last executing test programs: 9m23.273059662s ago: executing program 32 (id=342): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x40}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mkdir(&(0x7f00000000c0)='./file0\x00', 0x94) 9m17.070535386s ago: executing program 3 (id=372): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x4ff5, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000280), 0x4, r2}, 0x38) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x8000) syz_emit_ethernet(0x9a, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000080", 0x64, 0x11, 0x0, @local, @private2={0xfc, 0x2, '\x00', 0x1}, {[], {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb", "201f3a70a41ef6c2fca06a9bd768d5f1", {"76c19815002000000000000000001000", "9514b06796dbf2ea9e520f1475c8f65b"}}}}}}}}, 0x0) 9m16.605521271s ago: executing program 3 (id=374): openat$mice(0xffffff9c, &(0x7f0000000000), 0x301) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000019140)=ANY=[@ANYBLOB="1201000000000040ac0538024000010203010902240601010000000904000000030102"], 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 9m13.451802828s ago: executing program 3 (id=389): r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() setrlimit(0x0, &(0x7f0000000100)={0xb, 0x3}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) connect$802154_dgram(r0, &(0x7f0000000340)={0x24, @short={0x2, 0x1}}, 0x14) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./myconfig\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./myconfig/usb_gadget/g1/functions/SourceSink.0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/SourceSink.0/pattern\x00', 0x1, 0x0) write(r4, 0x0, 0x0) 9m11.681425571s ago: executing program 3 (id=398): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)={0x28, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0xc, 0x145, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @fd=r1}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}, 0x28}}, 0x2004c000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x2d, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m11.593766291s ago: executing program 3 (id=400): r0 = syz_ublk_setup_io_uring(0x81d, &(0x7f0000000040)={0x0, 0x30b5, 0x100, 0x2, 0x373}, &(0x7f00000005c0)=0x0, &(0x7f0000000280), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x25a3, &(0x7f0000000500)={0x0, 0x68ad, 0x20, 0x3, 0x3d1, 0x0, r0}, &(0x7f0000000580), &(0x7f0000000600)=0x0, &(0x7f0000000640)) syz_ublk_add_dev(r0, r1, r3, r2, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb351, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5e8, 0x0, 0x0}}, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r7, 0x4008af13, &(0x7f0000000280)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20083, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000000}]}) r11 = syz_usb_connect(0x6, 0x371, &(0x7f00000003c0)=ANY=[@ANYRES8, @ANYBLOB="9203134ba1b52ac93590a65f1b64b35c1f97363845f7932e251b658238ee785f4bb2d635d3400b834905da0e506d7a4073e73832f7319b481750e911f6ebe5c8fb75f95fdf9ebb944583d0c7be92c6786e9f41e7917bf6a1ed653f1395e1abb924e48dc2b9d925600a56ed228e31b75096be76b2f1e5534707377f8e5ca0a1cdb9c5f13a0d67ea4d78229e1c04ce3aaa4c0a4041d9", @ANYRESHEX=r4], 0x0) syz_usb_control_io$cdc_ncm(r11, 0x0, 0x0) syz_usb_control_io$uac1(r11, 0x0, 0x0) syz_usb_control_io$uac3(r11, 0x0, 0x0) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r13, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) acct(&(0x7f0000000040)='./file0\x00') openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10) syz_usb_control_io$rtl8150(r11, 0x0, 0x0) write$char_usb(r12, &(0x7f0000006800)="10", 0x20) socket$alg(0x26, 0x5, 0x0) 9m11.391770786s ago: executing program 3 (id=401): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x110b, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire={0x40046305, 0xfffffffc}], 0x0, 0x0, 0x0}) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0x800002) read$dsp(r3, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r4 = dup3(r1, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f00000000c0)=0x4, 0x4) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000100)=[@acquire], 0x0, 0x0, 0x0}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) tee(r6, r6, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0xffffffffffffff4b, 0x0, &(0x7f00000002c0)=[@enter_looper, @decrefs={0x40046307, 0x1}, @acquire_done, @exit_looper, @decrefs={0x40046307, 0x2}, @acquire_done={0x40106309, 0x3}, @request_death={0x400c630e, 0x1}, @clear_death, @request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000000140)={0x0, 0x1, r4}) 9m11.219760936s ago: executing program 33 (id=401): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x110b, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire={0x40046305, 0xfffffffc}], 0x0, 0x0, 0x0}) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0x800002) read$dsp(r3, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r4 = dup3(r1, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) setsockopt$packet_int(r4, 0x107, 0x3, &(0x7f00000000c0)=0x4, 0x4) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000100)=[@acquire], 0x0, 0x0, 0x0}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) tee(r6, r6, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0xffffffffffffff4b, 0x0, &(0x7f00000002c0)=[@enter_looper, @decrefs={0x40046307, 0x1}, @acquire_done, @exit_looper, @decrefs={0x40046307, 0x2}, @acquire_done={0x40106309, 0x3}, @request_death={0x400c630e, 0x1}, @clear_death, @request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000000140)={0x0, 0x1, r4}) 7m48.470725487s ago: executing program 2 (id=867): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000840)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xf7ffff7f}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x108}}], 0x2, 0x0) 7m48.470373777s ago: executing program 2 (id=868): r0 = syz_ublk_setup_io_uring(0x81d, &(0x7f0000000040)={0x0, 0x30b5, 0x100, 0x2, 0x373}, &(0x7f00000005c0)=0x0, &(0x7f0000000280), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x25a3, &(0x7f0000000500)={0x0, 0x68ad, 0x20, 0x3, 0x3d1, 0x0, r0}, &(0x7f0000000580), &(0x7f0000000600)=0x0, &(0x7f0000000640)) syz_ublk_add_dev(r0, r1, r3, r2, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb351, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5e8, 0x0, 0x0}}, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r7, 0x4008af13, &(0x7f0000000280)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20083, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000000}]}) r11 = syz_usb_connect(0x6, 0x371, &(0x7f00000003c0)=ANY=[@ANYRES8, @ANYBLOB="9203134ba1b52ac93590a65f1b64b35c1f97363845f7932e251b658238ee785f4bb2d635d3400b834905da0e506d7a4073e73832f7319b481750e911f6ebe5c8fb75f95fdf9ebb944583d0c7be92c6786e9f41e7917bf6a1ed653f1395e1abb924e48dc2b9d925600a56ed228e31b75096be76b2f1e5534707377f8e5ca0a1cdb9c5f13a0d67ea4d78229e1c04ce3aaa4c0a4041d9", @ANYRESHEX=r4], 0x0) syz_usb_control_io$cdc_ncm(r11, 0x0, 0x0) syz_usb_control_io$uac3(r11, 0x0, 0x0) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r13, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) acct(&(0x7f0000000040)='./file0\x00') openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10) syz_usb_control_io$rtl8150(r11, 0x0, 0x0) write$char_usb(r12, &(0x7f0000006800)="10", 0x20) socket$alg(0x26, 0x5, 0x0) 7m48.121547254s ago: executing program 2 (id=870): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)=ANY=[@ANYBLOB="1400000010000100000000000000000005000009"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x93}}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a7}, 0x94) 7m48.010322003s ago: executing program 2 (id=872): openat$mice(0xffffff9c, &(0x7f0000000000), 0x301) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000019140)=ANY=[@ANYBLOB="1201000000000040ac0538024000010203010902240601010000000904000000030102"], 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@deltfilter={0x34, 0x2d, 0x1, 0x800000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x10}, {0x0, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x80) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 7m47.081677788s ago: executing program 2 (id=877): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a400000005150200090000009500000000000000d4d17590efe892610d44dd6125be744354254abcca2d557eee7099e823d22e9f7726edbe7216d858d06ee1153b17e3f6be7ec30d0c1cdcd8b24e49fe8274ad83a740b2b6397e4f5d3d941ed9b2f94c8fb91c32e2e7b87444"], &(0x7f0000000180)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x73}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f00000000c0)='./file1\x00', 0x50bf00, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x40, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x4000, 0x0) mkdirat(r1, &(0x7f00000002c0)='./file1\x00', 0x42) mount$bind(&(0x7f0000000540)='./file1\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x5040, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2075, 0x101341) ioctl$USBDEVFS_SUBMITURB(r2, 0x802c550a, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$inet6(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r3, &(0x7f0000001f40), 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x110, 0xffffffffffffffff, 0x1c13c000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 7m46.851168108s ago: executing program 2 (id=879): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800000, 0x13, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000840)="c109000000000000001d1e020ed56ec7", 0x10}], 0x1}, 0x20040000) recvfrom(0xffffffffffffffff, &(0x7f0000000080)=""/150, 0x96, 0x40, &(0x7f0000000140)=@in={0x2, 0x4e22, @multicast1}, 0x80) syz_usbip_server_init(0x1) 7m31.756640503s ago: executing program 34 (id=879): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800000, 0x13, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000840)="c109000000000000001d1e020ed56ec7", 0x10}], 0x1}, 0x20040000) recvfrom(0xffffffffffffffff, &(0x7f0000000080)=""/150, 0x96, 0x40, &(0x7f0000000140)=@in={0x2, 0x4e22, @multicast1}, 0x80) syz_usbip_server_init(0x1) 7m25.941258685s ago: executing program 4 (id=950): syz_open_procfs(0x0, &(0x7f0000000180)='net/nf_conntrack_expect\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000100)='\x00') 7m25.871184076s ago: executing program 4 (id=951): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file1\x00', 0x0, 0x3090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) openat2$dir(0xffffff9c, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x404100, 0x1c6, 0x10}, 0x18) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg2\x00'}) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r1, &(0x7f0000001900)='3', 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x105895, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r2, 0x5, 0x1) 7m25.775972503s ago: executing program 4 (id=952): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$P9_RCREATE(r1, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x4, 0x3, 0x7}, 0x8}}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x80041272, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}}) 7m25.649378659s ago: executing program 4 (id=953): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) (async) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8002}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) socket$kcm(0x2, 0xa, 0x2) socket$inet(0x2, 0x4000000000000001, 0x100) (async) socket$inet(0x2, 0x4000000000000001, 0x100) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0199c2000000aaaaaaaab07800000000ffffffff51009078f50000000100"/43], 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0199c2000000aaaaaaaab07800000000ffffffff51009078f50000000100"/43], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="0380b470ae35142a2d18bbbb08060001a3f5f4f47b3a6b3d080006040003000000000000ac1414bbbbbb3bbbbbbbac1e0101"], 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x403, &(0x7f0000000000)={0x0}) (async) ptrace$setregset(0x4205, r2, 0x403, &(0x7f0000000000)={0x0}) fcntl$setown(r1, 0x8, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x9, 0xd}, &(0x7f0000000400)=0x88) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) eventfd2(0xa, 0x0) 7m25.241702963s ago: executing program 4 (id=955): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_batadv\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_batadv\x00', 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000380)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={r3}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000000c0)={r3, 0x5}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="7b130000020a0400240012800b000100a26b6e65766500e1d6cbc9d6cdda43890433313f39c2de0014000280"], 0x44}}, 0x40800) (async) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="7b130000020a0400240012800b000100a26b6e65766500e1d6cbc9d6cdda43890433313f39c2de0014000280"], 0x44}}, 0x40800) sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r4], 0x3c}}, 0x40) r6 = openat$sndseq(0xffffff9c, &(0x7f0000000240), 0x1) write$sndseq(r6, &(0x7f0000000300)=[{0x0, 0xe8, 0x0, 0x10, @tick=0x7, {0x71, 0x37}, {0x0, 0xff}, @note={0x2, 0x9, 0x5, 0xd, 0x8001}}], 0x1c) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={r3, 0xcf}, &(0x7f00000003c0)=0x8) 7m24.930553176s ago: executing program 4 (id=958): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, r2, r3, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) fanotify_mark(r6, 0x2, 0x0, r4, &(0x7f0000000000)='./file0\x00') getdents64(r4, &(0x7f0000000100)=""/134, 0x86) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000010ec0)="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", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x10, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0}) r7 = openat$tcp_mem(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r7, 0x40309410, 0x0) 7m24.770088229s ago: executing program 35 (id=958): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, r2, r3, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) fanotify_mark(r6, 0x2, 0x0, r4, &(0x7f0000000000)='./file0\x00') getdents64(r4, &(0x7f0000000100)=""/134, 0x86) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000010ec0)="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", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x10, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0}) r7 = openat$tcp_mem(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r7, 0x40309410, 0x0) 4m23.749337148s ago: executing program 7 (id=1872): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) (async) socket(0x2b, 0x1, 0x1) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xf, 0x8, 0x1, 0x8000, 0x200}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x1c, 0x2d, 0x107, 0x0, 0x25dfdbff, {0x9, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r2) (async) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=@base={0x1f, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x40000, 0x0) getdents64(r4, 0x0, 0x0) (async) lseek(r0, 0x7, 0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = syz_clone3(&(0x7f0000002a00)={0x200000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000001c0), {0x21}, &(0x7f00000009c0)=""/4096, 0x1000, &(0x7f00000019c0)=""/4096, &(0x7f00000029c0)=[0x0], 0x1, {r4}}, 0x58) tkill(r6, 0x21) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0xc0786300}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x39}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r7 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) (async) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) (async) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f00000003c0)=0x3) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) syz_ublk_setup_queues(r14, r12, &(0x7f0000000580)={0x0, 0xfb87, 0x400, 0x3, 0x32c}, &(0x7f0000000740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ba7, 0x80, 0x6, 0x15e, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7d1a, 0x8, 0x3, 0x146, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x4, 0x3, 0x125, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x2000, 0x1, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x0, 0xd5, 0x0, 0x0}}, 0x0) 4m23.345749572s ago: executing program 7 (id=1873): pipe2$9p(&(0x7f0000000080), 0x0) (async) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x224d4a7f61492307, 0x80) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2080080, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@msize={'msize', 0x3d, 0x6}}, {@cachetag={'cachetag', 0x3d, '.}{\xdb!-$}/#'}}, {@privport}, {@noextend}], [{@subj_role={'subj_role', 0x3d, '^[+[-%('}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_appraise}, {@context={'context', 0x3d, 'root'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@fowner_eq={'fowner', 0x3d, r3}}]}}) write$P9_RFSYNC(r1, &(0x7f00000002c0)={0x7, 0x33, 0x1}, 0x7) (async) write$P9_RFSYNC(r1, &(0x7f00000002c0)={0x7, 0x33, 0x1}, 0x7) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r5, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000000}, 0x1) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40841) writev(r2, &(0x7f0000000640)=[{&(0x7f0000000540)="e9d5d1203b4a234e02ad8cc9b4d6cba02035751416c3b4924c4f68cac1accc5591f441bd4ff7bbbf6dd206612a2c74c2994faaaa8dcb8e708711823c185888e471079bc7ad17c246d4a82c28bed8e04389054a1928bbca2a5e45e4ffa24a6f153ee0d02b97647625b001719b2623c34f0df99f7471cdefc92d0d7fcd4dba0938fd50ca8bd30dc7b7057e86574b4186273f22682b6ba7f6e6133d179f2fd7ba6b74fdfacd9fb9298ac76acc721d5013a12868a733c8aadf6a74", 0xb9}, {&(0x7f0000000600)="0df97acf8e5e59df1b4c8776434b325491427672807c8b3ed0daefe52d772c", 0x1f}], 0x2) writev(r1, &(0x7f00000007c0)=[{&(0x7f0000000680)="5310b63f45ccf87379f852fb7db8ce4ef9c5f7629809ef88fb0a2e4994d0a0e0b23fe48324935693edae098609f087a2c16c5e01fb92c7120435a689517c1310501b5d9dd5e722ec8317daabb2a3d378ceaae0d84039d49020b717b8db2aa23d1403f407f94b2dd71d6fe63ac3c29c39310d62590f0af2dee9a3df9d5e3efa3a79c6d60782d6d3c7f68e932e3bd4a393180fa129", 0x94}, {&(0x7f0000000740)="cf4fa6ded4a8ee1718a39b06f16c8be7fec7ef1452206ebb2faf7e85d3e3c5e747ec168e63e0f7d205647f98b1725f3755cbfee278b29abbacba3f1681db859e66fe913c6dca36c60093e17dbc5fcbfd", 0x50}], 0x2) (async) writev(r1, &(0x7f00000007c0)=[{&(0x7f0000000680)="5310b63f45ccf87379f852fb7db8ce4ef9c5f7629809ef88fb0a2e4994d0a0e0b23fe48324935693edae098609f087a2c16c5e01fb92c7120435a689517c1310501b5d9dd5e722ec8317daabb2a3d378ceaae0d84039d49020b717b8db2aa23d1403f407f94b2dd71d6fe63ac3c29c39310d62590f0af2dee9a3df9d5e3efa3a79c6d60782d6d3c7f68e932e3bd4a393180fa129", 0x94}, {&(0x7f0000000740)="cf4fa6ded4a8ee1718a39b06f16c8be7fec7ef1452206ebb2faf7e85d3e3c5e747ec168e63e0f7d205647f98b1725f3755cbfee278b29abbacba3f1681db859e66fe913c6dca36c60093e17dbc5fcbfd", 0x50}], 0x2) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x1, 0x70bd2c, 0xfffffffa, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x14) (async) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x1, 0x70bd2c, 0xfffffffa, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x14) fcntl$setpipe(r2, 0x407, 0x5329) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x50, 0x140b, 0x200, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x60000}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x4, 0x35c, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x294, 0x294, 0x294, 0xffffffff, 0x4, &(0x7f0000000a40), {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @empty}, [0xff, 0xffff00, 0xffffffff], [0xffffff00, 0xff000000, 0xffffffff, 0xff], 'veth1_to_bond\x00', 'dummy0\x00', {0xff}, {}, 0x6, 0xa6, 0x0, 0x2}, 0x0, 0xd4, 0xf8, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0xee], 0x200, 0x24, 0x2}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff000000, 0xffffff00, 0xffffffff], 'team_slave_1\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x1, 0x8, 0x1, 0x2b}, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00', 0x0, {0xa}}}, {{@uncond, 0x0, 0xa4, 0xd4}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1000, 0x8000, 0x4, 0x2}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3b8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r2, {r3, r4}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ec0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ec0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r6, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2080000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r5, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x80) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r6, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2080000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r5, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x80) close_range(r2, r0, 0x0) r8 = signalfd(0xffffffffffffffff, &(0x7f0000000fc0)={[0x800, 0xe]}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000001000)={0x0, 0x8}, &(0x7f0000001040)=0x8) write$P9_RFLUSH(r1, &(0x7f0000001080)={0x7, 0x6d, 0x2}, 0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pidfd_getfd(r8, r8, 0x0) (async) r10 = pidfd_getfd(r8, r8, 0x0) sendmmsg$unix(r10, &(0x7f00000013c0)=[{{&(0x7f00000010c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001380)=[{&(0x7f0000001140)="13e5fcf0fdca67324e10c5b66e2ea0208e70d7d6182e976789e0b5ebf22ed83fed9be38866521ca5c940edb52b85b8e358025c536edaedf5ca875672f5859b18bf22c1285b8687bc68fbb188931deb7d807ca000fe1a78eb08db30736ac4c4292a06828fd187deb45af94580d511b6257557cc6a30c613f85e88c4c6bcdee624d0a9d34348cdf6fb97952ef2c61f282ac1a48484d9a6e1cd17b9edab15ae5532a95f822ffd9ba6c53cf9", 0xaa}, {&(0x7f0000001200)="5e1a3a719209f29f286045e718a0c78f288cf66ee106eebf56dc17c9a9379662e531cf80af72abb30eeed99cee9461542ff0f0212ee96bb04b6446fa5b7ea6fc723ad695a9c5", 0x46}, {&(0x7f0000001280)="fcef39da8dedb2fa874e33e9cb434d68ed9f22d4c8a380c5d1ce40555a71931cf8399dc5dd527e5bcb1aa6948dbe7353634eb52782a8ff1f03663308817f8087a21eb799ea59b9f54f1e32d9bf34d0bd2f4372bff67bc4", 0x57}, {&(0x7f0000001300)="b511f565b86f8ba212c6637c72f242789fc6bdf2f022f79497837f271cf391b5ea82228c2c3b553d2b9bef2f0f3e8d8fc15c177a7ce8ecfc7a251dac5c26634de404f7471d3abe88a825", 0x4a}], 0x4, 0x0, 0x0, 0x10}}], 0x1, 0x8080) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000001440), r8) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x1c, r11, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) mount$tmpfs(0x0, &(0x7f0000001540)='./file1\x00', &(0x7f0000001580), 