e71ee4ba641d68565e05a8cf0ab74e94cb0be6217ce113d3a0aed0da8fbf09c9701c850566d12a156f07bc5c3", 0xaa}, {&(0x7f0000002e40)="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", 0x1000}, {&(0x7f0000003e40)="a20c7204888a7f1bb8f129fde1e9969fa188972402296b29d5c3ed2192672813cf9e4542312f930193607e8106e31c7d713b3f6b5e211a1006e0974f138e1c2f9e02cf152918ffaf189f742143c3360d616911dadda715e50cefed65f0a7dba69d0236940c37395b4ce67721bae029fb46d776c603d2ee2a96b133c04c6f0aa341e80eaba666e00394856fd54f", 0x8d}], 0x5, &(0x7f0000004280)=[@cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff, r0]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x18}}], 0x74, 0x48001}}, {{0x0, 0x0, &(0x7f00000047c0)=[{&(0x7f0000004300)="e76a5e1c0cb26f27369c10f1117db105b193b6a2d18730e90be4bbd62017d57eac5c1f403ee17f6f67304688aefe8af2118ec67b3ed94907144a3cf2babd8c15ce74708dcc0359c806a5a8a1c0dedf55d5554ce02ce58b0db6652f9505e59fdbb6a2db1acbc04eda4d7acdc6ac69b55b779022f7a9eef27f324b3bb88ce852fecc6b1f86ef37bdbf9578f967622b83c6c5662b382eec75904c8aaee6d62be46b1be3e6a37f61b766bb0bfc58566e4f2fc28b909f6a533fa4c92c87cd9c61a1220e81ee7da74d176d70a04411be441dd2e0834713ec2fedfa7e83482e91317205c8ae5b", 0xe3}, {&(0x7f0000004400)="0210282ce89b3b2f3c4e1076ed2ce3c3173c3ca6fd5304065aef29fd1a01530b5d7934580135d5914f2f058ebe2efb", 0x2f}, {&(0x7f0000004440)="b4d9a883f5990831216a85e0a0b370c688ad6c52fa234041a882200d61d149a78237cf8ccadf2e1df4a5ee45fd44bd668486857c5e18dea726d45507dde09275f8a4a877b6eaf7df04edf5c1026fa8c21a18cf406fe28cb5c0c292c880bc682981ea7d045bb9a0eeb7c3769a1963cf1b7b7922b27f90ba4028631c53463ba7c862d6600712089263c959eb9b0d7d1137c06ab33ba7a588692308f40d0fb3d5d5c08f7d600dbda37665b82f9685113fb2999946c5775b1a83c9a3a626761fb864b492", 0xc2}, {&(0x7f0000004540)="ea2af94cd6101cdacae04277255536141a49c746e2c12d60e27494d686608f9c180a46cb12356bf51d25cfafcf749046c2428a8d95174b807afacd", 0x3b}, {&(0x7f0000004580)="b06a321c9e2a5b88a489ab92a90596b74f35dbba53f7bd11b9271dfccb29229c835a498bda2f891a1ea2a1c0a9db68556341580d604d1beda760a7d4544c625c39bc54fcc61185f162b94c07c8120995b9f568f0a973ba90c7483258b4a6d6eeef5744613911e003d1aaff2bd05ac7732b03", 0x72}, {&(0x7f0000004600)="7c7e3fb574636ae465b86cdc6f0ba589b598f1e956a004ad6e0a7821e6f25d67b9163a1880998bc79cefffb92147803f0bff22c0ce5d8e234f8e5629c9c3181a0687b0d985779172fdd451d3adc959e6efe929955d34df4dddadfa68aebfb1f060770e3f09505a2dcd260c2b61f98565aa2c86408f1748309fd3deb6fdec47cdd25cb19fbe34c1effc379d10f1e8e4510b7b13bf9997e76a6e12c631f58705fd22726e74d377a5102d4ec44980a7e0820153", 0xb2}, {&(0x7f00000046c0)="2a2e24f812bed7b396989b501cb5fde1baddfd50d9bc59699c47365e671c40b3be2108ac4e9832ca0b840155d0b3ed46120ebca2bb8d8b53fe991113f89a307ab9f9e1611228e91298850abb31ed65a2f3a7ae0729543e0b3202a0586bc33cf931c9ef6aeb34caf54eb2cb5e0aa0cfcae816fd5117822f0cddd26154afd73c88285ba5e06c2f6e9baefd41029ec8a37c37870f0dcd92b2e36ab1d0de7d22c93c54920dec1f87d063680a824a0b3c70d105fd41233db50d7140237b4a4c121cbc1a871b978062b4d0ea62a96d9f3a96f464ec09c01c33ec73a162ac8502f236b1fee75a8843fc146b0c", 0xe9}], 0x7, &(0x7f0000004b80)=[@cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, r1, r1]}}, @rights={{0x34, 0x1, 0x1, [r1, r0, r1, r1, r1, r0, r0, r0, 0xffffffffffffffff, r1]}}, @rights={{0x18, 0x1, 0x1, [r1, r0, r0]}}, @cred={{0x18, 0x1, 0x2, {0x0, r2, r5}}}, @cred={{0x18, 0x1, 0x2, {r6, r7, r9}}}, @cred={{0x18, 0x1, 0x2, {r10, r11, r12}}}], 0xcc, 0x8804}}, {{&(0x7f0000004c80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000004d00), 0x0, 0x0, 0x0, 0x4040005}}, {{&(0x7f0000004d40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000005f00)=[{&(0x7f0000004dc0)="0053a6aaef629a405b16babaa8f26b21985ce44ee2b08e8f79", 0x19}, {&(0x7f0000004e00)="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", 0xfd}, {&(0x7f0000004f00)="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", 0x1000}], 0x3, &(0x7f0000006340)=[@rights={{0x14, 0x1, 0x1, [r1, r0]}}, @cred={{0x18, 0x1, 0x2, {r13, r14, r15}}}, @cred={{0x18, 0x1, 0x2, {0x0, r16, r17}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r1, r1]}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee00}}}], 0x78, 0x1}}], 0x7, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 1m51.648980499s ago: executing program 6 (id=764): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) symlinkat(&(0x7f00000000c0)='./file2\x00', r1, &(0x7f0000000b40)='./cgroup.cpu/cgroup.procs\x00') symlinkat(&(0x7f0000000280)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) mount$overlay(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x309484a, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, &(0x7f0000000100)) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="100804000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8304e7ff00000000140812d80a5b360067ece34be265000004000380a0bce5c7e206c1ad0fc3b53eaaeaa5c4f61809e63c190c606dc04142c08a5b6322df5a2fd252505303bbaeb4d08b26baead28764267fb7bec4b512cf58c252182f815aa9fd4f4144a249d6a1c6e7cbc767bcf585846a5797278080df28c35f66ec0fe845bb5b8b81b4eca292501d985d8d4e726fce1de047fa9c1d9b6825473595d38695bebd940a92576b971ef7e0ccab96a2338fffe899"], 0x34}}, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000580)={0x0, 0x2, 0x1000, 0xfffffffd, 0x100002af}, &(0x7f0000000600), &(0x7f0000000100), &(0x7f0000000b00)) syz_ublk_setup_queues(r5, 0x0, &(0x7f00000007c0)={0x0, 0x1460, 0x2, 0x2, 0xb2}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeecd, 0x0, 0x9, 0x210, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e3c, 0x10, 0x1, 0xff, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf39, 0x4000, 0x3, 0x102c4, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e84, 0x1, 0x2, 0x29f, 0x0, r5}}], 0x4, &(0x7f0000000640)={0x2e, 0x5c, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0x1, 0x14b, 0x0, 0x0}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x0, 0x1, 0x3}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan3\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x2e0, 0x3d8, 0x3d8, 0x2e0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x12d, 0x7ff, 0x2}}}, {{@ipv6={@empty, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xff000000, 0xffffff00, 0xff], [0xff000000, 0xffffff00, 0xffffffff, 0xff], 'vxcan1\x00', 'gretap0\x00', {}, {0xff}, 0x87, 0x75, 0x7, 0x60}, 0x0, 0x1f4, 0x214, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'bridge_slave_1\x00', {0x40, 0x80b4, 0xd, 0xfffffbe0, 0xffffffff, 0x9, 0x6, 0x0, 0x8}, {0x4}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x404) 1m51.329989519s ago: executing program 6 (id=766): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}}], 0x1, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 1m51.239843342s ago: executing program 35 (id=766): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}}], 0x1, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 1m33.889144318s ago: executing program 1 (id=857): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0000:00:02.0\x00', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='amd5536udc-pci\x00', 0xf) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', &(0x7f00000000c0), 0xa000, &(0x7f0000000140)={'trans=virtio,', {[{@access_user}, {@posixacl}, {@nodevmap}, {@noextend}, {@msize={'msize', 0x3d, 0x9}}], [{@audit}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/amd5536udc-pci/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0000:00:02.0\x00', 0xd) close(r2) 1m33.809722291s ago: executing program 1 (id=858): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r1 = socket$inet(0x2, 0x1, 0x2) bind$inet(r1, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/functions/rndis.usb0/dev_addr\x00', 0x1, 0x0) write(r2, &(0x7f0000000f00)='00:11:22:33:44:55', 0x11) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) 1m33.248280869s ago: executing program 1 (id=867): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x74) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) accept4$inet6(r2, 0x0, 0x0, 0x80800) r6 = openat$mice(0xffffff9c, &(0x7f0000000040), 0x200800) sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd8, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2c4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffc}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000000) 1m32.302987121s ago: executing program 1 (id=875): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040002f70000000000a968dd88c22b81c796b8c16ed7f2860f4cc4db09345bd473b43fea791c04cfb28a0d8b4404c225ed452e279efd75b68434579d20cd04dc647182449fb93d9cb050f23667cd211d23ef5feb7d210a518c18f4345fe35d195bdc7438ae0d5e42eb7764fd9817dd16e1710c2dc199a96841cafe92952727787d7f4384c6"], 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000001c0)=@x86={0x84, 0x2, 0x1, 0x0, 0x8, 0x5, 0x40, 0xf, 0x6, 0x4, 0xf7, 0x8, 0x0, 0x0, 0x5, 0x2, 0x84, 0x3, 0x4, '\x00', 0x5, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, 0x0, 0x4, {0x0, 0x1}, 0x2}, 0x18) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000baf775aa1b71da", 0xe, 0xfffffffffffffffe) 1m31.96858547s ago: executing program 1 (id=876): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r1 = socket$inet(0x2, 0x1, 0x2) bind$inet(r1, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/functions/rndis.usb0/dev_addr\x00', 0x1, 0x0) write(r2, &(0x7f0000000f00)='00:11:22:33:44:55', 0x11) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) 1m31.496624871s ago: executing program 1 (id=880): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa80008000300030000000800070005000000080001001000000006000200", @ANYRES16], 0x84}}, 0x20008040) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x14, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x9, "bc6b7775"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r2 = syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000440)={0x18, &(0x7f00000000c0)={0x40, 0xf, 0xf, {0xf, 0x10, "a4e5de218e1982bca6141fa48c"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}, &(0x7f00000002c0)={0x0, 0xf, 0xcc, {0x5, 0xf, 0xcc, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x9, 0x5}, @generic={0xc0, 0x10, 0x3, "3187335b552450b8282d0082ea3117f47b64961f3ebfe09e1695db3db03c135da97210ba34db2820c6863398b939fb3cd54be70293ab7ab2ec0158043495feed7230d991c14eab280881b5cf44bdcd5e615bed4f8e48b4042e17bc2b1f131a39e474e1c0690e8a3d4a2c993e2c82225bfc9c316f0464226949644c5a10ef7f50a4ad349e0c441c7375cac99110c67e9a04ac5d5319cd3a4aa87319aff9e20c025817feae63dd448b58253a3518f5e51b818786d04ca4520450887de471"}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x8, 0x9, "e7c638bb", "47ca41ef"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe, 0x18, 0xff, 0x0, 0x3, 0x59, 0x2}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000480)={0x0, 0xc, 0x27, "f06c1b46e36d47e782bc25aef045395530697a074fb46a800c7968f0272fe149d75e09fc067753"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x1b}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0xe0, 0x4a}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0xb, 0x2, "73d3"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x8000}, &(0x7f0000000700)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000740)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000780)={0x40, 0x19, 0x2, "40a7"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x9e}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0xae}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x3}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x48}}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x8}]}}]}, 0x38}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000000000)=0x1) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0xb) 1m31.264321449s ago: executing program 36 (id=880): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa80008000300030000000800070005000000080001001000000006000200", @ANYRES16], 0x84}}, 0x20008040) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x14, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x9, "bc6b7775"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r2 = syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000440)={0x18, &(0x7f00000000c0)={0x40, 0xf, 0xf, {0xf, 0x10, "a4e5de218e1982bca6141fa48c"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44c}}, &(0x7f00000002c0)={0x0, 0xf, 0xcc, {0x5, 0xf, 0xcc, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x9, 0x5}, @generic={0xc0, 0x10, 0x3, "3187335b552450b8282d0082ea3117f47b64961f3ebfe09e1695db3db03c135da97210ba34db2820c6863398b939fb3cd54be70293ab7ab2ec0158043495feed7230d991c14eab280881b5cf44bdcd5e615bed4f8e48b4042e17bc2b1f131a39e474e1c0690e8a3d4a2c993e2c82225bfc9c316f0464226949644c5a10ef7f50a4ad349e0c441c7375cac99110c67e9a04ac5d5319cd3a4aa87319aff9e20c025817feae63dd448b58253a3518f5e51b818786d04ca4520450887de471"}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x8, 0x9, "e7c638bb", "47ca41ef"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe, 0x18, 0xff, 0x0, 0x3, 0x59, 0x2}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000480)={0x0, 0xc, 0x27, "f06c1b46e36d47e782bc25aef045395530697a074fb46a800c7968f0272fe149d75e09fc067753"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x1b}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0xe0, 0x4a}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0xb, 0x2, "73d3"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x8000}, &(0x7f0000000700)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000740)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000780)={0x40, 0x19, 0x2, "40a7"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x9e}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0xae}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x3}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x48}}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x8}]}}]}, 0x38}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000000000)=0x1) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0xb) 4.829377426s ago: executing program 4 (id=1554): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = socket$inet(0x2, 0x1, 0x2) bind$inet(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 4.099007033s ago: executing program 4 (id=1556): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfffd, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r6, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 3.786085368s ago: executing program 7 (id=1557): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, 0x0) ioctl$FE_SET_FRONTEND_TUNE_MODE(0xffffffffffffffff, 0x6f51, &(0x7f00000000c0)=0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2c5082, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r2, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x80, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000640)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, &(0x7f0000000000)={0x5, 0x9}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x8, &(0x7f0000000280)) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x106f) 3.68897741s ago: executing program 4 (id=1559): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) write$cgroup_pid(r2, &(0x7f0000000080)=r3, 0x12) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000b7e38a3448444f6874ad865e7be7c802c52f03325664b66e84d099d6ea96ea830541582569ec8d750af7fc4244054a51e3bf644c040d8458af0d04dbf5a978da76b0b10350eb74ee9a02c4d48c4aeb97417cb75a81dfc9235cb0400"/109, @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf251000000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x8005}, 0x4c810) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d617463680000004000028008"], 0xa8}}, 0x4048010) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000002000000", 0xfe60) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000000c0)={0x2, [0x0, 0x0]}, &(0x7f0000000000)=0xffffffffffffffcb) 3.526063854s ago: executing program 4 (id=1560): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) write(r1, &(0x7f0000001400)='2\n', 0x2) syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x17, 0x5, 0x8, 0x1, 0x4, "9591c289333bef7d35119544ed641462d4304c"}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./config/nullb/nullb2/zoned\x00', 0x2, 0x0) write(r4, &(0x7f0000002500)='1', 0x1) openat$dlm_plock(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) write(0xffffffffffffffff, &(0x7f0000002700)='1\n', 0x2) 2.847974731s ago: executing program 8 (id=1561): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='127.0.0.1', 0x9) 2.788577906s ago: executing program 8 (id=1562): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x6, 0xd2a5, @vifc_lcl_addr=@loopback, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r3}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) sendto$inet(r1, &(0x7f00000005c0)="f934", 0x2, 0x4008818, &(0x7f0000000600)={0x2, 0x1234, @rand_addr=0x64010102}, 0x10) 2.330644908s ago: executing program 7 (id=1564): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x74) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) accept4$inet6(r2, 0x0, 0x0, 0x80800) r6 = openat$mice(0xffffff9c, 0x0, 0x200800) sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x5c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000000) 2.260390384s ago: executing program 8 (id=1565): unshare(0x6a060000) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c00000002060102000034e40000000000000000050001000400000005000100070000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f727400000061a4b33b763632933b2a9c44a08ec8ffbed5af5e03a75509a85592f3fb3ffaa30a5fa90a85de266eb72765467134ba19764629b309761ac0b146d339e0b5e67169306e1cbea0a82f67a336307f3dd04469bfb93c8a14d147ffae"], 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902", @ANYRES16=r2], 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc0bc5310, &(0x7f0000000700)={0x18, 0x101, 0x0, 'queue1\x00', 0x6}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) unshare(0x28020700) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x800, 0x408003) socket$inet6_icmp(0xa, 0x2, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r5, &(0x7f0000000300)='127.0.0.1', 0x9) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config\x00', 0x70382, 0xe0) write(r6, &(0x7f0000000380)='8', 0x1) r7 = openat(r4, &(0x7f00000007c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x8a80875c861402e8, 0x0) write(r7, &(0x7f0000000400)='ipv', 0x3) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testnqn\x00') 2.099419109s ago: executing program 4 (id=1566): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, &(0x7f00000003c0)) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f00000001c0)) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000540)={'\x00', 0x6, 0x7, 0x1, 0x50, 0x47, r1}) socket$inet_tcp(0x2, 0x1, 0x0) fstatfs(0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1.359198302s ago: executing program 3 (id=1569): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000003e40)=[{0x0}, {&(0x7f0000000cc0)="01562db1d027d65d0ee6dce1905b044d7812c979bed95e7832eb61f4bc9643e0f6084cefff0acb09b3028b646bc8513fc0289afdb8e024c746c69c20bedc1961858af6f1a4d732205066012769afcab13859bf1b9524aeed391c4745ce27f553da682de74851a6a31a025656a93357842c0445c3231ba92ede7a6e00497f08e013e7c218da0196e479345958c235180bfc46425867de9cdfc65ac580a66025b78ad442d25ec048178ae2affe0b31ba3d2d09f37c6dc7c3ff3f75f634b146cd652592e9ecb3a73da0f4c06bf5e5f7b93e5a0f4ca1281ecf03feb60cfa76542c4d20ab3d630679e9a361296b2693a6da155ba2d6b2b1dea412773225dcab91511946574a3a34554e42db14f9cb3060ede816838ad88d83f6cd1c7a176e51adfd39cfd2326d5d804adc4da5c43a7a89c578fc160837a8d1e366b868cbd27e6b98407784efffee31724a70c6811fd5c0dbec2eab77efb7c844bccbc1e496b4aa501b603e930e70b54477ffe6ae3a6250f12757a7849b480f5922a44304ed59b2d4fdd2a3ea10dcad20fcbbc426e636cc29d7ec0c37361ea13265359ca6fe6bedc4cbcef0caf68538d0bed1d60e6a57b06b901f0ff0ff8264ca7643f5acafae890e57f73579072d8caf1250486a393ee79b3352175f935f653388a809e64a23ec9927522fcf32776f7341f8f2cdc67633b66f6bd79e6a0eebd7e3655c13a4122a72be2ce6c112cebba9588d83013037a60878d076ecc84a757779c1589ec9a8f36096580be23ce18eaab848e2b581fde2cb1f4528d75d15377f42bdfdef5305dc9ee794d2926fa8640b2b8521c6a742bd8acae71478455d8a506c78c5aa63b411d1dd425b5c47178d2552a2a8a275f2b9f7c92d29b852e7ce2d766261db6bd0a530e72fa39683a614180d2530a76fb5abf195256ca1a2f0007566c358e4e5c24f2eae61e2fedc0d50c282cc37c310ad369efd248e0b5f1a332609da191cdc914d0346f84cf639512807e578994c55e2060e3b5c3cf89d22d6bb8d8cbf48b3b846c7af1b152f3995f54aadbc0162a8803cf8956d94873711134e3a9bbd7373269bea4044adaafd2a570362c6145b1fd6cd67a0c71f622ed991bbe9cd83b8b377040c2e0bb962a07088156b3a2d4d83c06131baa5a4ad0b5ab192a96f55dd2bd52a30ecca828bddd7ffdae06b292483f9e0f1f98a6b84434e4d77825eaafe723994d7d022324eac9babcd2b807290dac3a2fae860cd34eacb0d5b42cdb916f322eff3c79c609716d232ab7b1c279c55f4951e2dfe38da3e55897ad175f00226da4eec6919146b8fd4634be52d4577baa59e3b5d5ad8d2b5a4520c8d44b0cd78bafd52ff3cb89c7b145fab26f089537e2d83745aed7de83f49aa4aac297d87a608b703e0de464cd54b43d37751b3a57e80e21db4bb534b4ddbc75b7f496200ce964508c785388b0c70e1d22010a928ca23912c094f34ad2c61f5cd465872c409a8e4245fd641268fbb88a40c3138bdf69a12385f456a4cc206a410be7520777170598884e975d7247acef28a9c3d1b535f8c9a9bc469ed99c9afe3403c7fce36ad6c9e1edf4b7d53fff8a505055fdb3519410ca8460ffb992112258e831e3b38cd233852f44209167975c6a324833b14d6ed0e38ef73beac4d527468790c7aa132937db2ff91a883a360b400f33c9845e46519d37d925ac81a24cfc3abd7a92ccb777b7eb9b71fe943caa5af35e726bf32b2c78029f50b844a42d60e88cbf424245e6ba4fd83018e5361b76fdcd1ed3c52fa4c294c80e93dd5c0a997cf369868cdaf917e96ba2f599e9d4927b70d73ad0534432d559097a64096ebac392d86b91826d82556466efe5469db45dfa4c7a60fb720819ccedf4966771530cb7aec763c61c1537475a4e2b75052cdc0d7c9f8ad68eff61870ade838c9088d470fb142ef49ccde486e6617f0cc11a954979ea403150c663d417a", 0x573}], 0x2}, 0x40020000}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000000)="0085cd", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)='=', 0x1}], 0x1}}], 0x3, 0x119e75c40277adee) 1.299255815s ago: executing program 3 (id=1570): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='127.0.0.1', 0x9) 1.29759556s ago: executing program 3 (id=1571): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x405, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0xb, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x6}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000940)={r2, 0x32}, 0x0, &(0x7f0000000b80)="cb44032c2a3a518de9000000c11a536275a146d65e2988ef1a4992f9a2675b2853d82c107d0fd00990b531004a27f0395fdb", 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@gettaction={0x24, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x24}}, 0x0) 1.235679007s ago: executing program 8 (id=1572): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x7, 0x10, 0x5, 0xb, 0x7, 0x51d6, 0x3eb, {0x0, @in6={{0xa, 0x72, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa}}, 0x8, 0x7f, 0x101, 0x1, 0x2}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x3, 0x2}, &(0x7f0000000240)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000d00)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [{{0x254, 0x1, {{0x1, 0x7}, 0xe, 0x4, 0x9, 0x9, 0x3, 'syz0\x00', "d8bf53888912ea96efaf8299868cae57cd3a608f67381fe2fc392c8ad1966269", "e9ccf39c52057a6ba99da3700dc9feacfc1511c25f65d87ad5b326a600", [{0x19, 0x0, {0x1, 0x2}}, {0xcd6, 0x0, {0x2, 0xfffffffa}}, {0xb663, 0x8, {0x3, 0x400}}, {0x2, 0x1, {0x2, 0x7}}, {0x1c00, 0x466, {0x2, 0x8000}}, {0x1, 0x8, {0x1, 0x5}}, {0x10, 0x6f, {0x3, 0x5500}}, {0x4, 0x3, {0x3, 0x2}}, {0x200, 0x5, {0x1, 0x3}}, {0x6, 0x8001, {0x1, 0xa0}}, {0xff, 0x5, {0x1, 0x1000}}, {0xc870, 0x0, {0x3, 0x7}}, {0xfff9, 0x6, {0x2, 0x2}}, {0xb67, 0x3, {0x1, 0xd215}}, {0x7, 0x7, {0x3, 0xe5db}}, {0x4, 0x7, {0x3}}, {0xfff, 0x8, {0x1, 0xd}}, {0x1, 0x7, {0x3, 0x9}}, {0x3ff, 0x5, {0x0, 0xffffff80}}, {0x8, 0xa000, {0x2, 0x7}}, {0x0, 0x4, {0x3, 0xfffffff6}}, {0x6, 0xff, {0x2, 0x8}}, {0x0, 0x0, {0x3, 0x6}}, {0xb, 0x101, {0x2, 0x6}}, {0x8e, 0x36, {0x2, 0x7c0}}, {0x1, 0xd, {0x2, 0x1}}, {0xf35c, 0x100, {0x0, 0x5}}, {0x5, 0x6cf5, {0x2, 0xf}}, {0x7, 0x3, {0x2, 0x8}}, {0x7, 0x2, {0x3}}, {0x7ff, 0x4, {0x3, 0x80000001}}, {0x9, 0x2, {0x0, 0x1}}, {0x206, 0x1c, {0x0, 0x3}}, {0x2, 0x8, {0x3}}, {0x2, 0xe2c, {0x1, 0x5}}, {0x7, 0xed33, {0x2, 0x4}}, {0x7ff, 0xc, {0x3, 0x2}}, {0x7, 0x9, {0x0, 0x1}}, {0xfff9, 0x2, {0x2, 0x240ad576}}, {0x200, 0xbc7, {0x2, 0x6}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40800}, 0x20008040) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f00000000c0)=0x7) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0xb}) shmat(0x0, &(0x7f000051b000/0x3000)=nil, 0x2000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x5, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000280)={0x8, 'batadv0\x00', {'veth1_to_team\x00'}, 0x667}) 1.207725568s ago: executing program 7 (id=1573): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, 0x0) ioctl$FE_SET_FRONTEND_TUNE_MODE(0xffffffffffffffff, 0x6f51, &(0x7f00000000c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2c5082, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r1, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x80, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000640)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 361.44131ms ago: executing program 4 (id=1574): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r0, &(0x7f0000000080)=""/132, 0x84) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lremovexattr(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@local, 0x800000}, 0x400, "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"}, 0x418, 0x800}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9040, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x2}}, 0x50) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, r4, {0x7, 0x2d, 0x9, 0x2, 0xe54, 0x2, 0x0, 0x400, 0x0, 0x0, 0x80, 0x7}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) fstatat64(0xffffff9c, &(0x7f0000000280)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000000400), 0x2000) symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00') symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00') symlink(&(0x7f00000000c0)='streaming/class/fs/h\x00', &(0x7f00000001c0)='./my_configfs\x00') mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r5, &(0x7f0000000a00)='- ', 0x2) socket$nl_generic(0x10, 0x3, 0x10) 361.07148ms ago: executing program 8 (id=1575): r0 = socket(0x10, 0x80002, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x8280, 0x0) pread64(r1, &(0x7f0000000080)=""/171, 0xab, 0x6) r2 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_pidfd_open(r2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0xff02) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 350.465291ms ago: executing program 3 (id=1576): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfffd, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 219.490135ms ago: executing program 7 (id=1577): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000001600010a00000000000000000a000000040001", @ANYRES16=r2, @ANYRES32=r2, @ANYRESOCT=r0, @ANYBLOB="02bf3c893f3aac1a1618d70a1457d4b2a518730fabdea55a502e765749b25dc2bbd6600b27d32c42922b1f396ba9aa833986858269fe856114ddd59866287c1348e4158e4d253b3a", @ANYRES8=r1], 0x18}}, 0x44) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001680)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c0002800500010000000000066e6186bf04000008000740000004001800068014000400"], 0xb4}, 0x1, 0x4000000, 0x0, 0x4040000}, 0x40010) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)=' ', 0x1) 219.218056ms ago: executing program 7 (id=1578): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000240)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x402) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x4, 0x33, 0x1}]}}}}}}}}, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0xc0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000000)=0x4) 109.150676ms ago: executing program 3 (id=1579): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x478, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x9, 0x7}, {}, {0x10, 0x5}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x20000000, 0x2, 0x3, 0x101, {0x7, 0x2, 0x4, 0xf, 0x1, 0x5}, {0x1, 0x0, 0x0, 0x8001, 0x6, 0xff}, 0x0, 0x4, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xfffffff8, 0x8, 0xfffffffd, 0x6, 0x80000000, 0x4, 0x0, 0x9, 0x1, 0x2b4a9cac, 0x1, 0x1, 0x2, 0x5, 0x1, 0xa, 0x7fffffff, 0x5, 0x6, 0x401, 0x0, 0x6, 0x0, 0x1, 0x4, 0x3, 0xff, 0xe5b, 0x7, 0x3, 0x4a, 0x3, 0x80, 0x7, 0x0, 0x7, 0x6, 0x9, 0xc0, 0x1, 0x121, 0xc7, 0x6, 0x8, 0x8, 0x6, 0xffffff8b, 0x1, 0x400, 0x8, 0x7ff, 0x80, 0x800, 0x400, 0x7, 0x0, 0x29, 0x9, 0x1, 0x0, 0x2, 0xfff, 0x6, 0x0, 0xb508, 0x7d, 0x8, 0x0, 0x3, 0x6, 0x4, 0x6, 0x5, 0x8001, 0x3, 0x501, 0x0, 0xffffff9d, 0x2, 0xffffb719, 0x5, 0x8, 0x4, 0x7, 0x800, 0x1, 0x80000001, 0x80000001, 0x8, 0x1, 0x3, 0xa, 0x200, 0x9, 0x2, 0x7fffffff, 0x6, 0x9, 0x4, 0x36, 0x4, 0x0, 0x1, 0xc, 0xb, 0x5, 0x9, 0x8, 0x0, 0xf612, 0x8, 0xfffffff9, 0x60f1c81, 0x200, 0x6, 0x7, 0xfffffa65, 0x1, 0x6, 0xeb5, 0x7f, 0xfffffff7, 0x401, 0xffff, 0x6, 0x2a1dafd6, 0xb8b5, 0xffffffff, 0xfffffffc, 0x8, 0x8, 0x4, 0xd9fd, 0x7, 0x9c, 0x93f, 0x299a, 0x5, 0x0, 0xb59, 0x40, 0x8, 0xcc16, 0x3ff, 0x96b7, 0x800, 0xaef3, 0x8000, 0xc654, 0x1, 0xa, 0x8001, 0xe6, 0x8, 0x10000, 0x8591, 0x6dc, 0x401, 0x7f, 0x1, 0x8ea, 0x6, 0x401, 0x5, 0x4ec, 0x7, 0x4, 0x4, 0xf481, 0x8c, 0x47b, 0x6, 0xd, 0x7, 0x3, 0xfff, 0xfff, 0x2, 0x10001, 0x9, 0x8, 0x872, 0x200, 0x1, 0x8, 0x10000, 0x21836dbc, 0x7, 0x7, 0x1, 0x32, 0x7fffffff, 0x101, 0x400, 0x101, 0x1, 0x200, 0x6, 0x0, 0x1, 0x10000, 0xfa, 0x1, 0x4, 0x3, 0xe3e, 0x9, 0x2, 0xffff9400, 0x8, 0xa, 0x5, 0x1000, 0x80000001, 0x0, 0x0, 0x280, 0xa, 0xfffffffd, 0x7, 0xb8a, 0x5f, 0x81, 0x9d9, 0x9, 0x2, 0xf, 0x400, 0x9, 0x80000000, 0x8, 0xdc86, 0x73, 0x5, 0x4, 0x2, 0x0, 0xc00000, 0x100, 0xdf, 0x5, 0x5, 0x3, 0xfff, 0x5, 0xfffffff6, 0x3, 0x6, 0x100, 0x4, 0x737, 0x7fffffff, 0x20, 0x1]}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) 108.850604ms ago: executing program 7 (id=1580): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) read$char_usb(r1, &(0x7f00000002c0)=""/151, 0x97) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000026c0)={0x20, r4, 0x303, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x8800) eventfd2(0xb, 0x1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x84, r6, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x24000000}, 0x885) r7 = socket(0x28, 0x1, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r9, 0x6, 0x28, 0x0, &(0x7f0000000140)) bind$inet6(r8, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @local}, 0x1c) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@getchain={0x24, 0x66, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xfff3, 0xd}, {0xfff2, 0xf}, {0xc, 0xc}}}, 0x24}}, 0x0) 4.662262ms ago: executing program 3 (id=1581): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000140)=[@in={0x2, 0x4e23, @private=0xa010102}, @in={0x2, 0x4e23, @remote}]}, &(0x7f0000000100)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)="0c4a522d120d68306fc7e0f85f124d89a52a6a68d513ab1f0be2e6a230779569dcafbb154e94e72f47a2f08f31b0508665f7c8377d09adf4b06173d31011", 0x3e}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000180)={0x6, 'bond_slave_1\x00', {0x2}, 0x101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x40) read(r5, &(0x7f0000000200), 0x1000) 0s ago: executing program 8 (id=1582): r0 = socket(0x11, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x8931, &(0x7f0000000080)={'dummy0\x00'}) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newqdisc={0x174, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x4, 0x9}}, [@qdisc_kind_options=@q_red={{0x8}, {0x148, 0x2, [@TCA_RED_STAB={0x104, 0x2, "c7e87bc6935a76ebd1a27d7a39198a72dfc4dee2696db6ce99435b67551136c0036f3464683080957b1b3e168d9ba0867e8dd1013a7d168d1dd4cb7e5288687360694b9610d762a1f99992c542952f21c0137670da380f354fb6f3a729f53c89abd5190e589ac7e88537daa29b7f84ed8951c7362507a849202d14ea08759d6c58352b20cd066703a554efaadbaccbea2f317c5ccfda9563602f89295a6989128cc0c3c5f033b0050f40a84cf9100bceef9b19887bb90e0cb3f7d8af43d93dcb9e4b02f43e12b96f16093be0cae05071a65ed3dfebea3fc8736858e2e0ae0b7c1bfff77ec58cb34202115547f43cb8af5eb60bf53d2f56028d247a0fb843d06d"}, @TCA_RED_MAX_P={0x8}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x520c}, @TCA_RED_PARMS={0x14, 0x1, {0xb790, 0x7ff, 0x8, 0x10, 0x6, 0x7, 0x1}}, @TCA_RED_MAX_P={0x8, 0x3, 0x2}, @TCA_RED_PARMS={0x14, 0x1, {0x1, 0x0, 0x1, 0x2, 0x19, 0x1e, 0x1}}]}}]}, 0x174}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003580)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r3, {0x1}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff3, 0xc}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x81, 0x81, 0xa, [@typedef={0xc, 0x0, 0x0, 0x8, 0x3}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x6, 0x99d4}]}, @float={0x3, 0x0, 0x0, 0x10, 0xc}, @datasec={0xa, 0x3, 0x0, 0xf, 0x1, [{0x3, 0x5, 0x9}, {0x2, 0xc, 0xffff}, {0x5, 0x87, 0x800}], 'u'}, @func={0x3, 0x0, 0x0, 0xc, 0x5}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x4}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x30, 0x0, 0x2e, 0x61, 0x5f, 0x2e, 0x2e, 0x0]}}, &(0x7f0000000840)=""/173, 0xa6, 0xad, 0x0, 0x3, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x33, 0x0, 0xffffffffffffffff, 0xfffeffff, '\x00', r3, r4, 0x4, 0x0, 0x3}, 0x50) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r1, 0xfe00}, &(0x7f0000000080)={'enc=', 'pkcs1', ' hash=', {'md5\x00'}}, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000009c0)={0x0, @in={{0x2, 0x4e20, @local}}, 0xeed2, 0x23bbdc51, 0x4, 0x2, 0x5}, &(0x7f0000000a80)=0x98) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) r9 = socket(0x10, 0x2, 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r10, r8, 0x25, 0x14, @void}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r8, 0x29, 0x0, 0x0, 0x0, 0x3b, @dev={0xfe, 0x80, '\x00', 0x24}, @private2, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) sendmsg$IPVS_CMD_NEW_DEST(r9, &(0x7f0000000d00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000ac0)={r6, 0x4}, 0x8) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xbc, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in=@multicast2, @in=@local, 0x0, 0x5, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xfffffffffffffbff, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tfcpad={0x8, 0x16, 0x2}]}, 0xbc}}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xcc, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdffc, 0x0, 0x4e24, 0x2, 0xa, 0xe0}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) listen(r5, 0x5) kernel console output (not intermixed with test programs): 602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.640460][ T9602] CPU: 0 UID: 0 PID: 9602 Comm: syz.4.898 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.640493][ T9602] Tainted: [L]=SOFTLOCKUP [ 226.640500][ T9602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.640509][ T9602] Call Trace: [ 226.640515][ T9602] [ 226.640522][ T9602] dump_stack_lvl+0x100/0x190 [ 226.640550][ T9602] should_fail_ex.cold+0x5/0xa [ 226.640595][ T9602] _copy_from_user+0x2e/0xd0 [ 226.640620][ T9602] __sys_bpf+0x2f5/0x4e80 [ 226.640645][ T9602] ? __pfx___sys_bpf+0x10/0x10 [ 226.640666][ T9602] ? find_held_lock+0x2b/0x80 [ 226.640687][ T9602] ? get_pid_task+0xfc/0x250 [ 226.640708][ T9602] ? get_pid_task+0xfc/0x250 [ 226.640735][ T9602] ? proc_fail_nth_write+0x9f/0x220 [ 226.640760][ T9602] ? find_held_lock+0x2b/0x80 [ 226.640788][ T9602] ? rcu_read_lock_any_held+0x6a/0xa0 [ 226.640811][ T9602] ? find_held_lock+0x2b/0x80 [ 226.640832][ T9602] ? ksys_write+0x190/0x250 [ 226.640848][ T9602] ? ksys_write+0x190/0x250 [ 226.640881][ T9602] ? fput+0x79/0x100 [ 226.640905][ T9602] ? __ia32_sys_bpf+0xcc/0x170 [ 226.640923][ T9602] __ia32_sys_bpf+0xcc/0x170 [ 226.640943][ T9602] ? __do_fast_syscall_32+0x98/0x970 [ 226.640972][ T9602] __do_fast_syscall_32+0xe7/0x970 [ 226.640997][ T9602] ? lockdep_hardirqs_on+0x78/0x100 [ 226.641023][ T9602] do_fast_syscall_32+0x32/0x70 [ 226.641046][ T9602] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 226.641068][ T9602] RIP: 0023:0xf7fe8fec [ 226.641091][ T9602] Code: Unable to access opcode bytes at 0xf7fe8fc2. [ 226.641098][ T9602] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 226.641116][ T9602] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000600 [ 226.641127][ T9602] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 226.641137][ T9602] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 226.641148][ T9602] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 226.641158][ T9602] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 226.641182][ T9602] [ 226.722019][ T9594] lo speed is unknown, defaulting to 1000 [ 226.819635][ T9604] bridge1: entered promiscuous mode [ 226.823417][ T9604] bridge1: entered allmulticast mode [ 226.936183][ T6772] usb usb46-port1: attempt power cycle [ 226.989714][ T9594] lo speed is unknown, defaulting to 1000 [ 227.327151][ T9513] hsr_slave_0: entered promiscuous mode [ 227.330639][ T9513] hsr_slave_1: entered promiscuous mode [ 227.333708][ T9513] debugfs: 'hsr0' already exists in 'hsr' [ 227.336369][ T9513] Cannot create hsr debugfs directory [ 227.338401][ T9594] lo speed is unknown, defaulting to 1000 [ 227.342471][ T9594] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 227.347645][ T9594] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 227.354417][ T9594] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 227.363735][ T9594] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 227.392972][ T9594] lo speed is unknown, defaulting to 1000 [ 227.411703][ T9594] lo speed is unknown, defaulting to 1000 [ 227.428725][ T9594] lo speed is unknown, defaulting to 1000 [ 227.444246][ T9594] lo speed is unknown, defaulting to 1000 [ 227.674586][ T6772] usb usb46-port1: unable to enumerate USB device [ 227.834572][ T5446] 8021q: adding VLAN 0 to HW filter on device eth21 [ 227.841954][ T9618] netlink: 48 bytes leftover after parsing attributes in process `syz.7.902'. [ 227.851494][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.7.902'. [ 227.924821][ T9619] siw: device registration error -23 [ 227.930976][ T9513] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 227.943681][ T9513] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 227.953868][ T9513] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 227.985011][ T9513] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 227.990931][ T9513] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 228.034304][ T9513] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 228.055699][ T9513] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 228.081800][ T9513] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 228.276202][ T9632] netlink: 104 bytes leftover after parsing attributes in process `syz.7.906'. [ 228.294189][ T9632] netlink: 104 bytes leftover after parsing attributes in process `syz.7.906'. [ 228.480821][ T5735] Bluetooth: hci2: command tx timeout [ 228.688344][ T9513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.697784][ T9513] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.702852][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.705183][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.713903][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.716232][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.817044][ T9648] netlink: 'syz.3.910': attribute type 1 has an invalid length. [ 228.885501][ T9648] 8021q: adding VLAN 0 to HW filter on device bond4 [ 228.890577][ T60] usb 52-1: device descriptor read/8, error -110 [ 228.998675][ T9654] bond4: (slave syz_tun): Enslaving as a backup interface with an up link [ 229.003352][ T5446] veth1_vlan: left promiscuous mode [ 229.011446][ T9645] lo speed is unknown, defaulting to 1000 [ 229.091265][ T10] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 229.240480][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 229.245639][ T10] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 229.251587][ T10] usb 9-1: config 0 has no interfaces? [ 229.253416][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.258226][ T10] usb 9-1: config 0 descriptor?? [ 229.303150][ T60] usb usb52-port1: attempt power cycle [ 229.331383][ T9513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.400388][ T29] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 229.486087][ T42] audit: type=1800 audit(1786603833.593:67): pid=9645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.909" name="addr_trtype" dev="configfs" ino=26546 res=0 errno=0 [ 229.488363][ T6772] usb 9-1: USB disconnect, device number 20 [ 229.507705][ T9513] veth0_vlan: entered promiscuous mode [ 229.515189][ T9513] veth1_vlan: entered promiscuous mode [ 229.539316][ T9513] veth0_macvtap: entered promiscuous mode [ 229.554960][ T9513] veth1_macvtap: entered promiscuous mode [ 229.571462][ T29] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 229.575554][ T9513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.578957][ T29] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 229.584914][ T29] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 229.588644][ T9513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.591205][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.599575][ T9662] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 229.609130][ T29] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 229.723285][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.740724][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.785250][ T173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.790773][ T173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.806293][ T173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.809792][ T173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.822440][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.830412][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.879471][ T41] usb 8-1: USB disconnect, device number 22 [ 229.892732][ T60] usb usb52-port1: unable to enumerate USB device [ 229.892993][ T9693] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 230.096337][ T9696] siw: device registration error -23 [ 230.506778][ T9705] siw: device registration error -23 [ 230.603599][ T5735] Bluetooth: hci2: command tx timeout [ 231.493291][ T9721] FAULT_INJECTION: forcing a failure. [ 231.493291][ T9721] name failslab, interval 1, probability 0, space 0, times 0 [ 231.498843][ T9721] CPU: 3 UID: 0 PID: 9721 Comm: syz.7.920 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.498870][ T9721] Tainted: [L]=SOFTLOCKUP [ 231.498878][ T9721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.498889][ T9721] Call Trace: [ 231.498896][ T9721] [ 231.498904][ T9721] dump_stack_lvl+0x100/0x190 [ 231.498933][ T9721] should_fail_ex.cold+0x5/0xa [ 231.498957][ T9721] should_failslab+0xc2/0x120 [ 231.498985][ T9721] kmem_cache_alloc_noprof+0x91/0x6a0 [ 231.499010][ T9721] ? skb_clone+0x190/0x400 [ 231.499079][ T9721] skb_clone+0x190/0x400 [ 231.499105][ T9721] nfnetlink_rcv_batch+0x1c8/0x2880 [ 231.499158][ T9721] ? kmem_cache_free+0x127/0x6b0 [ 231.499184][ T9721] ? kfree_skbmem+0x19f/0x210 [ 231.499208][ T9721] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 231.499235][ T9721] ? find_held_lock+0x2b/0x80 [ 231.499260][ T9721] ? __dev_queue_xmit+0xa12/0x4970 [ 231.499284][ T9721] ? __local_bh_enable_ip+0x9e/0x120 [ 231.499313][ T9721] ? lockdep_hardirqs_on+0x78/0x100 [ 231.499340][ T9721] ? __dev_queue_xmit+0xa12/0x4970 [ 231.499373][ T9721] ? __asan_memset+0x23/0x50 [ 231.499394][ T9721] ? __nla_validate_parse+0x1e7/0x28b0 [ 231.499437][ T9721] ? __pfx___nla_validate_parse+0x10/0x10 [ 231.499458][ T9721] ? rcu_is_watching+0x12/0xc0 [ 231.499483][ T9721] ? apparmor_capable+0x1d7/0x4d0 [ 231.499511][ T9721] ? __nla_parse+0x40/0x60 [ 231.499535][ T9721] nfnetlink_rcv+0x3bd/0x440 [ 231.499561][ T9721] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 231.499594][ T9721] netlink_unicast+0x585/0x850 [ 231.499629][ T9721] ? __pfx_netlink_unicast+0x10/0x10 [ 231.499657][ T9721] netlink_sendmsg+0x8b0/0xda0 [ 231.499683][ T9721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.499708][ T9721] ? apparmor_socket_sendmsg+0x15b/0x270 [ 231.499732][ T9721] ____sys_sendmsg+0xa4d/0xbe0 [ 231.499751][ T9721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.499775][ T9721] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.499804][ T9721] ___sys_sendmsg+0x190/0x1e0 [ 231.499828][ T9721] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.499860][ T9721] ? find_held_lock+0x2b/0x80 [ 231.499899][ T9721] __sys_sendmsg+0x160/0x210 [ 231.499926][ T9721] ? __pfx___sys_sendmsg+0x10/0x10 [ 231.499959][ T9721] ? __pfx_ksys_write+0x10/0x10 [ 231.499984][ T9721] __do_fast_syscall_32+0xe7/0x970 [ 231.500010][ T9721] ? lockdep_hardirqs_on+0x78/0x100 [ 231.500037][ T9721] do_fast_syscall_32+0x32/0x70 [ 231.500065][ T9721] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 231.500089][ T9721] RIP: 0023:0xf709efec [ 231.500112][ T9721] Code: Unable to access opcode bytes at 0xf709efc2. [ 231.500122][ T9721] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 231.500140][ T9721] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40 [ 231.500153][ T9721] RDX: 0000000020008040 RSI: 0000000000000000 RDI: 0000000000000000 [ 231.500164][ T9721] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 231.500175][ T9721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.500185][ T9721] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 231.500208][ T9721] [ 231.930089][ T9730] lo speed is unknown, defaulting to 1000 [ 232.220490][ T41] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 232.380700][ T41] usb 13-1: Using ep0 maxpacket: 8 [ 232.396511][ T41] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 232.403175][ T41] usb 13-1: config 0 has no interfaces? [ 232.406054][ T41] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.412264][ T41] usb 13-1: config 0 descriptor?? [ 232.431566][ T9743] netlink: 64 bytes leftover after parsing attributes in process `syz.3.924'. [ 232.538760][ T9740] siw: device registration error -23 [ 232.558480][ T9738] Console: switching to colour dummy device 80x25 [ 232.635425][ T42] audit: type=1800 audit(1786603836.743:68): pid=9730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.923" name="addr_trtype" dev="configfs" ino=29843 res=0 errno=0 [ 232.640590][ T5735] Bluetooth: hci2: command tx timeout [ 232.647540][ T850] usb 13-1: USB disconnect, device number 2 [ 232.880971][ T5813] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 232.985067][ T9741] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 233.021406][ T9741] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 233.024759][ T9741] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 233.027921][ T9741] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 233.038279][ T9741] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 233.087349][ T9749] siw: device registration error -23 [ 233.169958][ T9741] pci 0000:00:01.0: Adding to iommu group 1 [ 233.220058][ T9741] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 233.222247][ T9741] pci 0000:00:01.0: vgaarb: bridge control possible [ 233.224323][ T9741] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 233.294166][ T9741] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 233.308501][ T9741] pci 0000:00:02.0: BAR 0 [mem 0xfea80000-0xfea9ffff] [ 233.314284][ T9741] pci 0000:00:02.0: BAR 1 [mem 0xfeaa0000-0xfeabffff] [ 233.319327][ T9741] pci 0000:00:02.0: BAR 2 [io 0xc080-0xc09f] [ 233.324854][ T9741] pci 0000:00:02.0: BAR 3 [mem 0xfeaf0000-0xfeaf3fff] [ 233.330092][ T9741] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 233.338143][ T9741] pci 0000:00:02.0: enabling Extended Tags [ 233.405701][ T9741] pci 0000:00:02.0: Adding to iommu group 2 [ 233.439771][ T9741] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 233.442029][ T5813] usb 9-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 233.443585][ T9741] pci 0000:00:02.0: ROM [mem 0x81000000-0x8103ffff pref]: assigned [ 233.449198][ T9741] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff]: assigned [ 233.453228][ T9741] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff]: assigned [ 233.457280][ T9741] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff]: assigned [ 233.460968][ T9741] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 233.467059][ T9741] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 233.481956][ T9741] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 233.551378][ T9741] [drm] Found bochs VGA, ID 0xb0c5. [ 233.553465][ T9741] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 233.700233][ T9741] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 233.849949][ T5813] usb 9-1: config index 0 descriptor too short (expected 10276, got 36) [ 233.852719][ T5813] usb 9-1: config 109 has too many interfaces: 142, using maximum allowed: 32 [ 233.855862][ T5813] usb 9-1: config 109 has 1 interface, different from the descriptor's value: 142 [ 233.859750][ T5813] usb 9-1: too many endpoints for config 109 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 233.863598][ T5813] usb 9-1: config 109 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 233.868833][ T5813] usb 9-1: config 109 interface 0 has no altsetting 0 [ 233.874571][ T5813] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.960112][ T9756] jffs2: notice: (9756) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 234.170588][ T34] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 234.214064][ T9741] Console: switching to colour frame buffer device 160x50 [ 234.254516][ T9741] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 234.303865][ T9762] netlink: 8 bytes leftover after parsing attributes in process `syz.8.933'. [ 234.331339][ T34] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 234.339037][ T34] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 234.344578][ T34] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 234.348956][ T34] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 234.353095][ T34] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 234.357857][ T34] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 234.367951][ T34] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 234.373335][ T34] usb 12-1: Product: syz [ 234.375241][ T34] usb 12-1: Manufacturer: syz [ 234.404610][ T34] cdc_wdm 12-1:1.0: skipping garbage [ 234.411476][ T34] cdc_wdm 12-1:1.0: skipping garbage [ 234.418305][ T34] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 234.425663][ T34] cdc_wdm 12-1:1.0: Unknown control protocol [ 234.451008][ T5813] usb 9-1: string descriptor 0 read error: -71 [ 234.458952][ T5813] usbhid 9-1:109.0: can't add hid device: -71 [ 234.463284][ T5813] usbhid 9-1:109.0: probe with driver usbhid failed with error -71 [ 234.469488][ T5813] usb 9-1: USB disconnect, device number 21 [ 234.615526][ T9741] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 234.625713][ T850] usb 12-1: USB disconnect, device number 6 [ 234.826922][ T9741] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 234.946250][ T9773] lo speed is unknown, defaulting to 1000 [ 235.155118][ T9741] e1000e 0000:00:02.0 eth22: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 235.158273][ T9741] e1000e 0000:00:02.0 eth22: Intel(R) PRO/1000 Network Connection [ 235.161299][ T9741] e1000e 0000:00:02.0 eth22: MAC: 3, PHY: 8, PBA No: 000000-000 [ 235.254183][ T9784] lo speed is unknown, defaulting to 1000 [ 235.540401][ T34] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 235.605895][ T5446] 8021q: adding VLAN 0 to HW filter on device eth22 [ 235.690349][ T34] usb 12-1: Using ep0 maxpacket: 8 [ 235.695566][ T34] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 235.702079][ T34] usb 12-1: config 0 has no interfaces? [ 235.704758][ T34] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.711742][ T34] usb 12-1: config 0 descriptor?? [ 235.789004][ T9796] siw: device registration error -23 [ 235.977880][ T42] audit: type=1800 audit(1786603839.081:69): pid=9784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.937" name="addr_trtype" dev="configfs" ino=29288 res=0 errno=0 [ 235.982258][ T34] usb 12-1: USB disconnect, device number 7 [ 236.079152][ T5885] e1000e 0000:00:02.0 eth22: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 236.116200][ T9807] fuse: Unknown parameter 'rootmod0000100000' [ 236.119949][ T9807] 9p: Bad value for 'wfdno' [ 236.365436][ T9817] ucsi-stm32g0-i2c 0-0003: i2c read 03, 00 error: -95 [ 236.368260][ T9817] ucsi-stm32g0-i2c 0-0003: probe with driver ucsi-stm32g0-i2c failed with error -95 [ 236.372696][ T9817] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x03 [ 236.650424][ T850] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 236.814783][ T850] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 236.825759][ T850] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 236.834761][ T850] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 236.844537][ T850] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.848673][ T850] usb 9-1: Product: syz [ 236.850030][ T850] usb 9-1: Manufacturer: syz [ 236.855717][ T850] usb 9-1: SerialNumber: syz [ 236.858898][ T850] usb 9-1: config 0 descriptor?? [ 236.870203][ T850] hub 9-1:0.0: bad descriptor, ignoring hub [ 236.874714][ T850] hub 9-1:0.0: probe with driver hub failed with error -5 [ 236.889859][ T850] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input11 [ 237.136653][ T9844] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 237.139312][ T9844] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 237.146413][ T9844] vhci_hcd vhci_hcd.0: Device attached [ 237.169423][ T9847] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 237.171719][ T9847] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 237.173350][ T9844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.181884][ T9847] vhci_hcd vhci_hcd.0: Device attached [ 237.188498][ T9844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.392843][ T5813] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 237.460891][ T6772] usb 52-1: SetAddress Request (10) to port 0 [ 237.467532][ T6772] usb 52-1: new SuperSpeed USB device number 10 using vhci_hcd [ 237.496056][ T9848] vhci_hcd: connection closed [ 237.496454][ T5812] vhci_hcd vhci_hcd.7: stop threads [ 237.501128][ T5812] vhci_hcd vhci_hcd.7: release socket [ 237.508278][ T5812] vhci_hcd vhci_hcd.7: disconnect device [ 237.520783][ T5885] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 237.611040][ T9845] vhci_hcd: connection reset by peer [ 237.615379][ T5811] vhci_hcd vhci_hcd.4: stop threads [ 237.630437][ T5811] vhci_hcd vhci_hcd.4: release socket [ 237.632904][ T5811] vhci_hcd vhci_hcd.4: disconnect device [ 237.651752][ T9857] e1000e 0000:00:02.0 eth22: removed PHC [ 237.690995][ T5885] usb 8-1: Using ep0 maxpacket: 8 [ 237.699257][ T5885] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 237.709133][ T5885] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 237.717884][ T5885] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 237.728249][ T5885] usb 8-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 237.737611][ T5885] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 237.746449][ T5885] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 237.750916][ T5885] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.756667][ T5885] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.801761][ T9857] e1000e 0000:00:02.0 eth22: NIC Link is Down [ 237.975116][ T5885] usb 8-1: usb_control_msg returned -32 [ 237.977758][ T5885] usbtmc 8-1:16.0: can't read capabilities [ 237.982424][ T9852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.991309][ T9852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.997698][ T9860] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16 [ 238.017365][ T850] usb 8-1: USB disconnect, device number 23 [ 238.217323][ T9880] trusted_key: encrypted_key: key trusted:syz not found [ 238.229645][ T9880] overlayfs: overlapping lowerdir path [ 238.265239][ T5843] usb 9-1: USB disconnect, device number 22 [ 238.432077][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.952'. [ 238.432441][ T9891] Bluetooth: ISO socket layer initialized [ 238.587416][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.7.958'. [ 238.602552][ T9910] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16 [ 238.876735][ T9932] PKCS7: Unknown OID: [4] 0.0 [ 238.878748][ T9932] PKCS7: Only support pkcs7_signedData type [ 238.923330][ T9937] 9pnet_fd: Insufficient options for proto=fd [ 239.012931][ T1468] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 239.114178][ T9947] siw: device registration error -23 [ 239.171369][ T1468] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 239.175781][ T1468] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.386512][ T1468] cdc_acm 12-1:1.0: ttyACM0: USB ACM device [ 239.474694][ T9956] nvme_fabrics: missing parameter 'transport=%s' [ 239.479978][ T9956] nvme_fabrics: missing parameter 'nqn=%s' [ 239.666559][ T9964] netlink: 16 bytes leftover after parsing attributes in process `syz.3.980'. [ 239.703357][ T9964] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 239.727593][ T9964] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 240.064083][ T9988] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16 [ 240.183894][ T9994] Bluetooth: MGMT ver 1.23 [ 241.047760][T10035] FAULT_INJECTION: forcing a failure. [ 241.047760][T10035] name failslab, interval 1, probability 0, space 0, times 0 [ 241.055886][T10035] CPU: 1 UID: 0 PID: 10035 Comm: syz.3.993 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.055907][T10035] Tainted: [L]=SOFTLOCKUP [ 241.055911][T10035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.055935][T10035] Call Trace: [ 241.055942][T10035] [ 241.055947][T10035] dump_stack_lvl+0x100/0x190 [ 241.056057][T10035] should_fail_ex.cold+0x5/0xa [ 241.056078][T10035] should_failslab+0xc2/0x120 [ 241.056112][T10035] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 241.056130][T10035] ? __d_alloc+0x35/0xa50 [ 241.056146][T10035] __d_alloc+0x35/0xa50 [ 241.056160][T10035] d_alloc_pseudo+0x1c/0xc0 [ 241.056176][T10035] alloc_file_pseudo+0x118/0x290 [ 241.056192][T10035] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 241.056208][T10035] ? _raw_spin_unlock+0x28/0x50 [ 241.056282][T10035] ? alloc_fd+0x471/0x7a0 [ 241.056300][T10035] __anon_inode_getfile+0xe8/0x280 [ 241.056428][T10035] __anon_inode_getfd+0x5c/0xe0 [ 241.056455][T10035] __ia32_sys_fsopen+0x192/0x230 [ 241.056483][T10035] __do_fast_syscall_32+0xe7/0x970 [ 241.056533][T10035] ? lockdep_hardirqs_on+0x78/0x100 [ 241.056560][T10035] do_fast_syscall_32+0x32/0x70 [ 241.056586][T10035] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 241.056611][T10035] RIP: 0023:0xf7f45fec [ 241.056633][T10035] Code: Unable to access opcode bytes at 0xf7f45fc2. [ 241.056651][T10035] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 00000000000001ae [ 241.056670][T10035] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000001 [ 241.056682][T10035] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 241.056691][T10035] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 241.056703][T10035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.056713][T10035] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 241.056736][T10035] [ 241.125527][T10040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.994'. [ 