last executing test programs: 5m40.07308685s ago: executing program 32 (id=10): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20044801) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) eventfd2(0x5, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x1) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mydev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)='<1>', 0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/77, 0x4d}], 0x1) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000001a40)={0x2, 0xa47, &(0x7f00000018c0)="6814afcf990407a4fd300c00c9b467f44f2a57fa165038cf7b76f9b27e30e7d146d374d64ded65e40163122c17b90b4680e5a1c551573e86a8f4b5a36f3f6dcdfc0b1ecf7b5711591dd6b16b5ed3461ff58b7788942f81942dfe4489aa7d35a98109b53eaf5415fd67844cf4c0faf58cdeb162681457693515edc3e2213b1df0117c", &(0x7f0000001980)="2ddbb90a8e63efabd6592860261d83df5c538aa57c3a9009a2a2fe334d440e0084c372613843b07b1bf0cb042ab75b6083cda02bea2db3aa9e1cf6a0d166c67016ce8f50d9afba621f3ec5e9dc7c66df75735c0b0a33cd7409aad724a035f4f293b02f1c6f898a94a530db0c6528b8a29c87b60908f0fe07e75e7325ba6826a55ac1f50b5b163ef45271a65dad420e0576f984e5d2336a2fb8fc9a813b78ac7b930068133ad4df3ed3c862d4b0195f9981f61230", 0x82, 0xb4}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c0002800500190002000000d8f2f7eac715e5ac6711ed7138968073a968fab8c9efe6af7960353077512a8d712f827f4c3bcda61335e2cac8a80227f7ae5477e3f17ebb6417ab5afaa6c179caaca536ff78d4603853f5d42481173e6f5d7e52b3c8e6bc93602db1caf2a399b8b2f9f52ffc172a6974b5890b999f49a2fc"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRESDEC, @ANYBLOB="5bbf0100000000001c0012800b00010062722964676500000c0002800500190000000000b0ce63467374ab4f811af82bdb20d93b088071c23c1340c38d52e33a3c0f31cbbe7fca0c9bbe670825c720486741fc0c3b4280f3beb71d8642f19c2c1d75ab3a497487f8acc5464b43136a7d875219912bfe0a95763deb685f7f7dc6f587bf772227dfdc4e4788f280c5ac43a5dcc25f1b4b7252c965f93eda642f5cad7bd5dfd3c5d061711bd8e0216a694909fcf076dc2b5a1a9227ad9a0c"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="1c0000004a0000012bbd7000fddbdf250a003800", @ANYRES32=r3, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r6 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x13002, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x1, r7}, 0x10) socket$kcm(0x10, 0x2, 0x0) 5m36.819680405s ago: executing program 33 (id=25): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000003c0)={0x5e, 0x0, '\x00', [@generic={0x6d}, @enc_lim={0x4, 0x1, 0x2}]}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xfffffffa, 0x381802) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='bdev\x00', 0x22080, &(0x7f0000000340)='/dev/sequencer\x00') sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xffd8) 5m24.260767835s ago: executing program 34 (id=68): openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r0 = syz_ublk_setup_io_uring(0x33c, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000580)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0xa750, &(0x7f0000000b40)) fspick(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x74) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) accept4$inet6(r5, 0x0, 0x0, 0x80800) 4m29.742242368s ago: executing program 35 (id=280): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000801010000fd4af89c8157000000000000020000080900010073797a3100000000040004800500"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x24000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0xffffff1f, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x44, 0x0, 0x1, 0x0, 0x4, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) open_by_handle_at(r6, &(0x7f0000000180)=@isofs={0x14, 0x1, {0x8, 0x7, 0x4, 0x8000, 0x8, 0x6}}, 0x2241c2) ioctl$TCSETAF(r5, 0x5408, &(0x7f00000000c0)={0xf642, 0x20, 0x6, 0x9dfe, 0x11}) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000000)={0x0, 0xc0000000, 0xfffffff9, 0x6, 0x4, "000300"}) r7 = syz_open_pts(r5, 0x0) r8 = fsopen(&(0x7f0000000340)='iso9660\x00', 0x1) r9 = fcntl$dupfd(r8, 0x0, r8) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000002640)='mode\x00\xbf+\xb1O\x85I5_Qj\xebIw\x1d\x800\xfc\xed\xf2\xe7=\a\x80W\x17\xe9\x80\x00$S\xce\xf3\x9b\xee$\xa0\x12\xe34m\x17`\x80Z\x16\x9ba\f\xd1\xfaAm+sUh\xae\xf1}G\xb1E\x8e8\xf5\x19\\\xbb\xd9\x83*Ly\x99\xac\x95O\f\xff\xff\x00\x00\x00\x00\x00\x00v', &(0x7f0000000400)='7', 0x0) setsockopt$MRT6_TABLE(r9, 0x29, 0xcf, &(0x7f0000000080)=0xfe, 0x4) r10 = dup3(r7, r5, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000200)=0x17) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0) 4m23.804219067s ago: executing program 36 (id=294): r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x80000200, 0x80000230, 0x80000260], 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe000000000000000000000000000000000000000000000000000000000000000000ffffffff00"/144]}, 0xe0) r1 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x7, 0x3, 0x81, 0xffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x41, 0x1, 0x70bd26, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @nested={0x4, 0x8}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00') lsetxattr(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00', &(0x7f0000000140)='filter\x00', 0x7, 0x1) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000140002801000178004000f"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 4m15.221891825s ago: executing program 37 (id=322): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3m41.588042086s ago: executing program 38 (id=415): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x125142) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x4, 0xd8f9}) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) utime(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) (async) setgroups(0x2, &(0x7f0000000780)=[0x0, 0x0]) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) (async, rerun: 64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) (rerun: 64) writev(r4, &(0x7f0000005400), 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000) sendmmsg$inet(r3, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000003c0)="983813b01c09615357e371efcfaccad2081a3df0887a2c437bd16e069b07282bb188842ff26b1daa77b0add6e61605456a38c049c3c5419afde950a0fb45387ed4c8e319ba44d787c71d003d0bf1392c18b8823fba085aa15749f2b00841a5ab1c5ab4ebdc9913f943f9910cb55ac3d0a117838e194797c5e7534952ab9afbd83eab29aaf19e0785dcba3b7f69a190f0168475b55f06f97397b8766ae7fa109768e51dd9773a6b7f65c0f294ee69ba44f835e67fc843542c52c50a3342ce57", 0xbf}, {&(0x7f00000004c0)="329c45641a83f42569136637fb2698cea79ab2d41c3fd2a1fc202c1764e9b5f9843ec5f7720af5484a268e6230f81d955bb054ad13babbd4f46e4f56bd82e0e200b2c54bffe2ffce58af2fde9127db3368c91ed1ef165a08db80018c21ca4bc0187f3876be4cf2c98ebcee44250bc7fa936f170358a823040c4926f735448ae991b535ecf1c99d12028d4060abf9362120b3c029c633dcf8e8b025083b12e50c7e2f84144ea625844abcc05be77962f929a59bad05b9af44c8", 0xb9}, {&(0x7f0000000580)="9d18a21d0b8116c40e455d3b5e6d8ce743913e66bbefdcb719ecc62e54f92f3673a182b7c2232400fe1a4665906e1ecb37c21d3890391f8f3f1ac96b578eeb9759758fbcac5986a2b16edd7c1a74971d6d234ef31e77259e1acbc76d55a875e031e807515effd0f6a7b3b8974093eab0d4b2860c52023ae54e7df5fce3ac0b1406dd622bd2ea26fe", 0x88}, {&(0x7f0000000640)="7b30f5822dd796533eb7488091c9620f1675b68bf1fd48f11b7028493b1bc7467994b61f923017797a7c0a68e2e331cf35d00d", 0x33}, {&(0x7f0000000680)="67e9ad307d41efa0c9ef6357c3a2977a13b9bc6d1e8d7fa19843ede6fb2e902044324ad23dbc227d1d164de7b85cf0da442d22fd07a9b158c977938be6c4e9879902e6281c11b8577c6a5c1bae4a70cd07506266cf46575f0c2eaedb5ab3c566175a22807633b33ee009c66c5feb68628c5904f77d2c7ea15564381598b0c377531cd2246dd3338982145b780de9ae68fa8d124bc5a11d6798c226cec50f92f5acce789d0f162c24f68503ecbe4905d0486d7c07be06c9693f6c2f01288dfb483d98a4e6", 0xc4}, {&(0x7f0000000900)="64b33de791d115c558ff1348ab9b2d7a2b16cf3dae73c4d91efd5086dafcac9b15be887929dbed8618951799b522fd667aee684399c0cd847be510feb94102dbecd97a195b5e6f4bd1e2fd445d852a55aa5c9ee3d2a71a5f1a5af5b96e32698d61a1679b9c16dabfb8fb789a13f00eac39d826f1cee9447dba260445a2357d67fe4a93054f7a2ae9f44f94955540206a607a8176a641a680b558f0e1189cbb3720fc1e303c1c", 0xa6}, {&(0x7f00000009c0)="9d397ad540a0fae61ad9f2769167267b4898d8337c927a24c7daaff4d6f4973cd94c4678bf1ad8ec38c7dc8ee39586c60a179894618ab062c5d421945bad522433138a677ac63019ea25d9fc1bf4bca653002fa02bbf04e4afa4fc9e20f3c4bd657528dd055a7bc12e1f95767c686f3ae8bbbfa2313edfe90992e9b2459032fc6df16efe009bc766dd2bdd219fbb1e6f1fe776998518a51a3386a9d68470a23701f26300f3265058e2d55dc666737629330dcf2f8384ee5fddd7ced954d5f2", 0xbf}, {&(0x7f0000000a80)="ad01eec432ef71b7dc512708d708a917e8c35c2c2a747f52baa8ee7b759534a181500b176199cd7f63136a53ee50defcc412972fc13350ded83a49d920936e145d00a61b5dd063e9052c6aacdba3f1e70bb891631d18fd67c1aad382426aa96a95dfdc2dea449c5a6595b8bf7b313fc07563897772555795e28bd954638e176c7e67dab8eabc9073af7b4720146a7e5693009b2e051122b092", 0x99}, {&(0x7f0000000b40)="57480057f7adccaa615948e8b9954ee36b18da389995b138e3fed58997a2602bd069c7fa0685434fa677ac3061aec1d785decbe58e7d142cbfbeece0189b6aa58c66dc9cee359f4f81e4866287d2637fb8dfcfa6d82d3c9a8b0496ca672edc2bcb763c7cb96b5cfdaf042e1b85419e2ef3ef46f373a9ad8ad9f177eae0b83fae206d2043", 0x84}], 0x9, &(0x7f0000000c80)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xa714}}, @ip_ttl={{0x10, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xbfcb}}], 0x40}}, {{&(0x7f0000000cc0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000d00)="fe38fe861c062a64d61b8bfafcc63e9cf53eef36aaef513d696fee0dca5c442b35d7a2aadfc0a2b3cbc5d416b683f3d8edd6cd3c24315909bb7ef9851a2312d9e7dbc1afcc36a6dfb1a3f92bd4a195151fea152723a10d00a0e1d88b733f47cf2833f7dc9089e620456521b059b089251cc5b2187b38e6f2da81608f67", 0x7d}], 0x1}}, {{&(0x7f0000000dc0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000e00)="df660c3d1af4a33330898300a8c6283d1e54f883dd87b85cb9242b40e3974b66b331fc1eeaaa3be7b89717cdcad1d02a60e0b5f2734475f0b61c540b80735d1e3f5596dc512266ddd99e8799", 0x4c}, {&(0x7f0000000e80)="aaf94d08324ee9a33fe61071ae4135f9df58de1d52ddcf2c", 0x18}], 0x2}}], 0x3, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') ioctl$TUNSETIFF(r5, 0xb701, 0x0) (async) syz_clone(0x80100000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r6 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000111401072cbd7001fcdbdf25080001000000000008004b"], 0x28}}, 0x240440c4) 3m37.564935451s ago: executing program 39 (id=433): r0 = socket$inet(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x1f, 0x7ffdd000, 0x8000}], 0x320000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'gre0\x00', 0x0}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="97c5b7d11b8af576bd8bb44133922f7f3f3d0992c0faee3877df233ec7c271df4292e00c040e57d1ad3d4db821d236bdc139206893ac5261fc21578fcbf4a399656cb9af5df058c2859a4f694b3b2c9f7ead261f07dc8f123848d28507256b4d68cc5393838725d6b01dd8a967360002d7e00a41a8f51b537e085726dbb8ce91e6ba709255564a0a3efd3648943a2c8830dcb02e66293bf9c9bc3ad36f548e423002230c208efa1215f4d3ea12a387e6d97f1b260965bb5457cc4cd5ad2cbc832f31368306e985aeb311f267299c1238", 0xd0}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x0) keyctl$clear(0x7, r5) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) getsockopt(r4, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) r7 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1608e2) write(r7, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x60, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x2, 0x8}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x3, 0x7, 0x5, 0x0, 0x40, 0x4, 0x3}}, {0xa, 0x2, [0x9b, 0x5, 0x7]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}]}, 0x60}}, 0x4000000) 3m4.763227367s ago: executing program 40 (id=669): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000340)={0x0, 0x8000000002, 0x0, [0x806f, 0x2, 0x9, 0x67, 0x2], [0x1000000000000002, 0x10000002, 0x1, 0x6, 0x800000003, 0x0, 0x5, 0x8000000000000001, 0x9, 0x10000, 0xfffffffffffffffd, 0x1, 0x0, 0xffffbffffffffff4, 0x8e3f, 0x400, 0x100, 0x8, 0x4000000000000dd, 0x94, 0x1, 0x800000000002a9, 0x19, 0xfffffffffffffffa, 0x3, 0x8, 0x4, 0x3, 0x0, 0x9, 0xa, 0x7, 0x7, 0xfffffffffffffffa, 0x80, 0x100, 0x80, 0xfffffffffffffffb, 0x101, 0x2, 0x0, 0x9, 0xffff7ffffffffffa, 0x8000001, 0x3, 0x8, 0x1, 0x5d, 0x4, 0xfffffffffffffff7, 0x538a, 0x8001, 0xda, 0x4, 0x14, 0xdd, 0x5, 0xce67, 0x4, 0x128, 0x6, 0x40000001fffff, 0x7, 0x5bc, 0x10, 0xffffffffffefffff, 0x4, 0x8000, 0x12f, 0x8, 0x40000000000006, 0xfffffffffffffff8, 0x82c, 0x1000, 0xffffffff, 0xe9, 0x800000000000002, 0xfffffffffffffffd, 0x3, 0x5, 0x4, 0x800, 0x4, 0xffffffff00000001, 0x6144, 0x8, 0x200000000000000, 0x6, 0x1ff, 0x9, 0x7c54, 0x4, 0x4, 0x7, 0xb, 0x1000ffff, 0x7, 0x1, 0x16d, 0xfffffffffffffffe, 0x8, 0xffffffffffff43b0, 0x8, 0x0, 0x12, 0x8000000000000, 0xaa4, 0x3, 0x0, 0xb, 0x3ff, 0x0, 0x80000000008, 0x6, 0x0, 0x100000000003, 0x42, 0x80000004, 0x8001, 0xe, 0x1]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000e080005400000000f2c0000000b0a01080000000000000000010000000900020073797a32000000000900010073797a300000000014000000020a03"], 0xc4}}, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 2m32.010812913s ago: executing program 0 (id=855): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000030000000200000800000027a379f97f924db20000000001008000000c000305000000000000000300000000030000000100000008000000002e00"], &(0x7f0000000380)=""/143, 0x4f, 0x8f, 0x0, 0x9, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() (async) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x12}, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) mount$cgroup(0x0, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', &(0x7f0000000340), 0x1200000, &(0x7f00000005c0)={[{@subsystem='perf_event'}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@appraise_type}]}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0xfff0, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8008051}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x70bd2c, 0xdc, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffc, 0x0, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x98}}, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) (async, rerun: 64) ioctl$TCFLSH(r2, 0x400455c8, 0x0) (async, rerun: 64) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x2) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x9) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8907, 0x0) (async) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='ext2\x00', 0x2, 0x0) (async) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x2) (async) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) write(r7, &(0x7f0000000400)='1', 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 2m31.742023881s ago: executing program 0 (id=856): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}}, 0x24}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ptrace$peekuser(0x3, 0x0, 0x4) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x3a, 0x5d, 0x40, 0x5f9, 0xffff, 0x619f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xbd, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x7f, 0xc7, 0x0, 0xff, 0x2, 0xc1, 0x6}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) openat$ttyS3(0xffffff9c, 0x0, 0x105200, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1', 0x1) ioctl$EVIOCGPROP(r4, 0x80404509, &(0x7f0000000cc0)=""/4096) 2m30.422918004s ago: executing program 0 (id=859): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, &(0x7f0000000000)) connect(r2, &(0x7f0000000300)=@phonet={0x23, 0x5, 0x8, 0x8}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}]}, 0x1c}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)=@newchain={0x24, 0x1e, 0x101, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x4, 0x1}, {0x10, 0xb}}}, 0x24}}, 0x44004) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000ffff3201"], 0x138) recvmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40010120) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x40a002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a8"], 0x21e) openat$sequencer(0xffffff9c, 0x0, 0x8ec02, 0x0) r5 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r5}) socket$netlink(0x10, 0x3, 0x4) 2m29.3956116s ago: executing program 0 (id=868): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9a101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) 2m29.301889107s ago: executing program 0 (id=870): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x18, &(0x7f0000000080)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 2m28.892198083s ago: executing program 0 (id=872): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}]}, 0x1c}}, 0x0) 2m28.52596607s ago: executing program 41 (id=872): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}]}, 0x1c}}, 0x0) 2m18.998469896s ago: executing program 9 (id=913): mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2002404, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x9, r2, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x7a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fe8000000000000000000000000000bb00000000000000000000ffff00000000010000000000000000000021000086dd080088beffffffff100000000100000000000400080022eb00000000200000000200000000000001000000000800655800000000afae85975de566a73d1f2f7055a78a9f7acad0e350ce9388e987be171bb3758a6b2861a8449d8e5b223668bc9f6d7d72b7190dac32bfc2829f9dc8c371caad2290273b7afd6d07cb6fe56b264551ec91a959162511"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x1c0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000440)='./file2\x00', &(0x7f0000000280)='sysv\x00', 0x268412, 0x0) r4 = open(&(0x7f0000000480)='./dev\x00', 0x0, 0xc5) fcntl$notify(r4, 0x402, 0x31) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109042, 0x15) pwrite64(r5, &(0x7f0000000000)="ff", 0x1, 0x1000000) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000180)='&--\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000500)) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) 2m17.333222887s ago: executing program 9 (id=919): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) lchown(&(0x7f0000000180)='./file0\x00', 0x0, 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x1bbc, 0x801) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80000) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x800000}, 0x8) close(r4) 2m14.515687177s ago: executing program 9 (id=927): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 2m14.227337398s ago: executing program 9 (id=929): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9a101a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) 2m14.063411469s ago: executing program 9 (id=931): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x4000084) 2m13.802257345s ago: executing program 9 (id=933): r0 = socket$inet(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"/1426], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0002, 0xe, 0x0, &(0x7f00000000c0)="2b206d074843b397737ea49da2aa", 0x0, 0xeffc, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000000)={@local, @private=0xa010102, @remote}, 0xc) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x101) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x2800, 0x3, [0x2, 0x8, 0xfff9]}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000002600)=@raw={'raw\x00', 0x8, 0x3, 0x12e8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x1254, 0x2a8, 0x2a8, 0x1254, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xac, 0x114, 0x0, {}, [@common=@unspec=@limit={{0x3c}, {0xffffffff, 0xcb, 0x9e, 0x1, 0xfffffffa, 0x7e3e, 0xd}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x18ff, 0x7, 0x5, 'snmp_trap\x00', 'syz1\x00', {0x8}}}}, {{@uncond, 0x0, 0x10e0, 0x1140, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x6, 0x4, 0x1, 0x4, 0x6, 0x2], 0xe, 0x7}}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x0, './cgroup.net/syz0\x00', 0x1, {0xff}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x2, 0x6, 0x5], 0x1, 0x7}, {0x1, [0x1, 0x0, 0x0, 0x4, 0x1, 0x3], 0x1, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x1364) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r8, &(0x7f0000000040)="e2", 0x918) 2m13.232919314s ago: executing program 42 (id=933): r0 = socket$inet(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="b702000000004000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000000000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf0dd467b592f868ee30ad5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b6d0e196bf02f46c7953ab1abda45cbe8d0d24b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e4fd8f36e15fdd97870f2bdf4000000000000b0c2940dd8e263aa743f0400000000000000b100400600e1ffff8816326d7d25c32aac1c5d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f0000000000000000b2728a0481e9d6da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347903420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b1cbf698fce63a4fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8507bc7d202e0990e0000000008919b3efce02a602b4ad38098774d1feaf5f277a4462a2fff2d6ff4780f9a30a2a5f5f284c00ad35e0a6f6a0f9dae214546d24ff6a9b8ced90b508dc3b55a8259614b731af86503e5849dc87ab86ec0f6a48f0d32f0d4a5f6a03c33600000bb44f2d80363dee9163424ac31469266877942abdbbb3729fd59c0ff048ed3fb58c81b76100aeaa4619668a2c4ef4e159d4594396864965422fe5f8c8181309becc88091dd6641c2d7e5a68ecbe778f2aae1742b92dc6854de98da66f8e38d1eca95809b738c8ddcf4cf1693cf61c2ae0a9c27bd1a6f1e72550fbb1f1543a9bcd48de44e837db44e2be1c364f1cdb53a1ed4169434fc8f705e262fb793cf25bcd60310991f0b0634fa08308c7105e2378d42eb22e035a88305f8342834cba801f76f820ed6def799116ce2336cd308544fbd3b74e0600968fce3c425729a77e3d089356654680e715f4ce5c1a39e4a63d8a67d6dbe1d3c26affdb25cbe15923f62849392cf4fb0327877e22a4dc617a5541a7fb89223888c76d65850dd99997e727557a477a1131d06f6f7360cfcf137ccd2e0d516bb31be411b0c7bd1bd24d3dc2d8e3f4cdfa872b66d89332e313934e9e9a3471f7170832a753bb2a8e4aa6321b1a6546a56e4121231380b04eb55337c7edc66d6e3400b06fcb31b659be19cff61cfac6f1b771967a60efb51c206ea0cbab9bef181cc917fca894189514e85d6e1d9249f8caa701b4357ae5b9117225d1f5ca89a4bb7d49086ea61948926db5132f2e29bf45a1429c19ba1adc457e2963d1474d85aeb3cca158e3fd4b7a05250ceafd44f46af924916ce9ce9a8881aad996ddaaf3fbd52e636367e9f90ab1c773fa96e538e7f87a21206a804524e1dc9fea9772b009bc49a8d787a90e78badf58e37b3cf6f64861d416e859994e4deca6f39551e73c7e332de66be92ecb94e63ecbc07f8f799536be0da90fa824b3f4965caa19b5556907746aec5db9fea5e5e69de3bd13a70c1374683a0e63ff6f6f51136d16e04bbd8ba0c96e0b562f5425614d80de6ba5e901587bb5c1f83382aab6efcccef90fdbebcc4ffed3af40365583fb800cf5ec6496a2a47f2217c7160f88b192ddec89558140447ec86726db3bfe9d22390085b1638f9ebf3219b426dcb69ff80f5b5be82803555c8421c17c9d39f9c1de9e8e7dedf826b00fd8860046e36f790e8e6796db3b778ff4f0fc2b79a5ca96ff3907452ed76bc5e63218ea96866ae2b265ab11206301bfb909a7fd77653c73b6d46a242864f839e5646cc5ada07fba0d9cf6f840179c34de5e9aa58d5b1ca5327dc945267524b8c363b7f847491b5939cf608927c797af1300"/1426], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0002, 