0x40041, &(0x7f00000015c0)={[{@size={'size', 0x3d, [0x37, 0x74, 0x35]}}, {@mode={'mode', 0x3d, 0x3ff}}, {@huge_within_size}, {@mpol={'mpol', 0x3d, {'prefer', '', @void}}}, {@mpol={'mpol', 0x3d, {'bind', '=relative', @void}}}, {@huge_never}], [{@permit_directio}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) ioctl$PIO_UNIMAP(r10, 0x4b67, &(0x7f00000016c0)={0x2, &(0x7f0000001680)=[{0x5, 0x8}, {0x3, 0x7}]}) (async) ioctl$PIO_UNIMAP(r10, 0x4b67, &(0x7f00000016c0)={0x2, &(0x7f0000001680)=[{0x5, 0x8}, {0x3, 0x7}]}) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000001700)={@local, @local, @remote}, 0xc) (async) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000001700)={@local, @local, @remote}, 0xc) ioctl$sock_bt_hci(r9, 0x400448c9, &(0x7f0000001740)="ae73955b0d9610c85003ae3cca243b246c940b26a07e4c92aa3176014e47fa30ac1eea638f1db5df7251f10b94bc43e6706245f74e5b8fbbfefc6ba8d3f5b632104bfdc6a5463a4a2cf69dc50ab0c95b22162a3b9b1a438edb") 4m23.34542255s ago: executing program 7 (id=1874): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xefa9, 0x800, 0x43, 0x161}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xffff}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x800}, {}, {}, {0x0, 0x0, 0x0, 0x200}, {}, {}, {}, {0x82}, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40000}, {0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x80000000}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x101}, {}, {}, {}, {}, {0x10, 0x0, 0x0, 0x3}, {0x0, 0x3}, {0x3ff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x400000}, {0x5}, {}, {}, {0x0, 0x0, 0x9, 0xfffffffd}, {}, {0x0, 0xb}, {}, {0x0, 0x0, 0x7}, {0x0, 0x2000000, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0xc16}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x400000}, {0x100}, {0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x70}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffff8}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x800}, {}, {0x0, 0x0, 0x0, 0x6, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8a}], [{}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) syz_clone3(0x0, 0x0) read$FUSE(r0, &(0x7f0000002f40)={0x2020}, 0xfffffd24) socket$nl_route(0x10, 0x3, 0x0) openat$btrfs_control(0xffffff9c, &(0x7f0000000040), 0x240001, 0x0) 4m22.91131916s ago: executing program 7 (id=1878): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x400000ff, 0x2, 0x4, 0x0, 0x4}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$usbmon(&(0x7f0000000240), 0x7, 0x0) ioctl$MON_IOCQ_URB_LEN(r4, 0x9201) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000100)={0x20, 0x20, 0x2, 0x4000}) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc2c45513, &(0x7f0000000240)={{0xa, 0x6, 0x9, 0x2, '\x00', 0x9}, 0x0, [0x9, 0x7, 0x1, 0x5, 0x3, 0x4, 0x7, 0x400, 0xff, 0x6, 0xfffffffc, 0x401, 0xef, 0x5, 0xdf, 0x0, 0xde1, 0x1e13e124, 0x7fff, 0x7, 0x2, 0x5, 0x0, 0x2d1, 0x45ba, 0x8, 0xf, 0x4, 0x4, 0x1, 0x2, 0x4, 0x0, 0x6, 0x200, 0x7f, 0x3, 0x400, 0xdf91, 0x8, 0x9, 0x7f, 0x0, 0xfff, 0x6, 0xffffffff, 0xd5b, 0x4, 0x3, 0xfffffff8, 0x8, 0x80000001, 0x29, 0xdf, 0xffff, 0x101, 0x2, 0x0, 0xbc, 0x800, 0x3, 0x5, 0x8, 0x1, 0xfffffffb, 0x5512, 0x1, 0x4, 0x4, 0x5, 0x7fff, 0x9, 0x8, 0x9, 0x7, 0x4b60ef72, 0x2, 0x0, 0x0, 0x80000001, 0x3fe, 0x2, 0x4, 0x88e, 0x1, 0x3, 0x7, 0x0, 0x8, 0xc3, 0x8000, 0x7fff, 0x7, 0x4, 0x3, 0x5, 0x3e5c245, 0xb2, 0x2, 0x7, 0x0, 0x2, 0xffff, 0x1, 0x1, 0x7, 0xb7, 0x8, 0x3, 0x1, 0x1, 0x28, 0x0, 0x8, 0x5, 0x2, 0x1, 0x4, 0xd, 0x5, 0x7ff, 0x5, 0x2, 0x1, 0x2, 0x80000001, 0x400, 0x80000001]}) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) ioctl$KVM_GET_STATS_FD_vm(r6, 0xaece) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 4m22.769756437s ago: executing program 7 (id=1880): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsync(r1) 4m22.490128637s ago: executing program 7 (id=1882): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) fcntl$dupfd(r0, 0x0, r0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000100)={0x4000005, 0xaaaac38}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300006e00000000000000b7020000000000007b9af0ff00000000c509000058020010c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf7620000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc45}) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='ro\x00', 0x0, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000002c0)={0x5, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x101, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x80005, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) ioctl$KVM_RUN(r6, 0xae80, 0x0) pipe(&(0x7f00000001c0)) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) ioctl$BSG_IO(r7, 0x2285, &(0x7f0000000200)={0x51, 0x0, 0x0, 0x1, &(0x7f0000000040)='$', 0x0, 0x0, 0x1, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x20, 0x0, 0xeb}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000706050000000900000000000a00000908000640000000030500010007000000f2335798f0b358e18a5e92619fa34bbe6751"], 0x24}}, 0x4c880) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8008, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat(r8, &(0x7f0000000300)='./file1\x00', 0x88779, 0x36) 4m22.401873493s ago: executing program 36 (id=1882): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) fcntl$dupfd(r0, 0x0, r0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000100)={0x4000005, 0xaaaac38}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300006e00000000000000b7020000000000007b9af0ff00000000c509000058020010c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf7620000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc45}) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='ro\x00', 0x0, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000002c0)={0x5, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x101, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x80005, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) ioctl$KVM_RUN(r6, 0xae80, 0x0) pipe(&(0x7f00000001c0)) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) ioctl$BSG_IO(r7, 0x2285, &(0x7f0000000200)={0x51, 0x0, 0x0, 0x1, &(0x7f0000000040)='$', 0x0, 0x0, 0x1, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x20, 0x0, 0xeb}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000706050000000900000000000a00000908000640000000030500010007000000f2335798f0b358e18a5e92619fa34bbe6751"], 0x24}}, 0x4c880) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8008, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat(r8, &(0x7f0000000300)='./file1\x00', 0x88779, 0x36) 2m38.499996109s ago: executing program 6 (id=2565): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01018f97aee9c1bd2fd8c669a7a9a810fcbd85d5940f6af500372fcff310d483aaf515be1900000000000004020000030000000000060400000020725eb3daf1411b9c5bbc06d7eac1652ec62788910be28f41f287aaee73fb3b6438d6762741796d70b8b696b625426f3272155cfb84b76c67150a5a949276f29b9ec89a2463bee6f59fc92b149158dc926446fd1dd45ed962ad42f76991029f624bdd49f9e603a053124e66ef1f998b7fed96dda6980000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x8000000000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x20882, 0x0) writev(r5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/unix\x00') r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000180)=0x3) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r7, &(0x7f00000001c0)={0x1f, 0x8, 0x0, 0x1, 0x2, 0x6, @remote}, 0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd2b, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x0, 0x1e6, 0x5}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040090}, 0x24040040) 2m37.549600556s ago: executing program 6 (id=2580): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000bfd2b357620012", 0x32}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000440), 0x101180, 0x0) ioctl$KVM_CREATE_VM(r2, 0x40086806, 0x21) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) read$usbfs(r2, &(0x7f0000000280)=""/155, 0x9b) 2m35.748247016s ago: executing program 6 (id=2587): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x1, 0x1, 0x0}) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x700, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) fanotify_mark(0xffffffffffffffff, 0x4, 0x8000010, r3, &(0x7f0000000040)='./sys/file0\x00') 2m34.67955523s ago: executing program 6 (id=2591): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x18d883, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000c40)=[{0x0}, {&(0x7f0000000700)=""/50, 0x32}], 0x2}}], 0x1, 0x40, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03400000000000000000010000000900010073797a300000000040000000160a07000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000038000000160a09010000000000000000010000000900020073797a30000000000900010073797a300000000008000740000000000400038014000000110001"], 0xc0}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f00000004"], 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x118, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x200, 0x20a, 0x278, 0x200, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [0x0, 0xff, 0x0, 0xff000000], [], 'veth1_macvtap\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xf4, 0x118, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@inet=@tcp={{0x2c}, {[], [], 0x0, 0x0, 0x45, 0x5}}]}, @common=@inet=@TCPMSS={0x24}}, {{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x324) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0c0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af5863582649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00000000000000000000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000060030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b929ade", 0x55}], 0x1}, 0x20048000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006, 0x0, 0x0, 0x0, 0x60}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000002180)={&(0x7f00000000c0)="e566e838d58bd0a4d54cee37272be4798b1eaee5a860a338609c7d58a0a1680f85e9a6366a953896fe0f6f325e749315fc9f8722db2b8d30414fe9756b0743d1d9720ae565f214", &(0x7f00000010c0)=""/4096, &(0x7f00000020c0)='9', &(0x7f0000000740)="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", 0x3, r2, 0x4}, 0x38) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x1411, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket(0x840000000002, 0x3, 0x100) shutdown(r7, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x402c41, 0x100) flock(r8, 0x2) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) read(r9, &(0x7f0000000140)=""/154, 0x9a) ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f0000000000)) setsockopt$inet_buf(r7, 0x0, 0x29, 0x0, 0xff00) 2m34.255002027s ago: executing program 6 (id=2592): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$media(&(0x7f00000001c0), 0x2c26, 0x82543) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x1, 0x0, 0x7, &(0x7f0000000000)={0xfc, "e922fe53e14fcad1ebe6ff00000000008100000500"}}) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000100)={"6739669f274d13b691eb645b00e4f5b53e0ca34dd02ac6cdc67c5e3126628168", r3}) openat$fb1(0xffffffffffffff9c, 0x0, 0x101100, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000400)={0x0, 0xae0f, 0x800, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8861, 0x400, 0x2100, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8, 0xfffffffe, 0x149}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x3a6, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc399, 0x80, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe85, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000240)='./file1\x00', 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r13, 0x112, 0x4, &(0x7f00000001c0)={0x8, 0xfe}, 0x2) futex_waitv(&(0x7f0000000180)=[{0x3, &(0x7f0000000040)=0x3, 0x2}], 0x1, 0x0, 0x0, 0x0) r14 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r14, &(0x7f0000000040)={0x2, 0xfe}, 0x2) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x1a0, 0x10, 0x1, 0x70bd25, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in=@private=0xa010101, 0xffffffff, 0x32}, @in=@broadcast, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x9}, {0x5, 0x400804, 0x9, 0x4000000292}, {0x1cb00000}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x2c}, [@algo_crypt={0xfffffffffffffe81, 0x2, {{'cbc(twofish)\x00'}, 0x100, "3ae0bd000b000000366a6a849a739045000500000000e80000000001006ea6b3"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x1a0}}, 0x44050) io_setup(0x200, &(0x7f0000000140)) 2m33.804622987s ago: executing program 6 (id=2597): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000000000000000000000018000000000000000000000000000000bf000800000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x8}, 0x94) 2m33.672367256s ago: executing program 37 (id=2597): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000000000000000000000018000000000000000000000000000000bf000800000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x8}, 0x94) 1m27.028984302s ago: executing program 8 (id=3043): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x40}}, 0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0xc00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008081}, 0x4000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r5}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000100050000000000040004000000000010"], 0x24, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1m26.429904661s ago: executing program 8 (id=3046): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [{0x20, '\xab\xfb^)@\xf7Z\x1f&\x8e\x13R\x04\xf1\xe9`\xf5 \xa00\xfb]\x84\xc8\xb2\xf2\xffGb\xf75=t'}, {0x20, '(}@#,{\xdbK\xa2\xe7(ks9\x04\xc71f\f\xc2\a\xd7\x93\x84{\x0e\x15\xd5\x18\x12\xdf\xae\xc6\x88z\x0f\x90\x9a+t\xe5\xc0\xd9\xe4\b\x00\x00\x00\x00\x00\x00\x00\xc6k\xda4]vWWR\xbb\n\x96\x87\x14\x1a5.hd\'\xb8\xb4\"\x17J\xedW5\'a\xc7\xa9a\x00\x00\x00\xad\xdd\xaf\x11>\"\x84\xc35\x93\xf4z4Bcl\xf3\xec7\x00\x00\x00\x00\x00\x00\x06'}, {0x20, 'resui6'}], 0xa, "541c47b893c7f8626d29afd4a468d6725414a0ce481fa15abcdff03fc0a78c7fc3b75b087a2e870f53070d88b0fbd816623d3276cd1505c773bbf6487f78844906abc8"}, 0xf3) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5226f45f819e01177d3d458dd4992861ac00", "90e500d8a000", [0x10, 0x4]}}) 1m26.26989945s ago: executing program 8 (id=3048): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_open_procfs$namespace(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000046, 0x0, 0x0, 0xb49, 0x2, 0x1000000000000008, 0x7ff, 0x200003}, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000200)=0x100, 0x4) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f0000000240), 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r7, 0xb) pread64(r1, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) pwritev2(r1, &(0x7f0000000200)=[{0x0}, {&(0x7f00000000c0)="3a4002c716d6a76c8c4954a5376cbb6f97620bfe3824", 0x16}, {&(0x7f0000000100)="14647874f50593fbd741385970459568ce343ccd4ca406866df429c6830d4bed180761c6379067d47e193a152b8d9b9da24d5e2bfff31cabce47132c5f77935c3daa805711c8891ca27689fc7040b552c98f8497e0f83d29d4d31a5428db4e0b66c4f2cb4a58658f48f111a2d19940a9fdc06ef423164c716d82f62fbfec4a93993b602b0ae83752df6dc833066afb0806d527718d646510a82a215b61d8cbfb270fca0317890b361155dfa0a614209ff9cd54f0f116b87d9a4b25f7b04a5318ecbb78440b2eaee36182408db4a31885717297d9ac1a2347feb0c981cd", 0xdd}], 0x3, 0x3, 0xffff8000, 0x14) 1m24.678937944s ago: executing program 8 (id=3057): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x18d883, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000c40)=[{0x0}, {&(0x7f0000000700)=""/50, 0x32}], 0x2}}], 0x1, 0x40, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03400000000000000000010000000900010073797a300000000040000000160a07000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000038000000160a09010000000000000000010000000900020073797a30000000000900010073797a300000000008000740000000000400038014000000110001"], 0xc0}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f00000004"], 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x118, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x200, 0x20a, 0x278, 0x200, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [0x0, 0xff, 0x0, 0xff000000], [], 'veth1_macvtap\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xf4, 0x118, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@inet=@tcp={{0x2c}, {[], [], 0x0, 0x0, 0x45, 0x5}}]}, @common=@inet=@TCPMSS={0x24}}, {{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x324) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0c0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af5863582649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00000000000000000000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000060030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b929ade", 0x55}], 0x1}, 0x20048000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006, 0x0, 0x0, 0x0, 0x60}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000002180)={&(0x7f00000000c0)="e566e838d58bd0a4d54cee37272be4798b1eaee5a860a338609c7d58a0a1680f85e9a6366a953896fe0f6f325e749315fc9f8722db2b8d30414fe9756b0743d1d9720ae565f214", &(0x7f00000010c0)=""/4096, &(0x7f00000020c0)='9', &(0x7f0000000740)="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", 0x3, r2, 0x4}, 0x38) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x1411, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket(0x840000000002, 0x3, 0x100) shutdown(r7, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x402c41, 0x100) flock(r8, 0x2) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) read(r9, &(0x7f0000000140)=""/154, 0x9a) ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f0000000000)) setsockopt$inet_buf(r7, 0x0, 0x29, 0x0, 0xff00) 1m24.461874512s ago: executing program 8 (id=3058): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'pimreg1\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x39, 0x3, [0xd1, 0x8b, 0xc]}}) openat$ttynull(0xffffff9c, &(0x7f0000000040), 0x12100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m24.175314236s ago: executing program 8 (id=3059): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000300)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b02000105206e21f53a12fdac08090400000001012000092401fdff0a11004708240a0000057f000904010000010220000904010101010220000905010940000204d80825010230cc000009040200000102200009040239"], 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r5, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000880)={'syztnl1\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2008800, &(0x7f0000000b40)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0xffffffffffffffff, 0x1000) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x16) ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f0000000100)={0x7, 0x7fffffff}) r8 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) r9 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e23, 0x1}}, 0x80, 0x0}, 0x0) ioctl$VIDIOC_QUERYMENU(r8, 0xc02c5625, &(0x7f00000000c0)={0xbd, 0x3, @value=0x5}) ioctl(r2, 0x4048aecb, &(0x7f0000000140)="070000000000000001000000ffffffff40") 1m24.12948571s ago: executing program 38 (id=3059): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000300)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b02000105206e21f53a12fdac08090400000001012000092401fdff0a11004708240a0000057f000904010000010220000904010101010220000905010940000204d80825010230cc000009040200000102200009040239"], 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r5, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000880)={'syztnl1\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2008800, &(0x7f0000000b40)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0xffffffffffffffff, 0x1000) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x16) ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f0000000100)={0x7, 0x7fffffff}) r8 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) r9 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e23, 0x1}}, 0x80, 0x0}, 0x0) ioctl$VIDIOC_QUERYMENU(r8, 0xc02c5625, &(0x7f00000000c0)={0xbd, 0x3, @value=0x5}) ioctl(r2, 0x4048aecb, &(0x7f0000000140)="070000000000000001000000ffffffff40") 5.14343255s ago: executing program 0 (id=3648): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'pimreg1\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x39, 0x2, [0xd1, 0x8b]}}) openat$ttynull(0xffffff9c, &(0x7f0000000040), 0x12100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.239583862s ago: executing program 5 (id=3654): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@random={'security.', 'bpf\x8c'}, 0x0, 0x0, 0x2) 4.04882795s ago: executing program 5 (id=3655): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfffffffffffffead) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4000000000003, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.003080668s ago: executing program 0 (id=3656): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0xc0844123, &(0x7f00000001c0)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000180)={0x6, 0x3, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f0000000440)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 3.099259131s ago: executing program 5 (id=3657): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x7c, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x80}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x2002, 0xc) close(r3) r5 = socket(0x1, 0x5, 0x0) close(0x3) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r7, &(0x7f0000000480)=""/74, 0x4a) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x0, 0x0) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=[{0xc, 0x110, 0xe}], 0xc}, 0x2000fc40) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x5, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x46) r9 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') preadv(r9, &(0x7f0000000380)=[{&(0x7f00000014c0)=""/223, 0xdf}], 0x1, 0x2000ff0f, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f0000000240)={0x3, 0x9b, 0x1, 0x9}, 0x8) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r5, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r5, &(0x7f0000000040)={0x80002017}) close(r4) 3.097261607s ago: executing program 0 (id=3658): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="6a7c3a0300000000", 0x8) connect$unix(0xffffffffffffffff, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000005200010000000000000000000a0000000c0001"], 0x20}}, 