241.140802][T10040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.994'. [ 241.165161][T10043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.995'. [ 241.180700][T10043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.995'. [ 241.254627][T10048] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 241.842589][T10058] loop8: detected capacity change from 0 to 7 [ 241.853825][T10058] Dev loop8: unable to read RDB block 7 [ 241.861404][T10058] loop8: unable to read partition table [ 241.869579][T10058] loop8: partition table beyond EOD, truncated [ 241.878452][T10058] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 242.005947][T10066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1001'. [ 242.038296][T10066] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1001'. [ 242.173282][T10071] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16 [ 242.480914][T10008] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 242.482085][ T5813] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 242.560528][ T6772] usb 52-1: device descriptor read/8, error -110 [ 242.846183][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1006'. [ 242.972676][ T6772] usb usb52-port1: attempt power cycle [ 243.582878][ T6772] usb usb52-port1: unable to enumerate USB device [ 244.169976][T10106] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16 [ 244.261797][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029c75400: rx timeout, send abort [ 244.527133][T10116] siw: device registration error -23 [ 244.762270][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026a4e400: rx timeout, send abort [ 244.768389][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029c75400: abort rx timeout. Force session deactivation [ 244.900153][ T6772] usb 12-1: USB disconnect, device number 8 [ 245.238426][T10121] vlan2: entered promiscuous mode [ 245.242202][T10121] macvtap0: entered promiscuous mode [ 245.265392][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026a4e400: abort rx timeout. Force session deactivation [ 245.321812][T10123] FAULT_INJECTION: forcing a failure. [ 245.321812][T10123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.327285][T10123] CPU: 2 UID: 0 PID: 10123 Comm: syz.8.1019 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.327314][T10123] Tainted: [L]=SOFTLOCKUP [ 245.327321][T10123] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 245.327332][T10123] Call Trace: [ 245.327341][T10123] [ 245.327349][T10123] dump_stack_lvl+0x100/0x190 [ 245.327378][T10123] should_fail_ex.cold+0x5/0xa [ 245.327400][T10123] _copy_from_user+0x2e/0xd0 [ 245.327469][T10123] get_compat_msghdr+0xb3/0x480 [ 245.327543][T10123] ? __pfx_get_compat_msghdr+0x10/0x10 [ 245.327580][T10123] ___sys_sendmsg+0x1b6/0x1e0 [ 245.327609][T10123] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.327658][T10123] ? find_held_lock+0x2b/0x80 [ 245.327708][T10123] __sys_sendmsg+0x160/0x210 [ 245.327735][T10123] ? __pfx___sys_sendmsg+0x10/0x10 [ 245.327766][T10123] ? __pfx_ksys_write+0x10/0x10 [ 245.327789][T10123] __do_fast_syscall_32+0xe7/0x970 [ 245.327817][T10123] ? lockdep_hardirqs_on+0x78/0x100 [ 245.327843][T10123] do_fast_syscall_32+0x32/0x70 [ 245.327870][T10123] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.327892][T10123] RIP: 0023:0xf7fb8fec [ 245.327914][T10123] Code: Unable to access opcode bytes at 0xf7fb8fc2. [ 245.327922][T10123] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 245.327939][T10123] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 245.327950][T10123] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 245.327960][T10123] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 245.327970][T10123] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 245.327980][T10123] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 245.328002][T10123] [ 245.455196][T10127] amd5536udc-pci 0000:00:02.0: probe with driver amd5536udc-pci failed with error -16 [ 245.509786][ T42] audit: type=1326 audit(1786603848.611:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.7.1022" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709efec code=0x0 [ 245.562144][T10132] __nla_validate_parse: 2 callbacks suppressed [ 245.562159][T10132] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1022'. [ 245.568003][T10132] netlink: 124 bytes leftover after parsing attributes in process `syz.7.1022'. [ 245.610603][ T8773] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 245.771015][ T8773] usb 8-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 246.086101][ T8773] usb 8-1: config index 0 descriptor too short (expected 10276, got 36) [ 246.675079][ T8773] usb 8-1: config 109 has too many interfaces: 142, using maximum allowed: 32 [ 246.679105][T10151] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 246.681838][T10151] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 246.690812][T10151] vhci_hcd vhci_hcd.0: Device attached [ 246.705531][T10155] overlayfs: failed to resolve './file1': -2 [ 246.725600][ T8773] usb 8-1: config 109 has 1 interface, different from the descriptor's value: 142 [ 246.728559][ T8773] usb 8-1: too many endpoints for config 109 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 246.732938][ T8773] usb 8-1: config 109 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 246.737183][ T8773] usb 8-1: config 109 interface 0 has no altsetting 0 [ 246.739815][ T8773] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.962644][ T5843] usb 52-1: SetAddress Request (14) to port 0 [ 246.969339][T10170] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1035'. [ 246.969897][ T5843] usb 52-1: new SuperSpeed USB device number 14 using vhci_hcd [ 247.045682][ T8773] usb 8-1: string descriptor 0 read error: -71 [ 247.052286][ T8773] usbhid 8-1:109.0: can't add hid device: -71 [ 247.054699][ T8773] usbhid 8-1:109.0: probe with driver usbhid failed with error -71 [ 247.061520][ T8773] usb 8-1: USB disconnect, device number 24 [ 247.159050][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1038'. [ 247.164374][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1038'. [ 247.453456][T10152] vhci_hcd: connection reset by peer [ 247.456117][ T5811] vhci_hcd vhci_hcd.7: stop threads [ 247.458392][ T5811] vhci_hcd vhci_hcd.7: release socket [ 247.461239][ T5811] vhci_hcd vhci_hcd.7: disconnect device [ 247.639109][T10194] FAULT_INJECTION: forcing a failure. [ 247.639109][T10194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.644149][T10194] CPU: 2 UID: 0 PID: 10194 Comm: syz.8.1044 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.644173][T10194] Tainted: [L]=SOFTLOCKUP [ 247.644178][T10194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 247.644187][T10194] Call Trace: [ 247.644193][T10194] [ 247.644199][T10194] dump_stack_lvl+0x100/0x190 [ 247.644225][T10194] should_fail_ex.cold+0x5/0xa [ 247.644244][T10194] _copy_to_user+0x32/0xd0 [ 247.644270][T10194] simple_read_from_buffer+0xcb/0x170 [ 247.644298][T10194] proc_fail_nth_read+0x1af/0x230 [ 247.644341][T10194] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.644363][T10194] ? rw_verify_area+0xce/0x6d0 [ 247.644400][T10194] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.644421][T10194] vfs_read+0x1e4/0xb40 [ 247.644437][T10194] ? __pfx_vfs_read+0x10/0x10 [ 247.644449][T10194] ? find_held_lock+0x2b/0x80 [ 247.644491][T10194] ? __fget_files+0x215/0x3d0 [ 247.644511][T10194] ? __fget_files+0x21f/0x3d0 [ 247.644529][T10194] ksys_read+0x12a/0x250 [ 247.644543][T10194] ? __pfx_ksys_read+0x10/0x10 [ 247.644562][T10194] do_int80_emulation+0x14b/0x720 [ 247.644588][T10194] asm_int80_emulation+0x1a/0x20 [ 247.644604][T10194] RIP: 0023:0xf71b74eb [ 247.644616][T10194] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 247.644630][T10194] RSP: 002b:00000000f54764bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 247.644645][T10194] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54765d0 [ 247.644654][T10194] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 247.644662][T10194] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 247.644671][T10194] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 247.644679][T10194] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 247.644698][T10194] [ 247.670845][T10197] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1045'. [ 247.723844][T10197] netlink: 'syz.3.1045': attribute type 7 has an invalid length. [ 247.726819][T10197] netlink: 'syz.3.1045': attribute type 8 has an invalid length. [ 247.729243][T10197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1045'. [ 247.799412][T10204] lo speed is unknown, defaulting to 1000 [ 247.955972][T10213] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 248.080560][ T1468] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 248.240523][ T1468] usb 8-1: Using ep0 maxpacket: 8 [ 248.245428][ T1468] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 248.250414][ T1468] usb 8-1: config 0 has no interfaces? [ 248.255004][ T1468] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.263568][ T1468] usb 8-1: config 0 descriptor?? [ 248.462543][T10226] lo speed is unknown, defaulting to 1000 [ 248.509088][ T42] audit: type=1800 audit(1786603851.611:71): pid=10204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1047" name="addr_trtype" dev="configfs" ino=31173 res=0 errno=0 [ 248.517885][T10204] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 248.521030][ T42] audit: type=1800 audit(1786603851.621:72): pid=10204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1047" name="addr_traddr" dev="configfs" ino=31174 res=0 errno=0 [ 248.535382][ T6772] usb 8-1: USB disconnect, device number 25 [ 248.760390][ T8773] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 248.930320][ T8773] usb 12-1: Using ep0 maxpacket: 8 [ 248.932718][ T8773] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 248.937276][ T8773] usb 12-1: config 0 has no interfaces? [ 248.939736][ T8773] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.950924][ T8773] usb 12-1: config 0 descriptor?? [ 248.958530][T10232] dvmrp8: entered allmulticast mode [ 249.253967][ T42] audit: type=1800 audit(1786603852.361:73): pid=10226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1054" name="addr_trtype" dev="configfs" ino=31230 res=0 errno=0 [ 249.265988][T10226] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 249.272010][ T1468] usb 12-1: USB disconnect, device number 9 [ 249.276588][ T42] audit: type=1800 audit(1786603852.371:74): pid=10226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1054" name="addr_traddr" dev="configfs" ino=31231 res=0 errno=0 [ 249.730376][ T5813] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 249.865270][T10260] netlink: 'syz.4.1064': attribute type 1 has an invalid length. [ 249.900361][ T5813] usb 8-1: Using ep0 maxpacket: 32 [ 249.904565][ T5813] usb 8-1: unable to get BOS descriptor or descriptor too short [ 249.907350][ T5813] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 249.911737][ T5813] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 249.914366][ T5813] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 249.914508][T10260] bond1: entered promiscuous mode [ 249.917239][ T5813] usb 8-1: config 14 has no interface number 0 [ 249.917254][ T5813] usb 8-1: config 14 has no interface number 1 [ 249.917311][ T5813] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 249.919508][T10260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 249.921720][ T5813] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 249.921749][ T5813] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 249.921766][ T5813] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 249.921793][ T5813] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 249.921810][ T5813] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.921834][ T5813] usb 8-1: config 14 interface 57 has no altsetting 0 [ 249.921844][ T5813] usb 8-1: config 14 interface 228 has no altsetting 0 [ 249.956289][ T5813] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.958962][ T5813] usb 8-1: Product: syz [ 249.964372][ T5813] usb 8-1: Manufacturer: syz [ 249.966940][ T5813] usb 8-1: SerialNumber: syz [ 250.148849][T10271] netlink: 'syz.7.1067': attribute type 2 has an invalid length. [ 250.170462][T10271] netlink: 'syz.7.1067': attribute type 1 has an invalid length. [ 250.382941][ T5813] legousbtower 8-1:14.57: interrupt endpoints not found [ 250.578125][T10275] lo speed is unknown, defaulting to 1000 [ 250.787311][ T5813] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 250.792164][T10281] comedi comedi0: Minor 4 could not be opened [ 250.793631][ T5813] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 250.870664][ T60] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 251.040812][ T60] usb 9-1: Using ep0 maxpacket: 8 [ 251.043739][ T60] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 251.047169][ T60] usb 9-1: config 0 has no interfaces? [ 251.048930][ T60] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.052928][ T60] usb 9-1: config 0 descriptor?? [ 251.363266][ T60] usb 9-1: USB disconnect, device number 23 [ 252.020636][T10295] sg_write: data in/out 16777180/38 bytes for SCSI command 0x4-- guessing data in; [ 252.020636][T10295] program syz.8.1073 not setting count and/or reply_len properly [ 252.031957][ T5843] usb 52-1: device descriptor read/8, error -110 [ 252.411988][T10290] usb 8-1: LEGO USB Tower reset control request failed [ 252.446804][ T5843] usb usb52-port1: attempt power cycle [ 252.583285][T10302] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3276804.0.0), cmd(6) [ 252.767358][T10309] FAULT_INJECTION: forcing a failure. [ 252.767358][T10309] name failslab, interval 1, probability 0, space 0, times 0 [ 252.771464][T10309] CPU: 0 UID: 0 PID: 10309 Comm: syz.4.1078 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.771482][T10309] Tainted: [L]=SOFTLOCKUP [ 252.771486][T10309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 252.771493][T10309] Call Trace: [ 252.771497][T10309] [ 252.771502][T10309] dump_stack_lvl+0x100/0x190 [ 252.771519][T10309] should_fail_ex.cold+0x5/0xa [ 252.771533][T10309] should_failslab+0xc2/0x120 [ 252.771549][T10309] __kmalloc_noprof+0xfc/0x820 [ 252.771563][T10309] ? ___sys_recvmsg+0x16a/0x1a0 [ 252.771576][T10309] ? skcipher_walk_next+0xb50/0xe50 [ 252.771603][T10309] skcipher_walk_next+0xb50/0xe50 [ 252.771617][T10309] skcipher_walk_done+0x415/0x8c0 [ 252.771630][T10309] cbc_decrypt+0x3f6/0x520 [ 252.771646][T10309] ? __pfx_cbc_decrypt+0x10/0x10 [ 252.771668][T10309] crypto_skcipher_decrypt+0xf2/0x160 [ 252.771686][T10309] skcipher_recvmsg+0x928/0xec0 [ 252.771713][T10309] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 252.771728][T10309] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 252.771741][T10309] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 252.771761][T10309] sock_recvmsg+0x1d5/0x220 [ 252.771772][T10309] ____sys_recvmsg+0x21e/0x670 [ 252.771786][T10309] ? __pfx_____sys_recvmsg+0x10/0x10 [ 252.771802][T10309] ? __lock_acquire+0x49f/0x1a40 [ 252.771815][T10309] ___sys_recvmsg+0x16a/0x1a0 [ 252.771827][T10309] ? __pfx____sys_recvmsg+0x10/0x10 [ 252.771840][T10309] ? find_held_lock+0x2b/0x80 [ 252.771862][T10309] __sys_recvmsg+0x15d/0x210 [ 252.771878][T10309] ? __pfx___sys_recvmsg+0x10/0x10 [ 252.771897][T10309] ? __pfx_ksys_write+0x10/0x10 [ 252.771911][T10309] __do_fast_syscall_32+0xe7/0x970 [ 252.771928][T10309] ? lockdep_hardirqs_on+0x78/0x100 [ 252.771944][T10309] do_fast_syscall_32+0x32/0x70 [ 252.771959][T10309] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 252.771974][T10309] RIP: 0023:0xf7fe8fec [ 252.771990][T10309] Code: Unable to access opcode bytes at 0xf7fe8fc2. [ 252.771994][T10309] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000174 [ 252.772005][T10309] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 252.772012][T10309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.772018][T10309] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 252.772024][T10309] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 252.772030][T10309] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 252.772043][T10309] [ 252.802794][ T60] usb 8-1: USB disconnect, device number 26 [ 252.998295][ T60] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 253.125398][ T5843] usb usb52-port1: unable to enumerate USB device [ 253.317649][T10319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.125889][T10333] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 254.513569][T10349] FAULT_INJECTION: forcing a failure. [ 254.513569][T10349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.533465][T10349] CPU: 1 UID: 0 PID: 10349 Comm: syz.8.1086 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.533499][T10349] Tainted: [L]=SOFTLOCKUP [ 254.533506][T10349] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 254.533518][T10349] Call Trace: [ 254.533525][T10349] [ 254.533533][T10349] dump_stack_lvl+0x100/0x190 [ 254.533562][T10349] should_fail_ex.cold+0x5/0xa [ 254.533583][T10349] _copy_from_user+0x2e/0xd0 [ 254.533613][T10349] io_uring_setup+0xc0/0x160 [ 254.533647][T10349] ? rcu_read_lock_any_held+0x6a/0xa0 [ 254.533671][T10349] ? find_held_lock+0x2b/0x80 [ 254.533693][T10349] ? __pfx_io_uring_setup+0x10/0x10 [ 254.533709][T10349] ? ksys_write+0x190/0x250 [ 254.533732][T10349] ? __mutex_unlock_slowpath+0x35d/0x930 [ 254.533772][T10349] ? fput+0x79/0x100 [ 254.533793][T10349] ? ksys_write+0x1ac/0x250 [ 254.533808][T10349] ? __pfx_ksys_write+0x10/0x10 [ 254.533827][T10349] __ia32_sys_io_uring_setup+0xc2/0x170 [ 254.533847][T10349] __do_fast_syscall_32+0xe7/0x970 [ 254.533872][T10349] ? lockdep_hardirqs_on+0x78/0x100 [ 254.533899][T10349] do_fast_syscall_32+0x32/0x70 [ 254.533926][T10349] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 254.533949][T10349] RIP: 0023:0xf7fb8fec [ 254.533972][T10349] Code: Unable to access opcode bytes at 0xf7fb8fc2. [ 254.533979][T10349] RSP: 002b:00000000f545543c EFLAGS: 00000286 ORIG_RAX: 00000000000001a9 [ 254.533997][T10349] RAX: ffffffffffffffda RBX: 0000000000000e26 RCX: 0000000080000808 [ 254.534009][T10349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 254.534021][T10349] RBP: 00000000f54554fc R08: 0000000000000000 R09: 0000000000000000 [ 254.534030][T10349] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 254.534039][T10349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 254.534060][T10349] [ 255.306884][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.313329][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.949627][T10375] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20004 [ 255.983971][T10375] cifs: Unknown parameter 'timeo' [ 256.209388][T10382] siw: device registration error -23 [ 256.967128][T10387] siw: device registration error -23 [ 257.375042][ T5843] lo speed is unknown, defaulting to 1000 [ 258.892612][T10420] FAULT_INJECTION: forcing a failure. [ 258.892612][T10420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.898032][T10420] CPU: 2 UID: 0 PID: 10420 Comm: syz.7.1100 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.898075][T10420] Tainted: [L]=SOFTLOCKUP [ 258.898081][T10420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 258.898090][T10420] Call Trace: [ 258.898097][T10420] [ 258.898104][T10420] dump_stack_lvl+0x100/0x190 [ 258.898148][T10420] should_fail_ex.cold+0x5/0xa [ 258.898175][T10420] _copy_to_user+0x32/0xd0 [ 258.898207][T10420] simple_read_from_buffer+0xcb/0x170 [ 258.898239][T10420] proc_fail_nth_read+0x1af/0x230 [ 258.898268][T10420] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 258.898294][T10420] ? rw_verify_area+0xce/0x6d0 [ 258.898336][T10420] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 258.898362][T10420] vfs_read+0x1e4/0xb40 [ 