0xe, 0x0, &(0x7f00000000c0)="2b206d074843b397737ea49da2aa", 0x0, 0xeffc, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000000)={@local, @private=0xa010102, @remote}, 0xc) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x101) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x2800, 0x3, [0x2, 0x8, 0xfff9]}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000002600)=@raw={'raw\x00', 0x8, 0x3, 0x12e8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x1254, 0x2a8, 0x2a8, 0x1254, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xac, 0x114, 0x0, {}, [@common=@unspec=@limit={{0x3c}, {0xffffffff, 0xcb, 0x9e, 0x1, 0xfffffffa, 0x7e3e, 0xd}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x18ff, 0x7, 0x5, 'snmp_trap\x00', 'syz1\x00', {0x8}}}}, {{@uncond, 0x0, 0x10e0, 0x1140, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x6, 0x4, 0x1, 0x4, 0x6, 0x2], 0xe, 0x7}}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x0, './cgroup.net/syz0\x00', 0x1, {0xff}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x2, 0x6, 0x5], 0x1, 0x7}, {0x1, [0x1, 0x0, 0x0, 0x4, 0x1, 0x3], 0x1, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x1364) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r8, &(0x7f0000000040)="e2", 0x918) 2m12.583166824s ago: executing program 1 (id=938): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x4c}}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) ptrace$peeksig(0x4212, r1, &(0x7f00000004c0)={0x3, 0x1}, &(0x7f00000004c0)) 2m11.642927876s ago: executing program 1 (id=942): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, &(0x7f0000000000)) connect(r2, &(0x7f0000000300)=@phonet={0x23, 0x5, 0x8, 0x8}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}]}, 0x1c}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)=@newchain={0x24, 0x1e, 0x101, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x4, 0x1}, {0x10, 0xb}}}, 0x24}}, 0x44004) recvmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40010120) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x40a002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a8"], 0x21e) openat$sequencer(0xffffff9c, 0x0, 0x8ec02, 0x0) r5 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r5}) socket$netlink(0x10, 0x3, 0x4) 2m10.467106033s ago: executing program 1 (id=944): socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000003c0)={r3}, 0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={r3, 0x7, 0x2, 0xfffffe01, 0x2, 0x1}, 0x14) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) close(0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) close(0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x6, 0x3}, {0x10, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x44, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xd}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0xe63478af}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x80}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x1}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x1}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0xffffffff}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x6}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x10e00, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r10, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffffff, 0x0, 0x1dd) 2m9.547757869s ago: executing program 1 (id=946): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9a101a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) 2m9.183258576s ago: executing program 1 (id=949): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x2000000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r2 = openat$audio1(0xffffff9c, &(0x7f0000002680), 0x0, 0x0) ioctl$SOUND_MIXER_INFO(r2, 0x805c4d65, &(0x7f00000026c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r3, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e0100003801000001000032") 2m8.659864252s ago: executing program 1 (id=951): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000005400010000000000fedbdf2507000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="01000000e3"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x810) read(r1, &(0x7f0000000000)=""/219, 0xdb) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x3b, &(0x7f0000000400)=[{&(0x7f0000000040)={0x118, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x4, 0x0, 0x0, @u64=0x4}, @generic="0926b3eb9e87f8c8b3a6caa09a1a38d124a173def80bde05b592a5f49cb8056fef80a90fc8c487e1b6004db5feaf0d98b43fc34265f6f01ce7fed79fa135fe637b9fdc8c89e7777e70aecc0b9c372af84eb990d7d32d6c563a42d4889ed3925ac319f32db2703ff85c5b143715d335c94f3fd06ba27da8f5fe0788f669730c4358c2be63e25072bf9e", @typed={0x8, 0x96, 0x0, 0x0, @fd=r5}, @nested={0x59, 0x7a}, @typed={0x8, 0xc3, 0x0, 0x0, @fd}]}]}, 0x136}], 0x1, 0x0, 0x0, 0x20000080}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x9, 0x4, 0x5840, 0x0, 0x1000000, 0x3}}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000100)={{0xa5, 0x4}, 0x0, 0xb, 0x96fe, {0xfe, 0x3}, 0x3, 0x9}) tkill(r0, 0x7) 2m8.466347487s ago: executing program 43 (id=951): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000005400010000000000fedbdf2507000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="01000000e3"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x810) read(r1, &(0x7f0000000000)=""/219, 0xdb) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x3b, &(0x7f0000000400)=[{&(0x7f0000000040)={0x118, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x4, 0x0, 0x0, @u64=0x4}, @generic="0926b3eb9e87f8c8b3a6caa09a1a38d124a173def80bde05b592a5f49cb8056fef80a90fc8c487e1b6004db5feaf0d98b43fc34265f6f01ce7fed79fa135fe637b9fdc8c89e7777e70aecc0b9c372af84eb990d7d32d6c563a42d4889ed3925ac319f32db2703ff85c5b143715d335c94f3fd06ba27da8f5fe0788f669730c4358c2be63e25072bf9e", @typed={0x8, 0x96, 0x0, 0x0, @fd=r5}, @nested={0x59, 0x7a}, @typed={0x8, 0xc3, 0x0, 0x0, @fd}]}]}, 0x136}], 0x1, 0x0, 0x0, 0x20000080}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x9, 0x4, 0x5840, 0x0, 0x1000000, 0x3}}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000100)={{0xa5, 0x4}, 0x0, 0xb, 0x96fe, {0xfe, 0x3}, 0x3, 0x9}) tkill(r0, 0x7) 1m58.132824509s ago: executing program 5 (id=977): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000040)=0x10000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7ffffff7}]}) r2 = timerfd_create(0x1, 0x80800) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000040)=@fragment={0x2, 0x0, 0x7, 0x0, 0x0, 0x1a, 0x7d4}, 0x8) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x4}, 0x1c) write(r3, &(0x7f00000000c0)="842a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) timerfd_gettime(r2, &(0x7f00000000c0)={{0x0, 0x0}, {0x0, 0x0}}) r7 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/dev\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) setsockopt$inet6_tcp_TLS_RX(r8, 0x6, 0x2, &(0x7f0000000040)=@gcm_256={{0x303}, "ab4fc659949ab924", "794cc3819b2325af225bcc55d7711a8f3b1123673f4f98d74ebae07697f22c28", "94dbed0a", "7a3ae7b1c7e44fe9"}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r6, @ANYRES32=r2, @ANYRES16=r4, @ANYRES64=r5, @ANYRES8=0x0, @ANYRESDEC=r6, @ANYRES32=r1, @ANYBLOB="a15b6b7ade4a6194fe7bea8a57203ddd58cd96fd5edadd29fa9eee2ed7319c1723df6922c21f9472133eba123a348c52c04bd5280510227d2d03", @ANYRESOCT=r0], 0x50) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001640), 0x20000, 0x0) ioctl$HDIO_GETGEO(r9, 0x301, &(0x7f0000001680)) socket$can_bcm(0x1d, 0x2, 0x2) 1m58.052741541s ago: executing program 5 (id=978): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r3, 0x7}, &(0x7f0000000200)=0x8) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r6}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r7}, 0x38) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x4e4, 0x0, 0x0, 0x148, 0x0, 0x148, 0x450, 0x240, 0x240, 0x450, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@unspec=@mark={{0x2c}, {0x400, 0x4}}, @common=@inet=@recent0={{0xf4}, {0x20000000, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xff000000, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0xa, 0x2, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xbb02, 0x2b, 0x10, 'syz1\x00', {0x6182}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x540) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) bpf$ITER_CREATE(0xb, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) 1m57.038330344s ago: executing program 5 (id=982): socket(0x18, 0x3, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x21f4, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) sendmsg$nl_generic(r0, 0x0, 0xc000) 1m56.332461685s ago: executing program 2 (id=984): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000f80)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0xffffffffffffffff, 0x3, 0x4, 0x100fff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) mkdir(&(0x7f0000000100)='./debugfs\x00', 0x1ff) write(r1, &(0x7f0000000600)='dir .', 0x5) write(r1, &(0x7f0000000700)='bind', 0x4) 1m56.137240981s ago: executing program 2 (id=986): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f000057f000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0xf0ffff, 0x0, 0x0, 0x0) 1m55.549092655s ago: executing program 2 (id=987): r0 = socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}]}, 0x3, 0x2}, 0x1) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r2, &(0x7f00000001c0)='1', 0x1) write$6lowpan_control(r1, &(0x7f0000000280)='connect aa:aa:aa:aa:aa:10 2', 0x1b) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004000) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000"], 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000003440)=""/4096) dup2(r1, r3) listen(0xffffffffffffffff, 0x6) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 1m54.842728126s ago: executing program 5 (id=989): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9a101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) 1m54.700627628s ago: executing program 5 (id=993): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) dup(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) add_key(&(0x7f00000004c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) write$RDMA_USER_CM_CMD_GET_EVENT(r5, 0x0, 0x0) pipe(&(0x7f00000000c0)) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r8 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r8, 0xc040564a, &(0x7f0000000340)={0x4, 0x0, 0x3013, 0xff4f}) 1m54.18960525s ago: executing program 5 (id=994): socket(0xa, 0x3, 0x87) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(0x0, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed8, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x180, 0x0) ioctl$SNDCTL_SYNTH_ID(r4, 0xc08c5114, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x58, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 1m54.043201455s ago: executing program 44 (id=994): socket(0xa, 0x3, 0x87) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(0x0, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed8, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x180, 0x0) ioctl$SNDCTL_SYNTH_ID(r4, 0xc08c5114, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x58, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 1m53.511041225s ago: executing program 2 (id=998): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9a101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0, 0x185093, 0x0) 1m53.431434041s ago: executing program 2 (id=999): inotify_init1(0x800) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x94, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0xfe, 0x4) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) 1m53.108150671s ago: executing program 2 (id=1000): syz_emit_vhci(&(0x7f0000000c40)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_ev_le_phy_update_complete={{}, {0x7, 0xc8, 0x81, 0x8}}}}, 0x9) r0 = socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190007fd17e5ffff08000400"/57, 0x39}], 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000040000850000002f000000850000000e00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x1808d94f1bc82619, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @local}, &(0x7f0000000240)=0xc) socket$inet6(0xa, 0x3, 0x3c) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) socket(0x2, 0x80805, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1d) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) madvise(&(0x7f0000312000/0x2000)=nil, 0x2000, 0xe) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000300)={0x0, 0x4, 0x50000, 0x2000, &(0x7f00003af000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x3, 0x58000, 0x200000, &(0x7f0000200000/0x200000)=nil}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) shutdown(r3, 0x1) recvfrom$inet(r6, &(0x7f0000000440)=""/17, 0x11, 0x720, 0x0, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r7, 0x7003) openat$sysfs(0xffffff9c, &(0x7f0000000480)='/sys/power/freeze_filesystems', 0x20000, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) 1m52.973670498s ago: executing program 45 (id=1000): syz_emit_vhci(&(0x7f0000000c40)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_ev_le_phy_update_complete={{}, {0x7, 0xc8, 0x81, 0x8}}}}, 0x9) r0 = socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190007fd17e5ffff08000400"/57, 0x39}], 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000040000850000002f000000850000000e00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x1808d94f1bc82619, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @local}, &(0x7f0000000240)=0xc) socket$inet6(0xa, 0x3, 0x3c) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) socket(0x2, 0x80805, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1d) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) madvise(&(0x7f0000312000/0x2000)=nil, 0x2000, 0xe) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000300)={0x0, 0x4, 0x50000, 0x2000, &(0x7f00003af000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x3, 0x58000, 0x200000, &(0x7f0000200000/0x200000)=nil}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) shutdown(r3, 0x1) recvfrom$inet(r6, &(0x7f0000000440)=""/17, 0x11, 0x720, 0x0, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r7, 0x7003) openat$sysfs(0xffffff9c, &(0x7f0000000480)='/sys/power/freeze_filesystems', 0x20000, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) 57.782291512s ago: executing program 7 (id=1268): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100800000000000000000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="ba79ef2fdc194c2ab9e08eec1908", 0x0, 0x2000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 57.700905342s ago: executing program 7 (id=1269): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x28) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) socket$kcm(0x10, 0x2, 0x4) sendfile(r1, r2, 0x0, 0xffffffff000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x106) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002102, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) connect$llc(r1, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600000000018060020010000000000000000000000000002fe8000000000000000000000000000aa80004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b415dbe75799"], 0x0) r3 = openat$dlm_control(0xffffff9c, &(0x7f0000000080), 0x40000, 0x0) listen(r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000ed", @ANYRES16=r4, @ANYBLOB="00012abd7000ffdbdf255c00000008000300"], 0x24}}, 0x10) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000200)={0xa, 0x4e24, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf0d}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2000000000000000290000b8ac18db7b8f155d000000000004010400000000001400000000000000290000000b0000000000000600000000"], 0x38}, 0x20000000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x670, 0x5, 0x3d8, 0x218, 0x218, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x0, 0x2, 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@private=0xa010102, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) socket$netlink(0x10, 0x3, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000380)={0x0, 0x3, 0x6, @broadcast}, 0x10) 57.132940294s ago: executing program 7 (id=1273): socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3, 0x2, 0x0, 0x177}, &(0x7f0000ffe000)=0x0, &(0x7f0000ffe000)=0x0, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0xe6f2adbb1a298430, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000040)='affs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x3, 0x7fff7ffc}]}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) socket$can_bcm(0x1d, 0x2, 0x2) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x2}}, 0x18) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, 0x0) r7 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x151c40) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="200000006a000105fefdffffffdbdf2500000000000000000800010033c01951835dce73d89ff84af6d71739b6a559d55f463effea3ee8711e8e975951b160ba4209f510c036fb518327a70d5dfde7b426eb6da09c6ce668343a4dc51dfb52447894c0689499f5726addf91a1dbbb374229bdc41a693c36cfdb5516b3251e57c92eadc3a855a64b7300f1fa2e6e735e6f0"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000340)=ANY=[@ANYRES64=r5, @ANYRES8=r7, @ANYRES8=r3], 0x128}, 0x1, 0x0, 0x0, 0x4008013}, 0x4008881) mkdir(&(0x7f0000000000)='./mydebug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mydebug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mydebug/dynamic_debug/control\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='file amd5536udc_pci.c +p', 0x18) syz_io_uring_modify_offsets$flags(r0, r1, 0x68, 0x1) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r10, &(0x7f0000002140)={0x2020}, 0x2020) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b3, 0x800, 0x1, 0x2082, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='<'], 0x3c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r11, r12, r13, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x31, 0x2ac257408d4d5c71, @fd_index, 0x9, 0x0, 0x0, 0x1, 0x1, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000240), 0x3ff}}) 56.809296576s ago: executing program 7 (id=1274): madvise(&(0x7f0000bde000/0x4000)=nil, 0x4000, 0xc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f00000002c0)) (async) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f00000002c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x17a) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x17a) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/kmsg\x00', 0x60000, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/kmsg\x00', 0x60000, 0x0) lseek(r2, 0x0, 0x4) (async) lseek(r2, 0x0, 0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) epoll_create1(0x80000) (async) r3 = epoll_create1(0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000b80)=[{0x5, &(0x7f0000000400)=0xe10, 0x82}, {0x7, &(0x7f0000000440)=0x3, 0x2}, {0x85, &(0x7f00000004c0)=0x40000, 0x2}, {0x3, &(0x7f0000000500)=0xffffffffffffffd4, 0x2}, {0x4, &(0x7f0000000540)=0x4476, 0x2}, {0x9, &(0x7f0000000580)=0x8001, 0x82}, {0x600000000, &(0x7f00000005c0)=0x17f1, 0x82}, {0x1, &(0x7f0000000600)=0x996e, 0x2}, {0x12, &(0x7f0000000640)=0x8, 0x82}, {0x0, &(0x7f0000000680)=0x8001, 0x2}, {0x100000001, &(0x7f00000006c0), 0x2}, {0x6, &(0x7f0000000700)=0x2, 0x2}, {0x80000001, &(0x7f0000000740)=0x6, 0x82}, {0x7, &(0x7f0000000780)=0x5, 0x2}, {0x4, &(0x7f00000007c0)=0x200, 0x82}, {0x4c, &(0x7f0000000800)=0x8, 0x82}, {0x8, &(0x7f0000000840)=0x6, 0x82}, {0xfffffffffffffffd, &(0x7f0000000880)=0x81, 0x82}, {0x6, &(0x7f00000008c0)=0x2, 0x2}, {0x0, &(0x7f0000000900)=0x5fc89d10, 0x2}, {0x8, &(0x7f0000000940)=0x3, 0x82}, {0x9, &(0x7f0000000980)=0x1, 0x82}, {0x953, &(0x7f00000009c0)=0x1ff, 0x82}, {0x6e74, &(0x7f0000000a00)=0x101, 0x2}, {0x7609, &(0x7f0000000a40)=0x9800000000000000, 0x2}, {0xfffffffffffffe00, &(0x7f0000000a80)=0x9, 0x2}, {0xfff, &(0x7f0000000ac0)=0x4, 0x2}, {0x4, &(0x7f0000000b00)=0x1}, {0x8000000000000001, &(0x7f0000000b40)=0x4, 0x82}], 0x1d, 0x0, 0x0, 0x1) futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000380)="18d8e466d803d96d11f96a18308e2c8331b80f8decda8123129cd14440ea6909d1b14c38d2820f15262644db557fb3eac926d9cdaa9860830dd9c9ec7a160cfc4506b9be6da5") (async) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000380)="18d8e466d803d96d11f96a18308e2c8331b80f8decda8123129cd14440ea6909d1b14c38d2820f15262644db557fb3eac926d9cdaa9860830dd9c9ec7a160cfc4506b9be6da5") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r6, 0x34da2000) syslog(0x2, &(0x7f00000001c0)=""/229, 0xe5) syslog(0x9, 0x0, 0x0) syz_clone3(&(0x7f0000000200)={0x40020100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000200)={0x40020100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/kmsg\x00', 0x40002, 0x118) write$cgroup_devices(r7, &(0x7f0000000200)={'a', ' *:* ', 'rw\x00'}, 0x9) 56.332981145s ago: executing program 7 (id=1275): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x14) write(r0, &(0x7f0000000000)='3', 0x4e) syz_open_dev$vim2m(0x0, 0x0, 0x2) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0xa, 0xce, 0xb, 0xffffffff}]}) 55.447522835s ago: executing program 7 (id=1281): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f00000000c0)) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc01c5869, &(0x7f0000000140)={r0, &(0x7f0000000000)='[\x00', 0x840, &(0x7f0000000040)={@_ha_fsid={[0x6, 0x401]}, {0xfff8, 0xffff, 0x6, 0x4}}, 0x7, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000100)=0x1}) 55.327571315s ago: executing program 46 (id=1281): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f00000000c0)) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc01c5869, &(0x7f0000000140)={r0, &(0x7f0000000000)='[\x00', 