0x20000800) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 2.823851716s ago: executing program 0 (id=3661): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, 0x5fae, 0x5) r1 = openat$cachefiles(0xffffff9c, &(0x7f00000001c0), 0x248281, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000200)={r1, 0x3, {0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x3, 0x7, 0x16, "ac6704520aee0079f9b5879966101be8ff5c2c01434832eb8864a8332f38eedc73b193abfbf4b77b7d811261436c8155688ed9f63bf076bdce2164fe1c573287", "b39778118c1fd4f8fe1887c9ed5ed8b025c3f2b8eb0222b8f3c7faf41928d18d3cb472ad64e239946e0254cbbc4c7cb097bf664773cc38b55421d3f79b5fee47", "fabb7299558769d61ff7a38b429a062b5dbc48c167277b808a4c084857be977b", [0x5, 0x5]}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000030000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) 2.748678005s ago: executing program 1 (id=3662): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'pimreg1\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x39, 0x2, [0xd1, 0xc]}}) openat$ttynull(0xffffff9c, &(0x7f0000000040), 0x12100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.632246012s ago: executing program 0 (id=3663): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x40814) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) ustat(0x11, &(0x7f0000000600)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="5000ff9e090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r3 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r4 = syz_io_uring_setup(0x4329, &(0x7f0000000180)={0x0, 0x776c, 0x110c9, 0x6, 0x160}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) r5 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x80000008}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) close(r2) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x80, 0x80, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x67, 0x0, 0x7, 0x2f, 0x0, @multicast2, @private=0xa010101}}}}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000fc0)="985e44efeabe001cabcfba21f157593d8673c3a254a9a2d3197970cb347b70a243bf77139a00bc3ae91684aaf7b7dff6", 0x30}], 0x1}}], 0x1, 0x80) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) 2.556961294s ago: executing program 1 (id=3664): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/target/core/rd_mcp_0\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x20, 0x0, 0xff, 0xfffff00b}]}, 0x8) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./config/target/usb_gadget/naa.1234567890123456/tpgt_1\x00', 0x1ff) 2.389601773s ago: executing program 1 (id=3665): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af0224a920000ffffffffffffff00"}) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0d000000875a000004000000030000000000000078cad0d474fd28b269647816760b177928460cf75873aedc243595c8c0cb634b8d93b44f1cf705ec73fc47228de6f513379d8038f57a8da7f3f6e0736153952e44c9c6a9868d220a697e5acf41a0b9620ba4ac471f4b943dbd62c3965214ddb19b27f99745f42325fb2dd727c96191f2939da57944d038a3a31a14f74b1e9bbf27480ea441da7503853658c272a3d1e449d6318b92f151e43d95a6adc2a67e4012bd1f8719bf28b571787774da893b15e8d28afba135a2af594bfc996032d64c90021363006c281df0b61ae5abd7f6c4c64b6ae9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) pread64(r5, &(0x7f0000000140)=""/237, 0xed, 0x4) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0xff84, 0xfd, 0x2000, 0x6, 0xff, "db2d416fbecfb84b5452b768e08ee2df361089"}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0x6f) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) mkdir(&(0x7f0000000600)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./config\x00', &(0x7f0000000700)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x1, 0x0) 2.159496881s ago: executing program 1 (id=3666): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0xc0844123, &(0x7f00000001c0)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f0000000180)={0x6, 0x3, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f0000000440)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) 2.048939514s ago: executing program 9 (id=3667): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_emit_ethernet(0xd2, &(0x7f0000000980)={@local, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "a70002", 0x9c, 0x2f, 0x0, @remote, @local, {[@routing={0x87, 0xa, 0x2, 0x8, 0x0, [@empty, @private1, @local, @mcast2, @remote]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9900}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x14}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x80000003, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x22) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) write(r4, &(0x7f00000000c0)='0\n', 0x2) write(r4, &(0x7f0000000100)='1\n', 0x2) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x218851e74c4d450d, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x5, 0x0, 0x6, 0x0, 0x0, 0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 2.014173704s ago: executing program 9 (id=3668): setns(0xc9, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000600)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) 1.929418917s ago: executing program 0 (id=3669): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) write$sndseq(r1, 0x0, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000001140)={0x80, 0x1}) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000000)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000140), 0x2) preadv(r2, &(0x7f00000000c0)=[{0x0, 0x50}, {&(0x7f0000000040)=""/35, 0x23}], 0x2, 0x5, 0x3) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) write$char_usb(r3, &(0x7f0000006800)="10", 0x20) close(r3) r4 = socket(0x1e, 0x1, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x0, 0x0, 0x5201, 0xd, 0x1}, 0x30, 0x0) landlock_restrict_self(r5, 0xe) 1.929265753s ago: executing program 9 (id=3670): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="6a7c3a0300000000", 0x8) connect$unix(0xffffffffffffffff, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000005200010000000000000000000a0000000c0001"], 0x20}}, 0x20000800) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 1.777879391s ago: executing program 9 (id=3671): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="6a7c3a0300000000", 0x8) connect$unix(0xffffffffffffffff, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000005200010000000000000000000a0000000c0001"], 0x20}}, 0x20000800) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 1.576375777s ago: executing program 9 (id=3672): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x4, 0x2, 0x1e, 0x0, r2}, &(0x7f0000000100), &(0x7f0000000400), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x5a, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYRES8=r5, @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f0000008580)=[{0x4, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x3, 0x0, 0x0}, {0x5, 0x1, 0x0}, {0x2, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x8, 0x0, 0x0}, {0x9, 0x1, 0x0}], 0x9) r8 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f0000002740)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x29, 0x81, &(0x7f00000002c0)=""/129}, &(0x7f0000000140)="8536b60bfad6", 0x0, 0x9, 0x10000, 0x1, 0x0}) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 1.201332613s ago: executing program 1 (id=3673): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000017540), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r2], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0186405, &(0x7f0000000100)={0x8, 0x5, {0xffffffffffffffff}, {0xee01}, 0xffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getxattr(0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmget$private(0x0, 0x2000, 0x0, &(0x7f00000eb000/0x2000)=nil) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x268, 0x1, 0x5, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [{{0x254, 0x1, {{0x0, 0xc}, 0x5, 0x6, 0xff, 0x0, 0x19, 'syz0\x00', "0ea8d2810b1f41ca825ee5b2a25e39e638990eb4892aaf77c40d3e9800aaadcd", "b047040012f00f618ea751d9372acd052676bb20fa26bf27a0b20ca81206878b", [{0x4, 0x8, {0x0, 0x4}}, {0x2, 0x7, {0x2, 0x9}}, {0x1ff, 0x5, {0x2, 0xe9b}}, {0x1}, {0x256, 0x1, {0x2, 0x244}}, {0x6, 0x6, {0x1, 0x6}}, {0xc, 0x8000, {0x0, 0x6}}, {0x5, 0x4, {0x1, 0x3}}, {0x3, 0x818, {0x1, 0x8}}, {0x8, 0x4, {0x0, 0xc}}, {0x4, 0x6, {0x0, 0x7fff}}, {0x130b, 0x6, {0x2, 0x1}}, {0x0, 0x6, {0x0, 0x80}}, {0x5, 0x9, {0x1, 0x7}}, {0x7, 0x4, {0x1, 0x2}}, {0x6, 0x9, {0x1, 0x9}}, {0xf, 0x2, {0x2, 0x7f}}, {0x1, 0x400, {0x0, 0x4}}, {0x1, 0x2, {0x0, 0x5}}, {0x3, 0xff3, {0x1, 0x7fffffff}}, {0x8, 0x3423, {0x3, 0x5f3}}, {0xe2ad, 0x1, {0x3, 0x2e1}}, {0x40, 0x8, {0x3, 0xfffffffa}}, {0xef7, 0x85, {0x0, 0x9}}, {0xfffd, 0x2, {0x1, 0x5}}, {0x6, 0x4, {0x1, 0x7}}, {0xb43c, 0x0, {0x0, 0x1}}, {0x9, 0xf, {0x2, 0x4df6}}, {0x3, 0x3e77, {0x1}}, {0x6, 0x320c, {0x2}}, {0x2, 0x7, {0x1, 0x6}}, {0x9, 0x3, {0x3, 0x4}}, {0xe, 0x1, {0x3, 0x7fff}}, {0x3, 0x4000, {0x0, 0x6}}, {0xb, 0x7, {0x1, 0xb79}}, {0x1, 0x86e5, {0x0, 0x3}}, {0x8, 0x1d80, {0x2, 0x3}}, {0xf137, 0x2, {0x0, 0xffff}}, {0x3, 0x0, {0x2, 0x259e}}, {0xe26f, 0x81, {0x1, 0x401}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000000}, 0x44081) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 1.111312675s ago: executing program 5 (id=3674): r0 = socket$rxrpc(0x21, 0x2, 0x2) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @remote, 0x400000}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, r4, &(0x7f0000003140)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2d, 0x0, @empty}}, 0x24) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0xfffffffffffffffe}}]}}}]}, 0x40}}, 0x0) 578.266713ms ago: executing program 5 (id=3675): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00005d4000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000100)="0f20c035000000200f22c0b900090000b82f470000ba00000000b9e30a0000b80b000000ba000000000f30c46389224ed502652e46f7beed00000064f3400f09f028860080000066430f3804bc3ded00000047d03d00200000643e420f01c364673e0fc7ae00000000", 0x69}], 0x1, 0x7c, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ee0900b702000000000000b703000000000000850000007000000018110000", @ANYRESOCT=r6, @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup, 0x8, 0x1, 0x5, &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@fallback=r5, r7, 0xe, 0x4, r7, @void, @value=r8, @void, @void, r9}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) ioctl$KVM_RUN(r4, 0xae80, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 397.06367ms ago: executing program 9 (id=3676): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ed}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@broadcast, @remote, @val={@val={0x88a8, 0x7, 0x1, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x30, 0x3a, 0xff, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8, {0x0, 0x6, "10b1a0", 0x0, 0x0, 0x1, @empty, @local}}}}}}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="340000002e0001002dbd7000fbdbdf2508000d00", @ANYRES32, @ANYBLOB="1c00458018001b800c005700070000000000000008"], 0x34}], 0x1, 0x0, 0x0, 0x4050}, 0xc000) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r7, 0x0, 0x0, 0x884) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r8 = shmget$private(0x0, 0x4000, 0x1a81, &(0x7f0000ffa000/0x4000)=nil) shmat(r8, &(0x7f0000000000/0x4000)=nil, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) splice(r3, 0x0, r5, 0x0, 0x7151, 0x0) 332.714574ms ago: executing program 5 (id=3677): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) recvmmsg$unix(r3, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/155, 0x9b}], 0x1}}], 0x2, 0x40000000, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 0s ago: executing program 1 (id=3678): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) recvmmsg$unix(r3, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/155, 0x9b}], 0x1}}], 0x2, 0x40000000, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (fail_nth: 1) kernel console output (not intermixed with test programs): 10.767784][T17673] ? lockdep_hardirqs_on+0x78/0x100 [ 610.767798][T17673] do_fast_syscall_32+0x32/0x70 [ 610.767812][T17673] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 610.767827][T17673] RIP: 0023:0xf700efec [ 610.767841][T17673] Code: Unable to access opcode bytes at 0xf700efc2. [ 610.767846][T17673] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 610.767857][T17673] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 610.767864][T17673] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 610.767870][T17673] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 610.767876][T17673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.767882][T17673] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 610.767896][T17673] [ 610.865119][T17675] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 610.970039][T16798] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 611.014617][T17680] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3147'. [ 611.471872][T17692] netlink: 'syz.0.3149': attribute type 11 has an invalid length. [ 611.507784][T17689] 8021q: adding VLAN 0 to HW filter on device eth0 [ 611.514388][T17689] 8021q: adding VLAN 0 to HW filter on device eth1 [ 611.518053][T17689] 8021q: adding VLAN 0 to HW filter on device eth2 [ 611.526395][T17689] 8021q: adding VLAN 0 to HW filter on device eth3 [ 611.554156][T15724] wg2 speed is unknown, defaulting to 1000 [ 611.592219][ T9] usb 14-1: new high-speed USB device number 15 using dummy_hcd [ 611.631461][ T5830] bond1: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 611.660821][ T5830] bond1: (slave veth5): making interface the new active one [ 611.672108][ T5830] bond1: active interface up! [ 611.742757][ T9] usb 14-1: Using ep0 maxpacket: 32 [ 611.747438][ T9] usb 14-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 611.760800][ T9] usb 14-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 611.776511][ T9] usb 14-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 611.782834][ T9] usb 14-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 611.791050][ T9] usb 14-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 611.795498][ T9] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.799958][ T9] usb 14-1: Product: syz [ 611.802944][ T9] usb 14-1: Manufacturer: syz [ 611.804413][ T9] usb 14-1: SerialNumber: syz [ 611.816546][ C0] imon 14-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 611.835389][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:155.0/input/input66 [ 612.038903][ T9] imon 14-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 612.041623][ T9] (id 0x00) [ 612.100886][ T9] rc_core: IR keymap rc-imon-pad not found [ 612.103032][ T9] Registered IR keymap rc-empty [ 612.104691][ T9] imon 14-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 612.107804][ T9] imon 14-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 612.176177][T16798] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 612.230897][T17722] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3156'. [ 612.239996][ T9] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:155.0/rc/rc0 [ 612.244629][ T9] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:155.0/rc/rc0/input67 [ 612.268911][ T9] imon 14-1:155.0: iMON device (15c2:ffdc, intf0) on usb<14:15> initialized [ 612.501209][T16567] Process accounting resumed [ 612.551973][T17734] TCP: TCP_TX_DELAY enabled [ 613.472533][T17756] loop9: detected capacity change from 0 to 7 [ 613.475844][T17756] Buffer I/O error on dev loop9, logical block 0, async page read [ 613.478556][T17756] Buffer I/O error on dev loop9, logical block 0, async page read [ 613.481112][T17756] Buffer I/O error on dev loop9, logical block 0, async page read [ 613.483580][T17756] Buffer I/O error on dev loop9, logical block 0, async page read [ 613.486048][T17756] Buffer I/O error on dev loop9, logical block 0, async page read [ 613.488503][T17756] Buffer I/O error on dev loop9, logical block 0, async page read [ 613.491072][T17756] Buffer I/O error on dev loop9, logical block 0, async page read [ 613.493559][T17756] ldm_validate_partition_table(): Disk read failed. [ 613.495644][T17756] Buffer I/O error on dev loop9, logical block 0, async page read [ 613.498075][T17756] Buffer I/O error on dev loop9, logical block 0, async page read [ 613.500623][T17756] Buffer I/O error on dev loop9, logical block 0, async page read [ 613.503099][T17756] Dev loop9: unable to read RDB block 0 [ 613.504995][T17756] loop9: unable to read partition table [ 613.506997][T17756] loop9: partition table beyond EOD, truncated [ 613.511320][T17756] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 613.511320][T17756] ) failed (rc=-5) [ 613.572505][T16798] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 613.615761][T17763] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3167'. [ 613.619156][ T10] usb 48-1: device descriptor read/8, error -110 [ 613.801498][ T42] audit: type=1326 audit(1785132099.380:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17775 comm="syz.0.3170" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702efec code=0x0 [ 614.022255][ T10] usb usb48-port1: attempt power cycle [ 614.056152][T17792] netlink: 'syz.1.3173': attribute type 11 has an invalid length. [ 614.467545][T17804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3175'. [ 614.513331][T17802] imon:send_packet: task interrupted [ 614.515263][T17802] imon:send_packet: packet tx failed (-512) [ 614.518999][T17802] imon:vfd_write: send packet #3 failed [ 614.544753][ T40] usb 14-1: USB disconnect, device number 15 [ 614.612179][T17807] FAULT_INJECTION: forcing a failure. [ 614.612179][T17807] name failslab, interval 1, probability 0, space 0, times 0 [ 614.620856][ T10] usb usb48-port1: unable to enumerate USB device [ 614.630418][T17807] CPU: 0 UID: 0 PID: 17807 Comm: syz.9.3176 Tainted: G L syzkaller #0 PREEMPT(full) [ 614.630436][T17807] Tainted: [L]=SOFTLOCKUP [ 614.630440][T17807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 614.630447][T17807] Call Trace: [ 614.630451][T17807] [ 614.630455][T17807] dump_stack_lvl+0x100/0x190 [ 614.630472][T17807] should_fail_ex.cold+0x5/0xa [ 614.630485][T17807] should_failslab+0xc2/0x120 [ 614.630501][T17807] __kmalloc_noprof+0xfc/0x820 [ 614.630515][T17807] ? ovl_lookup_layers+0x13ff/0x2ac0 [ 614.630536][T17807] ovl_lookup_layers+0x13ff/0x2ac0 [ 614.630558][T17807] ? __lock_acquire+0x49f/0x1a40 [ 614.630575][T17807] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 614.630592][T17807] ? trace_kmem_cache_alloc+0xdd/0x100 [ 614.630611][T17807] ? find_held_lock+0x2b/0x80 [ 614.630624][T17807] ? d_alloc_parallel+0x46e/0x14b0 [ 614.630640][T17807] ? d_alloc_parallel+0x46e/0x14b0 [ 614.630658][T17807] ovl_lookup+0x4a8/0x6b0 [ 614.630673][T17807] ? d_alloc_parallel+0x9ed/0x14b0 [ 614.630690][T17807] ? __pfx_ovl_lookup+0x10/0x10 [ 614.630708][T17807] ? __pfx_d_alloc_parallel+0x10/0x10 [ 614.630727][T17807] ? down_read+0x13b/0x4c0 [ 614.630743][T17807] ? __pfx_down_read+0x10/0x10 [ 614.630759][T17807] __lookup_slow+0x155/0x320 [ 614.630775][T17807] lookup_slow+0x50/0x70 [ 614.630789][T17807] path_lookupat+0x5e8/0xc40 [ 614.630808][T17807] filename_lookup+0x202/0x590 [ 614.630824][T17807] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 614.630839][T17807] ? __pfx_filename_lookup+0x10/0x10 [ 614.630872][T17807] filename_linkat+0x145/0x640 [ 614.630887][T17807] ? __pfx_filename_linkat+0x10/0x10 [ 614.630904][T17807] ? do_getname+0x191/0x390 [ 614.630919][T17807] __ia32_sys_linkat+0xf5/0x150 [ 614.630933][T17807] __do_fast_syscall_32+0xe7/0x970 [ 614.630947][T17807] ? lockdep_hardirqs_on+0x78/0x100 [ 614.630961][T17807] do_fast_syscall_32+0x32/0x70 [ 614.630975][T17807] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 614.630990][T17807] RIP: 0023:0xf705efec [ 614.631003][T17807] Code: Unable to access opcode bytes at 0xf705efc2. [ 614.631008][T17807] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 000000000000012f [ 614.631019][T17807] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800000c0 [ 614.631026][T17807] RDX: 00000000ffffff9c RSI: 00000000800003c0 RDI: 0000000000001000 [ 614.631033][T17807] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 614.631039][T17807] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 614.631045][T17807] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 614.631059][T17807] [ 614.766641][T16798] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 614.813048][T17809] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3177'. [ 615.073732][T17838] input: syz1 as /devices/virtual/input/input69 [ 615.147148][T17840] ip6gretap0: entered promiscuous mode [ 615.262881][ T64] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 615.265901][ T64] CPU: 0 UID: 0 PID: 64 Comm: kworker/u34:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 615.265920][ T64] Tainted: [L]=SOFTLOCKUP [ 615.265925][ T64] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 615.265933][ T64] Workqueue: hci4 hci_rx_work [ 615.265951][ T64] Call Trace: [ 615.265955][ T64] [ 615.265961][ T64] dump_stack_lvl+0x100/0x190 [ 615.265976][ T64] sysfs_warn_dup.cold+0x1c/0x28 [ 615.265994][ T64] sysfs_create_dir_ns+0x24b/0x2b0 [ 615.266012][ T64] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 615.266028][ T64] ? find_held_lock+0x2b/0x80 [ 615.266042][ T64] ? kobject_add_internal+0x25f/0x930 [ 615.266059][ T64] ? kobject_add_internal+0x25f/0x930 [ 615.266078][ T64] ? do_raw_spin_unlock+0x145/0x1e0 [ 615.266092][ T64] kobject_add_internal+0x2c8/0x930 [ 615.266112][ T64] kobject_add+0x16a/0x1e0 [ 615.266128][ T64] ? __pfx_kobject_add+0x10/0x10 [ 615.266144][ T64] ? class_to_subsys+0x10f/0x150 [ 615.266158][ T64] ? kobject_put+0xb9/0x640 [ 615.266178][ T64] ? _raw_spin_unlock+0x28/0x50 [ 615.266194][ T64] device_add+0x294/0x1970 [ 615.266212][ T64] ? __pfx_dev_set_name+0x10/0x10 [ 615.266225][ T64] ? __pfx_device_add+0x10/0x10 [ 615.266243][ T64] ? mgmt_send_event_skb+0x2fb/0x460 [ 615.266263][ T64] hci_conn_add_sysfs+0x1a3/0x260 [ 615.266281][ T64] le_conn_complete_evt+0x11eb/0x1f60 [ 615.266298][ T64] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 615.266311][ T64] ? hci_event_packet+0x186/0xcd0 [ 615.266327][ T64] hci_le_conn_complete_evt+0x23c/0x3a0 [ 615.266340][ T64] ? skb_pull_data+0x15f/0x1e0 [ 615.266353][ T64] hci_le_meta_evt+0x34a/0x5f0 [ 615.266368][ T64] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 615.266383][ T64] hci_event_packet+0x51c/0xcd0 [ 615.266396][ T64] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 615.266410][ T64] ? __pfx_hci_event_packet+0x10/0x10 [ 615.266425][ T64] ? kcov_remote_start+0x384/0x670 [ 615.266441][ T64] ? lockdep_hardirqs_on+0x78/0x100 [ 615.266457][ T64] hci_rx_work+0x451/0xfc0 [ 615.266474][ T64] process_one_work+0xa23/0x1940 [ 615.266496][ T64] ? __pfx_process_one_work+0x10/0x10 [ 615.266516][ T64] ? __pfx_hci_rx_work+0x10/0x10 [ 615.266530][ T64] worker_thread+0x5ef/0xe50 [ 615.266552][ T64] ? kthread+0x13a/0x450 [ 615.266565][ T64] ? __pfx_worker_thread+0x10/0x10 [ 615.266580][ T64] kthread+0x370/0x450 [ 615.266594][ T64] ? __pfx_kthread+0x10/0x10 [ 615.266609][ T64] ret_from_fork+0x72b/0xd50 [ 615.266624][ T64] ? __pfx_ret_from_fork+0x10/0x10 [ 615.266638][ T64] ? __switch_to+0x800/0x10f0 [ 615.266655][ T64] ? __pfx_kthread+0x10/0x10 [ 615.266671][ T64] ret_from_fork_asm+0x1a/0x30 [ 615.266719][ T64] [ 615.266769][ T64] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 615.363322][ T64] Bluetooth: hci4: failed to register connection device [ 615.982623][ T64] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 616.039176][T17864] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3191'. [ 616.157771][T17867] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 616.187387][T17873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3193'. [ 616.279509][T17878] ieee802154 phy0 wpan0: encryption failed: -22 [ 616.352636][T17884] syz_tun: entered allmulticast mode [ 616.354842][T17884] 9pnet_virtio: no channels available for device syz [ 616.435488][ T64] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 616.489859][T17894] netlink: 100 bytes leftover after parsing attributes in process `syz.9.3201'. [ 616.553843][ T42] audit: type=1326 audit(1785132102.130:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17899 comm="syz.9.3203" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705efec code=0x0 [ 616.606112][T17903] binder: 17899:17903 ioctl c0306201 80000640 returned -22 [ 616.695328][T17908] bridge_slave_0: invalid flags given to default FDB implementation [ 616.699215][T17908] bridge_slave_0: invalid flags given to default FDB implementation [ 616.762296][T17910] tmpfs: Bad value for 'mpol' [ 616.807140][ T42] audit: type=1326 audit(1785132102.380:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17911 comm="syz.1.3208" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 616.820921][ T42] audit: type=1326 audit(1785132102.390:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17911 comm="syz.1.3208" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 616.837051][ T42] audit: type=1326 audit(1785132102.390:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17911 comm="syz.1.3208" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf702efec code=0x7ffc0000 [ 616.847681][ T42] audit: type=1326 audit(1785132102.390:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17911 comm="syz.1.3208" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 616.855182][ T42] audit: type=1326 audit(1785132102.390:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17911 comm="syz.1.3208" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 616.863689][ T42] audit: type=1326 audit(1785132102.390:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17911 comm="syz.1.3208" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 616.872143][ T42] audit: type=1326 audit(1785132102.400:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17911 comm="syz.1.3208" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 616.889102][T13372] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 617.018481][T17917] syzkaller0: entered promiscuous mode [ 617.020347][T17917] syzkaller0: entered allmulticast mode [ 617.189042][ T9] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 617.237954][ T64] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 617.311537][ T9] usb 6-1: device descriptor read/64, error -71 [ 617.534593][T17925] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 617.555035][T17925] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref] [ 617.557468][T17925] pci 0000:00:01.0: BAR 2 [mem 0x80084000-0x80084fff] [ 617.560494][ T9] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 617.563615][T17925] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 617.567071][T17925] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 617.601194][T17925] pci 0000:00:01.0: Adding to iommu group 1 [ 617.606293][T17925] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 617.608452][T17925] pci 0000:00:01.0: vgaarb: bridge control possible [ 617.610434][T17925] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 617.617073][T17925] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 617.626523][T17925] pci 0000:00:02.0: BAR 0 [mem 0x80040000-0x8005ffff] [ 617.628722][T17925] pci 0000:00:02.0: BAR 1 [mem 0x80060000-0x8007ffff] [ 617.631208][T17925] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f] [ 617.633598][T17925] pci 0000:00:02.0: BAR 3 [mem 0x80080000-0x80083fff] [ 617.635787][T17925] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 617.638403][T17925] pci 0000:00:02.0: enabling Extended Tags [ 617.666834][T17925] pci 0000:00:02.0: Adding to iommu group 2 [ 617.684857][T17925] pci 0000:00:1d.7: [8086:293a] type 00 class 0x0c0320 conventional PCI endpoint [ 617.690551][T17925] pci 0000:00:1d.7: BAR 0 [mem 0xfeaf7000-0xfeaf7fff] [ 617.697954][T17925] pci 0000:00:1d.7: Adding to iommu group 7 [ 617.699875][ T9] usb 6-1: device descriptor read/64, error -71 [ 617.707411][T17925] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 617.714098][T17925] pci 0000:00:02.0: ROM [mem 0x81000000-0x8103ffff pref]: assigned [ 617.716582][T17925] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff]: assigned [ 617.721114][T17925] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff]: assigned [ 617.724397][T17925] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff]: assigned [ 617.727503][T17925] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 617.731555][T17925] pci 0000:00:1d.7: BAR 0 [mem 0x81085000-0x81085fff]: assigned [ 617.735024][T17925] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 617.738476][T17925] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 617.760339][T17925] [drm] Found bochs VGA, ID 0xb0c5. [ 617.762601][T17925] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 617.802259][ T9] usb usb6-port1: attempt power cycle [ 618.040021][T17925] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 618.188578][ T9] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 618.227226][ T9] usb 6-1: device descriptor read/8, error -71 [ 618.495542][ T9] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 618.546386][ T9] usb 6-1: device descriptor read/8, error -71 [ 618.653410][ T9] usb usb6-port1: unable to enumerate USB device [ 618.704030][T17925] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 618.738212][T17925] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 618.885721][T17925] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 619.251209][T17925] e1000e 0000:00:02.0 (unnamed net_device) (uninitialized): removed PHC [ 619.527260][T17925] e1000e 0000:00:02.0: probe with driver e1000e failed with error -4 [ 619.560515][T17925] pci 0000:00:1d.7: PCI INT D: failed to register GSI [ 619.562656][T17925] pci 0000:00:1d.7: Can't enable PCI device, BIOS handoff failed. [ 619.565247][T17925] pci 0000:00:1d.7: quirk_usb_early_handoff+0x0/0x1360 took 30683 usecs [ 619.653079][ T41] ehci-pci 0000:00:1d.7: PCI INT D: failed to register GSI [ 620.100142][ T42] audit: type=1326 audit(1785132105.680:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.9.3217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 620.112051][ T42] audit: type=1326 audit(1785132105.690:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.9.3217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 620.119738][ T42] audit: type=1326 audit(1785132105.690:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.9.3217" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf705efec code=0x7ffc0000 [ 620.126306][ T42] audit: type=1326 audit(1785132105.690:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.9.3217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 620.135396][ T42] audit: type=1326 audit(1785132105.700:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.9.3217" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705efec code=0x7ffc0000 [ 620.149014][ T42] audit: type=1326 audit(1785132105.700:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.9.3217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 620.156462][ T42] audit: type=1326 audit(1785132105.700:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.9.3217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 620.255626][T17920] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3211'. [ 620.348345][T17948] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3219'. [ 620.405997][T17950] syzkaller0: entered promiscuous mode [ 620.412791][T17950] syzkaller0: entered allmulticast mode [ 620.418341][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.422860][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.444262][T17950] tipc: Started in network mode [ 620.454117][T17950] tipc: Node identity 86c58f55e568, cluster identity 4711 [ 620.472431][T17950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.477324][T17950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.496418][T17950] tipc: Enabled bearer , priority 0 [ 620.531219][T17949] tipc: Resetting bearer [ 620.601348][T17949] tipc: Disabling bearer [ 620.709423][T17954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3224'. [ 620.715806][ T64] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 620.724819][T17970] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3230'. [ 621.445210][T18003] openvswitch: netlink: Multiple metadata blocks provided [ 621.693321][T16798] Bluetooth: hci4: command 0x0c1a tx timeout [ 621.736514][T18013] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3242'. [ 621.747310][T18013] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3242'. [ 621.858595][T18015] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3243'. [ 622.061436][T18021] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3246'. [ 622.076519][T18021] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3246'. [ 622.094394][T18022] netlink: 'syz.1.3245': attribute type 64 has an invalid length. [ 622.123444][T18022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3245'. [ 622.149790][T18022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 622.681529][T18032] overlay: filesystem on ./file0 not supported as upperdir [ 623.567900][ T42] audit: type=1326 audit(1785132109.140:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18048 comm="syz.5.3255" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700efec code=0x0 [ 623.599800][T18054] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 623.601840][T18054] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 623.626649][T18054] vhci_hcd vhci_hcd.0: Device attached [ 623.888881][ T7551] usb 56-1: SetAddress Request (2) to port 0 [ 623.891079][ T7551] usb 56-1: new SuperSpeed USB device number 2 using vhci_hcd [ 623.918955][ T5851] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 623.936430][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.938507][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.090628][ T5851] usb 5-1: config 1 has an invalid interface number: 236 but max is 0 [ 624.093526][ T5851] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 624.100240][ T5851] usb 5-1: config 1 has no interface number 0 [ 624.108024][ T5851] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=53.4b [ 624.118967][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.239398][ T42] audit: type=1326 audit(1785132109.820:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18065 comm="syz.1.3259" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702efec code=0x0 [ 624.261943][T18055] vhci_hcd: connection reset by peer [ 624.263886][ T12] vhci_hcd vhci_hcd.9: stop threads [ 624.271064][ T12] vhci_hcd vhci_hcd.9: release socket [ 624.275153][ T12] vhci_hcd vhci_hcd.9: disconnect device [ 624.611554][ T64] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 624.642007][T18074] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3261'. [ 625.931451][T18090] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 626.053587][T18099] comedi comedi1: comedi_parport: I/O base address not correctly aligned [ 626.310409][ T9] usb 14-1: new high-speed USB device number 16 using dummy_hcd [ 626.479401][ T9] usb 14-1: Using ep0 maxpacket: 8 [ 626.487694][ T9] usb 14-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 626.499203][ T9] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.502008][ T9] usb 14-1: Product: syz [ 626.508354][ T9] usb 14-1: Manufacturer: syz [ 626.511683][ T9] usb 14-1: SerialNumber: syz [ 626.523748][ T9] usb 14-1: config 0 descriptor?? [ 626.530207][ T9] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 626.546941][ T9] pctv452e: pctv452e_power_ctrl: 1 [ 626.546941][ T9] [ 626.555699][ T9] usb 14-1: selecting invalid altsetting 3 [ 626.562104][ T9] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 626.562104][ T9] [ 626.568686][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 626.579209][T18126] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3271'. [ 626.585700][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 626.588612][ T42] audit: type=1326 audit(1785132112.160:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18123 comm="syz.5.3270" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 626.598406][ T9] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 626.601688][ T9] usb 14-1: media controller created [ 626.603616][ T42] audit: type=1326 audit(1785132112.160:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18123 comm="syz.5.3270" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 626.610529][ T9] dvb-usb: bulk message failed: -22 (8/0) [ 626.619220][ T42] audit: type=1326 audit(1785132112.170:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18123 comm="syz.5.3270" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 626.625944][ T9] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 626.634487][ T42] audit: type=1326 audit(1785132112.170:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18123 comm="syz.5.3270" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf700efec code=0x7ffc0000 [ 626.651257][ T9] dvb-usb: MAC address reading failed. [ 626.651361][ T40] usb 5-1: USB disconnect, device number 44 [ 626.657609][ T42] audit: type=1326 audit(1785132112.170:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18123 comm="syz.5.3270" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 626.687195][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 626.691856][ T42] audit: type=1326 audit(1785132112.170:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18123 comm="syz.5.3270" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700efec code=0x7ffc0000 [ 626.719886][ T42] audit: type=1326 audit(1785132112.200:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18123 comm="syz.5.3270" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 626.742856][T18101] dvb-usb: bulk message failed: -22 (7/0) [ 626.758011][ T42] audit: type=1326 audit(1785132112.210:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18123 comm="syz.5.3270" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 626.774631][T18101] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 626.964825][ T9] DVB: Unable to find symbol stb0899_attach() [ 626.966795][ T9] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 627.009065][ T9] rc_core: IR keymap rc-tt-1500 not found [ 627.011270][ T9] Registered IR keymap rc-empty [ 627.013345][ T9] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.9/usb14/14-1/rc/rc0 [ 627.017711][ T9] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.9/usb14/14-1/rc/rc0/input70 [ 627.023973][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 627.026166][ T9] pctv452e: pctv452e_power_ctrl: 0 [ 627.026166][ T9] [ 627.033142][ T9] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 627.039703][ T9] usb 14-1: USB disconnect, device number 16 [ 627.118741][ T9] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 627.234485][T18158] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3280'. [ 627.359043][ T1490] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 627.381195][T18161] random: crng reseeded on system resumption [ 627.459588][ T42] audit: type=1326 audit(1785132113.040:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18167 comm="syz.0.3283" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 627.475995][ T42] audit: type=1326 audit(1785132113.040:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18167 comm="syz.0.3283" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 627.486270][T18165] openvswitch: netlink: IP tunnel dst address not specified [ 627.518853][ T1490] usb 6-1: Using ep0 maxpacket: 8 [ 627.522740][ T1490] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 627.526928][ T1490] usb 6-1: config 0 has no interface number 0 [ 627.534116][ T1490] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 627.541077][ T1490] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 627.549680][ T1490] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 627.557952][ T1490] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 627.567239][ T1490] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 627.574665][ T1490] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.587492][ T1490] usb 6-1: config 0 descriptor?? [ 627.606480][ T1490] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 627.677067][T18170] netlink: 'syz.9.3282': attribute type 1 has an invalid length. [ 627.774456][T18170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.952067][T18185] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 628.075248][T18153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3278'. [ 628.114727][T18190] binder: 18189:18190 ioctl c00c6211 0 returned -14 [ 628.118461][T16567] usb 6-1: USB disconnect, device number 17 [ 628.235870][T16567] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 628.261728][T18194] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3289'. [ 628.390072][T18199] netlink: 'syz.1.3291': attribute type 1 has an invalid length. [ 628.471996][T18199] 8021q: adding VLAN 0 to HW filter on device bond2 [ 628.517499][T18203] 8021q: adding VLAN 0 to HW filter on device bond2 [ 628.529553][T18203] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 628.537306][T18203] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 628.594795][T18199] mac80211_hwsim hwsim36 wlan1: entered promiscuous mode [ 628.622319][T18199] bond2: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 628.878981][T16567] usb 14-1: new high-speed USB device number 17 using dummy_hcd [ 628.884936][T18224] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3299'. [ 628.971288][ T7551] usb 56-1: device descriptor read/8, error -110 [ 629.033184][T16567] usb 14-1: Using ep0 maxpacket: 8 [ 629.043706][T16567] usb 14-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 629.047229][T16567] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.055655][T16567] usb 14-1: Product: syz [ 629.057098][T16567] usb 14-1: Manufacturer: syz [ 629.058581][T16567] usb 14-1: SerialNumber: syz [ 629.064461][T16567] usb 14-1: config 0 descriptor?? [ 629.070623][T16567] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 629.074357][T16567] pctv452e: pctv452e_power_ctrl: 1 [ 629.074357][T16567] [ 629.076736][T16567] usb 14-1: selecting invalid altsetting 3 [ 629.078549][T16567] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 629.078549][T16567] [ 629.083296][T16567] dvb-usb: bulk message failed: -22 (5/0) [ 629.098143][T16567] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 629.101935][T16567] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 629.105252][T16567] usb 14-1: media controller created [ 629.107482][T16567] dvb-usb: bulk message failed: -22 (8/0) [ 629.110856][T16567] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 629.116411][T16567] dvb-usb: MAC address reading failed. [ 629.129231][T16567] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 629.150102][ T5851] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 629.157712][T18235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3303'. [ 629.167703][T16567] DVB: Unable to find symbol stb0899_attach() [ 629.170631][T16567] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 629.231055][T16567] rc_core: IR keymap rc-tt-1500 not found [ 629.233002][T16567] Registered IR keymap rc-empty [ 629.235116][T16567] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.9/usb14/14-1/rc/rc0 [ 629.242195][T16567] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.9/usb14/14-1/rc/rc0/input72 [ 629.251230][T16567] dvb-usb: schedule remote query interval to 100 msecs. [ 629.253406][T16567] pctv452e: pctv452e_power_ctrl: 0 [ 629.253406][T16567] [ 629.255857][T16567] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 629.260351][ T1490] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 629.281440][T18214] dvb-usb: bulk message failed: -22 (7/0) [ 629.283929][T18214] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 629.291154][T16567] usb 14-1: USB disconnect, device number 17 [ 629.335147][ T5851] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 629.340352][ T5851] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.347822][ T5851] usb 10-1: Product: syz [ 629.349844][ T5851] usb 10-1: Manufacturer: syz [ 629.351656][ T5851] usb 10-1: SerialNumber: syz [ 629.362365][ T7551] usb usb56-port1: attempt power cycle [ 629.403396][T16567] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 629.422820][ T1490] usb 6-1: Using ep0 maxpacket: 32 [ 629.432989][ T1490] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 629.439913][ T1490] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 629.452923][ T1490] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 629.459881][ T1490] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 92 [ 629.468420][ T1490] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 629.478360][ T1490] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.547437][T18239] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.635836][ T5851] rtl8150 10-1:1.0: couldn't reset the device [ 629.638219][ T5851] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 629.647113][ T5851] usb 10-1: USB disconnect, device number 53 [ 629.702159][ T9] usb 6-1: USB disconnect, device number 18 [ 629.720982][T18242] netlink: 'syz.0.3305': attribute type 29 has an invalid length. [ 629.930170][ T7551] usb usb56-port1: unable to enumerate USB device [ 630.215481][ T7551] IPVS: starting estimator thread 0... [ 630.309935][T18249] IPVS: using max 44 ests per chain, 105600 per kthread [ 631.281993][T18266] wg2 speed is unknown, defaulting to 1000 [ 632.032605][T18278] netlink: 'syz.0.3316': attribute type 1 has an invalid length. [ 632.153036][T18278] 8021q: adding VLAN 0 to HW filter on device bond2 [ 632.160311][T18288] FAULT_INJECTION: forcing a failure. [ 632.160311][T18288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.164406][T18288] CPU: 0 UID: 0 PID: 18288 Comm: syz.9.3318 Tainted: G L syzkaller #0 PREEMPT(full) [ 632.164424][T18288] Tainted: [L]=SOFTLOCKUP [ 632.164428][T18288] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 632.164434][T18288] Call Trace: [ 632.164439][T18288] [ 632.164443][T18288] dump_stack_lvl+0x100/0x190 [ 632.164460][T18288] should_fail_ex.cold+0x5/0xa [ 632.164473][T18288] _copy_to_user+0x32/0xd0 [ 632.164523][T18288] simple_read_from_buffer+0xcb/0x170 [ 632.164541][T18288] proc_fail_nth_read+0x1af/0x230 [ 632.164557][T18288] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 632.164572][T18288] ? rw_verify_area+0xce/0x6d0 [ 632.164588][T18288] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 632.164603][T18288] vfs_read+0x1e4/0xb40 [ 632.164615][T18288] ? __pfx_vfs_read+0x10/0x10 [ 632.164630][T18288] ? find_held_lock+0x2b/0x80 [ 632.164644][T18288] ? __fget_files+0x215/0x3d0 [ 632.164657][T18288] ? __fget_files+0x21f/0x3d0 [ 632.164671][T18288] ksys_read+0x12a/0x250 [ 632.164701][T18288] ? __pfx_ksys_read+0x10/0x10 [ 632.164715][T18288] do_int80_emulation+0x14b/0x720 [ 632.164731][T18288] asm_int80_emulation+0x1a/0x20 [ 632.164742][T18288] RIP: 0023:0xf71972eb [ 632.164753][T18288] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 632.164763][T18288] RSP: 002b:00000000f544d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 632.164774][T18288] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f544d5d0 [ 632.164781][T18288] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 632.164787][T18288] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 632.164794][T18288] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 632.164800][T18288] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 632.164815][T18288] [ 632.297733][T18285] bond2: (slave veth7): Enslaving as an active interface with a down link [ 632.551602][T18304] netlink: 'syz.5.3323': attribute type 11 has an invalid length. [ 632.630162][T18286] syz_tun: left promiscuous mode [ 632.654934][T18286] dummy0: left promiscuous mode [ 632.711891][T18286] veth3: left allmulticast mode [ 632.722522][T18286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.786670][T18278] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 632.817391][T18278] bond2: (slave batadv1): making interface the new active one [ 632.835076][T18278] batadv1: entered promiscuous mode [ 632.844623][T18278] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 633.098651][ T12] bond2: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 633.733206][T18321] netlink: 'syz.9.3324': attribute type 10 has an invalid length. [ 635.498862][T18354] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 635.500960][T18354] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 635.508064][T18354] vhci_hcd vhci_hcd.0: Device attached [ 635.531966][T18351] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3338'. [ 635.604707][T18338] syz.9.3333: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 635.630335][T18338] CPU: 2 UID: 0 PID: 18338 Comm: syz.9.3333 Tainted: G L syzkaller #0 PREEMPT(full) [ 635.630355][T18338] Tainted: [L]=SOFTLOCKUP [ 635.630360][T18338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 635.630366][T18338] Call Trace: [ 635.630371][T18338] [ 635.630375][T18338] dump_stack_lvl+0x100/0x190 [ 635.630391][T18338] warn_alloc.cold+0x94/0xa8 [ 635.630404][T18338] ? __pfx_warn_alloc+0x10/0x10 [ 635.630420][T18338] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 635.630436][T18338] ? __pfx_get_page_from_freelist+0x10/0x10 [ 635.630452][T18338] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 635.630473][T18338] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 635.630486][T18338] ? do_raw_spin_lock+0x128/0x260 [ 635.630502][T18338] ? __lock_acquire+0x49f/0x1a40 [ 635.630519][T18338] ? do_raw_spin_unlock+0x145/0x1e0 [ 635.630531][T18338] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 635.630545][T18338] ? rcu_is_watching+0x12/0xc0 [ 635.630557][T18338] ? trace_hrtimer_start+0x77/0x220 [ 635.630576][T18338] __folio_alloc_noprof+0x13/0x260 [ 635.630589][T18338] alloc_migration_target+0x1d7/0x6d0 [ 635.630607][T18338] migrate_pages_batch+0x5dc/0x45c0 [ 635.630625][T18338] ? __pfx_alloc_migration_target+0x10/0x10 [ 635.630646][T18338] ? __pfx_migrate_pages_batch+0x10/0x10 [ 635.630666][T18338] ? __pfx___schedule+0x10/0x10 [ 635.630676][T18338] ? find_held_lock+0x2b/0x80 [ 635.630691][T18338] ? __lock_acquire+0x49f/0x1a40 [ 635.630709][T18338] migrate_pages_sync+0x12c/0x880 [ 635.630727][T18338] ? __pfx_alloc_migration_target+0x10/0x10 [ 635.630746][T18338] ? __pfx_migrate_pages_sync+0x10/0x10 [ 635.630761][T18338] ? __free_object+0x2a8/0x3f0 [ 635.630780][T18338] ? __lock_acquire+0x49f/0x1a40 [ 635.630795][T18338] ? __css_rstat_updated+0x1ce/0x5a0 [ 635.630814][T18338] migrate_pages+0x1a83/0x2850 [ 635.630833][T18338] ? __pfx_alloc_migration_target+0x10/0x10 [ 635.630851][T18338] ? find_held_lock+0x2b/0x80 [ 635.630864][T18338] ? __pfx_migrate_pages+0x10/0x10 [ 635.630882][T18338] ? __mod_zone_page_state+0xe2/0x190 [ 635.630901][T18338] ? lru_gen_update_size+0x431/0xe20 [ 635.630922][T18338] move_pages_and_store_status+0xf1/0x230 [ 635.630945][T18338] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 635.630964][T18338] ? kernel_move_pages+0xbfb/0x14a0 [ 635.630980][T18338] ? kernel_move_pages+0xbfb/0x14a0 [ 635.631000][T18338] kernel_move_pages+0xcf6/0x14a0 [ 635.631021][T18338] ? __pfx_kernel_move_pages+0x10/0x10 [ 635.631042][T18338] ? lockdep_hardirqs_on+0x78/0x100 [ 635.631056][T18338] ? compat_restore_altstack+0x31/0x40 [ 635.631074][T18338] __ia32_sys_move_pages+0xdd/0x1b0 [ 635.631090][T18338] ? __do_fast_syscall_32+0x98/0x970 [ 635.631105][T18338] ? lockdep_hardirqs_on+0x78/0x100 [ 635.631117][T18338] __do_fast_syscall_32+0xe7/0x970 [ 635.631131][T18338] ? lockdep_hardirqs_on+0x78/0x100 [ 635.631145][T18338] do_fast_syscall_32+0x32/0x70 [ 635.631159][T18338] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 635.631173][T18338] RIP: 0023:0xf705efec [ 635.631182][T18338] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 635.631193][T18338] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 635.631205][T18338] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000002 [ 635.631212][T18338] RDX: 00000000800003c0 RSI: 00000000800004c0 RDI: 0000000080000700 [ 635.631218][T18338] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 635.631225][T18338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.631231][T18338] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 635.631244][T18338] [ 635.631249][T18338] Mem-Info: [ 635.704477][T18357] input: syz0 as /devices/virtual/input/input74 [ 635.717832][T18338] active_anon:8913 inactive_anon:224 isolated_anon:2 [ 635.717832][T18338] active_file:9500 inactive_file:18418 isolated_file:0 [ 635.717832][T18338] unevictable:1768 dirty:225 writeback:0 [ 635.717832][T18338] slab_reclaimable:7237 slab_unreclaimable:70322 [ 635.717832][T18338] mapped:30213 shmem:7530 pagetables:1733 [ 635.717832][T18338] sec_pagetables:324 bounce:0 [ 635.717832][T18338] kernel_misc_reclaimable:0 [ 635.717832][T18338] free:49568 free_pcp:444 free_cma:0 [ 635.785471][T18338] Node 0 active_anon:20kB inactive_anon:56kB active_file:0kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8704kB pagetables:1188kB sec_pagetables:1128kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 635.795816][T18338] Node 1 active_anon:35632kB inactive_anon:840kB active_file:38000kB inactive_file:73672kB unevictable:5536kB isolated(anon):8kB isolated(file):0kB mapped:120824kB dirty:900kB writeback:0kB shmem:28584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7428kB pagetables:5744kB sec_pagetables:168kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 635.815794][T18338] Node 0 DMA free:3108kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 635.825428][T18338] lowmem_reserve[]: 0 280 280 280 280 [ 635.827241][T18338] Node 0 DMA32 free:28132kB boost:28732kB min:41504kB low:44696kB high:47888kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20kB inactive_anon:52kB active_file:0kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:5040kB present:1032196kB managed:286952kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:64kB free_cma:0kB [ 635.838859][ T7551] usb 38-1: SetAddress Request (46) to port 0 [ 635.840909][ T7551] usb 38-1: new SuperSpeed USB device number 46 using vhci_hcd [ 635.863702][T18338] lowmem_reserve[]: 0 0 0 0 0 [ 635.869843][T18338] Node 1 DMA32 free:167032kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35632kB inactive_anon:840kB active_file:38000kB inactive_file:73672kB unevictable:5536kB writepending:900kB zspages:8808kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:2492kB local_pcp:1320kB free_cma:0kB [ 635.932702][T18338] lowmem_reserve[]: 0 0 0 0 0 [ 635.935631][T18338] Node 0 DMA: 187*4kB (U) 39*8kB (U) 16*16kB (U) 16*32kB (U) 2*64kB (U) 1*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 3108kB [ 635.956797][T18338] Node 0 DMA32: 979*4kB (UME) 327*8kB (UME) 120*16kB (UME) 233*32kB (UME) 67*64kB (UME) 24*128kB (UME) 3*256kB (M) 0*512kB 2*1024kB (M) 1*2048kB (M) 0*4096kB = 28132kB [ 635.977395][T18338] Node 1 DMA32: 2351*4kB (UME) 892*8kB (UME) 492*16kB (UME) 315*32kB (UME) 199*64kB (UME) 116*128kB (UME) 101*256kB (UME) 48*512kB (UM) 31*1024kB (UM) 11*2048kB (UM) 0*4096kB = 166780kB [ 635.984111][T18338] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 636.001415][T18338] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 636.016060][T18338] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 636.031078][T18338] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 636.046773][T18338] 36438 total pagecache pages [ 636.054721][T18338] 992 pages in swap cache [ 636.056183][T18355] vhci_hcd: connection reset by peer [ 636.059283][ T5830] vhci_hcd vhci_hcd.0: stop threads [ 636.060977][ T5830] vhci_hcd vhci_hcd.0: release socket [ 636.062696][ T5830] vhci_hcd vhci_hcd.0: disconnect device [ 636.063371][T18338] Free swap = 34172kB [ 636.076206][T18338] Total swap = 124996kB [ 636.088081][T18338] 524155 pages RAM [ 636.098503][T18338] 0 pages HighMem/MovableOnly [ 636.105689][T18338] 211524 pages reserved [ 636.111949][T18338] 0 pages cma reserved [ 637.129428][T18388] gfs2: error -5 reading superblock [ 637.235384][T18390] wg2 speed is unknown, defaulting to 1000 [ 637.481804][T18396] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 637.483854][T18396] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 637.488929][T18396] vhci_hcd vhci_hcd.0: Device attached [ 637.536752][T18396] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3348'. [ 637.617704][ T64] Bluetooth: hci3: unexpected cc 0x080f length: 90 > 1 [ 637.626124][ T64] Bluetooth: hci3: unexpected event for opcode 0x080f [ 637.761019][T18404] PKCS8: Unsupported PKCS#8 version [ 637.779363][ T1490] usb 40-1: SetAddress Request (6) to port 0 [ 637.781337][ T1490] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 637.868907][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 638.021824][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 638.032057][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.047174][ T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 638.059653][ T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 638.074783][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 638.086252][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.096779][ T9] usb 5-1: Product: ٪楠࢑ꋍ犃窥靯Ꭶ⊮瓀浈〭ꃿꭰ沪돚紥鰅齈ၛ壽챒껊െꋆꌍᮌ짏斟韘옚촪ű㢉꓋⒉䠘䦕홬ꭻႳ巅檤◝쐤彴鲣焤劍물鰚ὲ㽑㣙梆┴䈇䂶坮᪃ϰ糑뙊뵮曍⌼笀ᣒ뮖ﰞ䷹Ćꖬ윍虷銵ṳꍑ㵢衎ꂰട䂭∼祴后쬩቏刀ꐶ案㮴暳咿ힹꕅ [ 638.134656][ T9] usb 5-1: Manufacturer: ﹙㻽ⵡ䃓鯔涄吂搭뿂m㛉甃㑳ᨸび豘럓趁᢯ᮑ␺Ĝṷꮡᄗ⳧ￌ䦲ꀑ眥挨튇
쀵⽍햏쩣֔餬隙⒗ꪬ珪㦖볩훊熎㤍㠃챣䡈忡蹚⻃痩⳨勨滆侸ޢኑ㈸핯웷쮭豏腚ꖥ赽뿬噀谾〡뜸༇뀫墤Ḇ쬯퓅쨩퐜䰤ᣐ쳝ၐ⚹㤮ᝯꄣ㩾鼐⳦㧩㸌⌺퓥퇡殙 [ 638.152763][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 638.152795][ T42] audit: type=1326 audit(1785132123.730:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.5.3352" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 638.180776][T18397] vhci_hcd: connection reset by peer [ 638.193213][ T5830] vhci_hcd vhci_hcd.1: stop threads [ 638.196541][ T5830] vhci_hcd vhci_hcd.1: release socket [ 638.201616][ T5830] vhci_hcd vhci_hcd.1: disconnect device [ 638.206530][ T42] audit: type=1326 audit(1785132123.730:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.5.3352" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 638.216623][ T9] usb 5-1: SerialNumber: syz [ 638.253746][ T42] audit: type=1326 audit(1785132123.730:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.5.3352" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 638.278531][ T42] audit: type=1326 audit(1785132123.730:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.5.3352" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 638.335247][ T42] audit: type=1326 audit(1785132123.760:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.5.3352" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf700efec code=0x7ffc0000 [ 638.357752][ T42] audit: type=1326 audit(1785132123.760:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.5.3352" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 638.395668][ T42] audit: type=1326 audit(1785132123.760:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.5.3352" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 638.435161][ T42] audit: type=1326 audit(1785132123.760:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.5.3352" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 638.464612][ T42] audit: type=1326 audit(1785132123.760:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.5.3352" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf700efec code=0x7ffc0000 [ 638.498375][ T42] audit: type=1326 audit(1785132123.950:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18406 comm="syz.5.3352" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf700efec code=0x7ffc0000 [ 638.516873][T18409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3353'. [ 638.993447][T18422] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3357'. [ 639.029137][T18426] overlayfs: failed to resolve './file1/file0': -2 [ 639.112084][T18431] 9pnet_virtio: no channels available for device syz [ 639.289959][ T5851] usb 14-1: new high-speed USB device number 18 using dummy_hcd [ 639.553760][T18437] dvmrp0: entered allmulticast mode [ 639.603765][T18442] loop5: detected capacity change from 0 to 7 [ 639.612680][T18442] buffer_io_error: 10 callbacks suppressed [ 639.612691][T18442] Buffer I/O error on dev loop5, logical block 0, async page read [ 639.624363][T18442] Buffer I/O error on dev loop5, logical block 0, async page read [ 639.634434][T18442] Buffer I/O error on dev loop5, logical block 0, async page read [ 639.646891][T18442] Buffer I/O error on dev loop5, logical block 0, async page read [ 639.659556][T18442] Buffer I/O error on dev loop5, logical block 0, async page read [ 639.676902][T18442] Buffer I/O error on dev loop5, logical block 0, async page read [ 639.685282][T18442] Buffer I/O error on dev loop5, logical block 0, async page read [ 639.692362][T18442] ldm_validate_partition_table(): Disk read failed. [ 639.697435][T18442] Buffer I/O error on dev loop5, logical block 0, async page read [ 639.703345][T18442] Buffer I/O error on dev loop5, logical block 0, async page read [ 639.709207][T18442] Buffer I/O error on dev loop5, logical block 0, async page read [ 639.714940][T18442] Dev loop5: unable to read RDB block 0 [ 639.719586][T18442] loop5: unable to read partition table [ 639.726937][T18442] loop5: partition table beyond EOD, truncated [ 639.743699][T18442] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 640.507407][T18450] cgroup: Unknown subsys name 'cpuset' [ 640.567404][T18455] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3368'. [ 640.592909][T18457] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3369'. [ 640.785240][ T9] cdc_ncm 5-1:1.0: bind() failure [ 640.801483][T18463] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3372'. [ 640.809811][ T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 640.820192][ T9] cdc_ncm 5-1:1.1: bind() failure [ 640.826738][T18463] dummy_hcd dummy_hcd.0: remove, state 1 [ 640.839410][ T9] usb 5-1: USB disconnect, device number 45 [ 640.856477][T18463] usb usb5: USB disconnect, device number 1 [ 640.888976][ T7551] usb 38-1: device descriptor read/8, error -110 [ 641.094104][T18463] dummy_hcd dummy_hcd.0: stopped [ 641.098013][T18463] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 641.151537][T18467] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 641.159854][T18467] dummy_hcd dummy_hcd.0: Dummy host controller [ 641.205801][T18467] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 641.218750][T18467] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 641.221944][T18467] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 641.225120][T18467] usb usb1: Product: Dummy host controller [ 641.227126][T18467] usb usb1: Manufacturer: Linux syzkaller dummy_hcd [ 641.229775][T18467] usb usb1: SerialNumber: dummy_hcd.0 [ 641.237403][ T5851] usb 14-1: unable to get BOS descriptor or descriptor too short [ 641.242119][ T5851] usb 14-1: unable to read config index 0 descriptor/start: -71 [ 641.246070][ T5851] usb 14-1: can't read configurations, error -71 [ 641.259375][T18467] hub 1-0:1.0: USB hub found [ 641.263973][T18467] hub 1-0:1.0: 1 port detected [ 641.281211][ T7551] usb usb38-port1: attempt power cycle [ 641.297571][T18473] kernel profiling enabled (shift: 7) [ 641.540567][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 641.566246][T18485] netlink: 100 bytes leftover after parsing attributes in process `syz.9.3380'. [ 641.598876][T15724] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 641.700297][T18489] Bluetooth: MGMT ver 1.23 [ 641.702012][ T64] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 641.714657][ T64] Bluetooth: hci3: Injecting HCI hardware error event [ 641.721795][T16798] Bluetooth: hci3: hardware error 0x00 [ 641.732161][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 641.740745][T15724] usb 6-1: device descriptor read/64, error -71 [ 641.758658][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 641.761636][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.764115][ T9] usb 1-1: Product: syz [ 641.765425][ T9] usb 1-1: Manufacturer: syz [ 641.766872][ T9] usb 1-1: SerialNumber: syz [ 641.839372][ T7551] usb usb38-port1: unable to enumerate USB device [ 641.871688][T18492] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3383'. [ 641.874488][T18492] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 641.940300][T18499] FAULT_INJECTION: forcing a failure. [ 641.940300][T18499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.944785][T18499] CPU: 0 UID: 0 PID: 18499 Comm: syz.9.3385 Tainted: G L syzkaller #0 PREEMPT(full) [ 641.944803][T18499] Tainted: [L]=SOFTLOCKUP [ 641.944808][T18499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 641.944815][T18499] Call Trace: [ 641.944819][T18499] [ 641.944824][T18499] dump_stack_lvl+0x100/0x190 [ 641.944840][T18499] should_fail_ex.cold+0x5/0xa [ 641.944853][T18499] _copy_from_user+0x2e/0xd0 [ 641.944883][T18499] get_compat_msghdr+0xb3/0x480 [ 641.944901][T18499] ? __pfx_get_compat_msghdr+0x10/0x10 [ 641.944919][T18499] ? rcu_is_watching+0x12/0xc0 [ 641.944932][T18499] ? ___sys_recvmsg+0x177/0x1a0 [ 641.944943][T18499] ? kfree+0x1e5/0x6c0 [ 641.944952][T18499] ? __lock_acquire+0x49f/0x1a40 [ 641.944971][T18499] ___sys_recvmsg+0x193/0x1a0 [ 641.944983][T18499] ? __pfx____sys_recvmsg+0x10/0x10 [ 641.945003][T18499] ? __pfx___might_resched+0x10/0x10 [ 641.945023][T18499] do_recvmmsg+0x54d/0x740 [ 641.945037][T18499] ? __pfx_do_recvmmsg+0x10/0x10 [ 641.945055][T18499] ? find_held_lock+0x2b/0x80 [ 641.945068][T18499] ? ksys_write+0x190/0x250 [ 641.945078][T18499] ? ksys_write+0x190/0x250 [ 641.945093][T18499] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 641.945110][T18499] __sys_recvmmsg+0x21f/0x270 [ 641.945126][T18499] ? __pfx___sys_recvmmsg+0x10/0x10 [ 641.945143][T18499] ? ksys_write+0x1ac/0x250 [ 641.945155][T18499] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 641.945174][T18499] ? __do_fast_syscall_32+0x98/0x970 [ 641.945187][T18499] ? lockdep_hardirqs_on+0x78/0x100 [ 641.945200][T18499] __do_fast_syscall_32+0xe7/0x970 [ 641.945214][T18499] ? lockdep_hardirqs_on+0x78/0x100 [ 641.945228][T18499] do_fast_syscall_32+0x32/0x70 [ 641.945242][T18499] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 641.945256][T18499] RIP: 0023:0xf705efec [ 641.945269][T18499] Code: Unable to access opcode bytes at 0xf705efc2. [ 641.945274][T18499] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 641.945285][T18499] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000500 [ 641.945292][T18499] RDX: 000000000000073d RSI: 0000000000000000 RDI: 0000000000000000 [ 641.945298][T18499] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 641.945304][T18499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.945311][T18499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 641.945325][T18499] [ 642.065483][T18468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.069528][T15724] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 642.072675][T18468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.085683][ T9] cdc_ether 1-1:1.0: skipping garbage [ 642.087460][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 642.092383][ T9] usb 1-1: USB disconnect, device number 2 [ 642.218864][T15724] usb 6-1: device descriptor read/64, error -71 [ 642.329449][T15724] usb usb6-port1: attempt power cycle [ 642.616530][T18511] netlink: 100 bytes leftover after parsing attributes in process `syz.9.3389'. [ 642.619176][T18509] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 642.632343][T18509] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 642.645842][T18509] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 642.649366][T18509] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 642.659556][T18509] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 642.665345][T18509] pci 0000:00:01.0: Adding to iommu group 1 [ 642.670216][T15724] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 642.690006][T18509] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 642.690248][T15724] usb 6-1: device descriptor read/8, error -71 [ 642.692009][T18509] pci 0000:00:01.0: vgaarb: bridge control possible [ 642.692035][T18509] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 642.751184][T18509] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 642.762186][T18509] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 642.767623][T18509] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 642.774539][T18509] [drm] Found bochs VGA, ID 0xb0c5. [ 642.776108][T18509] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 642.790970][T18509] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 642.810881][ T1490] usb 40-1: device descriptor read/8, error -110 [ 642.847076][T18509] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 642.949245][T15724] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 642.966730][T18521] netlink: 'syz.5.3391': attribute type 1 has an invalid length. [ 642.971005][T15724] usb 6-1: device descriptor read/8, error -71 [ 642.996881][T18521] 8021q: adding VLAN 0 to HW filter on device bond1 [ 643.035640][T18521] bond1: (slave veth3): Enslaving as an active interface with a down link [ 643.081646][T15724] usb usb6-port1: unable to enumerate USB device [ 643.175304][T18521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.183729][T18521] bond1: (slave batadv0): making interface the new active one [ 643.186799][T18521] batadv0: entered promiscuous mode [ 643.190079][T18521] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 643.212999][ T1490] usb usb40-port1: attempt power cycle [ 643.269725][ T12] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 643.383890][T18533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3396'. [ 643.617332][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 643.617342][ T42] audit: type=1326 audit(1785132129.190:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18543 comm="syz.0.3402" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 643.641414][ T42] audit: type=1326 audit(1785132129.200:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18543 comm="syz.0.3402" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 643.648603][ T42] audit: type=1326 audit(1785132129.200:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18543 comm="syz.0.3402" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 643.655476][ T42] audit: type=1326 audit(1785132129.210:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18543 comm="syz.0.3402" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf702efec code=0x7ffc0000 [ 643.664424][ T42] audit: type=1326 audit(1785132129.210:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18543 comm="syz.0.3402" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 643.671347][ T42] audit: type=1326 audit(1785132129.210:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18543 comm="syz.0.3402" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 643.677952][ T42] audit: type=1326 audit(1785132129.210:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18543 comm="syz.0.3402" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 643.685515][ T42] audit: type=1326 audit(1785132129.210:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18543 comm="syz.0.3402" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 643.769254][T16798] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 643.789873][ T1490] usb usb40-port1: unable to enumerate USB device [ 643.828947][ T10] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 643.960492][ T10] usb 10-1: device descriptor read/64, error -71 [ 643.998839][ T7551] usb 14-1: new high-speed USB device number 20 using dummy_hcd [ 644.137779][T18558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3406'. [ 644.198885][ T10] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 644.221474][T18547] openvswitch: netlink: Flow actions attr not present in new flow. [ 644.230123][ T7551] usb 14-1: unable to get BOS descriptor or descriptor too short [ 644.236060][ T7551] usb 14-1: unable to read config index 0 descriptor/start: -71 [ 644.240138][ T7551] usb 14-1: can't read configurations, error -71 [ 644.339150][ T10] usb 10-1: device descriptor read/64, error -71 [ 644.439622][T16420] batadv1: left promiscuous mode [ 644.459250][ T10] usb usb10-port1: attempt power cycle [ 644.790301][ T5851] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 644.819889][ T10] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 644.840002][ T10] usb 10-1: device descriptor read/8, error -71 [ 644.939102][ T5851] usb 6-1: Using ep0 maxpacket: 8 [ 644.944694][ T5851] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 644.947273][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.950134][ T5851] usb 6-1: Product: syz [ 644.951494][ T5851] usb 6-1: Manufacturer: syz [ 644.952848][ T5851] usb 6-1: SerialNumber: syz [ 644.955499][ T5851] usb 6-1: config 0 descriptor?? [ 644.961146][ T5851] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 644.963800][ T5851] pctv452e: pctv452e_power_ctrl: 1 [ 644.963800][ T5851] [ 644.965923][ T5851] usb 6-1: selecting invalid altsetting 3 [ 644.967496][ T5851] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 644.967496][ T5851] [ 644.970820][ T5851] dvb-usb: bulk message failed: -22 (5/0) [ 644.976339][ T5851] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 644.979553][ T5851] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 644.981933][ T5851] usb 6-1: media controller created [ 644.983464][ T5851] dvb-usb: bulk message failed: -22 (8/0) [ 644.986723][ T5851] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 644.989258][ T5851] dvb-usb: MAC address reading failed. [ 645.002833][ T5851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 645.030121][ T5851] DVB: Unable to find symbol stb0899_attach() [ 645.031973][ T5851] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 645.089309][ T10] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 645.091608][ T5851] rc_core: IR keymap rc-tt-1500 not found [ 645.095530][ T5851] Registered IR keymap rc-empty [ 645.097747][ T5851] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 645.103756][ T5851] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input75 [ 645.108927][ T5851] dvb-usb: schedule remote query interval to 100 msecs. [ 645.110954][ T5851] pctv452e: pctv452e_power_ctrl: 0 [ 645.110954][ T5851] [ 645.113226][ T5851] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 645.119884][ T10] usb 10-1: device descriptor read/8, error -71 [ 645.205110][T18563] dvb-usb: bulk message failed: -22 (7/0) [ 645.214220][T18563] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 645.226473][ T5851] usb 6-1: USB disconnect, device number 23 [ 645.232896][ T10] usb usb10-port1: unable to enumerate USB device [ 645.277498][ T5851] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 645.498854][ T7551] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 645.646672][ T42] audit: type=1326 audit(1785132131.220:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18578 comm="syz.9.3412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 645.648927][ T7551] usb 1-1: Using ep0 maxpacket: 32 [ 645.655370][ T42] audit: type=1326 audit(1785132131.230:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18578 comm="syz.9.3412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 645.657548][ T7551] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 645.665089][ T7551] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 645.668036][ T7551] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 645.671416][ T7551] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 645.674394][ T7551] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 645.677411][ T7551] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 645.681860][ T7551] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 645.684735][ T7551] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.688593][ T7551] usb 1-1: config 0 descriptor?? [ 645.905385][ T7551] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 646.173568][ T7551] usb 1-1: USB disconnect, device number 3 [ 646.184379][ T7551] usblp0: removed [ 646.742268][T18595] Set syz1 is full, maxelem 0 reached [ 646.808401][T18599] ieee802154 phy0 wpan0: encryption failed: -126 [ 646.819644][T18601] fuse: Bad value for 'fd' [ 646.918223][T18606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3422'. [ 646.998932][ T40] usb 14-1: new full-speed USB device number 22 using dummy_hcd [ 647.151301][ T40] usb 14-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 647.155466][ T40] usb 14-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 647.163216][ T40] usb 14-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 1024, setting to 64 [ 647.172812][ T40] usb 14-1: config 0 interface 0 has no altsetting 0 [ 647.180561][ T40] usb 14-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 647.183526][ T40] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.189218][ T40] usb 14-1: Product: syz [ 647.192086][ T40] usb 14-1: Manufacturer: syz [ 647.194050][T18615] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3425'. [ 647.197158][ T40] usb 14-1: SerialNumber: syz [ 647.201754][T18615] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3425'. [ 647.211894][ T40] usb 14-1: config 0 descriptor?? [ 647.216601][T18595] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 647.423694][T18595] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 647.428221][ T40] input: syz syz as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/input/input76 [ 647.532109][T18621] veth3: entered promiscuous mode [ 647.549002][T18621] veth3: entered allmulticast mode [ 647.691151][T18630] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x47 [ 648.018955][ T7551] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 648.169384][ T7551] usb 10-1: Using ep0 maxpacket: 16 [ 648.173287][ T7551] usb 10-1: config 1 interface 0 altsetting 64 bulk endpoint 0x1 has invalid maxpacket 8 [ 648.176851][ T7551] usb 10-1: config 1 interface 0 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 648.181343][ T7551] usb 10-1: config 1 interface 0 has no altsetting 0 [ 648.185282][ T7551] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 648.188095][ T7551] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.190807][ T7551] usb 10-1: Product: syz [ 648.192291][ T7551] usb 10-1: Manufacturer: я [ 648.193912][ T7551] usb 10-1: SerialNumber: syz [ 648.197692][T18634] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 648.200948][T18634] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 648.378992][ T40] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 648.508880][ T40] usb 6-1: device descriptor read/64, error -71 [ 648.547027][T18646] batman_adv: batadv0: Adding interface: dummy0 [ 648.549398][T18646] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.556903][T18646] batman_adv: batadv0: Interface activated: dummy0 [ 648.889007][ T169] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 648.943107][ T40] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 649.656741][ T7551] usb 10-1: USB disconnect, device number 58 [ 649.786004][ T24] usb 14-1: USB disconnect, device number 22 [ 649.818849][ T40] usb 6-1: device descriptor read/64, error -71 [ 649.934338][ T40] usb usb6-port1: attempt power cycle [ 650.278998][ T40] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 650.299632][ T40] usb 6-1: device descriptor read/8, error -71 [ 650.538978][ T40] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 650.559579][ T40] usb 6-1: device descriptor read/8, error -71 [ 650.669432][ T40] usb usb6-port1: unable to enumerate USB device [ 650.827278][T18670] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3441'. [ 650.872203][T18672] binder: BINDER_SET_CONTEXT_MGR already set [ 650.873965][T18672] binder: 18671:18672 ioctl 4018620d 80000100 returned -16 [ 650.923416][T18672] binder: BINDER_SET_CONTEXT_MGR already set [ 650.925177][T18672] binder: 18671:18672 ioctl 4018620d 80004a80 returned -16 [ 651.045109][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 651.045120][ T42] audit: type=1326 audit(1785132136.620:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18679 comm="syz.0.3445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 651.059692][ T42] audit: type=1326 audit(1785132136.630:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18679 comm="syz.0.3445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 651.075759][ T42] audit: type=1326 audit(1785132136.630:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18679 comm="syz.0.3445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 651.082955][ T42] audit: type=1326 audit(1785132136.630:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18679 comm="syz.0.3445" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf702efec code=0x7ffc0000 [ 651.088906][ T10] usb 14-1: new full-speed USB device number 23 using dummy_hcd [ 651.089893][ T42] audit: type=1326 audit(1785132136.630:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18679 comm="syz.0.3445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 651.099038][ T42] audit: type=1326 audit(1785132136.630:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18679 comm="syz.0.3445" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 651.105709][ T42] audit: type=1326 audit(1785132136.630:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18679 comm="syz.0.3445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 651.114127][ T42] audit: type=1326 audit(1785132136.630:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18679 comm="syz.0.3445" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 651.190951][T18683] netlink: 'syz.1.3446': attribute type 16 has an invalid length. [ 651.195820][T18683] netlink: 'syz.1.3446': attribute type 3 has an invalid length. [ 651.200699][T18683] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3446'. [ 651.211324][T18683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3446'. [ 651.287192][T18683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3446'. [ 651.290930][T18683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3446'. [ 651.320283][ T10] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 290, setting to 64 [ 651.323817][ T10] usb 14-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 651.326683][ T10] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.339086][T18683] veth5: entered allmulticast mode [ 651.343503][ T10] usb 14-1: config 0 descriptor?? [ 651.345735][T18670] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 651.357279][T18683] bond3: (slave veth5): Enslaving as an active interface with an up link [ 651.628222][T18696] wg2 speed is unknown, defaulting to 1000 [ 651.836126][ T10] usbhid 14-1:0.0: can't add hid device: -71 [ 651.841541][ T10] usbhid 14-1:0.0: probe with driver usbhid failed with error -71 [ 651.851666][ T10] usb 14-1: USB disconnect, device number 23 [ 651.933053][ T42] audit: type=1326 audit(1785132137.510:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18707 comm="syz.5.3455" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 651.957581][ T42] audit: type=1326 audit(1785132137.510:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18707 comm="syz.5.3455" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 652.418409][T18727] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3462'. [ 652.852519][T18745] program syz.0.3468 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 652.855469][T18745] ata1.00: invalid transfer count 0 [ 654.520668][T16420] batadv0: left promiscuous mode [ 655.374497][T18798] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.376983][T18798] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.394489][T18798] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 655.417250][T18798] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 655.420787][T18798] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 655.423194][T18798] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 655.425990][T18798] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 655.438345][T18798] pci 0000:00:01.0: Adding to iommu group 1 [ 655.450984][T18798] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 655.453121][T18798] pci 0000:00:01.0: vgaarb: bridge control possible [ 655.455128][T18798] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 655.465937][T18798] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 655.469421][T18798] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 655.472973][T18798] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 655.483969][T18798] [drm] Found bochs VGA, ID 0xb0c5. [ 655.485822][T18798] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 655.497887][T18798] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 655.555931][T18798] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 656.146836][T18830] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 656.148850][T18830] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 656.168490][T18830] vhci_hcd vhci_hcd.0: Device attached [ 656.171246][ T42] kauditd_printk_skb: 34 callbacks suppressed [ 656.171256][ T42] audit: type=1326 audit(1785132141.750:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18835 comm="syz.1.3495" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 656.200555][ T42] audit: type=1326 audit(1785132141.760:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18835 comm="syz.1.3495" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 656.219656][ T42] audit: type=1326 audit(1785132141.760:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18835 comm="syz.1.3495" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf702efec code=0x7ffc0000 [ 656.233537][T18837] vhci_hcd: connection closed [ 656.233752][ T5797] vhci_hcd vhci_hcd.5: stop threads [ 656.236452][ T42] audit: type=1326 audit(1785132141.760:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18835 comm="syz.1.3495" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 656.236876][ T5797] vhci_hcd vhci_hcd.5: release socket [ 656.247059][ T42] audit: type=1326 audit(1785132141.760:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18835 comm="syz.1.3495" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 656.253624][ T5797] vhci_hcd vhci_hcd.5: disconnect device [ 656.256526][ T42] audit: type=1326 audit(1785132141.770:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18835 comm="syz.1.3495" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 656.263078][ T42] audit: type=1326 audit(1785132141.770:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18835 comm="syz.1.3495" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 656.364156][T18843] sit1: entered promiscuous mode [ 656.389568][ T1490] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 656.416453][T18845] loop5: detected capacity change from 0 to 7 [ 656.457248][T18845] Dev loop5: unable to read RDB block 7 [ 656.463681][T18845] loop5: unable to read partition table [ 656.470853][T18845] loop5: partition table beyond EOD, truncated [ 656.478848][T18848] mass_storage.usb0/lun.0: unable to open backing file: f [ 656.483232][T18845] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 656.540278][ T1490] usb 1-1: Using ep0 maxpacket: 16 [ 656.553698][ T1490] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 656.571938][ T1490] usb 1-1: config 0 has no interface number 0 [ 656.578217][ T1490] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 656.599203][ T1490] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 656.608323][ T1490] usb 1-1: config 0 interface 41 has no altsetting 0 [ 656.621316][ T1490] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 656.635229][ T1490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.645654][ T1490] usb 1-1: Product: syz [ 656.646905][ T1490] usb 1-1: Manufacturer: syz [ 656.662277][ T1490] usb 1-1: SerialNumber: syz [ 656.681386][ T1490] usb 1-1: config 0 descriptor?? [ 656.697032][T18834] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 656.704390][T18834] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 656.912238][T18834] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 656.914702][T18834] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 656.989923][T18862] se_dev->se_dev_ptr already set for storage object [ 657.079210][ T9] usb 14-1: new high-speed USB device number 24 using dummy_hcd [ 657.115376][T18867] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3507'. [ 657.199681][ T1490] sr9700 1-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 657.208928][ T10] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 657.214030][ T1490] usb 1-1: USB disconnect, device number 4 [ 657.236365][ T9] usb 14-1: unable to get BOS descriptor or descriptor too short [ 657.242796][ T9] usb 14-1: unable to read config index 0 descriptor/start: -71 [ 657.245282][ T9] usb 14-1: can't read configurations, error -71 [ 657.279050][T18869] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.281620][T18869] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.490994][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 657.495869][ T10] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 657.499235][ T10] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 657.499254][ T10] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 657.499269][ T10] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 