258.898381][T10420] ? __pfx_vfs_read+0x10/0x10 [ 258.898394][T10420] ? find_held_lock+0x2b/0x80 [ 258.898416][T10420] ? __fget_files+0x215/0x3d0 [ 258.898437][T10420] ? __fget_files+0x21f/0x3d0 [ 258.898458][T10420] ksys_read+0x12a/0x250 [ 258.898475][T10420] ? __pfx_ksys_read+0x10/0x10 [ 258.898501][T10420] do_int80_emulation+0x14b/0x720 [ 258.898537][T10420] asm_int80_emulation+0x1a/0x20 [ 258.898558][T10420] RIP: 0023:0xf71d74eb [ 258.898574][T10420] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 258.898591][T10420] RSP: 002b:00000000f548d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 258.898608][T10420] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f548d5d0 [ 258.898620][T10420] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 258.898629][T10420] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 258.898639][T10420] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 258.898650][T10420] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 258.898675][T10420] [ 259.221514][T10415] syz.8.1099 (10415) used greatest stack depth: 18768 bytes left [ 259.364979][T10422] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1101'. [ 259.588327][T10436] FAULT_INJECTION: forcing a failure. [ 259.588327][T10436] name failslab, interval 1, probability 0, space 0, times 0 [ 259.593841][T10436] CPU: 1 UID: 0 PID: 10436 Comm: syz.8.1106 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.593872][T10436] Tainted: [L]=SOFTLOCKUP [ 259.593878][T10436] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 259.593889][T10436] Call Trace: [ 259.593896][T10436] [ 259.593904][T10436] dump_stack_lvl+0x100/0x190 [ 259.593932][T10436] should_fail_ex.cold+0x5/0xa [ 259.593953][T10436] should_failslab+0xc2/0x120 [ 259.593977][T10436] __kmalloc_cache_noprof+0x91/0x6c0 [ 259.593994][T10436] ? rtnl_newlink+0x126/0x2380 [ 259.594033][T10436] ? __pfx_rtnl_newlink+0x10/0x10 [ 259.594056][T10436] rtnl_newlink+0x126/0x2380 [ 259.594089][T10436] ? __pfx_rtnl_newlink+0x10/0x10 [ 259.594112][T10436] ? rcu_is_watching+0x12/0xc0 [ 259.594132][T10436] ? kasan_quarantine_put+0x104/0x240 [ 259.594151][T10436] ? lockdep_hardirqs_on+0x78/0x100 [ 259.594179][T10436] ? kfree_skbmem+0x19a/0x210 [ 259.594197][T10436] ? kmem_cache_free+0x127/0x6b0 [ 259.594219][T10436] ? __lock_acquire+0x49f/0x1a40 [ 259.594238][T10436] ? find_held_lock+0x2b/0x80 [ 259.594267][T10436] ? find_held_lock+0x2b/0x80 [ 259.594286][T10436] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 259.594310][T10436] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 259.594337][T10436] ? __pfx_rtnl_newlink+0x10/0x10 [ 259.594363][T10436] rtnetlink_rcv_msg+0x95e/0xe90 [ 259.594392][T10436] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 259.594424][T10436] ? ref_tracker_free+0x37e/0x6c0 [ 259.594460][T10436] netlink_rcv_skb+0x159/0x420 [ 259.594503][T10436] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 259.594528][T10436] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 259.594556][T10436] ? netlink_deliver_tap+0x1ae/0xcc0 [ 259.594579][T10436] netlink_unicast+0x585/0x850 [ 259.594602][T10436] ? __pfx_netlink_unicast+0x10/0x10 [ 259.594632][T10436] netlink_sendmsg+0x8b0/0xda0 [ 259.594654][T10436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.594676][T10436] ? apparmor_socket_sendmsg+0x15b/0x270 [ 259.594699][T10436] ____sys_sendmsg+0xa4d/0xbe0 [ 259.594716][T10436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.594736][T10436] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.594766][T10436] ___sys_sendmsg+0x190/0x1e0 [ 259.594787][T10436] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.594815][T10436] ? find_held_lock+0x2b/0x80 [ 259.594850][T10436] __sys_sendmsg+0x160/0x210 [ 259.594874][T10436] ? __pfx___sys_sendmsg+0x10/0x10 [ 259.594898][T10436] ? __pfx_ksys_write+0x10/0x10 [ 259.594920][T10436] __do_fast_syscall_32+0xe7/0x970 [ 259.594944][T10436] ? lockdep_hardirqs_on+0x78/0x100 [ 259.594970][T10436] do_fast_syscall_32+0x32/0x70 [ 259.594994][T10436] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 259.595017][T10436] RIP: 0023:0xf7fb8fec [ 259.595039][T10436] Code: Unable to access opcode bytes at 0xf7fb8fc2. [ 259.595046][T10436] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 259.595061][T10436] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 259.595072][T10436] RDX: 0000000008000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 259.595081][T10436] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 259.595090][T10436] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 259.595100][T10436] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 259.595122][T10436] [ 259.628296][T10438] jffs2: notice: (10438) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 260.637482][T10459] bond4: (slave syz_tun): Removing an active aggregator [ 260.646533][T10459] bond4: (slave syz_tun): Releasing backup interface [ 260.655422][T10459] bond3: (slave dummy0): Releasing active interface [ 260.657790][T10459] dummy0: left allmulticast mode [ 260.675188][T10459] team0: Port device xfrm0 removed [ 260.677599][T10459] net_ratelimit: 44 callbacks suppressed [ 260.677610][T10459] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 260.686189][ T1155] tipc: Resetting bearer [ 261.061786][T10476] siw: device registration error -23 [ 261.167391][T10478] lo speed is unknown, defaulting to 1000 [ 261.460767][ T6772] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 261.531808][T10490] evm: overlay not supported [ 261.600731][ T1355] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 261.619313][T10494] tmpfs: Unknown parameter 'grpquotaOinode_hardlimit' [ 261.627941][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1125'. [ 261.630290][ T6772] usb 9-1: Using ep0 maxpacket: 8 [ 261.631181][T10494] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1125'. [ 261.634778][ T6772] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 261.642409][ T6772] usb 9-1: config 0 has no interfaces? [ 261.643675][T10494] syz_tun: entered promiscuous mode [ 261.645041][ T6772] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.649434][T10494] macvlan2: entered allmulticast mode [ 261.652154][T10494] syz_tun: entered allmulticast mode [ 261.656845][ T6772] usb 9-1: config 0 descriptor?? [ 261.870724][T10501] tipc: Started in network mode [ 261.872748][T10501] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 261.875724][T10501] tipc: Enabled bearer , priority 0 [ 261.880132][ T42] audit: type=1800 audit(1786603864.981:75): pid=10478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1119" name="addr_trtype" dev="configfs" ino=30520 res=0 errno=0 [ 261.889801][ T5843] usb 9-1: USB disconnect, device number 24 [ 261.991688][T10505] netlink: 'syz.7.1127': attribute type 23 has an invalid length. [ 262.087741][T10510] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 262.097412][T10510] bridge_slave_0: default FDB implementation only supports local addresses [ 262.995745][ T1468] tipc: Node number set to 11578026 [ 263.575907][T10544] jffs2: notice: (10544) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 263.855525][ T48] Bluetooth: hci4: Frame reassembly failed (-84) [ 263.871908][T10552] netlink: 'syz.7.1144': attribute type 1 has an invalid length. [ 263.885298][ T5843] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 263.888623][ T48] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 263.909515][T10552] 8021q: adding VLAN 0 to HW filter on device bond1 [ 264.037958][T10552] bond1: entered allmulticast mode [ 264.040603][ T5843] usb 8-1: Using ep0 maxpacket: 32 [ 264.043383][ T5843] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 264.051877][ T5843] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 264.060129][ T5843] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 264.063681][ T5843] usb 8-1: Product: syz [ 264.065652][ T5843] usb 8-1: Manufacturer: syz [ 264.067610][ T5843] usb 8-1: SerialNumber: syz [ 264.077420][ T5843] usb 8-1: config 0 descriptor?? [ 264.086311][T10549] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 264.356857][T10562] netlink: 'syz.8.1146': attribute type 9 has an invalid length. [ 264.435591][ T8773] usb 8-1: USB disconnect, device number 27 [ 264.828162][ T42] audit: type=1800 audit(1786603867.931:76): pid=10575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1151" name="local" dev="configfs" ino=31530 res=0 errno=0 [ 264.834909][ T42] audit: type=1800 audit(1786603867.941:77): pid=10575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1151" name="scan_secs" dev="configfs" ino=30597 res=0 errno=0 [ 265.175647][T10591] lo speed is unknown, defaulting to 1000 [ 265.304104][T10596] jffs2: notice: (10596) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 265.840432][ T5735] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 265.970392][ T5840] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 266.023408][T10599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1158'. [ 266.311105][ T5840] usb 9-1: Using ep0 maxpacket: 8 [ 266.315156][ T5840] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 266.321107][ T5840] usb 9-1: config 0 has no interfaces? [ 266.324063][ T5840] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.343921][ T5840] usb 9-1: config 0 descriptor?? [ 266.557758][ T5840] usb 9-1: USB disconnect, device number 25 [ 266.780418][ T1355] usb 12-1: device descriptor read/64, error -110 [ 266.987222][T10629] veth1_to_hsr: entered promiscuous mode [ 267.021115][ T1355] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 267.166118][T10638] FAULT_INJECTION: forcing a failure. [ 267.166118][T10638] name failslab, interval 1, probability 0, space 0, times 0 [ 267.170644][T10638] CPU: 3 UID: 0 PID: 10638 Comm: syz.4.1169 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.170663][T10638] Tainted: [L]=SOFTLOCKUP [ 267.170667][T10638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 267.170673][T10638] Call Trace: [ 267.170678][T10638] [ 267.170682][T10638] dump_stack_lvl+0x100/0x190 [ 267.170699][T10638] should_fail_ex.cold+0x5/0xa [ 267.170712][T10638] should_failslab+0xc2/0x120 [ 267.170728][T10638] kmem_cache_alloc_noprof+0x91/0x6a0 [ 267.170746][T10638] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 267.170758][T10638] ? mm_alloc+0x1b/0x60 [ 267.170773][T10638] mm_alloc+0x1b/0x60 [ 267.170783][T10638] alloc_bprm+0x2ba/0x9d0 [ 267.170802][T10638] do_execveat_common.isra.0+0x19c/0x580 [ 267.170819][T10638] ? do_getname+0x191/0x390 [ 267.170834][T10638] __ia32_compat_sys_execve+0x9c/0xd0 [ 267.170851][T10638] __do_fast_syscall_32+0xe7/0x970 [ 267.170869][T10638] ? lockdep_hardirqs_on+0x78/0x100 [ 267.170884][T10638] do_fast_syscall_32+0x32/0x70 [ 267.170900][T10638] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.170914][T10638] RIP: 0023:0xf7fe8fec [ 267.170929][T10638] Code: Unable to access opcode bytes at 0xf7fe8fc2. [ 267.170933][T10638] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 000000000000000b [ 267.170944][T10638] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 267.170951][T10638] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 267.170957][T10638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 267.170963][T10638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.170969][T10638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.170982][T10638] [ 267.180375][ T1355] usb 12-1: device descriptor read/64, error -32 [ 267.290566][ T5840] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 267.342123][T10645] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.347584][T10645] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.354490][ T1355] usb usb12-port1: attempt power cycle [ 267.441097][ T5840] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 267.444954][ T5840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.517713][T10658] x_tables: duplicate underflow at hook 3 [ 267.526324][T10660] x_tables: duplicate underflow at hook 3 [ 267.671784][ T5840] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 267.710387][ T1355] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 267.732184][ T1355] usb 12-1: device descriptor read/8, error -32 [ 267.850489][ T1355] raw-gadget.1 gadget.7: failed to queue suspend event [ 267.860746][ T1355] raw-gadget.1 gadget.7: failed to queue reset event [ 267.885311][T10629] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 267.940542][ T1355] raw-gadget.1 gadget.7: failed to queue resume event [ 268.000471][ T1355] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 268.020630][ C1] raw-gadget.1 gadget.7: ignoring, device is not running [ 268.023556][ T1355] usb 12-1: device descriptor read/8, error -32 [ 268.131020][ T1355] raw-gadget.1 gadget.7: failed to queue suspend event [ 268.135516][ T1355] usb usb12-port1: unable to enumerate USB device [ 268.764093][T10684] siw: device registration error -23 [ 268.771012][T10684] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.773230][T10684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.775638][T10684] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.777847][T10684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.788608][T10676] fuse: Unknown parameter '00000000000000000000006rèm|8/ºÑ1þº]K±3àÏÅúÌù' [ 268.904775][T10687] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1188'. [ 269.315149][T10694] tipc: Enabling of bearer rejected, failed to enable media [ 269.521373][T10707] lo speed is unknown, defaulting to 1000 [ 269.561488][T10708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.566802][T10708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.583779][ T42] audit: type=1800 audit(1786603872.691:78): pid=10707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1193" name="addr_traddr" dev="configfs" ino=34015 res=0 errno=0 [ 269.591102][T10707] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 269.995229][ T5820] usb 8-1: USB disconnect, device number 28 [ 271.133775][T10732] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 271.136239][T10732] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 271.162764][T10732] vhci_hcd vhci_hcd.0: Device attached [ 271.430408][ T850] usb 44-1: SetAddress Request (10) to port 0 [ 271.432808][ T850] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 271.524947][T10738] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1199'. [ 271.741704][T10733] vhci_hcd: connection reset by peer [ 271.744779][ T5587] vhci_hcd vhci_hcd.3: stop threads [ 271.747762][ T5587] vhci_hcd vhci_hcd.3: release socket [ 271.751156][ T5587] vhci_hcd vhci_hcd.3: disconnect device [ 271.873851][T10748] lo speed is unknown, defaulting to 1000 [ 272.347507][T10754] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1204'. [ 272.420798][T10757] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.1204'. [ 272.425622][T10757] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1204'. [ 273.282939][T10769] ªªªªªª: renamed from vlan0 (while UP) [ 273.390885][T10776] syzkaller0: entered promiscuous mode [ 273.392897][T10776] syzkaller0: entered allmulticast mode [ 273.401681][T10776] tipc: Enabled bearer , priority 0 [ 273.409969][T10776] tipc: Resetting bearer [ 273.413779][T10775] tipc: Resetting bearer [ 273.435365][T10775] tipc: Disabling bearer [ 273.473826][T10784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.477418][T10784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.295149][T10821] FAULT_INJECTION: forcing a failure. [ 274.295149][T10821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.299354][T10821] CPU: 0 UID: 0 PID: 10821 Comm: syz.7.1230 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.299376][T10821] Tainted: [L]=SOFTLOCKUP [ 274.299381][T10821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 274.299391][T10821] Call Trace: [ 274.299398][T10821] [ 274.299404][T10821] dump_stack_lvl+0x100/0x190 [ 274.299430][T10821] should_fail_ex.cold+0x5/0xa [ 274.299452][T10821] _copy_from_user+0x2e/0xd0 [ 274.299481][T10821] move_addr_to_kernel+0x65/0x170 [ 274.299505][T10821] __sys_bind+0x11d/0x260 [ 274.299526][T10821] ? __pfx___sys_bind+0x10/0x10 [ 274.299544][T10821] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 274.299593][T10821] ? ksys_write+0x1ac/0x250 [ 274.299612][T10821] ? __pfx_ksys_write+0x10/0x10 [ 274.299631][T10821] __ia32_sys_bind+0x71/0xb0 [ 274.299667][T10821] ? lockdep_hardirqs_on+0x78/0x100 [ 274.299693][T10821] __do_fast_syscall_32+0xe7/0x970 [ 274.299717][T10821] ? lockdep_hardirqs_on+0x78/0x100 [ 274.299746][T10821] do_fast_syscall_32+0x32/0x70 [ 274.299762][T10821] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 274.299776][T10821] RIP: 0023:0xf709efec [ 274.299791][T10821] Code: Unable to access opcode bytes at 0xf709efc2. [ 274.299796][T10821] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000169 [ 274.299807][T10821] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 274.299813][T10821] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 274.299819][T10821] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 274.299825][T10821] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 274.299832][T10821] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 274.299845][T10821] [ 274.779015][T10842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.786261][T10842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.480565][ T850] usb 44-1: device descriptor read/8, error -110 [ 276.755991][T10883] CIFS: bad ip= option (127®0.0.1) [ 276.759194][T10883] CIFS: Attempting to mount (null) [ 276.871087][ T850] usb usb44-port1: attempt power cycle [ 277.112746][T10886] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 277.112746][T10886] Please contact the netfilter-devel mailing list or update your nftables rules. [ 277.266462][T10887] ieee802154 phy0 wpan0: encryption failed: -22 [ 277.431145][ T850] usb usb44-port1: unable to enumerate USB device [ 277.591599][T10883] CIFS: VFS: Error connecting to socket. Aborting operation. [ 277.594681][T10883] CIFS: VFS: cifs_mount failed w/return code = -4 [ 277.768449][T10889] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1250'. [ 278.054290][T10903] tmpfs: Bad value for 'mpol' [ 278.181406][T10914] dlm: non-version read from control device 0 [ 278.234862][T10919] lo speed is unknown, defaulting to 1000 [ 278.530465][ T1355] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 278.653574][T10948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1266'. [ 278.690305][ T1355] usb 8-1: Using ep0 maxpacket: 8 [ 278.692610][ T1355] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 278.696476][ T1355] usb 8-1: config 0 has no interfaces? [ 278.698659][ T1355] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.709269][ T1355] usb 8-1: config 0 descriptor?? [ 278.866832][T10951] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 278.922825][ T42] audit: type=1800 audit(1786603882.031:79): pid=10919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1259" name="addr_trtype" dev="configfs" ino=34207 res=0 errno=0 [ 278.929878][T10919] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 278.934907][ T1355] usb 8-1: USB disconnect, device number 29 [ 278.937313][ T42] audit: type=1800 audit(1786603882.031:80): pid=10919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1259" name="addr_traddr" dev="configfs" ino=34208 res=0 errno=0 [ 279.201001][ T5820] kernel write not supported for file [eventfd] (pid: 5820 comm: kworker/3:3) [ 280.103159][T10992] "syz.8.1278" (10992) uses obsolete ecb(arc4) skcipher [ 280.741807][T11020] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 281.726249][ T42] audit: type=1326 audit(1786603884.831:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11032 comm="syz.4.1288" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x0 [ 282.595540][T11055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1294'. [ 