0x840, &(0x7f0000000040)={@_ha_fsid={[0x6, 0x401]}, {0xfff8, 0xffff, 0x6, 0x4}}, 0x7, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000100)=0x1}) 4.512746248s ago: executing program 6 (id=1528): bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x15, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000042c300000000000000000000911000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 11) 4.390059655s ago: executing program 8 (id=1529): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0x356, 0xa0, 0x780, 0x600, 0x0, 0x4, 0x0, 0xfffffffe, {0x9, 0x7}, {0x27, 0x0, 0x1}, {0x401, 0x7}, {0x1, 0x4, 0xfffffffd}, 0x3, 0x0, 0xe512, 0x7fff, 0x1, 0x6e, 0x10, 0x2, 0x803, 0x80, 0x8fac, 0x8, 0x8, 0x100, 0x0, 0x6}) setns(0xc9, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000010405000000000000000000000000060a00020000100006020000000500010001000000c3b917c5824c6ab65552be45b901e6a139b4f0e9cf0ddbd4c598534e40db6664cf732a7210a47eddffcdab012d76fff1"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x10) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) 4.295221483s ago: executing program 6 (id=1530): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) close(0x3) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x800c6803, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) fchdir(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x9, 0x8}, {0x0, 0x6}, {0x8, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x3}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 4.122751091s ago: executing program 8 (id=1531): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, &(0x7f0000000000)) connect(r2, &(0x7f0000000300)=@phonet={0x23, 0x5, 0x8, 0x8}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}]}, 0x1c}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)=@newchain={0x24, 0x1e, 0x101, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x4, 0x1}, {0x10, 0xb}}}, 0x24}}, 0x44004) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000ffff3201"], 0x138) recvmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40010120) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x40a002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a8"], 0x21e) openat$sequencer(0xffffff9c, 0x0, 0x8ec02, 0x0) r5 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r5}) socket$netlink(0x10, 0x3, 0x4) 3.532297606s ago: executing program 6 (id=1532): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x80802, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r2, 0x14}, 0x80, 0x0}}], 0x1, 0x20000081) 3.102828658s ago: executing program 3 (id=1535): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000200)=0xffffffff, 0x4) write(r2, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000", 0x34) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) readahead(r4, 0x0, 0x2) write(r4, &(0x7f0000000000)='3', 0x4e) getpid() open(0x0, 0x143142, 0x0) mount(0x0, 0x0, 0x0, 0x2208440, 0x0) io_uring_setup(0x2e1a, &(0x7f00000000c0)={0x0, 0x3cb1, 0x1c080, 0xa, 0x257}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000f4fff5a4b72800c3d4b7e65092b6657bc4ffffffffffff00000000005795f2af879f5c96d486a86e1d31e6576d94d01e4ccf3f203ceda7a4a3c688b7e2431221e9cf5e1a27", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 3.036143155s ago: executing program 3 (id=1536): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x200088c4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x29) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) unshare(0x20000400) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x20008004) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETA(r4, 0x5405, &(0x7f00000031c0)) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000c200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000100)={0x50, 0x0, r6, {0x7, 0x2b, 0x0, 0x30000, 0x0, 0x61c6, 0x8, 0xa15, 0x0, 0x0, 0x1, 0x2}}, 0x50) r8 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x0) ioctl$FE_SET_PROPERTY(r8, 0x40086f52, &(0x7f0000000000)={0x2, &(0x7f00000006c0)=[{0x25, '\x00', @st={0x4, [{0x2, @uvalue=0xe}, {0x2, @svalue=0xfff}, {0x2, @uvalue=0x5}, {0x1, @svalue=0xffffffff}]}, 0x6}, {0xd}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0xfffffffffffffffc, {0x0, 0x0, 0x0, 0x0, 0x400, 0x0, {0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0xffffffffffffff28, 0x3, 0x0, 0x0, 0x0, 0x100000, 0xc000, 0x1, r7, 0x0, 0xfffffffc}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8, 0x0, 0x1}, 0x50) close(0x3) mount$overlay(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x2, 0x0) sendmmsg(r2, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x5, r9, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) 3.031665477s ago: executing program 8 (id=1537): socket(0x400000000010, 0x3, 0x0) (fail_nth: 5) 2.900366906s ago: executing program 8 (id=1538): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=@newlink={0x20, 0x10, 0x403}, 0x20}, 0x1, 0xba01}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x121}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x50}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r2, &(0x7f0000000500)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) read$FUSE(r2, &(0x7f0000004500)={0x2020}, 0xfffffe0c) openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) 2.586581327s ago: executing program 4 (id=1539): bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x15, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1828000042c300000000000000000000911000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.58621283s ago: executing program 6 (id=1540): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./security\x00', 0x1fb) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f0000002880)=[{&(0x7f0000000100)=""/157, 0x9d}], 0x1, 0x40000009, 0x5) 2.561002608s ago: executing program 8 (id=1541): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r2, 0x4068aea3, &(0x7f00000000c0)={0xc5, 0x0, r2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @broadcast}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x0, 0x3f, 0x7, 0xb}, {0x6, 0x16, 0x7, 0x2}, {0x6, 0x4, 0x4, 0x31a}, {0x401, 0xfd, 0xe, 0x5474d75b}]}) socket(0x400000000010, 0x2, 0x4) 2.492666476s ago: executing program 3 (id=1542): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) lchown(&(0x7f0000000180)='./file0\x00', 0x0, 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x1bbc, 0x801) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) r5 = accept4(r4, 0x0, 0x0, 0x80000) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x800000}, 0x8) close(r5) 2.492472408s ago: executing program 4 (id=1543): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1000008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@verity_require}], [{@subj_role={'subj_role', 0x3d, '&'}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)={0x980001}) syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x30, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa, 0x0, 0xe0}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x20040844) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x1000000000000, 0x2, 0x0, &(0x7f0000ffa000/0x4000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = openat$snapshot(0xffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 2.389073696s ago: executing program 6 (id=1544): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setreuid(0x0, 0xee00) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0xffff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x404}, 0xe) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r1, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000040)=0x40, 0x4) recvmmsg(r1, &(0x7f0000000c80)=[{{&(0x7f0000000440)=@hci, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)=""/198}, {&(0x7f00000005c0)=""/196}, {&(0x7f00000006c0)=""/142}, {&(0x7f0000000780)=""/180}], 0x0, &(0x7f0000000940)=""/67}, 0x7ff}, {{&(0x7f00000009c0)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a40)=""/42}, {&(0x7f0000000a80)=""/170}, {&(0x7f0000000b40)=""/136}], 0x0, &(0x7f0000000c40)=""/27}, 0x8}], 0x1, 0x40002141, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000340)={0x53, 0xfffffffffffffffe, 0x6, 0x47, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="2a0615828890", 0x0, 0xfffffffd, 0x30, 0x0, 0x0}) mmap(&(0x7f0000442000/0x3000)=nil, 0x3000, 0x300000a, 0xa8011, r2, 0x38f03000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(r4, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x1) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstatat64(0xffffff9c, 0x0, 0x0, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setns(0xc9, 0x0) 2.388870799s ago: executing program 8 (id=1545): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000180)='X\x00\x00', 0x3}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840), 0x70) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r3) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r4) write(r5, &(0x7f00000000c0)='1\x00', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='1\x00', 0x1) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="58000000090601020000000000000000020000000900020073797a31000000000500010007000000300007801800018014000240fe8000"/67], 0x58}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_open_dev$dri(0x0, 0x22, 0x521a00) 1.475022221s ago: executing program 4 (id=1546): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x140, 0xb, 0x79b, 0x2, 0x10000007, 0x7fffffff, 0x7fff, 0x6, 0x0, 0xc72d, 0x0, 0x7, 0xfffff9f5, 0xd0eb, 0x29, 0x72f0, 0x9, 0x7c, 0x4, 0x3fe, 0x40008, 0x488, 0xc, 0x9, 0x1008, 0x80000001, 0xe, 0x3, 0x7, 0x3, 0x1]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000080)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5baf80c66b80e5ca48f66efbafc0cec0f01310f019c09000f01c2", 0x71}], 0x1, 0x7d, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x4000}) 1.271431917s ago: executing program 6 (id=1547): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBLED(r2, 0x4b65, 0x1) write$apparmor_current(r1, &(0x7f0000000040)=@profile={'permprofile ', ':\x00'}, 0xe) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f00000000c0)={0x3, 0x100, 0x0, 0xc1, 0x7, 0x8}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x7, 0x9}, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.270951455s ago: executing program 4 (id=1548): add_key(&(0x7f0000000080)='logon\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000ac0)="a1", 0x1, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r1, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x10000000000}]) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x2, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000e384000000ad0000009500"/32], &(0x7f0000000540)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xc}, 0x94) mkdir(&(0x7f0000000040)='dir0\x00', 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='hpfs\x00', 0x214003, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x1, 0x3, 0xffffffff, 0x717e387b, 0x40, "26fff191000000000000066bb4ef00f3ffffff", 0x1, 0x2}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) openat$ptmx(0xffffff9c, &(0x7f00000000c0), 0x200000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000600)=[{&(0x7f00000003c0)="f37e9697143403f5467dc8ba1a8ae9d706661a3ba49e5dee3993c77608971f5cfe9682a5a059442b85334ac76398412f9531416e9877e9670b32b5168a2d3b17249314e28e955d10f6c6f186750e22f903e1b0fbd72b557948bc6f788b865a8625cd63f53830a153ac11bf0662b87175269245bfb0082d70e78fe9142914a7d6b81a406a3cac27581bc8dbbb38", 0x8d}, {&(0x7f0000000580)="07b3994837e0560b47da49ee9f1da1b88345230c4b412f1559fb670e5f1e05d63021b32f0cc48a485b081300f0bc7f176c1ef1617563e3f6404253e8f8f0edcb68485b18390e49291dd29db24fe8f9a8d0e93038a067360342870ff58f8347587b9681015a2e788dea5240f76f16372555d0a932bc0607e6b0eb23f9cf", 0x7d}], 0x2) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x408, 0x0, 0x4, 0x400000, 0x1, "3eccd8000000000000000010000000040100"}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0xfffffeb3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1fc) 982.778531ms ago: executing program 3 (id=1549): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x80802, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r2, 0x14}, 0x80, 0x0}}], 0x1, 0x20000081) 71.692327ms ago: executing program 3 (id=1550): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x2c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="63812dbd7000fddbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) 71.328794ms ago: executing program 4 (id=1551): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1f00) 5.377132ms ago: executing program 4 (id=1552): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000002880)=[{&(0x7f0000000100)=""/157, 0x9d}], 0x1, 0x40000009, 0x5) 0s ago: executing program 3 (id=1553): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101200, 0x8) (fail_nth: 5) kernel console output (not intermixed with test programs): 27] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 330.867483][ T5918] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 330.868838][ T5918] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.868865][ T5918] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.868883][ T5918] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 330.868925][ T5918] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.888993][ T5918] usb 8-1: config 0 descriptor?? [ 330.926895][ T2327] usb 9-1: Using ep0 maxpacket: 32 [ 330.927741][ T2327] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 330.928521][ T2327] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 330.928537][ T2327] usb 9-1: config 0 has no interface number 0 [ 330.930422][ T2327] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.930438][ T2327] usb 9-1: Product: syz [ 330.930447][ T2327] usb 9-1: Manufacturer: syz [ 330.930457][ T2327] usb 9-1: SerialNumber: syz [ 330.936112][ T2327] usb 9-1: config 0 descriptor?? [ 330.940333][ T2327] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 330.940349][ T2327] usb 9-1: selecting invalid altsetting 1 [ 330.940358][ T2327] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 330.941589][ T2327] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 330.941754][ T2327] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 330.941775][ T2327] usb 9-1: media controller created [ 330.946302][ T2327] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 331.176010][T12302] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.176210][T12302] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.176321][T12302] bridge_slave_0: entered allmulticast mode [ 331.178132][T12302] bridge_slave_0: entered promiscuous mode [ 331.180812][T12302] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.180945][T12302] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.181046][T12302] bridge_slave_1: entered allmulticast mode [ 331.182639][T12302] bridge_slave_1: entered promiscuous mode [ 331.206325][T12302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.213448][T12302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.236413][T12302] team0: Port device team_slave_0 added [ 331.239058][T12302] team0: Port device team_slave_1 added [ 331.254630][T12302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.254673][T12302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.254716][T12302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.255521][T12302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.255530][T12302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.255543][T12302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.277261][T12302] hsr_slave_0: entered promiscuous mode [ 331.277733][T12302] hsr_slave_1: entered promiscuous mode [ 331.278028][T12302] debugfs: 'hsr0' already exists in 'hsr' [ 331.278040][T12302] Cannot create hsr debugfs directory [ 331.309526][ T5918] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 331.432173][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.572801][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.717419][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.795694][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.822521][T12328] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 331.822686][T12328] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 331.827591][T12328] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 332.008326][ T2327] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 332.008386][ T2327] zl10353_read_register: readreg error (reg=127, ret==-110) [ 332.019606][ T13] bridge_slave_1: left allmulticast mode [ 332.019671][ T13] bridge_slave_1: left promiscuous mode [ 332.020124][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.036518][ T13] bridge_slave_0: left allmulticast mode [ 332.036590][ T13] bridge_slave_0: left promiscuous mode [ 332.036851][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.063517][ T2327] usb 9-1: USB disconnect, device number 18 [ 332.070091][ T13] batman_adv: batadv0: Interface deactivated: gretap1 [ 332.166452][ T13] batman_adv: batadv0: Removing interface: gretap1 [ 332.203324][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.212467][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.216436][ T13] bond0 (unregistering): Released all slaves [ 332.224980][ T13] bond1 (unregistering): Released all slaves [ 332.232235][ T13] bond2 (unregistering): Released all slaves [ 332.265502][T12302] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 332.269353][T12302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 332.269805][T12302] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 332.273310][T12302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 332.274062][T12302] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 332.285081][T12302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 332.285697][T12302] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 332.295393][T12302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 332.408863][T12302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.426444][T12302] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.433436][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.433564][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.447060][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.447171][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.624214][T12383] netlink: 'syz.4.1289': attribute type 1 has an invalid length. [ 332.624397][T12383] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 332.624430][T12383] IPv6: NLM_F_CREATE should be set when creating new route [ 332.624452][T12383] IPv6: NLM_F_CREATE should be set when creating new route [ 332.625597][T12383] netlink: 'syz.4.1289': attribute type 1 has an invalid length. [ 332.625636][T12383] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 332.716782][ T5842] usb 8-1: reset high-speed USB device number 38 using dummy_hcd [ 332.742329][T12354] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 332.762134][ T13] hsr_slave_0: left promiscuous mode [ 332.764464][ T13] hsr_slave_1: left promiscuous mode [ 332.764956][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.764982][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.767804][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.767817][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.779458][ T13] veth1_macvtap: left promiscuous mode [ 332.779580][ T13] veth0_macvtap: left promiscuous mode [ 332.779718][ T13] veth1_vlan: left promiscuous mode [ 332.779796][ T13] veth0_vlan: left promiscuous mode [ 332.847316][ T5842] usb 8-1: device descriptor read/64, error -32 [ 333.106853][ T5842] usb 8-1: reset high-speed USB device number 38 using dummy_hcd [ 333.149548][T12399] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 333.257250][ T5842] usb 8-1: device descriptor read/64, error -32 [ 333.468252][ T13] team0 (unregistering): Port device team_slave_1 removed [ 333.517701][ T5842] usb 8-1: reset high-speed USB device number 38 using dummy_hcd [ 333.529787][ T13] team0 (unregistering): Port device team_slave_0 removed [ 333.539494][ T5842] usb 8-1: device descriptor read/8, error -32 [ 334.088636][T12431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1295'. [ 334.106231][ T5744] Bluetooth: hci3: command 0x041b tx timeout [ 334.429666][ T7559] usb 8-1: USB disconnect, device number 38 [ 336.168320][ T5744] Bluetooth: hci3: command 0x041b tx timeout [ 336.357999][T12431] team0 (unregistering): Port device team_slave_0 removed [ 336.370670][T12431] team0 (unregistering): Port device team_slave_1 removed [ 336.412515][T12302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.445040][T12448] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1298'. [ 336.445192][T12448] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1298'. [ 336.513200][T12454] binder: 12453:12454 ioctl 4024587b 80000c40 returned -22 [ 336.686060][T12302] veth0_vlan: entered promiscuous mode [ 336.700766][T12302] veth1_vlan: entered promiscuous mode [ 336.722510][T12302] veth0_macvtap: entered promiscuous mode [ 336.733521][T12467] netfs: Cache "CacheFiles" added (type cachefiles) [ 336.740085][T12467] CacheFiles: File cache on CacheFiles registered [ 336.742702][T12465] CacheFiles: File cache on CacheFiles unregistering [ 336.742737][T12302] veth1_macvtap: entered promiscuous mode [ 336.742752][T12465] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 336.915966][T12473] xt_CT: You must specify a L4 protocol and not use inversions on it [ 337.182912][T12302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.264799][T12302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.785196][ T5822] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.790790][ T5822] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.860344][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.861514][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.165063][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.165126][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.217574][T12065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.220267][T12065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.249525][ T5744] Bluetooth: hci3: command 0x041b tx timeout [ 338.302116][ T5448] 8021q: adding VLAN 0 to HW filter on device eth1 [ 338.407710][ T7802] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 338.558289][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2 [ 338.729278][ T7802] usb 9-1: Using ep0 maxpacket: 32 [ 338.760661][ T7802] usb 9-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.40 [ 338.939594][ T7802] usb 9-1: config 1 interface 0 has no altsetting 0 [ 339.103879][ T7802] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.103936][ T7802] usb 9-1: Product: syz [ 339.104068][ T7802] usb 9-1: Manufacturer: syz [ 339.104078][ T7802] usb 9-1: SerialNumber: syz [ 339.252367][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3 [ 339.319765][ T43] audit: type=1326 audit(2000000045.852:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12488 comm="syz.4.1302" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706efec code=0x0 [ 339.489662][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4 [ 339.601129][T12534] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1306'. [ 339.601299][T12534] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1306'. [ 339.938869][T12542] wg2 speed is unknown, defaulting to 1000 [ 340.257858][T12550] xt_CT: You must specify a L4 protocol and not use inversions on it [ 340.337186][ T5744] Bluetooth: hci3: command 0x041b tx timeout [ 341.049943][T12560] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 341.159792][ T7802] usbhid 9-1:1.0: can't add hid device: -71 [ 341.160589][ T7802] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 341.202832][ T7802] usb 9-1: USB disconnect, device number 19 [ 341.217346][T12556] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 341.556848][ T5824] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 341.949979][ T5824] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 342.027954][ T5824] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 342.027994][ T5824] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.028055][ T5824] usb 8-1: config 0 has no interface number 0 [ 342.028087][ T5824] usb 8-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 342.092378][ T5824] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.092433][ T5824] usb 8-1: Product: syz [ 342.092622][ T5824] usb 8-1: Manufacturer: syz [ 342.092631][ T5824] usb 8-1: SerialNumber: syz [ 342.093889][ T5824] usb 8-1: config 0 descriptor?? [ 342.095349][ T5824] yurex 8-1:0.50: Could not find endpoints [ 342.103600][T12578] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1315'. [ 342.114703][T12578] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1315'. [ 342.510122][ T5744] Bluetooth: hci3: command 0x041b tx timeout [ 342.663428][ T5824] usb 8-1: USB disconnect, device number 39 [ 343.016789][ T2327] usb 13-1: new high-speed USB device number 14 using dummy_hcd [ 343.186833][ T2327] usb 13-1: Using ep0 maxpacket: 32 [ 343.190474][ T2327] usb 13-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.40 [ 343.195324][ T2327] usb 13-1: config 1 interface 0 has no altsetting 0 [ 343.200196][ T2327] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.204168][ T2327] usb 13-1: Product: syz [ 343.205943][ T2327] usb 13-1: Manufacturer: syz [ 343.207780][ T2327] usb 13-1: SerialNumber: syz [ 343.285996][T12594] FAULT_INJECTION: forcing a failure. [ 343.285996][T12594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.286113][T12594] CPU: 2 UID: 0 PID: 12594 Comm: syz.3.1320 Tainted: G L syzkaller #0 PREEMPT(full) [ 343.286141][T12594] Tainted: [L]=SOFTLOCKUP [ 343.286146][T12594] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 343.286154][T12594] Call Trace: [ 343.286159][T12594] [ 343.286164][T12594] dump_stack_lvl+0x100/0x190 [ 343.286190][T12594] should_fail_ex.cold+0x5/0xa [ 343.286212][T12594] _copy_from_user+0x2e/0xd0 [ 343.286232][T12594] ia32_restore_sigcontext+0xc5/0x620 [ 343.286264][T12594] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 343.286298][T12594] ? rcu_is_watching+0x13/0xc0 [ 343.286318][T12594] ? _raw_spin_unlock_irq+0x23/0x50 [ 343.286338][T12594] ? lockdep_hardirqs_on+0x7d/0x110 [ 343.286357][T12594] __do_compat_sys_rt_sigreturn+0x18c/0x270 [ 343.286377][T12594] ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10 [ 343.286401][T12594] do_int80_emulation+0x166/0x650 [ 343.286420][T12594] asm_int80_emulation+0x1a/0x20 [ 343.286432][T12594] RIP: 0023:0xf708f017 [ 343.286444][T12594] Code: 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 77 00 00 00 cd 80 0f 0b 90 2e 8d 74 26 00 b8 ad 00 00 00 cd 80 <0f> 0b 90 90 90 90 90 90 90 55 31 c9 89 e5 57 8b 45 0c 8b 55 10 8b [ 343.286455][T12594] RSP: 002b:00000000f547c900 EFLAGS: 00000286 ORIG_RAX: 00000000000000ad [ 343.286467][T12594] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000f547c98c [ 343.286475][T12594] RDX: 00000000f547c90c RSI: 0000000000000000 RDI: 0000000000000000 [ 343.286481][T12594] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 343.286488][T12594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.286495][T12594] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 343.286508][T12594] [ 343.434481][ T43] audit: type=1326 audit(2000000048.958:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12589 comm="syz.8.1318" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702efec code=0x0 [ 343.632068][T12601] netfs: Cache "CacheFiles" added (type cachefiles) [ 343.634595][T12601] CacheFiles: File cache on CacheFiles registered [ 343.639013][T12600] CacheFiles: File cache on CacheFiles unregistering [ 343.639066][T12600] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 343.943672][T12613] xt_CT: You must specify a L4 protocol and not use inversions on it [ 344.082699][T12615] xt_CT: You must specify a L4 protocol and not use inversions on it [ 344.342251][T12622] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1326'. [ 344.364106][T12623] netlink: 'syz.4.1326': attribute type 1 has an invalid length. [ 344.364182][T12623] netlink: 'syz.4.1326': attribute type 4 has an invalid length. [ 344.364434][T12623] netlink: 'syz.4.1326': attribute type 2 has an invalid length. [ 344.364443][T12623] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1326'. [ 344.364704][T12622] netlink: 'syz.4.1326': attribute type 1 has an invalid length. [ 344.364724][T12622] netlink: 'syz.4.1326': attribute type 4 has an invalid length. [ 344.364735][T12622] netlink: 'syz.4.1326': attribute type 2 has an invalid length. [ 344.364745][T12622] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1326'. [ 344.566775][ T5744] Bluetooth: hci3: command 0x041b tx timeout [ 344.986866][ T3267] usb 11-1: new high-speed USB device number 32 using dummy_hcd [ 345.163027][ T3267] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 345.286096][ T3267] usb 11-1: config 0 has an invalid interface number: 50 but max is 0 [ 345.286161][ T3267] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.286211][ T3267] usb 11-1: config 0 has no interface number 0 [ 345.286235][ T3267] usb 11-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 345.429345][T12633] xt_CT: You must specify a L4 protocol and not use inversions on it [ 345.644403][ T3267] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.644449][ T3267] usb 11-1: Product: syz [ 345.644492][ T3267] usb 11-1: Manufacturer: syz [ 345.644550][ T3267] usb 11-1: SerialNumber: syz [ 345.666888][ T6162] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 345.805168][ T3267] usb 11-1: config 0 descriptor?? [ 345.816831][ T6162] usb 8-1: Using ep0 maxpacket: 32 [ 345.817674][ T6162] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 345.818680][ T6162] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 345.818700][ T6162] usb 8-1: config 0 has no interface number 0 [ 345.820541][ T6162] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.820561][ T6162] usb 8-1: Product: syz [ 345.820573][ T6162] usb 8-1: Manufacturer: syz [ 345.820587][ T6162] usb 8-1: SerialNumber: syz [ 345.825413][ T6162] usb 8-1: config 0 descriptor?? [ 345.829671][ T6162] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 345.829694][ T6162] usb 8-1: selecting invalid altsetting 1 [ 345.829708][ T6162] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 345.835432][ T6162] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 345.835649][ T6162] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 345.835685][ T6162] usb 8-1: media controller created [ 345.845567][ T6162] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 345.865221][ T2327] usbhid 13-1:1.0: can't add hid device: -71 [ 345.867770][ T2327] usbhid 13-1:1.0: probe with driver usbhid failed with error -71 [ 345.871935][ T2327] usb 13-1: USB disconnect, device number 14 [ 345.949907][ T3267] yurex 11-1:0.50: Could not find endpoints [ 346.023566][T11060] usb 11-1: USB disconnect, device number 32 [ 346.168934][T12646] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 346.407345][ T1040] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 346.556807][ T1040] usb 9-1: Using ep0 maxpacket: 32 [ 346.559027][ T1040] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 346.560229][ T1040] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 346.560249][ T1040] usb 9-1: config 0 has no interface number 0 [ 346.564157][ T1040] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.564173][ T1040] usb 9-1: Product: syz [ 346.564183][ T1040] usb 9-1: Manufacturer: syz [ 346.564191][ T1040] usb 9-1: SerialNumber: syz [ 346.571222][ T1040] usb 9-1: config 0 descriptor?? [ 346.577436][ T1040] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 346.577549][ T1040] usb 9-1: selecting invalid altsetting 1 [ 346.580260][ T1040] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 346.582076][ T1040] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 346.582244][ T1040] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 346.582303][ T1040] usb 9-1: media controller created [ 346.594661][ T1040] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 346.671667][T12654] FAULT_INJECTION: forcing a failure. [ 346.671667][T12654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.671742][T12654] CPU: 3 UID: 0 PID: 12654 Comm: syz.6.1334 Tainted: G L syzkaller #0 PREEMPT(full) [ 346.671770][T12654] Tainted: [L]=SOFTLOCKUP [ 346.671776][T12654] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 346.671783][T12654] Call Trace: [ 346.671789][T12654] [ 346.671794][T12654] dump_stack_lvl+0x100/0x190 [ 346.671814][T12654] should_fail_ex.cold+0x5/0xa [ 346.671830][T12654] _copy_to_user+0x32/0xd0 [ 346.671844][T12654] simple_read_from_buffer+0xcb/0x170 [ 346.671864][T12654] proc_fail_nth_read+0x1af/0x230 [ 346.671884][T12654] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 346.671913][T12654] ? rw_verify_area+0xce/0x6d0 [ 346.671934][T12654] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 346.671952][T12654] vfs_read+0x1e4/0xb40 [ 346.671963][T12654] ? lock_acquire+0x1d1/0x380 [ 346.671979][T12654] ? __fget_files+0x34/0x3d0 [ 346.671991][T12654] ? __pfx_vfs_read+0x10/0x10 [ 346.672000][T12654] ? find_held_lock+0x2b/0x80 [ 346.672012][T12654] ? __fget_files+0x215/0x3d0 [ 346.672026][T12654] ? __fget_files+0x21f/0x3d0 [ 346.672041][T12654] ksys_read+0x12a/0x250 [ 346.672052][T12654] ? __pfx_ksys_read+0x10/0x10 [ 346.672066][T12654] do_int80_emulation+0x166/0x650 [ 346.672084][T12654] asm_int80_emulation+0x1a/0x20 [ 346.672095][T12654] RIP: 0023:0xf71175ab [ 346.672105][T12654] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 346.672116][T12654] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 346.672128][T12654] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f53d65d0 [ 346.672135][T12654] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 346.672142][T12654] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 346.672148][T12654] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 346.672155][T12654] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 346.672169][T12654] [ 346.779572][T12656] syzkaller1: entered promiscuous mode [ 346.779623][T12656] syzkaller1: entered allmulticast mode [ 346.783303][T12656] netlink: 'syz.6.1335': attribute type 1 has an invalid length. [ 346.795275][T12656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.818934][T12656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.819215][T12656] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 346.819641][T12656] bond1: (slave gre1): Error -95 calling set_mac_address [ 346.872155][T12659] gretap1: entered promiscuous mode [ 346.877119][T12659] bond1: (slave gretap1): making interface the new active one [ 346.881667][T12659] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 346.893204][ T6162] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 346.893377][ T6162] zl10353_read_register: readreg error (reg=127, ret==-110) [ 346.952710][T12656] 8021q: adding VLAN 0 to HW filter on device bond2 [ 346.955209][T12656] bond1: (slave bond2): Enslaving as an active interface with a down link [ 346.962120][T12656] bond1 (unregistering): (slave gretap1): Releasing active interface [ 346.982449][T12656] bond1 (unregistering): (slave bond2): Releasing active interface [ 346.988198][ T1040] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 346.988257][ T1040] zl10353_read_register: readreg error (reg=127, ret==-71) [ 346.993317][ T1040] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 347.003139][ T6162] usb 8-1: USB disconnect, device number 40 [ 347.007825][T12656] bond1 (unregistering): Released all slaves [ 347.043631][ T1040] usb 9-1: USB disconnect, device number 20 [ 347.856616][ T5842] hid_parser_main: 19 callbacks suppressed [ 347.856765][ T5842] hid-generic 0004:FFFFFFFF:0000.002B: unknown main item tag 0x0 [ 347.856810][ T5842] hid-generic 0004:FFFFFFFF:0000.002B: unknown main item tag 0x0 [ 347.856830][ T5842] hid-generic 0004:FFFFFFFF:0000.002B: unknown main item tag 0x0 [ 347.856848][ T5842] hid-generic 0004:FFFFFFFF:0000.002B: unknown main item tag 0x0 [ 347.856869][ T5842] hid-generic 0004:FFFFFFFF:0000.002B: unknown main item tag 0x0 [ 347.856886][ T5842] hid-generic 0004:FFFFFFFF:0000.002B: unknown main item tag 0x0 [ 347.856904][ T5842] hid-generic 0004:FFFFFFFF:0000.002B: unknown main item tag 0x0 [ 347.856922][ T5842] hid-generic 0004:FFFFFFFF:0000.002B: unknown main item tag 0x0 [ 347.856939][ T5842] hid-generic 0004:FFFFFFFF:0000.002B: unknown main item tag 0x0 [ 347.856957][ T5842] hid-generic 0004:FFFFFFFF:0000.002B: unknown main item tag 0x0 [ 347.865711][ T5842] hid-generic 0004:FFFFFFFF:0000.002B: hidraw1: HID v0.00 Device [syz0] on syz0 [ 347.927004][ T3267] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 348.091242][ T3267] usb 9-1: not running at top speed; connect to a high speed hub [ 348.091318][ T3267] usb 9-1: New USB device found, idVendor=257a, idProduct=360a, bcdDevice=89.b3 [ 348.092664][ T3267] usb 9-1: config index 0 descriptor too short (asked for 9, got 0) [ 348.092696][ T3267] usb 9-1: can't read configurations, error -22 [ 348.096847][ T7560] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 348.216833][ T3267] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 348.258696][ T7560] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 348.259365][ T7560] usb 8-1: config 0 has no interfaces? [ 348.259398][ T7560] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.261576][ T7560] usb 8-1: config 0 descriptor?? [ 348.306780][ T7802] usb 13-1: new high-speed USB device number 15 using dummy_hcd [ 348.368435][ T3267] usb 9-1: not running at top speed; connect to a high speed hub [ 348.368490][ T3267] usb 9-1: New USB device found, idVendor=257a, idProduct=360a, bcdDevice=89.b3 [ 348.369823][ T3267] usb 9-1: config index 0 descriptor too short (asked for 9, got 0) [ 348.369846][ T3267] usb 9-1: can't read configurations, error -22 [ 348.370205][ T3267] usb usb9-port1: attempt power cycle [ 348.467579][ T7802] usb 13-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 348.468751][ T7802] usb 13-1: config 0 has an invalid interface number: 50 but max is 0 [ 348.468772][ T7802] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.468789][ T7802] usb 13-1: config 0 has no interface number 0 [ 348.468819][ T7802] usb 13-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 348.471087][ T7802] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.471109][ T7802] usb 13-1: Product: syz [ 348.471123][ T7802] usb 13-1: Manufacturer: syz [ 348.471137][ T7802] usb 13-1: SerialNumber: syz [ 348.473499][ T7802] usb 13-1: config 0 descriptor?? [ 348.477332][ T7802] yurex 13-1:0.50: Could not find endpoints [ 348.599043][ T2327] usb 8-1: USB disconnect, device number 41 [ 348.726884][ T3267] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 348.748851][ T3267] usb 9-1: not running at top speed; connect to a high speed hub [ 348.748905][ T3267] usb 9-1: New USB device found, idVendor=257a, idProduct=360a, bcdDevice=89.b3 [ 348.750183][ T3267] usb 9-1: config index 0 descriptor too short (asked for 9, got 0) [ 348.750202][ T3267] usb 9-1: can't read configurations, error -22 [ 348.876780][ T3267] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 348.900157][ T3267] usb 9-1: not running at top speed; connect to a high speed hub [ 348.900230][ T3267] usb 9-1: New USB device found, idVendor=257a, idProduct=360a, bcdDevice=89.b3 [ 348.902051][ T3267] usb 9-1: config index 0 descriptor too short (asked for 9, got 0) [ 348.902071][ T3267] usb 9-1: can't read configurations, error -22 [ 348.902283][ T3267] usb usb9-port1: unable to enumerate USB device [ 349.023375][T12684] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 349.027101][ T7560] usb 13-1: USB disconnect, device number 15 [ 349.866979][ T7802] usb 13-1: new high-speed USB device number 16 using dummy_hcd [ 350.037746][ T7802] usb 13-1: Using ep0 maxpacket: 32 [ 350.038451][ T7802] usb 13-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 350.039720][ T7802] usb 13-1: config 0 has an invalid interface number: 1 but max is 0 [ 350.039734][ T7802] usb 13-1: config 0 has no interface number 0 [ 350.043964][ T7802] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.043978][ T7802] usb 13-1: Product: syz [ 350.043986][ T7802] usb 13-1: Manufacturer: syz [ 350.043994][ T7802] usb 13-1: SerialNumber: syz [ 350.045920][ T7802] usb 13-1: config 0 descriptor?? [ 350.047719][ T7802] usb 13-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 350.047733][ T7802] usb 13-1: selecting invalid altsetting 1 [ 350.047741][ T7802] usb 13-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 350.058630][ T7802] usb 13-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 350.058753][ T7802] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 350.058775][ T7802] usb 13-1: media controller created [ 350.063770][ T7802] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 350.246770][ T5744] Bluetooth: hci3: command 0x041b tx timeout [ 350.709817][T12724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1351'. [ 351.147997][ T7802] usb 13-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 351.148239][ T7802] zl10353_read_register: readreg error (reg=127, ret==-110) [ 351.203621][T12746] xt_CT: You must specify a L4 protocol and not use inversions on it [ 351.419883][ T7802] usb 13-1: USB disconnect, device number 16 [ 351.889923][T12737] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 351.981402][T12765] netlink: 'syz.8.1361': attribute type 4 has an invalid length. [ 352.767353][T12803] syzkaller0: entered promiscuous mode [ 352.767416][T12803] syzkaller0: entered allmulticast mode [ 352.911545][T12809] Invalid ELF header type: 0 != 1 [ 353.127012][ T5744] Bluetooth: hci3: command 0x041b tx timeout [ 353.131047][ T43] audit: type=1800 audit(2000000057.664:1192): pid=12818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1372" name="streaming_maxpacket" dev="configfs" ino=43950 res=0 errno=0 [ 353.282469][T12821] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 353.282497][T12821] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 353.283193][T12821] vhci_hcd vhci_hcd.0: Device attached [ 353.556758][ T5824] usb 44-1: SetAddress Request (34) to port 0 [ 353.556846][ T5824] usb 44-1: new SuperSpeed USB device number 34 using vhci_hcd [ 354.120785][T12822] vhci_hcd: connection reset by peer [ 354.121105][ T13] vhci_hcd vhci_hcd.3: stop threads [ 354.121122][ T13] vhci_hcd vhci_hcd.3: release socket [ 354.121175][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 354.519389][T12837] xt_CT: You must specify a L4 protocol and not use inversions on it [ 356.582729][T12842] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1376'. [ 356.583029][T12842] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1376'. [ 356.748061][T12861] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1383'. [ 356.868955][T12866] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 357.026796][ T7741] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 357.184557][ T7741] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 357.186260][ T7741] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.186292][ T7741] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.186314][ T7741] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 357.186348][ T7741] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.188585][ T7741] usb 9-1: config 0 descriptor?? [ 357.213725][T12875] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1390'. [ 357.213865][T12875] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1390'. [ 357.618975][ T7741] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 357.920480][T12893] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 357.920569][T12893] CPU: 1 UID: 0 PID: 12893 Comm: syz.8.1393 Tainted: G L syzkaller #0 PREEMPT(full) [ 357.920601][T12893] Tainted: [L]=SOFTLOCKUP [ 357.920606][T12893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 357.920614][T12893] Call Trace: [ 357.920619][T12893] [ 357.920625][T12893] dump_stack_lvl+0x100/0x190 [ 357.920646][T12893] sysfs_warn_dup.cold+0x1c/0x28 [ 357.920666][T12893] sysfs_create_dir_ns+0x24b/0x2b0 [ 357.920681][T12893] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 357.920694][T12893] ? find_held_lock+0x2b/0x80 [ 357.920707][T12893] ? kobject_add_internal+0x25f/0x930 [ 357.920727][T12893] ? kobject_add_internal+0x25f/0x930 [ 357.920749][T12893] ? class_dir_child_ns_type+0xd/0x60 [ 357.920767][T12893] kobject_add_internal+0x2c8/0x930 [ 357.920789][T12893] kobject_add+0x16a/0x1e0 [ 357.920818][T12893] ? __pfx_kobject_add+0x10/0x10 [ 357.920838][T12893] ? get_device_parent+0x1b3/0x4c0 [ 357.920853][T12893] ? kobject_put+0xb9/0x640 [ 357.920875][T12893] device_add+0x294/0x1970 [ 357.920893][T12893] ? __pfx_device_add+0x10/0x10 [ 357.920912][T12893] ? device_initialize+0x3cd/0x550 [ 357.920928][T12893] tty_register_device_attr+0x388/0x7f0 [ 357.920944][T12893] ? lockdep_init_map_type+0x5c/0x250 [ 357.920962][T12893] ? __pfx_tty_register_device_attr+0x10/0x10 [ 357.920980][T12893] ? tty_port_init+0x156/0x1c0 [ 357.920997][T12893] gsm_activate_mux+0x155/0x2a0 [ 357.921013][T12893] gsmld_ioctl+0xbbc/0x15c0 [ 357.921033][T12893] ? __pfx_gsmld_ioctl+0x10/0x10 [ 357.921061][T12893] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 357.921081][T12893] ? __pfx_gsmld_ioctl+0x10/0x10 [ 357.921097][T12893] tty_compat_ioctl+0x396/0x420 [ 357.921111][T12893] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 357.921125][T12893] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 357.921146][T12893] __do_fast_syscall_32+0x13a/0x8b0 [ 357.921164][T12893] do_fast_syscall_32+0x32/0x70 [ 357.921180][T12893] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 357.921196][T12893] RIP: 0023:0xf702efec [ 357.921210][T12893] Code: Unable to access opcode bytes at 0xf702efc2. [ 357.921216][T12893] RSP: 002b:00000000f53fc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 357.921228][T12893] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000404c4701 [ 357.921236][T12893] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 357.921269][T12893] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 357.921279][T12893] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 357.921287][T12893] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 357.921309][T12893] [ 357.921491][T12893] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 358.602925][T12901] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1397'. [ 358.648180][ T5824] usb 44-1: device descriptor read/8, error -110 [ 358.660604][T12907] syzkaller0: entered promiscuous mode [ 358.660651][T12907] syzkaller0: entered allmulticast mode [ 358.887616][ T7559] usb 13-1: new high-speed USB device number 17 using dummy_hcd [ 358.946887][ T7802] usb 9-1: reset high-speed USB device number 25 using dummy_hcd [ 358.975287][T12912] xt_CT: You must specify a L4 protocol and not use inversions on it [ 359.047968][ T7559] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 359.052478][ T7559] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.056318][ T7559] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.059879][ T7559] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 359.065662][ T7559] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.072498][ T7559] usb 13-1: config 0 descriptor?? [ 359.077212][ T5824] usb usb44-port1: attempt power cycle [ 359.086800][ T7802] usb 9-1: device descriptor read/64, error -32 [ 359.336980][ T7802] usb 9-1: reset high-speed USB device number 25 using dummy_hcd [ 359.466784][ T7802] usb 9-1: device descriptor read/64, error -32 [ 359.498382][ T7559] plantronics 0003:047F:FFFF.002D: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 359.727203][ T7802] usb 9-1: reset high-speed USB device number 25 using dummy_hcd [ 359.747376][ T7802] usb 9-1: device descriptor read/8, error -32 [ 359.961377][ T7559] usb 13-1: USB disconnect, device number 17 [ 360.005855][T12927] netlink: 'syz.4.1406': attribute type 12 has an invalid length. [ 360.005922][T12927] netlink: 'syz.4.1406': attribute type 29 has an invalid length. [ 360.006153][T12927] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1406'. [ 360.006165][T12927] netlink: 'syz.4.1406': attribute type 3 has an invalid length. [ 360.006173][T12927] netlink: 'syz.4.1406': attribute type 2 has an invalid length. [ 360.006180][T12927] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1406'. [ 360.098996][ T5824] usb usb44-port1: unable to enumerate USB device [ 360.662498][T12917] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 360.960769][T12944] xt_CT: You must specify a L4 protocol and not use inversions on it [ 361.095570][ T3267] usb 9-1: USB disconnect, device number 25 [ 361.360482][T12949] xt_CT: You must specify a L4 protocol and not use inversions on it [ 361.941117][ T5744] Bluetooth: hci3: command 0x041b tx timeout [ 362.334574][T12969] xt_CT: You must specify a L4 protocol and not use inversions on it [ 363.024199][T12977] xt_connbytes: Forcing CT accounting to be enabled [ 363.024534][T12977] Cannot find del_set index 0 as target [ 363.029475][T12977] FAULT_INJECTION: forcing a failure. [ 363.029475][T12977] name failslab, interval 1, probability 0, space 0, times 0 [ 363.030653][T12977] CPU: 1 UID: 0 PID: 12977 Comm: syz.6.1418 Tainted: G L syzkaller #0 PREEMPT(full) [ 363.030700][T12977] Tainted: [L]=SOFTLOCKUP [ 363.030706][T12977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 363.030713][T12977] Call Trace: [ 363.030718][T12977] [ 363.030723][T12977] dump_stack_lvl+0x100/0x190 [ 363.030742][T12977] should_fail_ex.cold+0x5/0xa [ 363.030757][T12977] should_failslab+0xc2/0x120 [ 363.030772][T12977] __kvmalloc_node_noprof+0x113/0x9b0 [ 363.030784][T12977] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 363.030796][T12977] ? ceph_msg_new2+0x370/0x4f0 [ 363.030811][T12977] ceph_msg_new2+0x370/0x4f0 [ 363.030824][T12977] ceph_monc_init+0x5ed/0xcd0 [ 363.030850][T12977] ceph_create_client+0x25e/0x370 [ 363.030868][T12977] ceph_get_tree+0x1a4/0x1fd0 [ 363.030881][T12977] ? bpf_lsm_capable+0x9/0x10 [ 363.030897][T12977] ? security_capable+0x80/0x260 [ 363.030911][T12977] vfs_get_tree+0x92/0x320 [ 363.030927][T12977] vfs_cmd_create+0xd7/0x2a0 [ 363.030944][T12977] __do_sys_fsconfig+0x55a/0xcb0 [ 363.030962][T12977] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 363.030980][T12977] ? exit_to_user_mode_loop+0x166/0x700 [ 363.030996][T12977] ? rcu_is_watching+0x13/0xc0 [ 363.031010][T12977] __do_fast_syscall_32+0x13a/0x8b0 [ 363.031025][T12977] ? lockdep_hardirqs_on+0x7d/0x110 [ 363.031040][T12977] do_fast_syscall_32+0x32/0x70 [ 363.031055][T12977] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 363.031069][T12977] RIP: 0023:0xf7f13fec [ 363.031084][T12977] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 363.031089][T12977] RSP: 002b:00000000f539450c EFLAGS: 00000292 ORIG_RAX: 00000000000001af [ 363.031101][T12977] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000006 [ 363.031108][T12977] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 363.031115][T12977] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 363.031121][T12977] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 363.031127][T12977] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 363.031141][T12977] [ 363.397007][T12986] xt_CT: You must specify a L4 protocol and not use inversions on it [ 363.836550][T12976] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 364.059872][T12996] xt_CT: You must specify a L4 protocol and not use inversions on it [ 364.198272][ T6162] usb 13-1: new high-speed USB device number 18 using dummy_hcd [ 364.599440][ T6162] usb 13-1: Using ep0 maxpacket: 32 [ 364.648053][ T6162] usb 13-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.40 [ 364.652950][T13009] netlink: 'syz.4.1426': attribute type 1 has an invalid length. [ 364.653077][T13009] block nbd1: shutting down sockets [ 364.661868][ T6162] usb 13-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 364.661918][ T6162] usb 13-1: config 1 interface 0 has no altsetting 0 [ 364.786526][ T6162] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.786582][ T6162] usb 13-1: Product: syz [ 364.786624][ T6162] usb 13-1: Manufacturer: syz [ 364.786647][ T6162] usb 13-1: SerialNumber: syz [ 365.180446][ T43] audit: type=1326 audit(2000000068.708:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.8.1420" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702efec code=0x0 [ 365.199424][T13019] openvswitch: netlink: Message has 81 unknown bytes. [ 365.199539][T13019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.214939][T13020] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 365.214993][T13020] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 365.217573][T13020] vhci_hcd vhci_hcd.0: Device attached [ 365.260658][T13009] ceph: No mds server is up or the cluster is laggy [ 365.308015][ T5744] Bluetooth: hci3: command 0x041b tx timeout [ 365.420580][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xe228 instead [ 365.425685][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0xfc77 instead [ 365.431064][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x223a instead [ 365.435409][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x382d instead [ 365.440276][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x04cf instead [ 365.444161][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0xce5a instead [ 365.448229][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xc25d instead [ 365.452686][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x8b65 instead [ 365.456429][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x5e5e instead [ 365.463510][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xa64c instead [ 365.466860][T13026] jffs2: Further such events for this erase block will not be printed [ 365.467135][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x2404 instead [ 365.467148][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x9e61 instead [ 365.467158][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0x907c instead [ 365.467168][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0x3877 instead [ 365.467177][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0x3570 instead [ 365.467235][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0x0d0d instead [ 365.467246][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xf171 instead [ 365.467255][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0xeafb instead [ 365.467265][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0x3f06 instead [ 365.467274][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0x580d instead [ 365.467286][T13026] jffs2: Further such events for this erase block will not be printed [ 365.467523][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x52b4 instead [ 365.467532][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0xe832 instead [ 365.467541][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x1426 instead [ 365.467550][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0xfb48 instead [ 365.467558][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0x2527 instead [ 365.467567][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0x274f instead [ 365.467577][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xe0e9 instead [ 365.467585][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0xdc37 instead [ 365.467595][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0x821d instead [ 365.467605][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0x08cd instead [ 365.467614][T13026] jffs2: Further such events for this erase block will not be printed [ 365.467872][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0xa208 instead [ 365.467883][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x7fbb instead [ 365.467893][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0x09e7 instead [ 365.467902][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0x5674 instead [ 365.467912][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0x80bd instead [ 365.467921][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0xee62 instead [ 365.467930][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xb35b instead [ 365.467939][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0xe0eb instead [ 365.467948][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0xab0b instead [ 365.467957][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0x0520 instead [ 365.467965][T13026] jffs2: Further such events for this erase block will not be printed [ 365.468203][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x2f55 instead [ 365.468211][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x50ec instead [ 365.468220][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0x68c1 instead [ 365.468228][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0x5fb1 instead [ 365.468237][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0x0376 instead [ 365.468245][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0xf202 instead [ 365.468254][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x8881 instead [ 365.468262][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0x0b39 instead [ 365.468271][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0x8ba5 instead [ 365.468280][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0x7923 instead [ 365.468290][T13026] jffs2: Further such events for this erase block will not be printed [ 365.468625][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0xefc2 instead [ 365.468636][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x1be2 instead [ 365.468645][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0x84c2 instead [ 365.468653][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0xdd45 instead [ 365.468666][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0xac6d instead [ 365.468678][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0x20a0 instead [ 365.468690][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x58b3 instead [ 365.468703][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0xe72d instead [ 365.468714][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0x2352 instead [ 365.468727][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0xbd4b instead [ 365.468742][T13026] jffs2: Further such events for this erase block will not be printed [ 365.469019][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x6eef instead [ 365.469029][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0xad22 instead [ 365.469038][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0x49a6 instead [ 365.469047][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0xa90b instead [ 365.469055][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0xc773 instead [ 365.469100][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0x1d74 instead [ 365.469112][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x88a3 instead [ 365.469121][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0x9f15 instead [ 365.469131][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0xa8f3 instead [ 365.469140][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0x0818 instead [ 365.469149][T13026] jffs2: Further such events for this erase block will not be printed [ 365.469457][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x999b instead [ 365.469578][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0xebe4 instead [ 365.469590][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0xed6e instead [ 365.469599][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0x1ef3 instead [ 365.469609][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x99d0 instead [ 365.469619][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0x1113 instead [ 365.469628][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xfc05 instead [ 365.469637][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0x1928 instead [ 365.469646][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0xcef7 instead [ 365.469656][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0xf811 instead [ 365.469664][T13026] jffs2: Further such events for this erase block will not be printed [ 365.470128][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0xf0db instead [ 365.470139][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x085a instead [ 365.470147][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0xdef9 instead [ 365.470156][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0x63de instead [ 365.470165][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0xb3fc instead [ 365.470173][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0x0612 instead [ 365.470182][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x6358 instead [ 365.470190][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0xe53a instead [ 365.470199][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0x4047 instead [ 365.470207][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0x5d8a instead [ 365.470216][T13026] jffs2: Further such events for this erase block will not be printed [ 365.470461][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0xe6cf instead [ 365.470470][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0xac01 instead [ 365.470478][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0x87f2 instead [ 365.470487][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0xdd54 instead [ 365.470495][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0x7c41 instead [ 365.470504][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0x22eb instead [ 365.470512][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x7be2 instead [ 365.470521][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0xc5f8 instead [ 365.470613][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0x4bd8 instead [ 365.470624][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0x1822 instead [ 365.470634][T13026] jffs2: Further such events for this erase block will not be printed [ 365.470919][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0xff80 instead [ 365.470929][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0xe8bb instead [ 365.470938][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0xf881 instead [ 365.470948][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0xe026 instead [ 365.470957][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0xb22b instead [ 365.470967][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0xb88e instead [ 365.470976][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x38d1 instead [ 365.470985][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0x6d6b instead [ 365.470994][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0xa5d5 instead [ 365.471003][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0x60e5 instead [ 365.471012][T13026] jffs2: Further such events for this erase block will not be printed [ 365.471256][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0xde41 instead [ 365.471266][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0fce instead [ 365.471275][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0x6ff1 instead [ 365.471284][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0xf681 instead [ 365.471293][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0x7b41 instead [ 365.471301][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0xa1b6 instead [ 365.471310][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xf9fe instead [ 365.471319][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0xb287 instead [ 365.471327][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0x6cc7 instead [ 365.471336][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0xce29 instead [ 365.471344][T13026] jffs2: Further such events for this erase block will not be printed [ 365.471583][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0xe385 instead [ 365.471592][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0xb7c8 instead [ 365.471601][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0x5df9 instead [ 365.471609][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0x4f52 instead [ 365.471618][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0x4aeb instead [ 365.471627][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0x4723 instead [ 365.471635][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xc38c instead [ 365.471714][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0x1319 instead [ 365.471725][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0x4e02 instead [ 365.471734][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0x7b52 instead [ 365.471742][T13026] jffs2: Further such events for this erase block will not be printed [ 365.472003][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x2965 instead [ 365.472014][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x2df7 instead [ 365.472023][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0x603b instead [ 365.472032][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0x48d3 instead [ 365.472041][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0xe12d instead [ 365.472049][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0x8efe instead [ 365.472058][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x2e6f instead [ 365.472067][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0x3089 instead [ 365.472075][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0x426f instead [ 365.472084][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0x3d28 instead [ 365.472092][T13026] jffs2: Further such events for this erase block will not be printed [ 365.472331][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x10ac instead [ 365.472340][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0xa8e7 instead [ 365.472349][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0xc3d5 instead [ 365.472358][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0xaf1e instead [ 365.472366][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0x9be1 instead [ 365.472375][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0x393d instead [ 365.472384][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x3337 instead [ 365.472392][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0x4c21 instead [ 365.472401][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x1632 instead [ 365.472410][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0xe1a4 instead [ 365.472418][T13026] jffs2: Further such events for this erase block will not be printed [ 365.472657][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0xb14d