657.512474][ T10] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 657.515406][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.517883][ T10] usb 6-1: Product: syz [ 657.519732][ T10] usb 6-1: Manufacturer: syz [ 657.521209][ T10] usb 6-1: SerialNumber: syz [ 657.525857][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 657.533522][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input77 [ 657.748901][ T10] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 657.751382][ T10] (id 0x00) [ 657.802669][ T10] rc_core: IR keymap rc-imon-pad not found [ 657.815947][ T10] Registered IR keymap rc-empty [ 657.819704][ T10] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 657.835077][ T10] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 657.881538][T18882] binder: BINDER_SET_CONTEXT_MGR already set [ 657.883630][T18882] binder: 18881:18882 ioctl 4018620d 80004a80 returned -16 [ 657.959868][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 657.963950][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input78 [ 657.971043][ T10] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:28> initialized [ 658.887551][T18903] netlink: 'syz.0.3519': attribute type 10 has an invalid length. [ 658.901027][T18903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3519'. [ 660.798603][T18937] No such timeout policy "syz1" [ 660.889436][T18939] openvswitch: netlink: Actions may not be safe on all matching packets [ 661.076096][T18945] macvlan0: entered promiscuous mode [ 661.079568][T18945] netlink: 'syz.0.3527': attribute type 1 has an invalid length. [ 661.082906][T18945] netlink: 'syz.0.3527': attribute type 2 has an invalid length. [ 661.132691][T18927] imon:send_packet: task interrupted [ 661.137069][T18927] imon:send_packet: packet tx failed (-512) [ 661.141798][T18927] imon:vfd_write: send packet #5 failed [ 661.173378][ T7551] usb 6-1: USB disconnect, device number 28 [ 661.416118][ T64] Bluetooth: hci0: hardware error 0x09 [ 661.794433][T18961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3535'. [ 661.937851][T18970] fuse: Bad value for 'user_id' [ 661.946698][T18970] fuse: Bad value for 'user_id' [ 662.212681][T18974] wg2 speed is unknown, defaulting to 1000 [ 662.911059][T18993] binder: BINDER_SET_CONTEXT_MGR already set [ 662.913089][T18993] binder: 18991:18993 ioctl 4018620d 80000100 returned -16 [ 662.922478][T18993] binder: BINDER_SET_CONTEXT_MGR already set [ 662.924327][T18993] binder: 18991:18993 ioctl 4018620d 80004a80 returned -16 [ 662.926775][T18993] binder: 18991:18993 ioctl 89f3 800002c0 returned -22 [ 663.530917][ T64] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 664.105331][T19014] syz.9.3549 (19014): /proc/19013/oom_adj is deprecated, please use /proc/19013/oom_score_adj instead. [ 664.160326][T19016] se_dev->se_dev_ptr already set for storage object [ 664.425124][T19018] 9p: Could not find request transport: xen [ 664.855160][T19032] netlink: 'syz.1.3553': attribute type 1 has an invalid length. [ 664.885049][T19035] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3556'. [ 664.901232][T19032] 8021q: adding VLAN 0 to HW filter on device bond4 [ 664.926929][T19035] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3556'. [ 665.594789][T19049] sctp: [Deprecated]: syz.1.3560 (pid 19049) Use of struct sctp_assoc_value in delayed_ack socket option. [ 665.594789][T19049] Use struct sctp_sack_info instead [ 666.036340][T19065] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3564'. [ 666.791501][T19089] loop5: detected capacity change from 0 to 7 [ 666.802824][T19089] Dev loop5: unable to read RDB block 7 [ 666.809300][T19089] loop5: AHDI p1 p2 p3 [ 666.812898][T19089] loop5: partition table partially beyond EOD, truncated [ 666.822835][T19089] loop5: p1 start 1818582900 is beyond EOD, truncated [ 666.829719][T19089] loop5: p3 start 335544320 is beyond EOD, truncated [ 667.384247][T19099] syz.1.3574: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 667.391399][T19099] CPU: 0 UID: 0 PID: 19099 Comm: syz.1.3574 Tainted: G L syzkaller #0 PREEMPT(full) [ 667.391420][T19099] Tainted: [L]=SOFTLOCKUP [ 667.391425][T19099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 667.391432][T19099] Call Trace: [ 667.391436][T19099] [ 667.391442][T19099] dump_stack_lvl+0x100/0x190 [ 667.391512][T19099] warn_alloc.cold+0x94/0xa8 [ 667.391526][T19099] ? __pfx_warn_alloc+0x10/0x10 [ 667.391541][T19099] ? kasan_save_stack+0x3f/0x50 [ 667.391556][T19099] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 667.391567][T19099] ? xskq_create+0x52/0x1d0 [ 667.391598][T19099] ? xsk_setsockopt+0x743/0xab0 [ 667.391608][T19099] ? do_sock_setsockopt+0xf3/0x1d0 [ 667.391626][T19099] ? __sys_setsockopt+0x119/0x190 [ 667.391640][T19099] ? __ia32_sys_setsockopt+0xbc/0x160 [ 667.391655][T19099] ? __do_fast_syscall_32+0xe7/0x970 [ 667.391671][T19099] ? do_fast_syscall_32+0x32/0x70 [ 667.391689][T19099] ? xskq_create+0xfb/0x1d0 [ 667.391701][T19099] __vmalloc_node_range_noprof+0x136c/0x1630 [ 667.391723][T19099] ? xskq_create+0xfb/0x1d0 [ 667.391745][T19099] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 667.391764][T19099] ? kasan_save_track+0x14/0x30 [ 667.391777][T19099] ? __kasan_kmalloc+0xaa/0xb0 [ 667.391791][T19099] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 667.391804][T19099] ? xskq_create+0xfb/0x1d0 [ 667.391816][T19099] vmalloc_user_noprof+0x9e/0xe0 [ 667.391834][T19099] ? xskq_create+0xfb/0x1d0 [ 667.391847][T19099] xskq_create+0xfb/0x1d0 [ 667.391860][T19099] xsk_setsockopt+0x743/0xab0 [ 667.391872][T19099] ? __pfx_aa_sk_perm+0x10/0x10 [ 667.391907][T19099] ? __pfx_xsk_setsockopt+0x10/0x10 [ 667.391918][T19099] ? find_held_lock+0x2b/0x80 [ 667.391936][T19099] ? aa_sock_opt_perm+0xfe/0x1b0 [ 667.391949][T19099] ? __pfx_xsk_setsockopt+0x10/0x10 [ 667.391962][T19099] do_sock_setsockopt+0xf3/0x1d0 [ 667.391982][T19099] __sys_setsockopt+0x119/0x190 [ 667.392001][T19099] __ia32_sys_setsockopt+0xbc/0x160 [ 667.392015][T19099] ? __do_fast_syscall_32+0x98/0x970 [ 667.392029][T19099] ? lockdep_hardirqs_on+0x78/0x100 [ 667.392042][T19099] __do_fast_syscall_32+0xe7/0x970 [ 667.392070][T19099] do_fast_syscall_32+0x32/0x70 [ 667.392087][T19099] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 667.392102][T19099] RIP: 0023:0xf702efec [ 667.392116][T19099] Code: Unable to access opcode bytes at 0xf702efc2. [ 667.392122][T19099] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 667.392134][T19099] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000011b [ 667.392141][T19099] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 667.392147][T19099] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 667.392154][T19099] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 667.392161][T19099] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 667.392175][T19099] [ 667.392212][T19099] Mem-Info: [ 667.442634][T19096] tmpfs: Unknown parameter 'gO' [ 667.447754][T19099] active_anon:2887 inactive_anon:2454 isolated_anon:0 [ 667.447754][T19099] active_file:5163 inactive_file:10474 isolated_file:0 [ 667.447754][T19099] unevictable:768 dirty:8 writeback:0 [ 667.447754][T19099] slab_reclaimable:7253 slab_unreclaimable:70395 [ 667.447754][T19099] mapped:24792 shmem:3119 pagetables:1773 [ 667.447754][T19099] sec_pagetables:324 bounce:0 [ 667.447754][T19099] kernel_misc_reclaimable:0 [ 667.447754][T19099] free:30516 free_pcp:3205 free_cma:0 [ 667.536783][T19099] Node 0 active_anon:28kB inactive_anon:48kB active_file:0kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8736kB pagetables:1188kB sec_pagetables:1128kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 667.546984][T19099] Node 1 active_anon:13432kB inactive_anon:9780kB active_file:20700kB inactive_file:41924kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101520kB dirty:24kB writeback:0kB shmem:12636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7484kB pagetables:5920kB sec_pagetables:168kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 667.559817][T19099] Node 0 DMA free:3156kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 667.589964][T19099] lowmem_reserve[]: 0 280 280 280 280 [ 667.592460][T19099] Node 0 DMA32 free:25904kB boost:28732kB min:41504kB low:44696kB high:47888kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:44kB active_file:0kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:5104kB present:1032196kB managed:286952kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 667.605988][T19099] lowmem_reserve[]: 0 0 0 0 0 [ 667.607666][T19099] Node 1 DMA32 free:127308kB boost:6144kB min:53284kB low:65068kB high:76852kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13432kB inactive_anon:9780kB active_file:20700kB inactive_file:41924kB unevictable:1536kB writepending:24kB zspages:8952kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:13020kB local_pcp:776kB free_cma:0kB [ 667.655867][T19099] lowmem_reserve[]: 0 0 0 0 0 [ 667.661862][T19099] Node 0 DMA: 187*4kB (U) 41*8kB (U) 16*16kB (U) 17*32kB (U) 2*64kB (U) 1*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 3156kB [ 667.677280][T19099] Node 0 DMA32: 974*4kB (UME) 329*8kB (UME) 121*16kB (UME) 161*32kB (UME) 66*64kB (UME) 25*128kB (UME) 3*256kB (M) 0*512kB 2*1024kB (M) 1*2048kB (M) 0*4096kB = 25904kB [ 667.684029][T19099] Node 1 DMA32: 1015*4kB (UME) 1992*8kB (UME) 899*16kB (UME) 354*32kB (UME) 149*64kB (UME) 101*128kB (UM) 66*256kB (UME) 28*512kB (UM) 6*1024kB (U) 5*2048kB (U) 5*4096kB (U) = 136268kB [ 667.690481][T19099] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 667.693669][T19099] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 667.696676][T19099] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 667.700007][T19099] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 667.702981][T19099] 17776 total pagecache pages [ 667.704675][T19099] 857 pages in swap cache [ 667.706106][T19099] Free swap = 33212kB [ 667.707447][T19099] Total swap = 124996kB [ 667.725082][T19099] 524155 pages RAM [ 667.731260][T19099] 0 pages HighMem/MovableOnly [ 667.735884][T19099] 211524 pages reserved [ 667.744595][T19099] 0 pages cma reserved [ 668.119539][T19117] /dev/sg0: Can't lookup blockdev [ 668.125028][T19117] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 669.050823][T19136] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3586'. [ 669.289745][ T1490] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 669.439258][ T1490] usb 6-1: Using ep0 maxpacket: 32 [ 669.442527][ T1490] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 669.445961][ T1490] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 669.445984][T19159] FAULT_INJECTION: forcing a failure. [ 669.445984][T19159] name failslab, interval 1, probability 0, space 0, times 0 [ 669.450281][ T1490] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 669.455262][T19159] CPU: 2 UID: 0 PID: 19159 Comm: syz.0.3595 Tainted: G L syzkaller #0 PREEMPT(full) [ 669.455291][T19159] Tainted: [L]=SOFTLOCKUP [ 669.455298][T19159] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 669.455309][T19159] Call Trace: [ 669.455315][T19159] [ 669.455322][T19159] dump_stack_lvl+0x100/0x190 [ 669.455346][T19159] should_fail_ex.cold+0x5/0xa [ 669.455366][T19159] should_failslab+0xc2/0x120 [ 669.455389][T19159] __kmalloc_cache_noprof+0x91/0x6c0 [ 669.455409][T19159] ? register_netdevice+0x50c/0x25a0 [ 669.455435][T19159] register_netdevice+0x50c/0x25a0 [ 669.455463][T19159] ? __pfx_validate_linkmsg+0x10/0x10 [ 669.455484][T19159] ? __pfx_register_netdevice+0x10/0x10 [ 669.455504][T19159] br_dev_newlink+0x6a/0x170 [ 669.455519][T19159] ? __pfx_br_dev_newlink+0x10/0x10 [ 669.455531][T19159] rtnl_newlink+0x1499/0x2380 [ 669.455552][T19159] ? __pfx_rtnl_newlink+0x10/0x10 [ 669.455567][T19159] ? rcu_is_watching+0x12/0xc0 [ 669.455580][T19159] ? kasan_quarantine_put+0x104/0x240 [ 669.455596][T19159] ? kfree_skbmem+0x19a/0x210 [ 669.455606][T19159] ? kmem_cache_free+0x127/0x6b0 [ 669.455624][T19159] ? find_held_lock+0x2b/0x80 [ 669.455642][T19159] ? find_held_lock+0x2b/0x80 [ 669.455654][T19159] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 669.455670][T19159] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 669.455686][T19159] ? __pfx_rtnl_newlink+0x10/0x10 [ 669.455702][T19159] rtnetlink_rcv_msg+0x95e/0xe90 [ 669.455719][T19159] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 669.455748][T19159] ? ref_tracker_free+0x37e/0x6c0 [ 669.455768][T19159] netlink_rcv_skb+0x159/0x420 [ 669.455791][T19159] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 669.455815][T19159] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 669.455848][T19159] ? netlink_deliver_tap+0x1ae/0xcc0 [ 669.455873][T19159] netlink_unicast+0x585/0x850 [ 669.455890][T19159] ? __pfx_netlink_unicast+0x10/0x10 [ 669.455906][T19159] netlink_sendmsg+0x8b0/0xda0 [ 669.455920][T19159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.455935][T19159] ? apparmor_socket_sendmsg+0x15b/0x270 [ 669.455949][T19159] ____sys_sendmsg+0xa4d/0xbe0 [ 669.455961][T19159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 669.455980][T19159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 669.456011][T19159] ___sys_sendmsg+0x190/0x1e0 [ 669.456031][T19159] ? __pfx____sys_sendmsg+0x10/0x10 [ 669.456061][T19159] ? find_held_lock+0x2b/0x80 [ 669.456098][T19159] __sys_sendmsg+0x160/0x210 [ 669.456123][T19159] ? __pfx___sys_sendmsg+0x10/0x10 [ 669.456151][T19159] ? __pfx_ksys_write+0x10/0x10 [ 669.456172][T19159] __do_fast_syscall_32+0xe7/0x970 [ 669.456195][T19159] ? lockdep_hardirqs_on+0x78/0x100 [ 669.456218][T19159] do_fast_syscall_32+0x32/0x70 [ 669.456241][T19159] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 669.456263][T19159] RIP: 0023:0xf702efec [ 669.456285][T19159] Code: Unable to access opcode bytes at 0xf702efc2. [ 669.456293][T19159] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 669.456310][T19159] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 669.456321][T19159] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 669.456332][T19159] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 669.456342][T19159] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 669.456352][T19159] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 669.456377][T19159] [ 669.560614][ T1490] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 669.565772][ T1490] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 669.568631][ T1490] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.572726][ T1490] usb 6-1: Product: syz [ 669.574040][ T1490] usb 6-1: Manufacturer: syz [ 669.575463][ T1490] usb 6-1: SerialNumber: syz [ 669.578227][ T1490] usb 6-1: config 0 descriptor?? [ 669.580452][T19134] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 669.585065][ T1490] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input81 [ 669.788720][T19134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.795447][T19134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.807003][T19134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3585'. [ 669.814834][ T7551] usb 6-1: USB disconnect, device number 29 [ 669.814887][ C0] xpad 6-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 670.780869][T19195] bond3 (unregistering): Released all slaves [ 671.138437][T19207] siw: device registration error -23 [ 672.594568][T19227] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 672.781041][T19240] overlay: Unknown parameter '/' [ 672.819637][T19234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3619'. [ 673.047971][T19246] netlink: 'syz.9.3622': attribute type 10 has an invalid length. [ 673.102117][T19246] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.112807][T19246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.165505][T19246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.171733][T19246] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 673.174994][T19246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 673.183648][T19246] veth1_vlan: left promiscuous mode [ 673.186219][T19246] veth0_vlan: left promiscuous mode [ 673.188750][T19246] veth0_vlan: entered promiscuous mode [ 673.192579][T19246] veth1_vlan: entered promiscuous mode [ 673.199991][T19246] veth1_macvtap: left promiscuous mode [ 673.202536][T19246] veth0_macvtap: left promiscuous mode [ 673.204927][T19246] veth0_macvtap: entered promiscuous mode [ 673.207580][T19246] veth1_macvtap: entered promiscuous mode [ 673.213709][T19246] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 673.216679][T19246] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 673.220477][T19246] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 673.223510][T19246] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 673.227864][T19246] 8021q: adding VLAN 0 to HW filter on device bond1 [ 673.231741][T19246] 8021q: adding VLAN 0 to HW filter on device bond2 [ 673.241753][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.243941][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.254661][ T169] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.256892][ T169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.345952][ T5797] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 673.353382][ T5797] bond2: (slave veth3): making interface the new active one [ 673.365347][ T5797] bond2: active interface up! [ 673.597549][T19250] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3624'. [ 673.656927][T19256] netlink: 'syz.1.3626': attribute type 14 has an invalid length. [ 673.659182][T19257] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3627'. [ 673.882341][T19267] blktrace: Concurrent blktraces are not allowed on sg0 [ 673.968035][ T42] audit: type=1326 audit(1785132159.540:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19271 comm="syz.5.3632" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700efec code=0x0 [ 675.440645][ T10] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 675.588879][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 675.592083][ T10] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 675.594740][ T10] usb 10-1: config 0 has no interface number 0 [ 675.596810][ T10] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 675.601168][ T10] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 675.605281][ T10] usb 10-1: config 0 interface 41 has no altsetting 0 [ 675.612181][ T10] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 675.616075][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.618578][ T10] usb 10-1: Product: syz [ 675.620133][ T10] usb 10-1: Manufacturer: syz [ 675.621658][ T10] usb 10-1: SerialNumber: syz [ 675.624935][ T10] usb 10-1: config 0 descriptor?? [ 675.627507][T19297] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 675.634680][T19297] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 675.844526][T19297] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 675.847330][T19297] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 676.234283][ T10] sr9700 10-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 676.876616][ T10] usb 10-1: USB disconnect, device number 59 [ 676.912244][ T42] audit: type=1326 audit(1785132162.490:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19313 comm="syz.5.3647" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 676.921492][ T42] audit: type=1326 audit(1785132162.500:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19313 comm="syz.5.3647" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 676.936107][ T42] audit: type=1326 audit(1785132162.500:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19313 comm="syz.5.3647" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf700efec code=0x7ffc0000 [ 676.946636][ T42] audit: type=1326 audit(1785132162.500:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19313 comm="syz.5.3647" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 676.955121][ T42] audit: type=1326 audit(1785132162.510:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19313 comm="syz.5.3647" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700efec code=0x7ffc0000 [ 676.975195][ T42] audit: type=1326 audit(1785132162.550:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19316 comm="syz.0.3648" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 676.986843][ T42] audit: type=1326 audit(1785132162.550:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19316 comm="syz.0.3648" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 676.998360][ T42] audit: type=1326 audit(1785132162.560:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19316 comm="syz.0.3648" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 677.009985][ T42] audit: type=1326 audit(1785132162.560:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19316 comm="syz.0.3648" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 679.076956][T19346] FAULT_INJECTION: forcing a failure. [ 679.076956][T19346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 679.083891][T19346] CPU: 0 UID: 0 PID: 19346 Comm: syz.1.3659 Tainted: G L syzkaller #0 PREEMPT(full) [ 679.083911][T19346] Tainted: [L]=SOFTLOCKUP [ 679.083915][T19346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 679.083922][T19346] Call Trace: [ 679.083926][T19346] [ 679.083931][T19346] dump_stack_lvl+0x100/0x190 [ 679.083947][T19346] should_fail_ex.cold+0x5/0xa [ 679.083961][T19346] _copy_to_user+0x32/0xd0 [ 679.083979][T19346] simple_read_from_buffer+0xcb/0x170 [ 679.083998][T19346] proc_fail_nth_read+0x1af/0x230 [ 679.084013][T19346] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 679.084042][T19346] ? rw_verify_area+0xce/0x6d0 [ 679.084058][T19346] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 679.084073][T19346] vfs_read+0x1e4/0xb40 [ 679.084085][T19346] ? __pfx_vfs_read+0x10/0x10 [ 679.084101][T19346] ? find_held_lock+0x2b/0x80 [ 679.084115][T19346] ? __fget_files+0x215/0x3d0 [ 679.084128][T19346] ? __fget_files+0x21f/0x3d0 [ 679.084142][T19346] ksys_read+0x12a/0x250 [ 679.084152][T19346] ? __pfx_ksys_read+0x10/0x10 [ 679.084166][T19346] do_int80_emulation+0x14b/0x720 [ 679.084182][T19346] asm_int80_emulation+0x1a/0x20 [ 679.084193][T19346] RIP: 0023:0xf71672eb [ 679.084203][T19346] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 679.084214][T19346] RSP: 002b:00000000f541d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 679.084225][T19346] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f541d5d0 [ 