282.599510][T11055] veth1_vlan: entered promiscuous mode [ 282.608150][T11055] veth1_vlan: left promiscuous mode [ 282.615852][T11055] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1294'. [ 282.620771][T11055] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 282.915166][T11073] lo speed is unknown, defaulting to 1000 [ 283.194635][ T850] hid_parser_main: 5 callbacks suppressed [ 283.194717][ T850] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 283.260186][ T850] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 283.328994][T11085] FAULT_INJECTION: forcing a failure. [ 283.328994][T11085] name failslab, interval 1, probability 0, space 0, times 0 [ 283.334366][T11085] CPU: 2 UID: 0 PID: 11085 Comm: syz.3.1302 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.334396][T11085] Tainted: [L]=SOFTLOCKUP [ 283.334400][T11085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 283.334406][T11085] Call Trace: [ 283.334411][T11085] [ 283.334416][T11085] dump_stack_lvl+0x100/0x190 [ 283.334434][T11085] should_fail_ex.cold+0x5/0xa [ 283.334447][T11085] should_failslab+0xc2/0x120 [ 283.334463][T11085] kmem_cache_alloc_noprof+0x91/0x6a0 [ 283.334478][T11085] ? dst_alloc+0x99/0x1a0 [ 283.334496][T11085] dst_alloc+0x99/0x1a0 [ 283.334511][T11085] rt_dst_alloc+0x35/0x3a0 [ 283.334543][T11085] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 283.334565][T11085] ip_route_output_key_hash+0x118/0x2b0 [ 283.334576][T11085] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 283.334608][T11085] ? fib6_node_lookup+0x13b/0x190 [ 283.334634][T11085] ? __lock_acquire+0x49f/0x1a40 [ 283.334647][T11085] __xfrm4_dst_lookup+0x322/0x600 [ 283.334671][T11085] xfrm4_get_saddr+0x92/0x140 [ 283.334685][T11085] ? __pfx_xfrm4_get_saddr+0x10/0x10 [ 283.334706][T11085] xfrm_resolve_and_create_bundle+0x814/0x3500 [ 283.334733][T11085] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 283.334748][T11085] ? xfrm_selector_match+0xaa/0x1040 [ 283.334763][T11085] ? find_held_lock+0x2b/0x80 [ 283.334776][T11085] ? xfrm_policy_lookup_bytype+0x568/0x12b0 [ 283.334795][T11085] ? xfrm_policy_lookup_bytype+0x577/0x12b0 [ 283.334817][T11085] ? __pfx_xfrm_policy_lookup_bytype+0x10/0x10 [ 283.334835][T11085] ? ip6_dst_lookup_tail.constprop.0+0x7bc/0x2110 [ 283.334853][T11085] ? ip6_dst_lookup_tail.constprop.0+0x7bc/0x2110 [ 283.334869][T11085] ? xfrm_expand_policies.constprop.0+0x250/0x660 [ 283.334888][T11085] xfrm_lookup_with_ifid+0x4f6/0x1ce0 [ 283.334906][T11085] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 283.334923][T11085] ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10 [ 283.334946][T11085] xfrm_lookup_route+0x3b/0x200 [ 283.334963][T11085] ip6_dst_lookup_flow+0x1ea/0x240 [ 283.334980][T11085] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 283.334995][T11085] ? find_held_lock+0x2b/0x80 [ 283.335008][T11085] ? rawv6_sendmsg+0xb3c/0x4420 [ 283.335020][T11085] ? rawv6_sendmsg+0xb3c/0x4420 [ 283.335035][T11085] rawv6_sendmsg+0xe61/0x4420 [ 283.335050][T11085] ? __css_rstat_lock.isra.0+0x480/0x4b0 [ 283.335070][T11085] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 283.335090][T11085] ? __pfx___might_resched+0x10/0x10 [ 283.335110][T11085] ? aa_sk_perm+0x309/0xaa0 [ 283.335132][T11085] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 283.335144][T11085] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 283.335158][T11085] ? inet_sendmsg+0x11c/0x140 [ 283.335180][T11085] inet_sendmsg+0x11c/0x140 [ 283.335196][T11085] ____sys_sendmsg+0x9c9/0xbe0 [ 283.335207][T11085] ? __pfx_inet_sendmsg+0x10/0x10 [ 283.335223][T11085] ? __pfx_____sys_sendmsg+0x10/0x10 [ 283.335237][T11085] ? _kstrtoull+0x13c/0x1f0 [ 283.335249][T11085] ? __pfx__kstrtoull+0x10/0x10 [ 283.335262][T11085] ___sys_sendmsg+0x190/0x1e0 [ 283.335275][T11085] ? __pfx____sys_sendmsg+0x10/0x10 [ 283.335286][T11085] ? __lock_acquire+0x49f/0x1a40 [ 283.335312][T11085] __sys_sendmmsg+0x309/0x440 [ 283.335329][T11085] ? __pfx___sys_sendmmsg+0x10/0x10 [ 283.335343][T11085] ? find_held_lock+0x2b/0x80 [ 283.335360][T11085] ? __mutex_unlock_slowpath+0x35d/0x930 [ 283.335384][T11085] ? xfd_validate_state+0x129/0x190 [ 283.335401][T11085] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 283.335413][T11085] ? lockdep_hardirqs_on+0x78/0x100 [ 283.335433][T11085] __do_fast_syscall_32+0xe7/0x970 [ 283.335450][T11085] ? lockdep_hardirqs_on+0x78/0x100 [ 283.335466][T11085] do_fast_syscall_32+0x32/0x70 [ 283.335481][T11085] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.335496][T11085] RIP: 0023:0xf7f45fec [ 283.335510][T11085] Code: Unable to access opcode bytes at 0xf7f45fc2. [ 283.335515][T11085] RSP: 002b:00000000f53c450c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 283.335527][T11085] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800092c0 [ 283.335533][T11085] RDX: 00000000000004ff RSI: 000000000000ffd8 RDI: 0000000000000000 [ 283.335539][T11085] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 283.335545][T11085] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 283.335551][T11085] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 283.335564][T11085] [ 283.599441][T11085] lo speed is unknown, defaulting to 1000 [ 284.604534][T11134] lo speed is unknown, defaulting to 1000 [ 284.994033][T11149] lo speed is unknown, defaulting to 1000 [ 285.227021][T11153] lo speed is unknown, defaulting to 1000 [ 285.280440][ T6772] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 285.359912][T11158] FAULT_INJECTION: forcing a failure. [ 285.359912][T11158] name failslab, interval 1, probability 0, space 0, times 0 [ 285.370424][T11158] CPU: 1 UID: 0 PID: 11158 Comm: syz.3.1317 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.370455][T11158] Tainted: [L]=SOFTLOCKUP [ 285.370462][T11158] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 285.370473][T11158] Call Trace: [ 285.370480][T11158] [ 285.370489][T11158] dump_stack_lvl+0x100/0x190 [ 285.370519][T11158] should_fail_ex.cold+0x5/0xa [ 285.370542][T11158] should_failslab+0xc2/0x120 [ 285.370569][T11158] __kmalloc_noprof+0xfc/0x820 [ 285.370592][T11158] ? tomoyo_encode2+0xfb/0x3c0 [ 285.370638][T11158] tomoyo_encode2+0xfb/0x3c0 [ 285.370667][T11158] tomoyo_encode+0x29/0x50 [ 285.370691][T11158] tomoyo_realpath_from_path+0x18c/0x690 [ 285.370724][T11158] tomoyo_path_number_perm+0x23c/0x580 [ 285.370760][T11158] ? tomoyo_path_number_perm+0x22e/0x580 [ 285.370785][T11158] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 285.370809][T11158] ? get_pid_task+0x106/0x250 [ 285.370858][T11158] ? find_held_lock+0x2b/0x80 [ 285.370882][T11158] ? __fget_files+0x215/0x3d0 [ 285.370899][T11158] ? hook_file_ioctl_common+0x140/0x440 [ 285.370924][T11158] ? __fget_files+0x215/0x3d0 [ 285.370947][T11158] ? __fget_files+0x21f/0x3d0 [ 285.370969][T11158] security_file_ioctl_compat+0xd3/0x230 [ 285.370996][T11158] __ia32_compat_sys_ioctl+0xc2/0x360 [ 285.371027][T11158] __do_fast_syscall_32+0xe7/0x970 [ 285.371055][T11158] ? lockdep_hardirqs_on+0x78/0x100 [ 285.371088][T11158] do_fast_syscall_32+0x32/0x70 [ 285.371116][T11158] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 285.371140][T11158] RIP: 0023:0xf7f45fec [ 285.371163][T11158] Code: Unable to access opcode bytes at 0xf7f45fc2. [ 285.371172][T11158] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 285.371190][T11158] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040087543 [ 285.371201][T11158] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 285.371211][T11158] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 285.371221][T11158] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 285.371231][T11158] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 285.371255][T11158] [ 285.371277][T11158] ERROR: Out of memory at tomoyo_realpath_from_path. [ 285.480380][ T6772] usb 9-1: Using ep0 maxpacket: 8 [ 285.482650][ T6772] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 285.486060][ T6772] usb 9-1: config 0 has no interfaces? [ 285.487857][ T6772] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.493062][ T6772] usb 9-1: config 0 descriptor?? [ 285.630378][T11161] block nbd3: Device being setup by another task [ 285.637923][T11159] block nbd3: shutting down sockets [ 285.709530][ T42] audit: type=1800 audit(1786603888.811:82): pid=11149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1315" name="addr_traddr" dev="configfs" ino=37093 res=0 errno=0 [ 285.716711][T11149] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 285.720561][ T9220] usb 9-1: USB disconnect, device number 26 [ 285.946407][T11177] lo speed is unknown, defaulting to 1000 [ 286.319594][T11189] netlink: 'syz.3.1328': attribute type 1 has an invalid length. [ 286.327156][T11189] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1328'. [ 286.575403][T11200] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1331'. [ 286.580134][T11200] bridge_slave_1: left allmulticast mode [ 286.583421][T11200] bridge_slave_1: left promiscuous mode [ 286.585908][T11200] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.594073][T11200] bridge_slave_0: left allmulticast mode [ 286.596002][T11200] bridge_slave_0: left promiscuous mode [ 286.597908][T11200] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.778764][T11209] Failed to get privilege flags for destination (handle=0x2:0x0) [ 287.108703][T11217] netlink: 'syz.8.1338': attribute type 2 has an invalid length. [ 287.111452][T11217] netlink: 'syz.8.1338': attribute type 8 has an invalid length. [ 287.113982][T11217] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1338'. [ 287.133620][T11215] lo speed is unknown, defaulting to 1000 [ 287.208231][ T5735] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 287.390620][ T41] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 287.550352][ T41] usb 9-1: Using ep0 maxpacket: 8 [ 287.553571][ T41] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 287.554237][T11225] lo speed is unknown, defaulting to 1000 [ 287.558256][ T41] usb 9-1: config 0 has no interfaces? [ 287.561897][ T41] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.570510][ T41] usb 9-1: config 0 descriptor?? [ 287.789639][ T42] audit: type=1800 audit(1786603890.891:83): pid=11215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1337" name="addr_traddr" dev="configfs" ino=35346 res=0 errno=0 [ 287.790019][T11215] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 287.807698][ T60] usb 9-1: USB disconnect, device number 27 [ 287.830332][ T9220] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 287.981328][ T9220] usb 8-1: Using ep0 maxpacket: 8 [ 287.985749][ T9220] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 287.998031][ T9220] usb 8-1: config 0 has no interfaces? [ 287.999739][ T9220] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.007277][ T9220] usb 8-1: config 0 descriptor?? [ 288.272010][T11236] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 288.274181][T11236] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 288.277672][T11236] vhci_hcd vhci_hcd.0: Device attached [ 288.292636][ T9220] usb 8-1: USB disconnect, device number 30 [ 288.339027][T11236] geneve2: entered allmulticast mode [ 288.561173][ T1355] usb 52-1: SetAddress Request (18) to port 0 [ 288.564268][ T1355] usb 52-1: new SuperSpeed USB device number 18 using vhci_hcd [ 288.852545][T11250] binder: 11249:11250 ioctl c0306201 80000580 returned -14 [ 288.892557][T11237] vhci_hcd: connection reset by peer [ 288.897303][ T5587] vhci_hcd vhci_hcd.7: stop threads [ 288.900517][ T5587] vhci_hcd vhci_hcd.7: release socket [ 288.903201][ T5587] vhci_hcd vhci_hcd.7: disconnect device [ 289.046302][T11255] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1347'. [ 289.550470][ T60] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 289.623451][T11273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.628457][T11273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.640014][T11273] FAULT_INJECTION: forcing a failure. [ 289.640014][T11273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.661812][T11273] CPU: 2 UID: 0 PID: 11273 Comm: syz.7.1352 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.661841][T11273] Tainted: [L]=SOFTLOCKUP [ 289.661847][T11273] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 289.661863][T11273] Call Trace: [ 289.661868][T11273] [ 289.661874][T11273] dump_stack_lvl+0x100/0x190 [ 289.662052][T11273] should_fail_ex.cold+0x5/0xa [ 289.662077][T11273] strncpy_from_user+0x3b/0x2d0 [ 289.662153][T11273] do_getname+0x78/0x390 [ 289.662185][T11273] do_sys_openat2+0xc7/0x1e0 [ 289.662206][T11273] ? __pfx_do_sys_openat2+0x10/0x10 [ 289.662225][T11273] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 289.662311][T11273] ? __fget_files+0x21f/0x3d0 [ 289.662329][T11273] __ia32_compat_sys_openat+0x12d/0x210 [ 289.662350][T11273] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 289.662370][T11273] ? ksys_write+0x1ac/0x250 [ 289.662392][T11273] do_int80_emulation+0x14b/0x720 [ 289.662416][T11273] asm_int80_emulation+0x1a/0x20 [ 289.662433][T11273] RIP: 0023:0xf71d74eb [ 289.662446][T11273] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 289.662460][T11273] RSP: 002b:00000000f548d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 289.662485][T11273] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f548d100 [ 289.662494][T11273] RDX: 00000000000c2782 RSI: 0000000000000000 RDI: 0000000000000000 [ 289.662503][T11273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 289.662511][T11273] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 289.662520][T11273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 289.662541][T11273] [ 289.751252][ T60] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 289.755342][ T60] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 289.757949][ T60] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 289.761128][ T60] usb 8-1: config 0 interface 0 has no altsetting 0 [ 289.765065][ T60] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 289.767664][ T60] usb 8-1: Product: syz [ 289.769017][ T60] usb 8-1: Manufacturer: syz [ 289.771027][ T60] usb 8-1: SerialNumber: syz [ 289.774491][ T60] usb 8-1: config 0 descriptor?? [ 289.777615][ T60] hub 8-1:0.0: bad descriptor, ignoring hub [ 289.779547][ T60] hub 8-1:0.0: probe with driver hub failed with error -5 [ 289.783911][ T60] usb 8-1: selecting invalid altsetting 0 [ 290.103305][ T6772] usb 8-1: USB disconnect, device number 31 [ 290.206287][T11281] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1354'. [ 290.217402][T11281] netlink: 124 bytes leftover after parsing attributes in process `syz.7.1354'. [ 290.224231][T11281] netlink: 124 bytes leftover after parsing attributes in process `syz.7.1354'. [ 290.325176][T11284] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 290.981285][T11323] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1361'. [ 290.985688][T11323] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 290.985707][T11323] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 290.985778][T11323] vhci_hcd vhci_hcd.0: Device attached [ 291.041919][T11324] vhci_hcd: connection closed [ 291.042303][ T5587] vhci_hcd vhci_hcd.3: stop threads [ 291.046360][ T5587] vhci_hcd vhci_hcd.3: release socket [ 291.048418][ T5587] vhci_hcd vhci_hcd.3: disconnect device [ 291.261893][T11335] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 291.270149][T11335] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1367'. [ 291.824392][T11350] 9p: Bad value for 'rfdno' [ 292.002873][ T42] audit: type=1326 audit(1786603895.111:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11355 comm="syz.4.1376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000 [ 292.014535][ T42] audit: type=1326 audit(1786603895.111:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11355 comm="syz.4.1376" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7fe8fec code=0x7ffc0000 [ 292.028760][ T42] audit: type=1326 audit(1786603895.131:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11355 comm="syz.4.1376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000 [ 292.042741][ T42] audit: type=1326 audit(1786603895.141:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11355 comm="syz.4.1376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000 [ 292.052331][ T42] audit: type=1326 audit(1786603895.151:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11355 comm="syz.4.1376" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7fe8fec code=0x7ffc0000 [ 292.059594][ T42] audit: type=1326 audit(1786603895.161:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11355 comm="syz.4.1376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000 [ 292.067566][ T42] audit: type=1326 audit(1786603895.171:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11355 comm="syz.4.1376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000 [ 292.077032][ T42] audit: type=1326 audit(1786603895.181:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11355 comm="syz.4.1376" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf7fe8fec code=0x7ffc0000 [ 292.095324][ T42] audit: type=1326 audit(1786603895.191:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11355 comm="syz.4.1376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe8fec code=0x7ffc0000 [ 292.111464][ T42] audit: type=1326 audit(1786603895.211:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11355 comm="syz.4.1376" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7fe8fec code=0x7ffc0000 [ 292.143949][T11358] netlink: 'syz.4.1376': attribute type 10 has an invalid length. [ 292.151303][T11358] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 292.155209][T11358] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 292.168428][T11358] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1376'. [ 292.190942][T11358] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 292.199805][T11358] bond0 (unregistering): Released all slaves [ 292.231978][T11363] syz.4.1376: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 292.242484][T11363] CPU: 3 UID: 0 PID: 11363 Comm: syz.4.1376 Tainted: G L syzkaller #0 PREEMPT(full) [ 292.242508][T11363] Tainted: [L]=SOFTLOCKUP [ 292.242513][T11363] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 292.242520][T11363] Call Trace: [ 292.242524][T11363] [ 292.242530][T11363] dump_stack_lvl+0x100/0x190 [ 292.242547][T11363] warn_alloc.cold+0x94/0xa8 [ 292.242559][T11363] ? __pfx_warn_alloc+0x10/0x10 [ 292.242586][T11363] ? kvm_sched_clock_read+0x11/0x20 [ 292.242603][T11363] ? __css_rstat_updated+0x1ce/0x5a0 [ 292.242630][T11363] ? __pfx___css_rstat_updated+0x10/0x10 [ 292.242653][T11363] __vmalloc_node_range_noprof+0x136c/0x1630 [ 292.242673][T11363] ? pick_eevdf+0x198/0x860 [ 292.242691][T11363] ? do_replace+0x1c6/0x490 [ 292.242743][T11363] ? __lock_acquire+0x49f/0x1a40 [ 292.242754][T11363] ? pick_task_fair+0xe6/0x1bf0 [ 292.242768][T11363] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 292.242788][T11363] ? __lock_acquire+0x49f/0x1a40 [ 292.242798][T11363] ? __lock_acquire+0x49f/0x1a40 [ 292.242808][T11363] ? find_held_lock+0x2b/0x80 [ 292.242824][T11363] ? do_replace+0x1c6/0x490 [ 292.242838][T11363] __vmalloc_node_noprof+0xad/0xf0 [ 292.242855][T11363] ? do_replace+0x1c6/0x490 [ 292.242871][T11363] __vmalloc_noprof+0xa3/0x120 [ 292.242888][T11363] ? __pfx___vmalloc_noprof+0x10/0x10 [ 292.242909][T11363] do_replace+0x1c6/0x490 [ 292.242923][T11363] ? __pfx_do_replace+0x10/0x10 [ 292.242945][T11363] compat_do_replace+0x589/0x7a0 [ 292.242960][T11363] ? __pfx_compat_do_replace+0x10/0x10 [ 292.242982][T11363] ? bpf_lsm_capable+0x9/0x10 [ 292.242995][T11363] ? security_capable+0x80/0x260 [ 292.243024][T11363] do_ebt_set_ctl+0x3f4/0x4a0 [ 292.243039][T11363] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 