instead [ 365.472666][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0xbfb5 instead [ 365.472674][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0x64df instead [ 365.472683][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0x0f9a instead [ 365.472692][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0xb766 instead [ 365.472700][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0x2d69 instead [ 365.472709][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x814d instead [ 365.472717][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0xfc1c instead [ 365.472726][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0x2cda instead [ 365.472735][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0xccc6 instead [ 365.472743][T13026] jffs2: Further such events for this erase block will not be printed [ 365.473182][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x3732 instead [ 365.473193][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0xa6d2 instead [ 365.473202][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010008: 0xd806 instead [ 365.473231][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001000c: 0x8f28 instead [ 365.473241][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010010: 0xf7ab instead [ 365.473250][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010014: 0xc7b1 instead [ 365.473259][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xab94 instead [ 365.473267][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001001c: 0x1fbf instead [ 365.473276][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010020: 0x734a instead [ 365.473285][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010024: 0x2229 instead [ 365.473293][T13026] jffs2: Further such events for this erase block will not be printed [ 365.473533][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x5f2d instead [ 365.473542][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x1b47 instead [ 365.473551][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011008: 0x78e4 instead [ 365.473560][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001100c: 0xd2f9 instead [ 365.473568][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011010: 0x20b0 instead [ 365.473577][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011014: 0x9de2 instead [ 365.473586][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xce81 instead [ 365.473594][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001101c: 0x1561 instead [ 365.473603][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011020: 0x6792 instead [ 365.473612][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011024: 0x8454 instead [ 365.473620][T13026] jffs2: Further such events for this erase block will not be printed [ 365.473933][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x8fae instead [ 365.473945][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0b3b instead [ 365.473954][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012008: 0x2886 instead [ 365.473962][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001200c: 0xa8ca instead [ 365.473971][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012010: 0x46c1 instead [ 365.473980][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012014: 0x45fe instead [ 365.473988][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xb971 instead [ 365.473997][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001201c: 0xb59c instead [ 365.474006][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012020: 0xf6ae instead [ 365.474015][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012024: 0x55c6 instead [ 365.474023][T13026] jffs2: Further such events for this erase block will not be printed [ 365.474262][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0xf35f instead [ 365.474271][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x8a6d instead [ 365.474280][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013008: 0xcfa2 instead [ 365.474288][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001300c: 0xd0ab instead [ 365.474297][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013010: 0xc6d8 instead [ 365.474306][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013014: 0x5e3d instead [ 365.474314][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x8ae4 instead [ 365.474323][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001301c: 0xbe58 instead [ 365.474331][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013020: 0x26a8 instead [ 365.474340][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013024: 0x766a instead [ 365.474348][T13026] jffs2: Further such events for this erase block will not be printed [ 365.474587][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0xc893 instead [ 365.474597][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x5d5b instead [ 365.474605][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014008: 0xcef7 instead [ 365.474614][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001400c: 0xf7bf instead [ 365.474623][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014010: 0xc42d instead [ 365.474631][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014014: 0x538b instead [ 365.474640][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x1ce5 instead [ 365.474649][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001401c: 0x230b instead [ 365.474657][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014020: 0xe886 instead [ 365.474666][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014024: 0xa2fa instead [ 365.474674][T13026] jffs2: Further such events for this erase block will not be printed [ 365.474916][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0xf243 instead [ 365.474925][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x85a6 instead [ 365.474934][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015008: 0xd105 instead [ 365.474943][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001500c: 0x9d37 instead [ 365.474951][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015010: 0x4954 instead [ 365.474960][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015014: 0x856c instead [ 365.475036][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xa40d instead [ 365.475046][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001501c: 0xfd73 instead [ 365.475055][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015020: 0x8faf instead [ 365.475064][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015024: 0x15bf instead [ 365.475072][T13026] jffs2: Further such events for this erase block will not be printed [ 365.475311][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x22df instead [ 365.475321][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x85c1 instead [ 365.475329][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016008: 0x0943 instead [ 365.475338][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001600c: 0x728f instead [ 365.475347][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016010: 0xe3dc instead [ 365.475356][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016014: 0x2e04 instead [ 365.475365][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x348f instead [ 365.475373][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001601c: 0xea2e instead [ 365.475382][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016020: 0x59b5 instead [ 365.475391][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016024: 0x5017 instead [ 365.475399][T13026] jffs2: Further such events for this erase block will not be printed [ 365.475681][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x8e4b instead [ 365.475692][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0xc06e instead [ 365.475701][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017008: 0x9ce9 instead [ 365.475709][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001700c: 0x2e23 instead [ 365.475718][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017010: 0x5fac instead [ 365.475727][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017014: 0x865f instead [ 365.475735][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x81dc instead [ 365.475744][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001701c: 0x1a41 instead [ 365.475753][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017020: 0x385b instead [ 365.475761][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017024: 0x141f instead [ 365.475816][T13026] jffs2: Further such events for this erase block will not be printed [ 365.476059][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0xb512 instead [ 365.476069][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x83d8 instead [ 365.476220][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018008: 0xf3b6 instead [ 365.476231][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001800c: 0x6ccd instead [ 365.476239][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018010: 0x4e4c instead [ 365.476248][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018014: 0x21f8 instead [ 365.476257][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x4126 instead [ 365.476265][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001801c: 0x9152 instead [ 365.476274][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018020: 0x8d22 instead [ 365.476283][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018024: 0xc151 instead [ 365.476291][T13026] jffs2: Further such events for this erase block will not be printed [ 365.476545][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x091a instead [ 365.476557][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0xad24 instead [ 365.476566][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019008: 0x4ce1 instead [ 365.476574][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001900c: 0x3251 instead [ 365.476583][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019010: 0xb867 instead [ 365.476592][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019014: 0xa200 instead [ 365.476601][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x0d23 instead [ 365.476609][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001901c: 0x68f6 instead [ 365.476618][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019020: 0xbca6 instead [ 365.476627][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019024: 0xe58b instead [ 365.476635][T13026] jffs2: Further such events for this erase block will not be printed [ 365.479196][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0xf788 instead [ 365.479208][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x6fba instead [ 365.479217][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a008: 0x11ab instead [ 365.479227][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a00c: 0x70c1 instead [ 365.479235][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a010: 0xfd71 instead [ 365.479244][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a014: 0x80b6 instead [ 365.479253][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xb48f instead [ 365.479261][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a01c: 0x9b41 instead [ 365.479270][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a020: 0x6679 instead [ 365.479279][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a024: 0x426d instead [ 365.479287][T13026] jffs2: Further such events for this erase block will not be printed [ 365.480472][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x1961 instead [ 365.480483][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x7cf8 instead [ 365.480492][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b008: 0x0093 instead [ 365.480501][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b00c: 0xce9c instead [ 365.480510][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b010: 0x3f69 instead [ 365.480518][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b014: 0x296a instead [ 365.480527][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x63f2 instead [ 365.480536][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b01c: 0x6977 instead [ 365.480544][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b020: 0xf7ee instead [ 365.480553][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b024: 0x3315 instead [ 365.480561][T13026] jffs2: Further such events for this erase block will not be printed [ 365.481300][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0xa664 instead [ 365.481312][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x2a31 instead [ 365.481322][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c008: 0x4a0f instead [ 365.481331][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c00c: 0xd492 instead [ 365.481341][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c010: 0x4cf4 instead [ 365.481350][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c014: 0xda4d instead [ 365.481360][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x2513 instead [ 365.481369][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c01c: 0x4ed0 instead [ 365.481378][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c020: 0xf216 instead [ 365.481388][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c024: 0xdb08 instead [ 365.481397][T13026] jffs2: Further such events for this erase block will not be printed [ 365.483232][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0xaece instead [ 365.483245][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x4731 instead [ 365.483255][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d008: 0xff08 instead [ 365.483265][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d00c: 0xb9af instead [ 365.483274][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d010: 0x0def instead [ 365.483284][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d014: 0x9e27 instead [ 365.483294][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xf4bb instead [ 365.483304][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d01c: 0x7206 instead [ 365.483314][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d020: 0xfc6a instead [ 365.483323][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d024: 0xd6f8 instead [ 365.483333][T13026] jffs2: Further such events for this erase block will not be printed [ 365.483604][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x7ada instead [ 365.483614][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x26cb instead [ 365.483624][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e008: 0xf765 instead [ 365.483634][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e00c: 0xf3b1 instead [ 365.483644][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e010: 0xa9c2 instead [ 365.483654][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e014: 0xe772 instead [ 365.483664][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x1c73 instead [ 365.483674][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e01c: 0xa255 instead [ 365.483684][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e020: 0x2685 instead [ 365.483694][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e024: 0x1dbc instead [ 365.483703][T13026] jffs2: Further such events for this erase block will not be printed [ 365.485774][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x51b6 instead [ 365.485792][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x5e33 instead [ 365.485802][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f008: 0x3efc instead [ 365.485812][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f00c: 0x3ee3 instead [ 365.485823][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f010: 0x344a instead [ 365.485832][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f014: 0x94b2 instead [ 365.485843][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xaf38 instead [ 365.485853][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f01c: 0xcdc9 instead [ 365.485862][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f020: 0xa640 instead [ 365.485872][T13026] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f024: 0x9cb7 instead [ 365.485881][T13026] jffs2: Further such events for this erase block will not be printed [ 365.486559][T13026] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 365.486566][T13026] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 365.496879][ T5525] usb 50-1: SetAddress Request (34) to port 0 [ 365.496914][ T5525] usb 50-1: new SuperSpeed USB device number 34 using vhci_hcd [ 365.996589][T13021] vhci_hcd: connection reset by peer [ 365.996838][ T13] vhci_hcd vhci_hcd.6: stop threads [ 365.996919][ T13] vhci_hcd vhci_hcd.6: release socket [ 365.996957][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 366.283993][T13030] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 366.507011][T13050] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1437'. [ 367.109929][ T6162] usbhid 13-1:1.0: can't add hid device: -71 [ 367.110597][ T6162] usbhid 13-1:1.0: probe with driver usbhid failed with error -71 [ 367.130949][ T6162] usb 13-1: USB disconnect, device number 18 [ 367.159141][T13068] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1443'. [ 367.234061][T13072] xt_CT: You must specify a L4 protocol and not use inversions on it [ 367.970764][T13066] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 368.496901][ T7600] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 368.659227][ T7600] usb 9-1: Using ep0 maxpacket: 32 [ 368.662020][ T7600] usb 9-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.40 [ 368.668968][ T7600] usb 9-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 368.669038][ T7600] usb 9-1: config 1 interface 0 has no altsetting 0 [ 368.683586][ T7600] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.683634][ T7600] usb 9-1: Product: syz [ 368.683664][ T7600] usb 9-1: Manufacturer: syz [ 368.683687][ T7600] usb 9-1: SerialNumber: syz [ 368.897070][ T43] audit: type=1326 audit(2000000072.428:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13101 comm="syz.4.1451" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706efec code=0x0 [ 368.936845][ T5814] usb 13-1: new high-speed USB device number 19 using dummy_hcd [ 369.106759][ T5814] usb 13-1: Using ep0 maxpacket: 32 [ 369.109650][ T5814] usb 13-1: unable to get BOS descriptor or descriptor too short [ 369.110562][ T5814] usb 13-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 369.112389][ T5814] usb 13-1: config 14 has an invalid interface number: 57 but max is 1 [ 369.112411][ T5814] usb 13-1: config 14 has an invalid interface number: 228 but max is 1 [ 369.112429][ T5814] usb 13-1: config 14 has no interface number 0 [ 369.112444][ T5814] usb 13-1: config 14 has no interface number 1 [ 369.112559][ T5814] usb 13-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 369.112582][ T5814] usb 13-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 369.112605][ T5814] usb 13-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 369.112628][ T5814] usb 13-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 369.112720][ T5814] usb 13-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 369.112744][ T5814] usb 13-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 369.112768][ T5814] usb 13-1: config 14 interface 57 has no altsetting 0 [ 369.112784][ T5814] usb 13-1: config 14 interface 228 has no altsetting 0 [ 369.116172][ T5814] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.116194][ T5814] usb 13-1: Product: syz [ 369.116205][ T5814] usb 13-1: Manufacturer: syz [ 369.116216][ T5814] usb 13-1: SerialNumber: syz [ 369.534213][ T5814] legousbtower 13-1:14.57: interrupt endpoints not found [ 369.740069][ T5814] legousbtower 13-1:14.228: get version request failed: -71 [ 369.740233][ T5814] legousbtower 13-1:14.228: probe with driver legousbtower failed with error -71 [ 369.744272][ T5814] usb 13-1: USB disconnect, device number 19 [ 369.921996][T13110] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 369.930853][ T43] audit: type=1800 audit(2000000073.458:1195): pid=13115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1453" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0 [ 370.624172][ T5525] usb 50-1: device descriptor read/8, error -110 [ 370.721932][T13134] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1460'. [ 371.019043][ T5525] usb usb50-port1: attempt power cycle [ 371.044413][T13141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'. [ 371.154244][T13146] netlink: 'syz.3.1462': attribute type 12 has an invalid length. [ 371.154305][T13146] netlink: 'syz.3.1462': attribute type 29 has an invalid length. [ 371.154364][T13146] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1462'. [ 371.154382][T13146] netlink: 'syz.3.1462': attribute type 1 has an invalid length. [ 371.154394][T13146] netlink: 47 bytes leftover after parsing attributes in process `syz.3.1462'. [ 371.206790][ T5744] Bluetooth: hci3: command 0x041b tx timeout [ 371.248039][T13141] btrfs: Unknown parameter 'discard [ 371.248039][T13141] Ð`«7Š&•W¼' [ 371.288187][ T7600] usbhid 9-1:1.0: can't add hid device: -71 [ 371.288301][ T7600] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 371.292950][ T7600] usb 9-1: USB disconnect, device number 26 [ 371.592499][T13158] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1464'. [ 371.592551][T13158] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 371.607447][ T5525] usb usb50-port1: unable to enumerate USB device [ 372.169941][T13150] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 372.290396][T13168] FAULT_INJECTION: forcing a failure. [ 372.290396][T13168] name failslab, interval 1, probability 0, space 0, times 0 [ 372.290445][T13168] CPU: 1 UID: 0 PID: 13168 Comm: syz.4.1469 Tainted: G L syzkaller #0 PREEMPT(full) [ 372.290473][T13168] Tainted: [L]=SOFTLOCKUP [ 372.290478][T13168] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 372.290486][T13168] Call Trace: [ 372.290490][T13168] [ 372.290495][T13168] dump_stack_lvl+0x100/0x190 [ 372.290515][T13168] should_fail_ex.cold+0x5/0xa [ 372.290530][T13168] should_failslab+0xc2/0x120 [ 372.290544][T13168] kmem_cache_alloc_noprof+0x92/0x6a0 [ 372.290556][T13168] ? ptlock_alloc+0x1f/0x70 [ 372.290574][T13168] ptlock_alloc+0x1f/0x70 [ 