679.084231][T19346] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 679.084238][T19346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 679.084245][T19346] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 679.084251][T19346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 679.084265][T19346] [ 679.260757][T19350] netlink: 'syz.9.3660': attribute type 2 has an invalid length. [ 679.339237][ T1490] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 679.370168][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 679.370179][ T42] audit: type=1326 audit(1785132164.950:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19353 comm="syz.1.3662" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 679.409488][ T42] audit: type=1326 audit(1785132164.960:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19353 comm="syz.1.3662" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 679.438024][ T42] audit: type=1326 audit(1785132164.960:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19353 comm="syz.1.3662" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf702efec code=0x7ffc0000 [ 679.447243][ T42] audit: type=1326 audit(1785132164.960:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19353 comm="syz.1.3662" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 679.457048][ T42] audit: type=1326 audit(1785132164.960:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19353 comm="syz.1.3662" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 679.465313][ T42] audit: type=1326 audit(1785132164.980:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19353 comm="syz.1.3662" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 679.473034][ T42] audit: type=1326 audit(1785132164.980:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19353 comm="syz.1.3662" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 679.489481][ T1490] usb 10-1: Using ep0 maxpacket: 8 [ 679.503341][ T1490] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 679.506751][ T1490] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 679.512568][ T1490] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.526509][ T1490] usb 10-1: config 0 descriptor?? [ 679.682957][T19357] warn_alloc: 1 callbacks suppressed [ 679.682968][T19357] syz.0.3663: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 679.706330][T19357] CPU: 0 UID: 0 PID: 19357 Comm: syz.0.3663 Tainted: G L syzkaller #0 PREEMPT(full) [ 679.706350][T19357] Tainted: [L]=SOFTLOCKUP [ 679.706354][T19357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 679.706360][T19357] Call Trace: [ 679.706364][T19357] [ 679.706369][T19357] dump_stack_lvl+0x100/0x190 [ 679.706386][T19357] warn_alloc.cold+0x94/0xa8 [ 679.706411][T19357] ? __pfx_warn_alloc+0x10/0x10 [ 679.706439][T19357] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 679.706455][T19357] ? __pfx_get_page_from_freelist+0x10/0x10 [ 679.706471][T19357] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 679.706491][T19357] ? debug_object_activate+0x343/0x4b0 [ 679.706509][T19357] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 679.706521][T19357] ? do_raw_spin_unlock+0x145/0x1e0 [ 679.706535][T19357] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 679.706546][T19357] ? debug_object_activate+0x343/0x4b0 [ 679.706564][T19357] ? __pfx_debug_object_activate+0x10/0x10 [ 679.706592][T19357] __folio_alloc_noprof+0x13/0x260 [ 679.706605][T19357] alloc_migration_target+0x1d7/0x6d0 [ 679.706623][T19357] migrate_pages_batch+0x5dc/0x45c0 [ 679.706641][T19357] ? __pfx_alloc_migration_target+0x10/0x10 [ 679.706662][T19357] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 679.706677][T19357] ? __pfx_migrate_pages_batch+0x10/0x10 [ 679.706697][T19357] ? set_ptes+0x14c/0x1d0 [ 679.706708][T19357] ? find_held_lock+0x2b/0x80 [ 679.706721][T19357] ? rcu_read_unlock+0x2d/0xb0 [ 679.706732][T19357] ? rcu_read_unlock+0x2d/0xb0 [ 679.706748][T19357] migrate_pages_sync+0x12c/0x880 [ 679.706766][T19357] ? __pfx_alloc_migration_target+0x10/0x10 [ 679.706786][T19357] ? __pfx_migrate_pages_sync+0x10/0x10 [ 679.706806][T19357] ? __lock_acquire+0x49f/0x1a40 [ 679.706822][T19357] ? __css_rstat_updated+0x1ce/0x5a0 [ 679.706841][T19357] migrate_pages+0x1a83/0x2850 [ 679.706866][T19357] ? __pfx_alloc_migration_target+0x10/0x10 [ 679.706886][T19357] ? __pfx_migrate_pages+0x10/0x10 [ 679.706906][T19357] ? __lock_acquire+0x49f/0x1a40 [ 679.706924][T19357] ? mtree_load+0x32d/0xa90 [ 679.706940][T19357] move_pages_and_store_status+0xf1/0x230 [ 679.706959][T19357] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 679.706982][T19357] kernel_move_pages+0xc89/0x14a0 [ 679.707004][T19357] ? __pfx_kernel_move_pages+0x10/0x10 [ 679.707025][T19357] ? xfd_validate_state+0x129/0x190 [ 679.707042][T19357] __ia32_sys_move_pages+0xdd/0x1b0 [ 679.707059][T19357] ? __do_fast_syscall_32+0x98/0x970 [ 679.707073][T19357] ? lockdep_hardirqs_on+0x78/0x100 [ 679.707086][T19357] __do_fast_syscall_32+0xe7/0x970 [ 679.707102][T19357] do_fast_syscall_32+0x32/0x70 [ 679.707116][T19357] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 679.707131][T19357] RIP: 0023:0xf702efec [ 679.707144][T19357] Code: Unable to access opcode bytes at 0xf702efc2. [ 679.707149][T19357] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 679.707160][T19357] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000000020a0 [ 679.707167][T19357] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 679.707174][T19357] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 679.707180][T19357] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 679.707187][T19357] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 679.707201][T19357] [ 679.708387][T19357] Mem-Info: [ 679.863357][ T1490] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 679.927681][T19357] active_anon:924 inactive_anon:2379 isolated_anon:0 [ 679.927681][T19357] active_file:5641 inactive_file:13710 isolated_file:0 [ 679.927681][T19357] unevictable:768 dirty:68 writeback:0 [ 679.927681][T19357] slab_reclaimable:7239 slab_unreclaimable:70441 [ 679.927681][T19357] mapped:23411 shmem:784 pagetables:1776 [ 679.927681][T19357] sec_pagetables:326 bounce:0 [ 679.927681][T19357] kernel_misc_reclaimable:0 [ 679.927681][T19357] free:50331 free_pcp:12814 free_cma:0 [ 679.941525][T19357] Node 0 active_anon:44kB inactive_anon:32kB active_file:0kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8704kB pagetables:1176kB sec_pagetables:1128kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 679.951550][T19357] Node 1 active_anon:3652kB inactive_anon:9484kB active_file:22564kB inactive_file:54840kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:93344kB dirty:272kB writeback:0kB shmem:1600kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7404kB pagetables:5860kB sec_pagetables:176kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 679.962096][T19357] Node 0 DMA free:3156kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 679.971043][T19357] lowmem_reserve[]: 0 280 280 280 280 [ 679.972765][T19357] Node 0 DMA32 free:27256kB boost:28732kB min:41504kB low:44696kB high:47888kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40kB inactive_anon:32kB active_file:0kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:5096kB present:1032196kB managed:286952kB mlocked:0kB bounce:0kB free_pcp:1120kB local_pcp:340kB free_cma:0kB [ 679.982799][T19357] lowmem_reserve[]: 0 0 0 0 0 [ 679.984231][T19357] Node 1 DMA32 free:170912kB boost:6144kB min:53284kB low:65068kB high:76852kB reserved_highatomic:0KB free_highatomic:0KB active_anon:3516kB inactive_anon:9484kB active_file:22564kB inactive_file:54840kB unevictable:1536kB writepending:272kB zspages:8868kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:50216kB local_pcp:24108kB free_cma:0kB [ 679.994455][T19357] lowmem_reserve[]: 0 0 0 0 0 [ 679.995956][T19357] Node 0 DMA: 187*4kB (U) 41*8kB (U) 16*16kB (U) 17*32kB (U) 2*64kB (U) 1*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 3156kB [ 680.002819][T19357] Node 0 DMA32: 958*4kB (UME) 314*8kB (UME) 113*16kB (UME) 217*32kB (UME) 64*64kB (UME) 25*128kB (UME) 3*256kB (M) 0*512kB 2*1024kB (M) 1*2048kB (M) 0*4096kB = 27256kB [ 680.008492][T19357] Node 1 DMA32: 2222*4kB (UME) 697*8kB (UME) 682*16kB (UME) 352*32kB (UM) 208*64kB (UME) 115*128kB (UM) 79*256kB (UME) 46*512kB (UM) 25*1024kB (UM) 12*2048kB (UM) 3*4096kB (UM) = 170912kB [ 680.014859][T19357] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 680.017880][T19357] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 680.021675][T19357] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 680.024688][T19357] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 680.027537][T19357] 21147 total pagecache pages [ 680.029482][T19357] 1014 pages in swap cache [ 680.030911][T19357] Free swap = 33468kB [ 680.032199][T19357] Total swap = 124996kB [ 680.033520][T19357] 524155 pages RAM [ 680.034689][T19357] 0 pages HighMem/MovableOnly [ 680.036166][T19357] 211524 pages reserved [ 680.037503][T19357] 0 pages cma reserved [ 680.351275][ T9] usb 10-1: USB disconnect, device number 60 [ 680.379403][ T40] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 680.548945][ T40] usb 1-1: Using ep0 maxpacket: 32 [ 680.552554][ T40] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 680.556631][ T40] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 680.561662][ T40] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 680.565935][ T40] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 680.583261][ T40] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 680.588056][ T40] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.595026][ T40] usb 1-1: Product: syz [ 680.596767][ T40] usb 1-1: Manufacturer: syz [ 680.598716][ T40] usb 1-1: SerialNumber: syz [ 680.614249][ C2] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 680.620554][ T40] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input82 [ 680.641145][T19382] siw: device registration error -23 [ 680.840124][ T40] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 680.847739][ T40] (id 0x00) [ 680.939326][ T40] rc_core: IR keymap rc-imon-pad not found [ 680.960286][ T40] Registered IR keymap rc-empty [ 680.968386][ T40] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 680.988379][ T40] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 681.159889][T19387] tipc: Enabling of bearer rejected, failed to enable media [ 681.168743][T19387] netlink: 'syz.5.3674': attribute type 1 has an invalid length. [ 681.169968][ T40] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 681.178247][T19387] netlink: 'syz.5.3674': attribute type 2 has an invalid length. [ 681.185156][T19387] netlink: 236 bytes leftover after parsing attributes in process `syz.5.3674'. [ 681.193461][ T40] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input83 [ 681.210659][ T40] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:5> initialized [ 681.542159][T13373] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 681.609292][T19389] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3673'. [ 681.869367][T13777] udevd[13777]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 682.288275][T19399] [ 682.289109][T19399] ====================================================== [ 682.291255][T19399] WARNING: possible circular locking dependency detected [ 682.293446][T19399] syzkaller #0 Tainted: G L [ 682.295413][T19399] ------------------------------------------------------ [ 682.297553][T19399] syz.9.3676/19399 is trying to acquire lock: [ 682.299408][T19399] ffffffff90b50a68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 682.301787][T19399] [ 682.301787][T19399] but task is already holding lock: [ 682.303889][T19399] ffff888000d29860 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 682.306416][T19399] [ 682.306416][T19399] which lock already depends on the new lock. [ 682.306416][T19399] [ 682.309549][T19399] [ 682.309549][T19399] the existing dependency chain (in reverse order) is: [ 682.312302][T19399] [ 682.312302][T19399] -> #6 (&pipe->mutex){+.+.}-{4:4}: [ 682.314600][T19399] lock_acquire+0x1b9/0x370 [ 682.316161][T19399] __mutex_lock+0x1a4/0x1bd0 [ 682.317759][T19399] pipe_lock+0x69/0x80 [ 682.319261][T19399] iter_file_splice_write+0x1fd/0x10b0 [ 682.321135][T19399] do_splice+0x109c/0x1f90 [ 682.322673][T19399] __do_splice+0x33b/0x370 [ 682.324235][T19399] __ia32_sys_splice+0x189/0x250 [ 682.325952][T19399] __do_fast_syscall_32+0xe7/0x970 [ 682.327711][T19399] do_fast_syscall_32+0x32/0x70 [ 682.329380][T19399] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 682.331471][T19399] [ 682.331471][T19399] -> #5 (sb_writers#5){.+.+}-{0:0}: [ 682.333779][T19399] lock_acquire+0x1b9/0x370 [ 682.335372][T19399] mnt_want_write+0x6f/0x410 [ 682.336992][T19399] path_openat+0xad9/0x4280 [ 682.338544][T19399] do_file_open+0x20e/0x430 [ 682.340097][T19399] file_open_name+0x1c3/0x3e0 [ 682.341719][T19399] filp_open+0x2e/0x50 [ 682.343170][T19399] fsg_lun_open+0x6b/0x7b0 [ 682.344746][T19399] fsg_store_file+0x1e7/0x450 [ 682.346351][T19399] configfs_write_iter+0x302/0x4e0 [ 682.348100][T19399] vfs_write+0x6ac/0x1050 [ 682.349620][T19399] ksys_write+0x12a/0x250 [ 682.351143][T19399] __do_fast_syscall_32+0xe7/0x970 [ 682.352881][T19399] do_fast_syscall_32+0x32/0x70 [ 682.354536][T19399] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 682.356619][T19399] [ 682.356619][T19399] -> #4 (&common->filesem){+.+.}-{4:4}: [ 682.358956][T19399] lock_acquire+0x1b9/0x370 [ 682.360500][T19399] down_write+0x8b/0x1f0 [ 682.361943][T19399] fsg_store_file+0x193/0x450 [ 682.363639][T19399] configfs_write_iter+0x302/0x4e0 [ 682.365857][T19399] vfs_write+0x6ac/0x1050 [ 682.367771][T19399] ksys_write+0x12a/0x250 [ 682.369713][T19399] __do_fast_syscall_32+0xe7/0x970 [ 682.371812][T19399] do_fast_syscall_32+0x32/0x70 [ 682.373738][T19399] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 682.375827][T19399] [ 682.375827][T19399] -> #3 (&p->frag_sem){.+.+}-{4:4}: [ 682.378088][T19399] lock_acquire+0x1b9/0x370 [ 682.379641][T19399] down_read+0x99/0x4c0 [ 682.381112][T19399] configfs_write_iter+0x218/0x4e0 [ 682.382827][T19399] vfs_write+0x6ac/0x1050 [ 682.384360][T19399] ksys_write+0x12a/0x250 [ 682.385893][T19399] __do_fast_syscall_32+0xe7/0x970 [ 682.387636][T19399] do_fast_syscall_32+0x32/0x70 [ 682.389298][T19399] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 682.391406][T19399] [ 682.391406][T19399] -> #2 (&buffer->mutex){+.+.}-{4:4}: [ 682.393738][T19399] lock_acquire+0x1b9/0x370 [ 682.395288][T19399] __mutex_lock+0x1a4/0x1bd0 [ 682.396877][T19399] configfs_read_iter+0x79/0x6f0 [ 682.398535][T19399] __kernel_read+0x397/0xad0 [ 682.400120][T19399] integrity_kernel_read+0x7e/0xb0 [ 682.401854][T19399] ima_calc_file_hash_tfm+0x25e/0x350 [ 682.403674][T19399] ima_calc_file_hash+0x1e3/0x380 [ 682.405389][T19399] ima_collect_measurement+0x94f/0xb30 [ 682.407249][T19399] process_measurement+0xdfe/0x2350 [ 682.409019][T19399] ima_file_check+0xcc/0x120 [ 682.410599][T19399] security_file_post_open+0xc4/0x210 [ 682.412431][T19399] path_openat+0x985/0x4280 [ 682.413966][T19399] do_file_open+0x20e/0x430 [ 682.415498][T19399] do_sys_openat2+0x10f/0x1e0 [ 682.417133][T19399] __ia32_compat_sys_openat+0x12d/0x210 [ 682.419028][T19399] __do_fast_syscall_32+0xe7/0x970 [ 682.420769][T19399] do_fast_syscall_32+0x32/0x70 [ 682.422421][T19399] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 682.424526][T19399] [ 682.424526][T19399] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 682.427179][T19399] lock_acquire+0x1b9/0x370 [ 682.428738][T19399] __mutex_lock+0x1a4/0x1bd0 [ 682.430307][T19399] process_measurement+0x5ab/0x2350 [ 682.432082][T19399] ima_file_check+0xcc/0x120 [ 682.433675][T19399] security_file_post_open+0xc4/0x210 [ 682.435532][T19399] path_openat+0x985/0x4280 [ 682.437096][T19399] do_file_open_root+0x2f6/0x5a0 [ 682.438792][T19399] file_open_root+0x1c6/0x3f0 [ 682.440379][T19399] kernel_read_file_from_path_initns+0x189/0x260 [ 682.442415][T19399] _request_firmware+0x733/0x13c0 [ 682.444115][T19399] request_firmware+0x35/0x50 [ 682.445665][T19399] reg_reload_regdb+0x85/0x460 [ 682.447260][T19399] genl_family_rcv_msg_doit+0x214/0x300 [ 682.449165][T19399] genl_rcv_msg+0x560/0x800 [ 682.450743][T19399] netlink_rcv_skb+0x159/0x420 [ 682.452493][T19399] genl_rcv+0x28/0x40 [ 682.454077][T19399] netlink_unicast+0x585/0x850 [ 682.455924][T19399] netlink_sendmsg+0x8b0/0xda0 [ 682.457729][T19399] ____sys_sendmsg+0xa4d/0xbe0 [ 682.459577][T19399] ___sys_sendmsg+0x190/0x1e0 [ 682.461188][T19399] __sys_sendmsg+0x160/0x210 [ 682.462667][T19399] __do_fast_syscall_32+0xe7/0x970 [ 682.464225][T19399] do_fast_syscall_32+0x32/0x70 [ 682.465865][T19399] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 682.467978][T19399] [ 682.467978][T19399] -> #0 (cb_lock){++++}-{4:4}: [ 682.470308][T19399] check_prev_add+0xeb/0xe60 [ 682.472290][T19399] __lock_acquire+0x136c/0x1a40 [ 682.474188][T19399] lock_acquire+0x1b9/0x370 [ 682.475755][T19399] down_read+0x99/0x4c0 [ 682.477219][T19399] genl_rcv+0x19/0x40 [ 682.478644][T19399] netlink_unicast+0x585/0x850 [ 682.480289][T19399] netlink_sendmsg+0x8b0/0xda0 [ 682.481919][T19399] sock_sendmsg+0x394/0x410 [ 682.483496][T19399] splice_to_socket+0xb3c/0x11a0 [ 682.485186][T19399] do_splice+0x109c/0x1f90 [ 682.486752][T19399] __do_splice+0x33b/0x370 [ 682.488289][T19399] __ia32_sys_splice+0x189/0x250 [ 682.489966][T19399] __do_fast_syscall_32+0xe7/0x970 [ 682.491694][T19399] do_fast_syscall_32+0x32/0x70 [ 682.493390][T19399] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 682.495444][T19399] [ 682.495444][T19399] other info that might help us debug this: [ 682.495444][T19399] [ 682.498364][T19399] Chain exists of: [ 682.498364][T19399] cb_lock --> sb_writers#5 --> &pipe->mutex [ 682.498364][T19399] [ 682.501850][T19399] Possible unsafe locking scenario: [ 682.501850][T19399] [ 682.504122][T19399] CPU0 CPU1 [ 682.505780][T19399] ---- ---- [ 682.507437][T19399] lock(&pipe->mutex); [ 682.508726][T19399] lock(sb_writers#5); [ 682.510760][T19399] lock(&pipe->mutex); [ 682.512811][T19399] rlock(cb_lock); [ 682.514007][T19399] [ 682.514007][T19399] *** DEADLOCK *** [ 682.514007][T19399] [ 682.516459][T19399] 1 lock held by syz.9.3676/19399: [ 682.518036][T19399] #0: ffff888000d29860 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 682.520711][T19399] [ 682.520711][T19399] stack backtrace: [ 682.522536][T19399] CPU: 2 UID: 0 PID: 19399 Comm: syz.9.3676 Tainted: G L syzkaller #0 PREEMPT(full) [ 682.522553][T19399] Tainted: [L]=SOFTLOCKUP [ 682.522557][T19399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 682.522564][T19399] Call Trace: [ 682.522569][T19399] [ 682.522574][T19399] dump_stack_lvl+0x100/0x190 [ 682.522589][T19399] print_circular_bug.cold+0x178/0x1c7 [ 682.522608][T19399] check_noncircular+0x146/0x160 [ 682.522627][T19399] check_prev_add+0xeb/0xe60 [ 682.522645][T19399] __lock_acquire+0x136c/0x1a40 [ 682.522665][T19399] lock_acquire+0x1b9/0x370 [ 682.522682][T19399] ? genl_rcv+0x19/0x40 [ 682.522695][T19399] ? __pfx___might_resched+0x10/0x10 [ 682.522712][T19399] down_read+0x99/0x4c0 [ 682.522726][T19399] ? genl_rcv+0x19/0x40 [ 682.522739][T19399] ? __pfx_down_read+0x10/0x10 [ 682.522759][T19399] ? netlink_deliver_tap+0x1ae/0xcc0 [ 682.522771][T19399] genl_rcv+0x19/0x40 [ 682.522783][T19399] netlink_unicast+0x585/0x850 [ 682.522795][T19399] ? __pfx_netlink_unicast+0x10/0x10 [ 682.522806][T19399] ? __build_skb_around+0x278/0x390 [ 682.522820][T19399] ? is_vmalloc_addr+0x86/0xa0 [ 682.522833][T19399] netlink_sendmsg+0x8b0/0xda0 [ 682.522846][T19399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.522860][T19399] ? apparmor_socket_sendmsg+0x15b/0x270 [ 682.522873][T19399] sock_sendmsg+0x394/0x410 [ 682.522884][T19399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.522895][T19399] ? __pfx_sock_sendmsg+0x10/0x10 [ 682.522909][T19399] splice_to_socket+0xb3c/0x11a0 [ 682.522924][T19399] ? __pfx_splice_to_socket+0x10/0x10 [ 682.522937][T19399] ? __pfx___futex_wait+0x10/0x10 [ 682.522956][T19399] ? apparmor_file_permission+0x13f/0x1c0 [ 682.522972][T19399] ? bpf_lsm_file_permission+0x9/0x10 [ 682.522982][T19399] ? security_file_permission+0x76/0x210 [ 682.522998][T19399] ? __pfx_splice_to_socket+0x10/0x10 [ 682.523010][T19399] do_splice+0x109c/0x1f90 [ 682.523022][T19399] ? __lock_acquire+0x49f/0x1a40 [ 682.523040][T19399] ? __pfx_do_splice+0x10/0x10 [ 682.523050][T19399] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 682.523061][T19399] ? find_held_lock+0x2b/0x80 [ 682.523075][T19399] __do_splice+0x33b/0x370 [ 682.523087][T19399] ? __pfx___do_splice+0x10/0x10 [ 682.523100][T19399] __ia32_sys_splice+0x189/0x250 [ 682.523112][T19399] __do_fast_syscall_32+0xe7/0x970 [ 682.523127][T19399] do_fast_syscall_32+0x32/0x70 [ 682.523144][T19399] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 682.523165][T19399] RIP: 0023:0xf705efec [ 682.523186][T19399] Code: Unable to access opcode bytes at 0xf705efc2. [ 682.523194][T19399] RSP: 002b:00000000f542c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000139 [ 682.523206][T19399] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 682.523215][T19399] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000007151 [ 682.523222][T19399] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 682.523229][T19399] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 682.523237][T19399] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 682.523248][T19399] [ 682.744220][ T42] audit: type=1326 audit(1785132168.320:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19421 comm="syz.5.3680" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 682.756713][ T42] audit: type=1326 audit(1785132168.330:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19421 comm="syz.5.3680" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 682.767896][ T42] audit: type=1326 audit(1785132168.330:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19421 comm="syz.5.3680" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 684.315483][T19424] imon:send_packet: task interrupted [ 684.317635][T19424] imon:send_packet: packet tx failed (-512) [ 684.320059][T19424] imon:vfd_write: send packet #5 failed [ 684.336808][T16567] usb 1-1: USB disconnect, device number 5 [ 685.380696][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.382825][ T1443] ieee802154 phy1 wpan1: encryption failed: -22