292.243056][T11363] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 292.243097][T11363] ? futex_wake+0x4ea/0x5e0 [ 292.243115][T11363] ? nf_sockopt_find.isra.0+0x222/0x290 [ 292.243140][T11363] nf_setsockopt+0x8d/0xf0 [ 292.243156][T11363] ip_setsockopt+0xcb/0xf0 [ 292.243174][T11363] tcp_setsockopt+0xa7/0x100 [ 292.243190][T11363] smc_setsockopt+0x1b6/0xa40 [ 292.243209][T11363] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 292.243234][T11363] ? __pfx_smc_setsockopt+0x10/0x10 [ 292.243248][T11363] ? aa_sock_opt_perm+0xfe/0x1b0 [ 292.243268][T11363] ? __pfx_smc_setsockopt+0x10/0x10 [ 292.243283][T11363] do_sock_setsockopt+0xf3/0x1d0 [ 292.243304][T11363] __sys_setsockopt+0x119/0x190 [ 292.243323][T11363] __ia32_sys_setsockopt+0xbc/0x160 [ 292.243338][T11363] ? __do_fast_syscall_32+0x98/0x970 [ 292.243355][T11363] ? lockdep_hardirqs_on+0x78/0x100 [ 292.243370][T11363] __do_fast_syscall_32+0xe7/0x970 [ 292.243387][T11363] do_fast_syscall_32+0x32/0x70 [ 292.243403][T11363] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 292.243418][T11363] RIP: 0023:0xf7fe8fec [ 292.243433][T11363] Code: Unable to access opcode bytes at 0xf7fe8fc2. [ 292.243438][T11363] RSP: 002b:00000000f504150c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 292.243449][T11363] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000000000000 [ 292.243456][T11363] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108 [ 292.243462][T11363] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 292.243468][T11363] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 292.243474][T11363] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 292.243487][T11363] [ 292.243600][T11363] Mem-Info: [ 292.353953][T11363] active_anon:3524 inactive_anon:4392 isolated_anon:0 [ 292.353953][T11363] active_file:19556 inactive_file:33096 isolated_file:0 [ 292.353953][T11363] unevictable:1000 dirty:601 writeback:0 [ 292.353953][T11363] slab_reclaimable:6769 slab_unreclaimable:58194 [ 292.353953][T11363] mapped:28258 shmem:1487 pagetables:1756 [ 292.353953][T11363] sec_pagetables:306 bounce:0 [ 292.353953][T11363] kernel_misc_reclaimable:0 [ 292.353953][T11363] free:29332 free_pcp:14924 free_cma:0 [ 292.391562][T11363] Node 0 active_anon:200kB inactive_anon:224kB active_file:232kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:8kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9664kB pagetables:2152kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 292.403011][T11363] Node 1 active_anon:13896kB inactive_anon:17476kB active_file:77992kB inactive_file:132384kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:116912kB dirty:2524kB writeback:0kB shmem:5952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5776kB pagetables:4888kB sec_pagetables:112kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 292.414081][T11363] Node 0 DMA free:2656kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:40kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 292.423616][T11363] lowmem_reserve[]: 0 280 280 280 280 [ 292.425558][T11363] Node 0 DMA32 free:15964kB boost:0kB min:12776kB low:15968kB high:19160kB reserved_highatomic:0KB free_highatomic:0KB active_anon:176kB inactive_anon:184kB active_file:232kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:4kB present:1032196kB managed:287068kB mlocked:0kB bounce:0kB free_pcp:11420kB local_pcp:2432kB free_cma:0kB [ 292.435370][T11363] lowmem_reserve[]: 0 0 0 0 0 [ 292.437060][T11363] Node 1 DMA32 free:100676kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13896kB inactive_anon:17476kB active_file:77992kB inactive_file:132384kB unevictable:4000kB writepending:2524kB zspages:2680kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:45992kB local_pcp:10204kB free_cma:0kB [ 292.451686][T11363] lowmem_reserve[]: 0 0 0 0 0 [ 292.453709][T11363] Node 0 DMA: 90*4kB (U) 21*8kB (U) 13*16kB (U) 10*32kB (U) 1*64kB (U) 2*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 2656kB [ 292.458715][T11363] Node 0 DMA32: 391*4kB (U) 170*8kB (UE) 41*16kB (UE) 67*32kB (UME) 42*64kB (UME) 19*128kB (ME) 6*256kB (UME) 1*512kB (U) 3*1024kB (UM) 0*2048kB 0*4096kB = 15964kB [ 292.464581][T11363] Node 1 DMA32: 191*4kB (UME) 104*8kB (M) 215*16kB (M) 19*32kB (UME) 161*64kB (UM) 82*128kB (UME) 34*256kB (UME) 24*512kB (UME) 22*1024kB (UME) 11*2048kB (UM) 2*4096kB (U) = 100684kB [ 292.470600][T11363] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.473799][T11363] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 292.476874][T11363] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.479959][T11363] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=1 hugepages_size=2048kB [ 292.483341][T11363] 55400 total pagecache pages [ 292.484889][T11363] 1235 pages in swap cache [ 292.486215][T11363] Free swap = 114336kB [ 292.487508][T11363] Total swap = 124996kB [ 292.488937][T11363] 524155 pages RAM [ 292.490592][T11363] 0 pages HighMem/MovableOnly [ 292.492190][T11363] 211495 pages reserved [ 292.493733][T11363] 0 pages cma reserved [ 292.654230][T11369] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 292.915159][T11373] netlink: 'syz.8.1381': attribute type 10 has an invalid length. [ 293.158607][T11380] dvmrp1: entered allmulticast mode [ 293.572883][T11387] siw: device registration error -23 [ 293.610673][ T1355] usb 52-1: device descriptor read/8, error -110 [ 293.748626][T11397] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1388'. [ 293.897813][T11400] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1390'. [ 293.930955][T11398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1389'. [ 294.020618][ T1355] usb usb52-port1: attempt power cycle [ 294.155987][T11416] lo speed is unknown, defaulting to 1000 [ 294.200900][T11412] tipc: Enabled bearer , priority 0 [ 294.255411][T11411] tipc: Disabling bearer [ 294.495738][T11435] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1397'. [ 294.535506][T11437] lo speed is unknown, defaulting to 1000 [ 294.577781][T11438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.585826][T11438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.620794][ T1355] usb usb52-port1: unable to enumerate USB device [ 295.173079][T11450] lo speed is unknown, defaulting to 1000 [ 295.227881][T11450] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 295.338171][T11458] tipc: Enabled bearer , priority 0 [ 295.360107][T11457] tipc: Disabling bearer [ 295.547837][T11463] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1407'. [ 295.581117][T11468] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1409'. [ 295.609677][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1408'. [ 295.911655][T11475] lo speed is unknown, defaulting to 1000 [ 295.980466][T11475] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 296.061192][T11481] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 296.254089][T11483] tipc: Enabled bearer , priority 0 [ 296.286777][T11482] tipc: Disabling bearer [ 296.508942][T11495] fuse: Bad value for 'fd' [ 297.028472][T11507] 9p: Bad value for 'wfdno' [ 297.245912][T11510] lo speed is unknown, defaulting to 1000 [ 297.277939][ T42] kauditd_printk_skb: 72 callbacks suppressed [ 297.277956][ T42] audit: type=1800 audit(1786603900.381:166): pid=11513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1421" name="addr_traddr" dev="configfs" ino=35735 res=0 errno=0 [ 297.287731][T11513] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 297.493375][T11520] tipc: Enabling of bearer rejected, failed to enable media [ 297.586067][T11529] netlink: 'syz.8.1427': attribute type 10 has an invalid length. [ 297.783573][T11537] netlink: 'syz.4.1430': attribute type 3 has an invalid length. [ 297.786315][T11537] netlink: 'syz.4.1430': attribute type 1 has an invalid length. [ 297.788949][T11537] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1430'. [ 297.794775][T11537] tipc: Enabled bearer , priority 0 [ 297.798776][T11537] tipc: Resetting bearer [ 297.805507][T11536] tipc: Disabling bearer [ 297.875244][T11543] lo speed is unknown, defaulting to 1000 [ 298.000849][ T42] audit: type=1804 audit(1786603901.101:167): pid=11545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1433" name="/newroot/317/file0/file0" dev="9p" ino=78395305 res=1 errno=0 [ 298.028745][T11549] syzkaller0: entered promiscuous mode [ 298.030542][T11549] syzkaller0: entered allmulticast mode [ 298.039394][T11549] tipc: Enabled bearer , priority 0 [ 298.046021][T11548] tipc: Resetting bearer [ 298.071961][T11548] tipc: Disabling bearer [ 298.601673][T11570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1441'. [ 298.676659][T11573] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1441'. [ 298.680180][T11573] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 299.435257][T11588] tipc: Enabling of bearer rejected, failed to enable media [ 299.502507][T11594] syzkaller0: entered promiscuous mode [ 299.504340][T11594] syzkaller0: entered allmulticast mode [ 299.574775][T11597] siw: device registration error -23 [ 299.719617][T11600] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1449'. [ 299.796594][T11603] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 299.801340][T11603] CPU: 3 UID: 0 PID: 11603 Comm: syz.4.1450 Tainted: G L syzkaller #0 PREEMPT(full) [ 299.801361][T11603] Tainted: [L]=SOFTLOCKUP [ 299.801366][T11603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 299.801373][T11603] Call Trace: [ 299.801378][T11603] [ 299.801383][T11603] dump_stack_lvl+0x100/0x190 [ 299.801402][T11603] sysfs_warn_dup.cold+0x1c/0x28 [ 299.801421][T11603] sysfs_create_dir_ns+0x24b/0x2b0 [ 299.801470][T11603] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 299.801487][T11603] ? find_held_lock+0x2b/0x80 [ 299.801504][T11603] ? kobject_add_internal+0x25f/0x930 [ 299.801524][T11603] ? kobject_add_internal+0x25f/0x930 [ 299.801537][T11603] ? class_dir_child_ns_type+0xd/0x60 [ 299.801583][T11603] kobject_add_internal+0x2c8/0x930 [ 299.801600][T11603] kobject_add+0x16a/0x1e0 [ 299.801613][T11603] ? __pfx_kobject_add+0x10/0x10 [ 299.801627][T11603] ? get_device_parent+0x1b3/0x4c0 [ 299.801647][T11603] ? kobject_put+0xb9/0x640 [ 299.801664][T11603] device_add+0x294/0x1970 [ 299.801676][T11603] ? lockdep_init_map_type+0x5c/0x250 [ 299.801689][T11603] ? __pfx_device_add+0x10/0x10 [ 299.801698][T11603] ? lockdep_init_map_type+0x5c/0x250 [ 299.801709][T11603] ? __init_waitqueue_head+0xca/0x150 [ 299.801725][T11603] tty_register_device_attr+0x388/0x7f0 [ 299.801754][T11603] ? lockdep_init_map_type+0x5c/0x250 [ 299.801767][T11603] ? __pfx_tty_register_device_attr+0x10/0x10 [ 299.801788][T11603] ? tty_port_init+0x156/0x1c0 [ 299.801813][T11603] gsm_activate_mux+0x155/0x2a0 [ 299.801832][T11603] gsmld_ioctl+0xbbc/0x15c0 [ 299.801848][T11603] ? __pfx_gsmld_ioctl+0x10/0x10 [ 299.801876][T11603] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 299.801896][T11603] ? __pfx_gsmld_ioctl+0x10/0x10 [ 299.801905][T11603] tty_compat_ioctl+0x396/0x420 [ 299.801920][T11603] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 299.801935][T11603] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 299.801953][T11603] __do_fast_syscall_32+0xe7/0x970 [ 299.801973][T11603] do_fast_syscall_32+0x32/0x70 [ 299.801991][T11603] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 299.802005][T11603] RIP: 0023:0xf7fe8fec [ 299.802020][T11603] Code: Unable to access opcode bytes at 0xf7fe8fc2. [ 299.802025][T11603] RSP: 002b:00000000f548550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 299.802036][T11603] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000404c4701 [ 299.802043][T11603] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 299.802050][T11603] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 299.802055][T11603] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 299.802062][T11603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 299.802075][T11603] [ 299.802116][T11603] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 299.952259][ T5735] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 300.057089][ T42] audit: type=1326 audit(1786603903.161:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11617 comm="syz.7.1455" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 300.063803][ T42] audit: type=1326 audit(1786603903.161:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11617 comm="syz.7.1455" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 300.072366][ T42] audit: type=1326 audit(1786603903.161:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11617 comm="syz.7.1455" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 300.079741][ T42] audit: type=1326 audit(1786603903.161:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11617 comm="syz.7.1455" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 300.086684][ T42] audit: type=1326 audit(1786603903.161:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11617 comm="syz.7.1455" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709efec code=0x7ffc0000 [ 300.094294][ T42] audit: type=1326 audit(1786603903.161:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11617 comm="syz.7.1455" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 300.101396][ T42] audit: type=1326 audit(1786603903.161:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11617 comm="syz.7.1455" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 300.108260][ T42] audit: type=1326 audit(1786603903.161:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11617 comm="syz.7.1455" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709efec code=0x7ffc0000 [ 300.146627][T11623] syzkaller0: entered promiscuous mode [ 300.148870][T11623] syzkaller0: entered allmulticast mode [ 300.155584][T11623] tipc: Enabled bearer , priority 0 [ 300.159717][T11622] tipc: Resetting bearer [ 300.185514][T11622] tipc: Disabling bearer [ 300.262768][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1458'. [ 300.266601][T11625] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1458'. [ 300.269619][T11625] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 300.318137][T11629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.730576][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1463'. [ 300.840699][T11640] overlayfs: failed to clone upperpath [ 301.127659][T11649] tipc: Enabling of bearer rejected, failed to enable media [ 301.185586][T11662] siw: device registration error -23 [ 301.283954][T11672] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1472'. [ 301.308045][T11675] netlink: 'syz.3.1473': attribute type 2 has an invalid length. [ 301.311766][T11675] netlink: 'syz.3.1473': attribute type 7 has an invalid length. [ 301.338119][T11675] Uý: entered promiscuous mode [ 301.642094][T11688] syzkaller0: entered promiscuous mode [ 301.643922][T11688] syzkaller0: entered allmulticast mode [ 301.650897][T11688] tipc: Enabled bearer , priority 0 [ 301.654545][T11687] tipc: Resetting bearer [ 301.669628][T11687] tipc: Disabling bearer [ 301.955847][T11691] syzkaller0: entered promiscuous mode [ 301.958029][T11691] syzkaller0: entered allmulticast mode [ 302.100469][T11693] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1479'. [ 302.103587][T11693] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1479'. [ 302.116325][T11693] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(11) [ 302.118875][T11693] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 302.121868][T11693] vhci_hcd vhci_hcd.0: Device attached [ 302.128299][T11696] vhci_hcd: connection closed [ 302.128548][ T5587] vhci_hcd vhci_hcd.7: stop threads [ 302.132963][ T5587] vhci_hcd vhci_hcd.7: release socket [ 302.135138][ T5587] vhci_hcd vhci_hcd.7: disconnect device [ 302.856314][T11720] FAULT_INJECTION: forcing a failure. [ 302.856314][T11720] name failslab, interval 1, probability 0, space 0, times 0 [ 302.860377][T11720] CPU: 3 UID: 0 PID: 11720 Comm: syz.4.1488 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.860395][T11720] Tainted: [L]=SOFTLOCKUP [ 302.860399][T11720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 302.860406][T11720] Call Trace: [ 302.860411][T11720] [ 302.860415][T11720] dump_stack_lvl+0x100/0x190 [ 302.860434][T11720] should_fail_ex.cold+0x5/0xa [ 302.860448][T11720] should_failslab+0xc2/0x120 [ 302.860464][T11720] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 302.860478][T11720] ? __alloc_skb+0x5b7/0x710 [ 302.860493][T11720] ? __alloc_skb+0x140/0x710 [ 302.860509][T11720] __alloc_skb+0x140/0x710 [ 302.860522][T11720] ? __alloc_skb+0x5b7/0x710 [ 302.860535][T11720] ? __pfx___alloc_skb+0x10/0x10 [ 302.860553][T11720] netlink_alloc_large_skb+0x69/0x150 [ 302.860584][T11720] netlink_sendmsg+0x680/0xda0 [ 302.860598][T11720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.860612][T11720] ? apparmor_socket_sendmsg+0x15b/0x270 [ 302.860627][T11720] ____sys_sendmsg+0xa4d/0xbe0 [ 302.860638][T11720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.860651][T11720] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.860668][T11720] ___sys_sendmsg+0x190/0x1e0 [ 302.860682][T11720] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.860700][T11720] ? find_held_lock+0x2b/0x80 [ 302.860722][T11720] __sys_sendmsg+0x160/0x210 [ 302.860739][T11720] ? __pfx___sys_sendmsg+0x10/0x10 [ 302.860758][T11720] ? __pfx_ksys_write+0x10/0x10 [ 302.860772][T11720] __do_fast_syscall_32+0xe7/0x970 [ 302.860789][T11720] ? lockdep_hardirqs_on+0x78/0x100 [ 302.860805][T11720] do_fast_syscall_32+0x32/0x70 [ 302.860821][T11720] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 302.860836][T11720] RIP: 0023:0xf7fe8fec [ 302.860852][T11720] Code: Unable to access opcode bytes at 0xf7fe8fc2. [ 302.860858][T11720] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 302.860868][T11720] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 302.860875][T11720] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 302.860882][T11720] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 302.860888][T11720] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 302.860894][T11720] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 302.860907][T11720] [ 303.066894][T11729] lo speed is unknown, defaulting to 1000 [ 303.101907][ T42] kauditd_printk_skb: 123 callbacks suppressed [ 303.101922][ T42] audit: type=1800 audit(1786603906.211:299): pid=11732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1491" name="addr_traddr" dev="configfs" ino=34769 res=0 errno=0 [ 303.102131][T11732] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 303.180754][T11735] netlink: 'syz.8.1493': attribute type 2 has an invalid length. [ 303.183703][T11735] netlink: 'syz.8.1493': attribute type 7 has an invalid length. [ 303.197469][T11735] Uý: entered promiscuous mode [ 303.210665][T11728] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1490'. [ 303.231280][T11728] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 303.233693][T11728] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 303.240467][T11728] vhci_hcd vhci_hcd.0: Device attached [ 303.245160][T11739] vhci_hcd: connection closed [ 303.245341][ T5811] vhci_hcd vhci_hcd.7: stop threads [ 303.249205][ T5811] vhci_hcd vhci_hcd.7: release socket [ 303.258755][ T5811] vhci_hcd vhci_hcd.7: disconnect device [ 303.785662][T11749] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1496'. [ 303.907915][T11755] siw: device registration error -23 [ 304.042583][T11749] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 304.049226][T11749] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 304.051959][T11749] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 304.060141][T11749] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 304.067704][T11749] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 