372.290589][T13168] pte_alloc_one+0x82/0x3d0 [ 372.290604][T13168] __pte_alloc+0x6d/0x380 [ 372.290615][T13168] ? __pfx___pte_alloc+0x10/0x10 [ 372.290631][T13168] do_anonymous_page+0x1307/0x2050 [ 372.290647][T13168] ? find_held_lock+0x2b/0x80 [ 372.290659][T13168] ? __pmd_alloc+0x3f6/0x950 [ 372.290672][T13168] ? __pmd_alloc+0x3f6/0x950 [ 372.290685][T13168] ? __pfx_do_anonymous_page+0x10/0x10 [ 372.290700][T13168] ? do_raw_spin_unlock+0x145/0x1e0 [ 372.290719][T13168] ? _raw_spin_unlock+0x28/0x50 [ 372.290730][T13168] ? __pmd_alloc+0x3fb/0x950 [ 372.290745][T13168] __handle_mm_fault+0x1ff3/0x2f60 [ 372.290764][T13168] ? __pfx___handle_mm_fault+0x10/0x10 [ 372.290779][T13168] ? __pfx_mt_find+0x10/0x10 [ 372.290805][T13168] handle_mm_fault+0x363/0xa20 [ 372.290823][T13168] __get_user_pages+0x8ae/0x2c30 [ 372.290841][T13168] ? __pfx___get_user_pages+0x10/0x10 [ 372.290854][T13168] ? lock_acquire+0x1d1/0x380 [ 372.290868][T13168] ? mmap_read_lock_maybe_expand+0x1e2/0x3d0 [ 372.290886][T13168] get_user_pages_remote+0x3d2/0xb10 [ 372.290902][T13168] ? __pfx_get_user_pages_remote+0x10/0x10 [ 372.290925][T13168] get_arg_page+0xf4/0x310 [ 372.290942][T13168] ? __pfx_get_arg_page+0x10/0x10 [ 372.290958][T13168] ? do_raw_spin_lock+0x128/0x260 [ 372.290975][T13168] ? alloc_bprm+0x54e/0x9e0 [ 372.290992][T13168] ? alloc_bprm+0x54e/0x9e0 [ 372.291010][T13168] copy_string_kernel+0x17d/0x3f0 [ 372.291027][T13168] ? alloc_bprm+0x596/0x9e0 [ 372.291046][T13168] do_execveat_common.isra.0+0x2e6/0x580 [ 372.291066][T13168] __ia32_compat_sys_execve+0x9c/0xd0 [ 372.291078][T13168] __do_fast_syscall_32+0x13a/0x8b0 [ 372.291095][T13168] do_fast_syscall_32+0x32/0x70 [ 372.291110][T13168] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 372.291124][T13168] RIP: 0023:0xf706efec [ 372.291138][T13168] Code: Unable to access opcode bytes at 0xf706efc2. [ 372.291143][T13168] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 000000000000000b [ 372.291155][T13168] RAX: ffffffffffffffda RBX: 0000000080000240 RCX: 0000000000000000 [ 372.291161][T13168] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 372.291168][T13168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 372.291174][T13168] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 372.291181][T13168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 372.291194][T13168] [ 372.590608][T13184] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 372.590637][T13184] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 372.597001][T13184] vhci_hcd vhci_hcd.0: Device attached [ 372.876764][ T5525] usb 50-1: SetAddress Request (38) to port 0 [ 372.876854][ T5525] usb 50-1: new SuperSpeed USB device number 38 using vhci_hcd [ 372.946798][ T7600] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 373.095362][T13185] vhci_hcd: connection reset by peer [ 373.096029][ T5822] vhci_hcd vhci_hcd.6: stop threads [ 373.096051][ T5822] vhci_hcd vhci_hcd.6: release socket [ 373.096097][ T5822] vhci_hcd vhci_hcd.6: disconnect device [ 373.107031][ T7600] usb 8-1: Using ep0 maxpacket: 32 [ 373.107983][ T7600] usb 8-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.40 [ 373.109622][ T7600] usb 8-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 373.109639][ T7600] usb 8-1: config 1 interface 0 has no altsetting 0 [ 373.111900][ T7600] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.111913][ T7600] usb 8-1: Product: syz [ 373.111920][ T7600] usb 8-1: Manufacturer: syz [ 373.111928][ T7600] usb 8-1: SerialNumber: syz [ 373.347263][ T43] audit: type=1326 audit(2000000076.878:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13193 comm="syz.3.1476" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708efec code=0x0 [ 373.449322][ T5744] Bluetooth: hci3: command 0x041b tx timeout [ 373.587295][T13204] xt_CT: You must specify a L4 protocol and not use inversions on it [ 374.010270][T13220] Cannot find del_set index 0 as target [ 374.712762][T13234] FAULT_INJECTION: forcing a failure. [ 374.712762][T13234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.712833][T13234] CPU: 3 UID: 0 PID: 13234 Comm: syz.4.1487 Tainted: G L syzkaller #0 PREEMPT(full) [ 374.712871][T13234] Tainted: [L]=SOFTLOCKUP [ 374.712879][T13234] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 374.712890][T13234] Call Trace: [ 374.712896][T13234] [ 374.712903][T13234] dump_stack_lvl+0x100/0x190 [ 374.712931][T13234] should_fail_ex.cold+0x5/0xa [ 374.712953][T13234] _copy_to_user+0x32/0xd0 [ 374.712974][T13234] simple_read_from_buffer+0xcb/0x170 [ 374.712994][T13234] proc_fail_nth_read+0x1af/0x230 [ 374.713019][T13234] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 374.713048][T13234] ? rw_verify_area+0xce/0x6d0 [ 374.713071][T13234] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 374.713096][T13234] vfs_read+0x1e4/0xb40 [ 374.713113][T13234] ? lock_acquire+0x1d1/0x380 [ 374.713135][T13234] ? __fget_files+0x34/0x3d0 [ 374.713153][T13234] ? __pfx_vfs_read+0x10/0x10 [ 374.713188][T13234] ? find_held_lock+0x2b/0x80 [ 374.713208][T13234] ? __fget_files+0x215/0x3d0 [ 374.713229][T13234] ? __fget_files+0x21f/0x3d0 [ 374.713254][T13234] ksys_read+0x12a/0x250 [ 374.713270][T13234] ? __pfx_ksys_read+0x10/0x10 [ 374.713293][T13234] do_int80_emulation+0x166/0x650 [ 374.713319][T13234] asm_int80_emulation+0x1a/0x20 [ 374.713338][T13234] RIP: 0023:0xf71a75ab [ 374.713353][T13234] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 374.713375][T13234] RSP: 002b:00000000f541b4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 374.713393][T13234] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f541b5d0 [ 374.713405][T13234] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 374.713416][T13234] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 374.713428][T13234] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 374.713438][T13234] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 374.713461][T13234] [ 375.041032][T13246] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 375.041072][T13246] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 375.047087][T13246] vhci_hcd vhci_hcd.0: Device attached [ 375.316770][T11273] usb 54-1: SetAddress Request (6) to port 0 [ 375.316883][T11273] usb 54-1: new SuperSpeed USB device number 6 using vhci_hcd [ 375.690985][T13247] vhci_hcd: connection reset by peer [ 375.691402][ T13] vhci_hcd vhci_hcd.8: stop threads [ 375.691426][ T13] vhci_hcd vhci_hcd.8: release socket [ 375.691532][ T13] vhci_hcd vhci_hcd.8: disconnect device [ 375.756341][ T7600] usbhid 8-1:1.0: can't add hid device: -71 [ 375.756435][ T7600] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 375.774738][ T7600] usb 8-1: USB disconnect, device number 42 [ 376.006094][T13254] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 376.302387][T13272] xt_CT: You must specify a L4 protocol and not use inversions on it [ 376.366870][ T5824] usb 11-1: new high-speed USB device number 33 using dummy_hcd [ 376.537751][ T5824] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 376.541115][ T5824] usb 11-1: config 0 has an invalid interface number: 50 but max is 0 [ 376.541148][ T5824] usb 11-1: config 0 has no interface number 0 [ 376.541210][ T5824] usb 11-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 376.549677][ T5824] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.549702][ T5824] usb 11-1: Product: syz [ 376.549716][ T5824] usb 11-1: Manufacturer: syz [ 376.549727][ T5824] usb 11-1: SerialNumber: syz [ 376.555498][ T5824] usb 11-1: config 0 descriptor?? [ 376.580093][ T5824] yurex 11-1:0.50: USB YUREX device now attached to Yurex #0 [ 376.771619][ T7600] usb 11-1: USB disconnect, device number 33 [ 376.774730][ T7600] yurex 11-1:0.50: USB YUREX #0 now disconnected [ 377.598484][T13309] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 377.598515][T13309] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 377.605190][T13309] vhci_hcd vhci_hcd.0: Device attached [ 377.896809][ T5929] usb 44-1: SetAddress Request (38) to port 0 [ 377.896975][ T5929] usb 44-1: new SuperSpeed USB device number 38 using vhci_hcd [ 377.926849][ T5525] usb 50-1: device descriptor read/8, error -110 [ 377.977693][T13290] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 378.091458][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.093275][T13320] CIFS mount error: No usable UNC path provided in device string! [ 378.093275][T13320] [ 378.093292][T13320] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 378.093524][T13320] CIFS mount error: No usable UNC path provided in device string! [ 378.093524][T13320] [ 378.093536][T13320] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 378.177893][T13324] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 378.177977][T13324] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 378.194307][T13324] CacheFiles: Failed to register: -95 [ 378.254924][T13310] vhci_hcd: connection reset by peer [ 378.255147][ T13] vhci_hcd vhci_hcd.3: stop threads [ 378.255162][ T13] vhci_hcd vhci_hcd.3: release socket [ 378.255190][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 378.303279][T13332] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1517'. [ 378.337486][ T5525] usb usb50-port1: attempt power cycle [ 378.436816][ T5814] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 378.456105][T13336] xt_CT: You must specify a L4 protocol and not use inversions on it [ 378.486839][ T3267] usb 11-1: new high-speed USB device number 34 using dummy_hcd [ 378.590173][ T5814] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 378.592163][ T5814] usb 9-1: config 0 has an invalid interface number: 50 but max is 0 [ 378.592188][ T5814] usb 9-1: config 0 has no interface number 0 [ 378.592220][ T5814] usb 9-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 378.595508][ T5814] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.595533][ T5814] usb 9-1: Product: syz [ 378.595548][ T5814] usb 9-1: Manufacturer: syz [ 378.595563][ T5814] usb 9-1: SerialNumber: syz [ 378.600055][ T5814] usb 9-1: config 0 descriptor?? [ 378.607837][ T5814] yurex 9-1:0.50: USB YUREX device now attached to Yurex #0 [ 378.637727][ T3267] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 378.642739][ T3267] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.642877][ T3267] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.642892][ T3267] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 378.642914][ T3267] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.645790][ T3267] usb 11-1: config 0 descriptor?? [ 378.823901][ T7600] usb 9-1: USB disconnect, device number 27 [ 378.831615][ T7600] yurex 9-1:0.50: USB YUREX #0 now disconnected [ 378.897790][ T5525] usb usb50-port1: unable to enumerate USB device [ 379.066188][ T3267] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 379.207556][ T5744] Bluetooth: hci3: command 0x041b tx timeout [ 379.535674][T13358] tipc: Enabling of bearer rejected, failed to enable media [ 379.696469][T13355] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 379.704047][T13355] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff] [ 379.704154][T13355] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff] [ 379.704275][T13355] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f] [ 379.704387][T13355] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff] [ 379.704619][T13355] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 379.705178][T13355] pci 0000:00:02.0: enabling Extended Tags [ 379.721524][T13355] pci 0000:00:02.0: Adding to iommu group 2 [ 379.730081][T13355] pci 0000:00:02.0: ROM [mem 0x81000000-0x8103ffff pref]: assigned [ 379.730147][T13355] pci 0000:00:02.0: BAR 0 [mem 0x81040000-0x8105ffff]: assigned [ 379.730287][T13355] pci 0000:00:02.0: BAR 1 [mem 0x81060000-0x8107ffff]: assigned [ 379.730392][T13355] pci 0000:00:02.0: BAR 3 [mem 0x81080000-0x81083fff]: assigned [ 379.730493][T13355] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 379.771095][T13355] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 379.841430][T13355] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 379.938558][T13355] e1000e 0000:00:02.0 eth5: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 379.941960][T13355] e1000e 0000:00:02.0 eth5: Intel(R) PRO/1000 Network Connection [ 379.944657][T13355] e1000e 0000:00:02.0 eth5: MAC: 3, PHY: 8, PBA No: 000000-000 [ 380.058829][T13346] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 380.196787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 380.407122][T11273] usb 54-1: device descriptor read/8, error -110 [ 380.412458][ T5448] 8021q: adding VLAN 0 to HW filter on device eth5 [ 380.462416][T13381] can0: slcan on ttyprintk. [ 380.810575][T11273] usb usb54-port1: attempt power cycle [ 380.860307][T13394] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 380.860334][T13394] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 380.862057][T13394] vhci_hcd vhci_hcd.0: Device attached [ 380.890835][ T5824] e1000e 0000:00:02.0 eth5: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 381.021248][T13404] FAULT_INJECTION: forcing a failure. [ 381.021248][T13404] name failslab, interval 1, probability 0, space 0, times 0 [ 381.021332][T13404] CPU: 3 UID: 0 PID: 13404 Comm: syz.6.1528 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.021363][T13404] Tainted: [L]=SOFTLOCKUP [ 381.021370][T13404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 381.021377][T13404] Call Trace: [ 381.021383][T13404] [ 381.021389][T13404] dump_stack_lvl+0x100/0x190 [ 381.021412][T13404] should_fail_ex.cold+0x5/0xa [ 381.021429][T13404] should_failslab+0xc2/0x120 [ 381.021445][T13404] __kmalloc_cache_node_noprof+0x94/0x720 [ 381.021478][T13404] ? __get_vm_area_node+0x124/0x350 [ 381.021496][T13404] __get_vm_area_node+0x124/0x350 [ 381.021513][T13404] __vmalloc_node_range_noprof+0x268/0x1420 [ 381.021546][T13404] ? bpf_check+0x1800/0xa7c0 [ 381.021563][T13404] ? __pfx___css_rstat_updated+0x10/0x10 [ 381.021581][T13404] ? __kernel_text_address+0xd/0x30 [ 381.021599][T13404] ? bpf_check+0x1800/0xa7c0 [ 381.021618][T13404] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 381.021635][T13404] ? rcu_read_unlock+0x17/0x60 [ 381.021653][T13404] ? rcu_read_unlock+0x17/0x60 [ 381.021670][T13404] ? find_held_lock+0x2b/0x80 [ 381.021683][T13404] ? rcu_read_unlock+0x17/0x60 [ 381.021701][T13404] ? rcu_read_unlock+0x17/0x60 [ 381.021721][T13404] ? bpf_check+0x1800/0xa7c0 [ 381.021736][T13404] __vmalloc_node_noprof+0xad/0xf0 [ 381.021753][T13404] ? bpf_check+0x1800/0xa7c0 [ 381.021770][T13404] __vmalloc_noprof+0xa3/0x120 [ 381.021787][T13404] ? __pfx___vmalloc_noprof+0x10/0x10 [ 381.021802][T13404] ? bpf_lsm_capable+0x9/0x10 [ 381.021820][T13404] ? security_capable+0x80/0x260 [ 381.021833][T13404] ? lsm_blob_alloc+0x2b/0x90 [ 381.021845][T13404] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 381.021862][T13404] ? security_bpf_prog_load+0x10f/0x2f0 [ 381.021877][T13404] ? bpf_vlog_init+0x118/0x150 [ 381.021902][T13404] bpf_check+0x1800/0xa7c0 [ 381.021920][T13404] ? __css_rstat_updated+0x1ce/0x590 [ 381.021936][T13404] ? __lock_acquire+0x4c5/0x1ec0 [ 381.021958][T13404] ? __lock_acquire+0x4c5/0x1ec0 [ 381.021979][T13404] ? __pfx_bpf_check+0x10/0x10 [ 381.021995][T13404] ? lock_acquire+0x1d1/0x380 [ 381.022011][T13404] ? bpf_prog_load+0x1a09/0x2a80 [ 381.022034][T13404] ? find_held_lock+0x2b/0x80 [ 381.022052][T13404] ? bpf_prog_load+0x1a09/0x2a80 [ 381.022080][T13404] ? __asan_memset+0x23/0x50 [ 381.022105][T13404] ? bpf_prog_load+0x1ac3/0x2a80 [ 381.022132][T13404] bpf_prog_load+0x1ac3/0x2a80 [ 381.022166][T13404] ? __pfx_bpf_prog_load+0x10/0x10 [ 381.022200][T13404] __sys_bpf+0x1f46/0x4a30 [ 381.022216][T13404] ? __pfx___sys_bpf+0x10/0x10 [ 381.022227][T13404] ? lock_acquire+0x1d1/0x380 [ 381.022242][T13404] ? get_pid_task+0x2a/0x250 [ 381.022255][T13404] ? find_held_lock+0x2b/0x80 [ 381.022267][T13404] ? get_pid_task+0xfc/0x250 [ 381.022279][T13404] ? get_pid_task+0xfc/0x250 [ 381.022295][T13404] ? proc_fail_nth_write+0x9f/0x220 [ 381.022308][T13404] ? find_held_lock+0x2b/0x80 [ 381.022324][T13404] ? rcu_read_lock_any_held+0x6a/0x90 [ 381.022338][T13404] ? find_held_lock+0x2b/0x80 [ 381.022350][T13404] ? ksys_write+0x190/0x250 [ 381.022361][T13404] ? ksys_write+0x190/0x250 [ 381.022372][T13404] ? lock_acquire+0x1d1/0x380 [ 381.022401][T13404] ? fput+0x7c/0x100 [ 381.022417][T13404] ? __ia32_sys_bpf+0xcc/0x170 [ 381.022429][T13404] __ia32_sys_bpf+0xcc/0x170 [ 381.022442][T13404] ? __do_fast_syscall_32+0xb3/0x8b0 [ 381.022460][T13404] __do_fast_syscall_32+0x13a/0x8b0 [ 381.022476][T13404] ? lockdep_hardirqs_on+0x7d/0x110 [ 381.022493][T13404] do_fast_syscall_32+0x32/0x70 [ 381.022510][T13404] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 381.022526][T13404] RIP: 0023:0xf7f13fec [ 381.022541][T13404] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 381.022547][T13404] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 381.022560][T13404] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800011c0 [ 381.022568][T13404] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 381.022575][T13404] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 381.022583][T13404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.022590][T13404] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 381.022605][T13404] [ 381.031593][T13404] syz.6.1528: vmalloc error: size 544, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 381.031636][T13404] CPU: 3 UID: 0 PID: 13404 Comm: syz.6.1528 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.031652][T13404] Tainted: [L]=SOFTLOCKUP [ 381.031656][T13404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 381.031663][T13404] Call Trace: [ 381.031667][T13404] [ 381.031672][T13404] dump_stack_lvl+0x100/0x190 [ 381.031691][T13404] warn_alloc.cold+0x9e/0xb2 [ 381.031704][T13404] ? __pfx_warn_alloc+0x10/0x10 [ 381.031721][T13404] ? __kasan_kmalloc+0x8a/0xb0 [ 381.031738][T13404] ? __get_vm_area_node+0x22b/0x350 [ 381.031754][T13404] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 381.031781][T13404] ? __pfx___css_rstat_updated+0x10/0x10 [ 381.031806][T13404] ? __kernel_text_address+0xd/0x30 [ 381.031833][T13404] ? bpf_check+0x1800/0xa7c0 [ 381.031862][T13404] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 381.031886][T13404] ? rcu_read_unlock+0x17/0x60 [ 381.031905][T13404] ? rcu_read_unlock+0x17/0x60 [ 381.031920][T13404] ? find_held_lock+0x2b/0x80 [ 381.031931][T13404] ? rcu_read_unlock+0x17/0x60 [ 381.031947][T13404] ? rcu_read_unlock+0x17/0x60 [ 381.031964][T13404] ? bpf_check+0x1800/0xa7c0 [ 381.031978][T13404] __vmalloc_node_noprof+0xad/0xf0 [ 381.031992][T13404] ? bpf_check+0x1800/0xa7c0 [ 381.032007][T13404] __vmalloc_noprof+0xa3/0x120 [ 381.032021][T13404] ? __pfx___vmalloc_noprof+0x10/0x10 [ 381.032035][T13404] ? bpf_lsm_capable+0x9/0x10 [ 381.032051][T13404] ? security_capable+0x80/0x260 [ 381.032064][T13404] ? lsm_blob_alloc+0x2b/0x90 [ 381.032074][T13404] ? bpf_lsm_bpf_prog_load+0x9/0x10 [ 381.032090][T13404] ? security_bpf_prog_load+0x10f/0x2f0 [ 381.032104][T13404] ? bpf_vlog_init+0x118/0x150 [ 381.032121][T13404] bpf_check+0x1800/0xa7c0 [ 381.032136][T13404] ? __css_rstat_updated+0x1ce/0x590 [ 381.032151][T13404] ? __lock_acquire+0x4c5/0x1ec0 [ 381.032170][T13404] ? __lock_acquire+0x4c5/0x1ec0 [ 381.032188][T13404] ? __pfx_bpf_check+0x10/0x10 [ 381.032202][T13404] ? lock_acquire+0x1d1/0x380 [ 381.032216][T13404] ? bpf_prog_load+0x1a09/0x2a80 [ 381.032232][T13404] ? find_held_lock+0x2b/0x80 [ 381.032242][T13404] ? bpf_prog_load+0x1a09/0x2a80 [ 381.032261][T13404] ? __asan_memset+0x23/0x50 [ 381.032274][T13404] ? bpf_prog_load+0x1ac3/0x2a80 [ 381.032288][T13404] bpf_prog_load+0x1ac3/0x2a80 [ 381.032306][T13404] ? __pfx_bpf_prog_load+0x10/0x10 [ 381.032331][T13404] __sys_bpf+0x1f46/0x4a30 [ 381.032346][T13404] ? __pfx___sys_bpf+0x10/0x10 [ 381.032355][T13404] ? lock_acquire+0x1d1/0x380 [ 381.032369][T13404] ? get_pid_task+0x2a/0x250 [ 381.032381][T13404] ? find_held_lock+0x2b/0x80 [ 381.032391][T13404] ? get_pid_task+0xfc/0x250 [ 381.032401][T13404] ? get_pid_task+0xfc/0x250 [ 381.032415][T13404] ? proc_fail_nth_write+0x9f/0x220 [ 381.032426][T13404] ? find_held_lock+0x2b/0x80 [ 381.032440][T13404] ? rcu_read_lock_any_held+0x6a/0x90 [ 381.032452][T13404] ? find_held_lock+0x2b/0x80 [ 381.032463][T13404] ? ksys_write+0x190/0x250 [ 381.032473][T13404] ? ksys_write+0x190/0x250 [ 381.032483][T13404] ? lock_acquire+0x1d1/0x380 [ 381.032505][T13404] ? fput+0x7c/0x100 [ 381.032520][T13404] ? __ia32_sys_bpf+0xcc/0x170 [ 381.032530][T13404] __ia32_sys_bpf+0xcc/0x170 [ 381.032542][T13404] ? __do_fast_syscall_32+0xb3/0x8b0 [ 381.032558][T13404] __do_fast_syscall_32+0x13a/0x8b0 [ 381.032572][T13404] ? lockdep_hardirqs_on+0x7d/0x110 [ 381.032587][T13404] do_fast_syscall_32+0x32/0x70 [ 381.032602][T13404] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 381.032617][T13404] RIP: 0023:0xf7f13fec [ 381.032630][T13404] Code: Unable to access opcode bytes at 0xf7f13fc2. [ 381.032635][T13404] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 381.032646][T13404] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800011c0 [ 381.032653][T13404] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 381.032660][T13404] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 381.032666][T13404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.032672][T13404] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 381.032686][T13404] [ 381.032690][T13404] Mem-Info: [ 381.032696][T13404] active_anon:16951 inactive_anon:13738 isolated_anon:0 [ 381.032696][T13404] active_file:7015 inactive_file:17059 isolated_file:0 [ 381.032696][T13404] unevictable:1000 dirty:387 writeback:0 [ 381.032696][T13404] slab_reclaimable:7120 slab_unreclaimable:67505 [ 381.032696][T13404] mapped:37267 shmem:8134 pagetables:2450 [ 381.032696][T13404] sec_pagetables:314 bounce:0 [ 381.032696][T13404] kernel_misc_reclaimable:0 [ 381.032696][T13404] free:24936 free_pcp:9472 free_cma:0 [ 381.032723][T13404] Node 0 active_anon:1172kB inactive_anon:44kB active_file:132kB inactive_file:2688kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8608kB pagetables:1468kB sec_pagetables:1104kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 381.032750][T13404] Node 