304.070413][T11749] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 304.073399][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1499'. [ 304.209208][T11749] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 304.247880][T11767] tipc: Enabled bearer , priority 0 [ 304.274562][T11766] tipc: Disabling bearer [ 304.425578][T11774] FAULT_INJECTION: forcing a failure. [ 304.425578][T11774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.432080][T11774] CPU: 0 UID: 0 PID: 11774 Comm: syz.7.1506 Tainted: G L syzkaller #0 PREEMPT(full) [ 304.432112][T11774] Tainted: [L]=SOFTLOCKUP [ 304.432120][T11774] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 304.432133][T11774] Call Trace: [ 304.432141][T11774] [ 304.432149][T11774] dump_stack_lvl+0x100/0x190 [ 304.432179][T11774] should_fail_ex.cold+0x5/0xa [ 304.432203][T11774] _copy_from_user+0x2e/0xd0 [ 304.432278][T11774] move_addr_to_kernel+0x65/0x170 [ 304.432303][T11774] __sys_sendto+0x1b8/0x4e0 [ 304.432330][T11774] ? __pfx___sys_sendto+0x10/0x10 [ 304.432374][T11774] ? fput+0x79/0x100 [ 304.432399][T11774] ? ksys_write+0x1ac/0x250 [ 304.432420][T11774] __ia32_sys_sendto+0xdd/0x1b0 [ 304.432445][T11774] ? __do_fast_syscall_32+0x98/0x970 [ 304.432474][T11774] ? lockdep_hardirqs_on+0x78/0x100 [ 304.432499][T11774] __do_fast_syscall_32+0xe7/0x970 [ 304.432526][T11774] ? lockdep_hardirqs_on+0x78/0x100 [ 304.432554][T11774] do_fast_syscall_32+0x32/0x70 [ 304.432580][T11774] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 304.432604][T11774] RIP: 0023:0xf709efec [ 304.432626][T11774] Code: Unable to access opcode bytes at 0xf709efc2. [ 304.432634][T11774] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 304.432651][T11774] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800005c0 [ 304.432662][T11774] RDX: 0000000000000002 RSI: 0000000004008818 RDI: 0000000080000600 [ 304.432671][T11774] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 304.432681][T11774] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 304.432691][T11774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 304.432714][T11774] [ 304.523227][T11776] dvmrp0: entered allmulticast mode [ 304.546524][T11769] batadv_slave_0: entered promiscuous mode [ 304.548761][T11769] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1503'. [ 304.551973][T11769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.593854][T11769] batadv_slave_0 (unregistering): left promiscuous mode [ 304.596520][T11769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.611562][T11780] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 304.614266][T11780] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 304.619707][T11780] vhci_hcd vhci_hcd.0: Device attached [ 304.645081][T11785] siw: device registration error -23 [ 304.821547][ T1355] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 304.901446][ T1355] usb 45-1: new full-speed USB device number 3 using vhci_hcd [ 305.144494][T11781] vhci_hcd: connection reset by peer [ 305.147610][ T13] vhci_hcd vhci_hcd.4: stop threads [ 305.157614][ T13] vhci_hcd vhci_hcd.4: release socket [ 305.159704][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 305.435155][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1512'. [ 305.437371][T11793] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 305.745337][T11815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1517'. [ 305.754387][T11815] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1517'. [ 305.758097][T11815] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1517'. [ 305.818762][T11822] netlink: 'syz.8.1516': attribute type 62 has an invalid length. [ 305.882290][T11831] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 305.919369][T11833] sch_tbf: burst 4398 is lower than device lo mtu (32783) ! [ 306.080313][ T5735] Bluetooth: hci1: command 0x0c1a tx timeout [ 306.080781][ T5740] Bluetooth: hci3: command 0x0405 tx timeout [ 306.084961][ T5743] Bluetooth: hci2: command 0x0c1a tx timeout [ 306.289875][T11795] ceph: No mds server is up or the cluster is laggy [ 306.619606][T11840] siw: device registration error -23 [ 307.536612][T11849] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1526'. [ 307.589694][T11853] syzkaller0: entered promiscuous mode [ 307.591680][T11853] syzkaller0: entered allmulticast mode [ 307.933433][ T42] audit: type=1326 audit(1786603911.041:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11855 comm="syz.4.1529" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe8fec code=0x0 [ 307.983808][T11861] loop8: detected capacity change from 0 to 7 [ 308.005310][T11861] Dev loop8: unable to read RDB block 7 [ 308.009063][T11865] siw: device registration error -23 [ 308.019155][T11861] loop8: unable to read partition table [ 308.026930][T11861] loop8: partition table beyond EOD, truncated [ 308.034480][T11861] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 308.090111][T11869] netlink: 'syz.8.1534': attribute type 4 has an invalid length. [ 308.093866][T11869] netlink: 17 bytes leftover after parsing attributes in process `syz.8.1534'. [ 308.162508][ T5743] Bluetooth: hci2: command 0x0c1a tx timeout [ 308.162531][ T5740] Bluetooth: hci3: command 0x0405 tx timeout [ 308.193144][T11876] siw: device registration error -23 [ 308.392515][T11879] netlink: 'syz.7.1533': attribute type 23 has an invalid length. [ 308.509529][T11888] lo speed is unknown, defaulting to 1000 [ 309.005470][T11902] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 309.163143][T11910] siw: device registration error -23 [ 310.037827][ T1355] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 310.180838][ T5743] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 310.243416][ T5743] Bluetooth: hci3: command 0x0405 tx timeout [ 310.251219][ T5743] Bluetooth: hci2: command 0x0c1a tx timeout [ 310.456931][T11939] xt_bpf: check failed: parse error [ 310.860735][T11944] Console: switching to colour dummy device 80x25 [ 311.028128][T11942] 9p: Could not find request transport: fdÿÿ [ 311.257192][T11946] syzkaller0: entered promiscuous mode [ 311.259583][T11946] syzkaller0: entered allmulticast mode [ 311.267715][T11946] tipc: Enabled bearer , priority 0 [ 311.274387][T11945] tipc: Resetting bearer [ 311.299228][T11945] tipc: Disabling bearer [ 311.492687][ T42] audit: type=1800 audit(1786603914.601:301): pid=11955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1560" name="zoned" dev="configfs" ino=38125 res=0 errno=0 [ 311.502219][ T42] audit: type=1800 audit(1786603914.611:302): pid=11955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1560" name="zone_nr_conv" dev="configfs" ino=38126 res=0 errno=0 [ 311.706064][T11959] ptrace attach of ""[11961] was attempted by "/syz-executor exec"[11959] [ 311.728461][ T42] audit: type=1800 audit(1786603914.831:303): pid=11959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1558" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 311.752475][ T5843] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 311.902645][ T5843] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 311.907550][ T5843] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.915948][ T5843] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.926217][ T5843] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 311.930084][ T5843] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81 [ 311.933636][ T5843] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 1 [ 311.939115][ T5843] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 311.942687][ T5843] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 311.954863][ T5843] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 311.962347][ T5843] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 311.965121][ T5843] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 311.969850][ T5843] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 312.239150][ T5843] usb 9-1: USB disconnect, device number 28 [ 312.260764][ T5843] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 312.286711][ T5843] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 312.295630][ T5843] keyspan 9-1:1.0: device disconnected [ 312.594206][T11968] dvmrp0: entered allmulticast mode [ 313.298835][T11977] lo speed is unknown, defaulting to 1000 [ 313.443355][T11983] syzkaller0: entered promiscuous mode [ 313.445064][T11983] syzkaller0: entered allmulticast mode [ 313.475695][T11983] tipc: Enabled bearer , priority 0 [ 313.483515][T11982] tipc: Resetting bearer [ 313.513090][T11982] tipc: Disabling bearer [ 313.593263][ T42] audit: type=1800 audit(1786603916.701:304): pid=11986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1568" name="zoned" dev="configfs" ino=38139 res=0 errno=0 [ 313.600803][ T42] audit: type=1800 audit(1786603916.711:305): pid=11986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1568" name="zone_nr_conv" dev="configfs" ino=38140 res=0 errno=0 [ 313.608162][ T42] audit: type=1800 audit(1786603916.711:306): pid=11986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1568" name="power" dev="configfs" ino=38141 res=0 errno=0 [ 313.622901][T11986] null_blk: nullb1: using native zone append [ 313.671489][ T42] audit: type=1800 audit(1786603916.771:307): pid=11989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1568" name="zoned" dev="configfs" ino=40105 res=0 errno=0 [ 313.686027][ T42] audit: type=1800 audit(1786603916.781:308): pid=11989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1568" name="power" dev="configfs" ino=40106 res=0 errno=0 [ 313.690506][T11986] null_blk: disk nullb1 created [ 313.698182][T11989] null_blk: nullb2: using native zone append [ 313.736299][T11989] null_blk: disk nullb2 created [ 314.845211][T12013] syzkaller0: entered promiscuous mode [ 314.847433][T12013] syzkaller0: entered allmulticast mode [ 314.855653][T12013] tipc: Enabled bearer , priority 0 [ 314.882408][T12012] tipc: Resetting bearer [ 314.916615][T12012] tipc: Disabling bearer [ 314.925316][T12016] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1577'. [ 314.948192][T12009] bridge_slave_0: left allmulticast mode [ 314.955272][T12009] bridge_slave_0: left promiscuous mode [ 314.960204][T12009] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.991371][T12009] bridge_slave_1: left allmulticast mode [ 314.994212][T12009] bridge_slave_1: left promiscuous mode [ 314.996856][T12009] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.038681][T12009] bond0: (slave bond_slave_0): Releasing backup interface [ 315.043170][T12020] sctp: [Deprecated]: syz.3.1579 (pid 12020) Use of int in maxseg socket option. [ 315.043170][T12020] Use struct sctp_assoc_value instead [ 315.058957][T12009] bond0: (slave bond_slave_1): Releasing backup interface [ 315.066895][T12022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.070973][T12022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.079078][T12009] team0: Port device team_slave_0 removed [ 315.088993][T12009] team0: Port device team_slave_1 removed [ 315.091414][T12009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.093891][T12009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.097244][T12009] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 315.220110][T12011] [ 315.221004][T12011] ====================================================== [ 315.223154][T12011] WARNING: possible circular locking dependency detected [ 315.225378][T12011] syzkaller #0 Tainted: G L [ 315.227321][T12011] ------------------------------------------------------ [ 315.229517][T12011] syz.4.1574/12011 is trying to acquire lock: [ 315.231418][T12011] ffffffff901cc728 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvc_func_allow_link+0x76/0x3f0 [ 315.234558][T12011] [ 315.234558][T12011] but task is already holding lock: [ 315.236897][T12011] ffff888013aaac00 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 315.240171][T12011] [ 315.240171][T12011] which lock already depends on the new lock. [ 315.240171][T12011] [ 315.243322][T12011] [ 315.243322][T12011] the existing dependency chain (in reverse order) is: [ 315.246066][T12011] [ 315.246066][T12011] -> #2 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 315.248798][T12011] lock_acquire+0x1b9/0x370 [ 315.250398][T12011] down_write+0x8b/0x1f0 [ 315.251947][T12011] configfs_depend_item_unlocked+0xf3/0x6a0 [ 315.253971][T12011] usbg_make_tpg+0x261/0x620 [ 315.255600][T12011] target_fabric_make_tpg+0xab/0x8c0 [ 315.257476][T12011] configfs_mkdir+0x51e/0xb70 [ 315.259139][T12011] vfs_mkdir+0x361/0x850 [ 315.260683][T12011] filename_mkdirat+0x48b/0x5e0 [ 315.262391][T12011] __ia32_sys_mkdirat+0x88/0xc0 [ 315.264085][T12011] __do_fast_syscall_32+0xe7/0x970 [ 315.265899][T12011] do_fast_syscall_32+0x32/0x70 [ 315.267592][T12011] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 315.269736][T12011] [ 315.269736][T12011] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 315.272147][T12011] lock_acquire+0x1b9/0x370 [ 315.273755][T12011] __mutex_lock+0x1a4/0x1bd0 [ 315.275388][T12011] tcm_set_name+0x29/0xb0 [ 315.276929][T12011] function_make+0x21c/0x3f0 [ 315.278532][T12011] configfs_mkdir+0x51e/0xb70 [ 315.280126][T12011] vfs_mkdir+0x361/0x850 [ 315.281603][T12011] filename_mkdirat+0x48b/0x5e0 [ 315.283297][T12011] __ia32_sys_mkdirat+0x88/0xc0 [ 315.285018][T12011] __do_fast_syscall_32+0xe7/0x970 [ 315.286811][T12011] do_fast_syscall_32+0x32/0x70 [ 315.288442][T12011] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 315.290565][T12011] [ 315.290565][T12011] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 315.293097][T12011] check_prev_add+0xeb/0xe60 [ 315.294692][T12011] __lock_acquire+0x136c/0x1a40 [ 315.296406][T12011] lock_acquire+0x1b9/0x370 [ 315.297979][T12011] __mutex_lock+0x1a4/0x1bd0 [ 315.299568][T12011] uvc_func_allow_link+0x76/0x3f0 [ 315.301327][T12011] configfs_symlink+0x540/0x11f0 [ 315.303022][T12011] vfs_symlink+0x178/0x4d0 [ 315.304616][T12011] filename_symlinkat+0x2a6/0x560 [ 315.306361][T12011] __ia32_sys_symlink+0x78/0xb0 [ 315.308049][T12011] __do_fast_syscall_32+0xe7/0x970 [ 315.309839][T12011] do_fast_syscall_32+0x32/0x70 [ 315.311519][T12011] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 315.313654][T12011] [ 315.313654][T12011] other info that might help us debug this: [ 315.313654][T12011] [ 315.316771][T12011] Chain exists of: [ 315.316771][T12011] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#24 [ 315.316771][T12011] [ 315.321217][T12011] Possible unsafe locking scenario: [ 315.321217][T12011] [ 315.323479][T12011] CPU0 CPU1 [ 315.325114][T12011] ---- ---- [ 315.326778][T12011] lock(&sb->s_type->i_mutex_key#24); [ 315.328444][T12011] lock(&opts->dep_lock); [ 315.330488][T12011] lock(&sb->s_type->i_mutex_key#24); [ 315.332928][T12011] lock(gadget_subsys.su_mutex); [ 315.334515][T12011] [ 315.334515][T12011] *** DEADLOCK *** [ 315.334515][T12011] [ 315.337206][T12011] 2 locks held by syz.4.1574/12011: [ 315.338856][T12011] #0: ffff888022160450 (sb_writers#12){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 315.341711][T12011] #1: ffff888013aaac00 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 315.345080][T12011] [ 315.345080][T12011] stack backtrace: [ 315.346920][T12011] CPU: 2 UID: 0 PID: 12011 Comm: syz.4.1574 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.346937][T12011] Tainted: [L]=SOFTLOCKUP [ 315.346941][T12011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 315.346949][T12011] Call Trace: [ 315.346956][T12011] [ 315.346962][T12011] dump_stack_lvl+0x100/0x190 [ 315.346977][T12011] print_circular_bug.cold+0x178/0x1c7 [ 315.346995][T12011] check_noncircular+0x146/0x160 [ 315.347016][T12011] check_prev_add+0xeb/0xe60 [ 315.347034][T12011] ? stack_depot_save_flags+0x27/0x9d0 [ 315.347053][T12011] __lock_acquire+0x136c/0x1a40 [ 315.347064][T12011] ? vfs_symlink+0x178/0x4d0 [ 315.347079][T12011] lock_acquire+0x1b9/0x370 [ 315.347088][T12011] ? uvc_func_allow_link+0x76/0x3f0 [ 315.347104][T12011] ? __pfx___might_resched+0x10/0x10 [ 315.347123][T12011] __mutex_lock+0x1a4/0x1bd0 [ 315.347140][T12011] ? uvc_func_allow_link+0x76/0x3f0 [ 315.347154][T12011] ? uvc_func_allow_link+0x76/0x3f0 [ 315.347168][T12011] ? __lock_acquire+0x49f/0x1a40 [ 315.347178][T12011] ? __pfx___mutex_lock+0x10/0x10 [ 315.347194][T12011] ? make_vfsuid+0xec/0x140 [ 315.347225][T12011] ? generic_permission+0xae/0x800 [ 315.347242][T12011] ? uvc_func_allow_link+0x76/0x3f0 [ 315.347257][T12011] uvc_func_allow_link+0x76/0x3f0 [ 315.347273][T12011] ? mntput_no_expire+0xe7/0x220 [ 315.347293][T12011] configfs_symlink+0x540/0x11f0 [ 315.347312][T12011] ? bpf_lsm_inode_permission+0x9/0x10 [ 315.347329][T12011] ? security_inode_permission+0xbf/0x250 [ 315.347344][T12011] ? __pfx_configfs_symlink+0x10/0x10 [ 315.347359][T12011] vfs_symlink+0x178/0x4d0 [ 315.347375][T12011] filename_symlinkat+0x2a6/0x560 [ 315.347388][T12011] ? __pfx_filename_symlinkat+0x10/0x10 [ 315.347401][T12011] ? strncpy_from_user+0x19d/0x2d0 [ 315.347418][T12011] ? do_getname+0x191/0x390 [ 315.347435][T12011] __ia32_sys_symlink+0x78/0xb0 [ 315.347448][T12011] __do_fast_syscall_32+0xe7/0x970 [ 315.347471][T12011] do_fast_syscall_32+0x32/0x70 [ 315.347487][T12011] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 315.347502][T12011] RIP: 0023:0xf7fe8fec [ 315.347520][T12011] Code: Unable to access opcode bytes at 0xf7fe8fc2. [ 315.347526][T12011] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000053 [ 315.347537][T12011] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 00000000800001c0 [ 315.347544][T12011] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 315.347551][T12011] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 315.347557][T12011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.347563][T12011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 315.347574][T12011] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 315.808118][T10488] syz_tun (unregistering): left allmulticast mode [ 315.927338][T11471] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.005900][T11471] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.021738][T10488] raw-gadget.1 gadget.7: failed to queue disconnect event [ 316.125291][T11471] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.183856][T11471] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.301746][T11471] dvmrp0: left allmulticast mode [ 316.327199][T11471] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 316.329687][T11471] ip6gre1 (unregistering): left promiscuous mode [ 316.375327][T11471] bond0 (unregistering): Released all slaves [ 316.377633][ T48] smbdirect: ib_dev[syz1] removed [ 316.378504][T11471] bond1 (unregistering): Released all slaves [ 316.385802][T11471] bond2 (unregistering): Released all slaves [ 316.390985][T11471] bond3 (unregistering): Released all slaves [ 316.394940][T11471] bond4 (unregistering): Released all slaves [ 316.466056][T11471] Uý: left promiscuous mode [ 316.513530][ T5446] 8021q: adding VLAN 0 to HW filter on device eth22 [ 316.541671][T11471] tipc: Disabling bearer [ 316.546054][T11471] tipc: Left network mode [ 316.632649][ T5446] 8021q: adding VLAN 0 to HW filter on device eth23 [ 316.731810][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.734354][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.754920][ T5446] 8021q: adding VLAN 0 to HW filter on device eth24 [ 316.784099][T11471] hsr_slave_0: left promiscuous mode [ 316.786415][T11471] hsr_slave_1: left promiscuous mode [ 316.791048][T11471] veth1_macvtap: left promiscuous mode [ 316.793280][T11471] veth0_macvtap: left promiscuous mode [ 316.795438][T11471] veth0_vlan: left promiscuous mode [ 316.957582][ T1355] lo speed is unknown, defaulting to 1000 [ 316.958403][ T5446] 8021q: adding VLAN 0 to HW filter on device eth25 [ 316.958815][ T48] smbdirect: ib_dev[syz2] removed [ 316.959225][ T1355] syz2: Port: 1 Link DOWN