1 active_anon:66632kB inactive_anon:54908kB active_file:27928kB inactive_file:65548kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:149040kB dirty:1544kB writeback:0kB shmem:32536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8756kB pagetables:8332kB sec_pagetables:152kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 381.032783][T13404] Node 0 DMA free:1860kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:384kB unevictable:0kB writepending:0kB zspages:12kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:80kB local_pcp:60kB free_cma:0kB [ 381.032812][T13404] lowmem_reserve[]: 0 278 278 278 278 [ 381.032830][T13404] Node 0 DMA32 free:25388kB boost:28408kB min:41036kB low:44192kB high:47348kB reserved_highatomic:0kB free_highatomic:0kB active_anon:1172kB inactive_anon:44kB active_file:132kB inactive_file:2304kB unevictable:0kB writepending:4kB zspages:168kB present:1032196kB managed:284676kB mlocked:0kB bounce:0kB free_pcp:10008kB local_pcp:336kB free_cma:0kB [ 381.032859][T13404] lowmem_reserve[]: 0 0 0 0 0 [ 381.032876][T13404] Node 1 DMA32 free:72496kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:66632kB inactive_anon:54908kB active_file:27928kB inactive_file:65548kB unevictable:4000kB writepending:1544kB zspages:6956kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:27800kB local_pcp:12412kB free_cma:0kB [ 381.032906][T13404] lowmem_reserve[]: 0 0 0 0 0 [ 381.032922][T13404] Node 0 DMA: 73*4kB (U) 6*8kB (U) 1*16kB (U) 3*32kB (UM) 4*64kB (UM) 3*128kB (UM) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 1860kB [ 381.033012][T13404] Node 0 DMA32: 269*4kB (UE) 179*8kB (UME) 52*16kB (UE) 185*32kB (UE) 72*64kB (UME) 22*128kB (UME) 6*256kB (UME) 2*512kB (U) 4*1024kB (M) 1*2048kB (M) 0*4096kB = 25388kB [ 381.033116][T13404] Node 1 DMA32: 78*4kB (UME) 213*8kB (UME) 143*16kB (UE) 182*32kB (UME) 206*64kB (UE) 109*128kB (UME) 55*256kB (UME) 11*512kB (UME) 9*1024kB (UM) 3*2048kB (UM) 0*4096kB = 72336kB [ 381.033218][T13404] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 381.033227][T13404] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 381.033270][T13404] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 381.033280][T13404] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 381.033289][T13404] 32643 total pagecache pages [ 381.033293][T13404] 437 pages in swap cache [ 381.033298][T13404] Free swap = 53508kB [ 381.033301][T13404] Total swap = 124996kB [ 381.033306][T13404] 524155 pages RAM [ 381.033310][T13404] 0 pages HighMem/MovableOnly [ 381.033313][T13404] 212094 pages reserved [ 381.033317][T13404] 0 pages cma reserved [ 381.181121][T13407] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 381.247332][ T5525] usb 11-1: USB disconnect, device number 34 [ 381.324822][T13373] can0 (unregistered): slcan off ttyprintk. [ 381.368547][ T5744] Bluetooth: hci3: command 0x041b tx timeout [ 381.437597][T11273] usb usb54-port1: unable to enumerate USB device [ 382.148294][T13429] overlayfs: missing 'lowerdir' [ 382.386527][T13434] lo: entered allmulticast mode [ 382.400613][T13434] mroute: pending queue full, dropping entries [ 382.404554][T13433] lo: left allmulticast mode [ 382.493020][T13439] FAULT_INJECTION: forcing a failure. [ 382.493020][T13439] name failslab, interval 1, probability 0, space 0, times 0 [ 382.493077][T13439] CPU: 2 UID: 0 PID: 13439 Comm: syz.8.1537 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.493104][T13439] Tainted: [L]=SOFTLOCKUP [ 382.493110][T13439] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 382.493116][T13439] Call Trace: [ 382.493121][T13439] [ 382.493126][T13439] dump_stack_lvl+0x100/0x190 [ 382.493165][T13439] should_fail_ex.cold+0x5/0xa [ 382.493181][T13439] should_failslab+0xc2/0x120 [ 382.493196][T13439] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 382.493211][T13439] ? __d_alloc+0x35/0xa50 [ 382.493227][T13439] __d_alloc+0x35/0xa50 [ 382.493255][T13439] d_alloc_pseudo+0x1c/0xc0 [ 382.493272][T13439] alloc_file_pseudo+0x118/0x290 [ 382.493288][T13439] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 382.493303][T13439] ? alloc_fd+0x471/0x7a0 [ 382.493318][T13439] sock_alloc_file+0x50/0x210 [ 382.493333][T13439] __sys_socket+0x1c0/0x260 [ 382.493349][T13439] ? __pfx___sys_socket+0x10/0x10 [ 382.493365][T13439] ? fput+0x7c/0x100 [ 382.493378][T13439] ? ksys_write+0x1ac/0x250 [ 382.493388][T13439] ? __pfx_ksys_write+0x10/0x10 [ 382.493400][T13439] __ia32_sys_socket+0x72/0xb0 [ 382.493416][T13439] ? lockdep_hardirqs_on+0x7d/0x110 [ 382.493430][T13439] __do_fast_syscall_32+0x13a/0x8b0 [ 382.493445][T13439] ? lockdep_hardirqs_on+0x7d/0x110 [ 382.493459][T13439] do_fast_syscall_32+0x32/0x70 [ 382.493474][T13439] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 382.493488][T13439] RIP: 0023:0xf702efec [ 382.493501][T13439] Code: Unable to access opcode bytes at 0xf702efc2. [ 382.493506][T13439] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167 [ 382.493517][T13439] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003 [ 382.493524][T13439] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 382.493531][T13439] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 382.493537][T13439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.493543][T13439] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 382.493557][T13439] [ 382.549300][T13440] fuse: Bad value for 'fd' [ 382.782785][T13395] vhci_hcd: connection closed [ 382.783195][ T13] vhci_hcd vhci_hcd.3: stop threads [ 382.783284][ T13] vhci_hcd vhci_hcd.3: release socket [ 382.783336][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 382.858764][T13425] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 382.968163][ T5929] usb 44-1: device descriptor read/8, error -110 [ 382.986590][T13448] ima: policy update failed [ 382.995405][ T43] audit: type=1802 audit(2000000084.522:1197): pid=13448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.1540" res=0 errno=0 [ 383.211984][T13456] syz.4.1543 (13456): attempted to duplicate a private mapping with mremap. This is not supported. [ 383.244965][T13462] Console: switching to colour dummy device 80x25 [ 383.359804][ T5929] usb usb44-port1: attempt power cycle [ 383.420000][T13463] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 383.438334][T13463] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 383.439421][T13463] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 383.439747][T13463] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 383.440845][T13463] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 383.465803][T13463] pci 0000:00:01.0: Adding to iommu group 1 [ 383.472165][T13463] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 383.472203][T13463] pci 0000:00:01.0: vgaarb: bridge control possible [ 383.472218][T13463] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 383.501561][T13463] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 383.505350][T13463] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 383.536908][T13463] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 383.572677][T13463] [drm] Found bochs VGA, ID 0xb0c5. [ 383.579154][T13463] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 383.587146][T13469] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 383.587174][T13469] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 383.587454][T13469] vhci_hcd vhci_hcd.0: Device attached [ 383.617013][T13463] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 383.700808][ T5929] usb 44-1: SetAddress Request (40) to port 0 [ 383.700950][ T5929] usb 44-1: new SuperSpeed USB device number 40 using vhci_hcd [ 383.893093][T13461] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 383.899889][T13463] Console: switching to colour frame buffer device 160x50 [ 383.957568][T13463] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 384.436812][ T7559] usb 11-1: new high-speed USB device number 35 using dummy_hcd [ 384.444559][T13483] hpfs: hpfs_map_sector(): read error [ 384.521006][T13470] vhci_hcd: connection reset by peer [ 384.523360][ T13] vhci_hcd vhci_hcd.3: stop threads [ 384.523384][ T13] vhci_hcd vhci_hcd.3: release socket [ 384.523428][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 384.587433][ T7559] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 384.593349][ T7559] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.598214][ T7559] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.601738][ T7559] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 384.606425][ T7559] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.611307][ T7559] usb 11-1: config 0 descriptor?? [ 385.076149][ T7559] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 385.341730][T13487] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 385.451604][T13496] block nbd0: reconnected socket [ 385.455645][ T66] block nbd0: Receive control failed (result -32) [ 385.519181][T13500] FAULT_INJECTION: forcing a failure. [ 385.519181][T13500] name failslab, interval 1, probability 0, spa ** replaying previous printk message ** [ 385.519181][T13500] FAULT_INJECTION: forcing a failure. [ 385.519181][T13500] name failslab, interval 1, probability 0, space 0, times 0 [ 385.522780][T13500] CPU: 2 UID: 0 PID: 13500 Comm: syz.3.1553 Tainted: G L syzkaller #0 PREEMPT(full) [ 385.522812][T13500] Tainted: [L]=SOFTLOCKUP [ 385.522821][T13500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 385.522846][T13500] Call Trace: [ 385.522856][T13500] [ 385.522864][T13500] dump_stack_lvl+0x100/0x190 [ 385.522952][T13500] should_fail_ex.cold+0x5/0xa [ 385.522976][T13500] should_failslab+0xc2/0x120 [ 385.523022][T13500] __kmalloc_noprof+0xfc/0x840 [ 385.523041][T13500] ? rcu_is_watching+0x13/0xc0 [ 385.523060][T13500] ? tomoyo_realpath_from_path+0xb6/0x690 [ 385.523092][T13500] tomoyo_realpath_from_path+0xb6/0x690 [ 385.523124][T13500] tomoyo_check_open_permission+0x2af/0x3c0 [ 385.523149][T13500] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 385.523172][T13500] ? lockdep_hardirqs_on+0x7d/0x110 [ 385.523232][T13500] ? hook_file_open+0x248/0x8e0 [ 385.523276][T13500] ? path_get+0x61/0x80 [ 385.523301][T13500] tomoyo_file_open+0x6b/0x90 [ 385.523322][T13500] security_file_open+0xb5/0x1e0 [ 385.523348][T13500] do_dentry_open+0x588/0x14d0 [ 385.523373][T13500] vfs_open+0x82/0x3f0 [ 385.523401][T13500] path_openat+0x19fa/0x2440 [ 385.523427][T13500] ? __pfx_path_openat+0x10/0x10 [ 385.523455][T13500] do_file_open+0x20e/0x430 [ 385.523478][T13500] ? __pfx_do_file_open+0x10/0x10 [ 385.523515][T13500] ? _raw_spin_unlock+0x28/0x50 [ 385.523534][T13500] ? alloc_fd+0x471/0x7a0 [ 385.523562][T13500] do_sys_openat2+0x10f/0x1e0 [ 385.523587][T13500] ? __pfx_do_sys_openat2+0x10/0x10 [ 385.523616][T13500] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 385.523645][T13500] __ia32_compat_sys_openat+0x12d/0x210 [ 385.523672][T13500] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 385.523696][T13500] ? fput+0x7c/0x100 [ 385.523718][T13500] ? ksys_write+0x1ac/0x250 [ 385.523735][T13500] ? __pfx_ksys_write+0x10/0x10 [ 385.523758][T13500] __do_fast_syscall_32+0x13a/0x8b0 [ 385.523783][T13500] ? lockdep_hardirqs_on+0x7d/0x110 [ 385.523808][T13500] do_fast_syscall_32+0x32/0x70 [ 385.523832][T13500] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 385.523856][T13500] RIP: 0023:0xf708efec [ 385.523876][T13500] Code: Unable to access opcode bytes at 0xf708efc2. [ 385.523885][T13500] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 385.523904][T13500] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 385.523915][T13500] RDX: 0000000000101200 RSI: 0000000000000008 RDI: 0000000000000000 [ 385.523926][T13500] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 385.523937][T13500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.523947][T13500] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 385.523971][T13500] [ 385.524034][T13500] ERROR: Out of memory at tomoyo_realpath_from_path. [ 385.526320][T13500] [ 385.647807][T13500] ====================================================== [ 385.650987][T13500] WARNING: possible circular locking dependency detected [ 385.654417][T13500] syzkaller #0 Tainted: G L [ 385.657092][T13500] ------------------------------------------------------ [ 385.659888][T13500] syz.3.1553/13500 is trying to acquire lock: [ 385.662290][T13500] ffffffff8efc8ce0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x63/0x6a0 [ 385.665876][T13500] [ 385.665876][T13500] but task is already holding lock: [ 385.668519][T13500] ffff88802acb3210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_setattr+0x88/0x130 [ 385.672575][T13500] [ 385.672575][T13500] which lock already depends on the new lock. [ 385.672575][T13500] [ 385.676597][T13500] [ 385.676597][T13500] the existing dependency chain (in reverse order) is: [ 385.679569][T13500] [ 385.679569][T13500] -> #8 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 385.682778][T13500] lock_acquire+0x1d1/0x380 [ 385.684675][T13500] down_read+0x99/0x4c0 [ 385.686542][T13500] kernfs_iop_permission+0x6e/0xc0 [ 385.688678][T13500] inode_permission+0x3f1/0x620 [ 385.690721][T13500] cgroup_may_write+0xaa/0x120 [ 385.692702][T13500] cgroup_attach_permissions+0x1b8/0x5e0 [ 385.695125][T13500] __cgroup_procs_write+0x2d4/0x730 [ 385.697433][T13500] cgroup_procs_write+0x26/0x60 [ 385.699718][T13500] cgroup_file_write+0x1e6/0x8a0 [ 385.701829][T13500] kernfs_fop_write_iter+0x3e0/0x5f0 [ 385.703970][T13500] vfs_write+0x6af/0x1050 [ 385.705665][T13500] ksys_write+0x12a/0x250 [ 385.707235][T13500] do_int80_emulation+0x166/0x650 [ 385.708951][T13500] asm_int80_emulation+0x1a/0x20 [ 385.710729][T13500] [ 385.710729][T13500] -> #7 (cgroup_threadgroup_rwsem){++++}-{0:0}: [ 385.713371][T13500] lock_acquire+0x1d1/0x380 [ 385.715005][T13500] percpu_down_write+0x53/0x3e0 [ 385.716720][T13500] cgroup_procs_write_start+0x568/0x890 [ 385.719092][T13500] __cgroup_procs_write+0xd7/0x730 [ 385.721023][T13500] cgroup_procs_write+0x26/0x60 [ 385.722760][T13500] cgroup_file_write+0x1e6/0x8a0 [ 385.724480][T13500] kernfs_fop_write_iter+0x3e0/0x5f0 [ 385.726385][T13500] vfs_write+0x6af/0x1050 [ 385.728054][T13500] ksys_write+0x12a/0x250 [ 385.729694][T13500] do_int80_emulation+0x166/0x650 [ 385.731569][T13500] asm_int80_emulation+0x1a/0x20 [ 385.733317][T13500] [ 385.733317][T13500] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 385.735742][T13500] lock_acquire+0x1d1/0x380 [ 385.737362][T13500] cpus_read_lock+0x42/0x170 [ 385.739080][T13500] static_key_slow_inc+0x12/0x30 [ 385.740888][T13500] nbd_genl_reconnect_sock_cb+0x39f/0x990 [ 385.742894][T13500] nbd_genl_foreach_sock+0x2ab/0x3e0 [ 385.745163][T13500] nbd_genl_reconfigure+0x861/0xde0 [ 385.747249][T13500] genl_family_rcv_msg_doit+0x214/0x300 [ 385.749551][T13500] genl_rcv_msg+0x560/0x800 [ 385.751322][T13500] netlink_rcv_skb+0x159/0x420 [ 385.753132][T13500] genl_rcv+0x28/0x40 [ 385.754701][T13500] netlink_unicast+0x585/0x850 [ 385.756722][T13500] netlink_sendmsg+0x8b0/0xda0 [ 385.758819][T13500] ____sys_sendmsg+0xa4d/0xbe0 [ 385.761202][T13500] ___sys_sendmsg+0x190/0x1e0 [ 385.763216][T13500] __sys_sendmsg+0x160/0x210 [ 385.765332][T13500] __do_fast_syscall_32+0x13a/0x8b0 [ 385.767842][T13500] do_fast_syscall_32+0x32/0x70 [ 385.770114][T13500] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 385.773393][T13500] [ 385.773393][T13500] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 385.777347][T13500] lock_acquire+0x1d1/0x380 [ 385.779589][T13500] __mutex_lock+0x1a4/0x1bd0 [ 385.781830][T13500] nbd_queue_rq+0x42d/0xfa0 [ 385.784063][T13500] blk_mq_dispatch_rq_list+0x428/0x1e60 [ 385.786640][T13500] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 385.789427][T13500] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 385.792380][T13500] blk_mq_run_work_fn+0x135/0x380 [ 385.795053][T13500] process_one_work+0xac7/0x1b10 [ 385.797483][T13500] worker_thread+0x5ef/0xe50 [ 385.799626][T13500] kthread+0x373/0x450 [ 385.801647][T13500] ret_from_fork+0x730/0xd60 [ 385.803821][T13500] ret_from_fork_asm+0x1a/0x30 [ 385.806056][T13500] [ 385.806056][T13500] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 385.809073][T13500] lock_acquire+0x1d1/0x380 [ 385.811234][T13500] __mutex_lock+0x1a4/0x1bd0 [ 385.813409][T13500] nbd_queue_rq+0xba/0xfa0 [ 385.816169][T13500] blk_mq_dispatch_rq_list+0x428/0x1e60 [ 385.819836][T13500] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 385.823250][T13500] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 385.826097][T13500] blk_mq_run_work_fn+0x135/0x380 [ 385.828286][T13500] process_one_work+0xac7/0x1b10 [ 385.830092][T13500] worker_thread+0x5ef/0xe50 [ 385.832142][T13500] kthread+0x373/0x450 [ 385.834094][T13500] ret_from_fork+0x730/0xd60 [ 385.835742][T13500] ret_from_fork_asm+0x1a/0x30 [ 385.837617][T13500] [ 385.837617][T13500] -> #3 (set->srcu){.+.+}-{0:0}: [ 385.839998][T13500] lock_sync+0xb5/0x120 [ 385.841497][T13500] __synchronize_srcu+0xa2/0x300 [ 385.843281][T13500] blk_mq_quiesce_queue+0x149/0x1c0 [ 385.845199][T13500] elevator_switch+0x17b/0x7e0 [ 385.846927][T13500] elevator_change+0x352/0x530 [ 385.848827][T13500] elevator_set_default+0x29e/0x360 [ 385.850710][T13500] blk_register_queue+0x48e/0x630 [ 385.852551][T13500] __add_disk+0x73f/0xe40 [ 385.854151][T13500] add_disk_fwnode+0x118/0x480 [ 385.855851][T13500] nbd_dev_add+0x779/0xb10 [ 385.857462][T13500] nbd_init+0x2c5/0x2e0 [ 385.859103][T13500] do_one_initcall+0x11c/0x6f0 [ 385.860843][T13500] kernel_init_freeable+0x6ea/0x7b0 [ 385.862683][T13500] kernel_init+0x21/0x1e0 [ 385.864274][T13500] ret_from_fork+0x730/0xd60 [ 385.865905][T13500] ret_from_fork_asm+0x1a/0x30 [ 385.867656][T13500] [ 385.867656][T13500] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 385.870238][T13500] lock_acquire+0x1d1/0x380 [ 385.871883][T13500] __mutex_lock+0x1a4/0x1bd0 [ 385.873610][T13500] elevator_change+0x1bc/0x530 [ 385.875359][T13500] elevator_set_none+0x92/0xf0 [ 385.877071][T13500] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 385.879249][T13500] nbd_start_device+0x1a6/0xbd0 [ 385.881135][T13500] nbd_genl_connect+0xfc2/0x1760 [ 385.882944][T13500] genl_family_rcv_msg_doit+0x214/0x300 [ 385.884979][T13500] genl_rcv_msg+0x560/0x800 [ 385.886645][T13500] netlink_rcv_skb+0x159/0x420 [ 385.888410][T13500] genl_rcv+0x28/0x40 [ 385.889952][T13500] netlink_unicast+0x585/0x850 [ 385.891616][T13500] netlink_sendmsg+0x8b0/0xda0 [ 385.893310][T13500] ____sys_sendmsg+0xa4d/0xbe0 [ 385.894985][T13500] ___sys_sendmsg+0x190/0x1e0 [ 385.896625][T13500] __sys_sendmsg+0x160/0x210 [ 385.898241][T13500] __do_fast_syscall_32+0x13a/0x8b0 [ 385.900026][T13500] do_fast_syscall_32+0x32/0x70 [ 385.901755][T13500] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 385.904077][T13500] [ 385.904077][T13500] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 385.906956][T13500] lock_acquire+0x1d1/0x380 [ 385.908546][T13500] blk_alloc_queue+0x610/0x790 [ 385.910231][T13500] blk_mq_alloc_queue+0x174/0x290 [ 385.912085][T13500] __blk_mq_alloc_disk+0x29/0x120 [ 385.913813][T13500] nbd_dev_add+0x491/0xb10 [ 385.915376][T13500] nbd_init+0x2c5/0x2e0 [ 385.916894][T13500] do_one_initcall+0x11c/0x6f0 [ 385.918579][T13500] kernel_init_freeable+0x6ea/0x7b0 [ 385.920376][T13500] kernel_init+0x21/0x1e0 [ 385.921887][T13500] ret_from_fork+0x730/0xd60 [ 385.923639][T13500] ret_from_fork_asm+0x1a/0x30 [ 385.925521][T13500] [ 385.925521][T13500] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 385.928134][T13506] program syz.4.1555 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 385.931427][T13500] check_prev_add+0xeb/0xe60 [ 385.933026][T13500] __lock_acquire+0x1492/0x1ec0 [ 385.934679][T13500] lock_acquire+0x1d1/0x380 [ 385.936254][T13500] fs_reclaim_acquire+0xc4/0x100 [ 385.937958][T13500] kmem_cache_alloc_noprof+0x63/0x6a0 [ 385.939715][T13500] __kernfs_iattrs+0x126/0x450 [ 385.941341][T13500] __kernfs_setattr+0x4d/0x3c0 [ 385.942946][T13500] kernfs_iop_setattr+0xda/0x130 [ 385.944695][T13500] notify_change+0xb25/0x1330 [ 385.946340][T13500] do_truncate+0x1df/0x240 [ 385.947915][T13500] path_openat+0x1e6d/0x2440 [ 385.949531][T13500] do_file_open+0x20e/0x430 [ 385.951170][T13500] do_sys_openat2+0x10f/0x1e0 [ 385.952930][T13500] __ia32_compat_sys_openat+0x12d/0x210 [ 385.955165][T13500] __do_fast_syscall_32+0x13a/0x8b0 [ 385.957287][T13500] do_fast_syscall_32+0x32/0x70 [ 385.959202][T13500] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 385.961415][T13500] [ 385.961415][T13500] other info that might help us debug this: [ 385.961415][T13500] [ 385.964541][T13500] Chain exists of: [ 385.964541][T13500] fs_reclaim --> cgroup_threadgroup_rwsem --> &root->kernfs_iattr_rwsem [ 385.964541][T13500] [ 385.969339][T13500] Possible unsafe locking scenario: [ 385.969339][T13500] [ 385.971702][T13500] CPU0 CPU1 [ 385.973413][T13500] ---- ---- [ 385.975019][T13500] lock(&root->kernfs_iattr_rwsem); [ 385.976627][T13500] lock(cgroup_threadgroup_rwsem); [ 385.979014][T13500] lock(&root->kernfs_iattr_rwsem); [ 385.981365][T13500] lock(fs_reclaim); [ 385.982594][T13500] [ 385.982594][T13500] *** DEADLOCK *** [ 385.982594][T13500] [ 385.985424][T13500] locks held by syz.3.1553/13500: 3, last CPU#2: [ 385.987693][T13500] #0: ffff888026244460 (sb_writers#10){.+.+}-{0:0}, at: path_openat+0x1a45/0x2440 [ 385.990812][T13500] #1: ffff8880131a3a40 (&sb->s_type->i_mutex_key#19){+.+.}-{4:4}, at: do_truncate+0x14e/0x240 [ 385.993908][T13500] #2: ffff88802acb3210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_setattr+0x88/0x130 [ 385.997128][T13500] [ 385.997128][T13500] stack backtrace: [ 385.998997][T13500] CPU: 2 UID: 0 PID: 13500 Comm: syz.3.1553 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.002374][T13500] Tainted: [L]=SOFTLOCKUP [ 386.003702][T13500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 386.006812][T13500] Call Trace: [ 386.007949][T13500] [ 386.008938][T13500] dump_stack_lvl+0x100/0x190 [ 386.010611][T13500] print_circular_bug.cold+0x178/0x1be [ 386.012477][T13500] check_noncircular+0x146/0x160 [ 386.014139][T13500] check_prev_add+0xeb/0xe60 [ 386.015672][T13500] ? __pfx_stack_trace_save+0x10/0x10 [ 386.017363][T13500] __lock_acquire+0x1492/0x1ec0 [ 386.018861][T13500] ? add_lock_to_list+0x9d/0x1d0 [ 386.020449][T13500] lock_acquire+0x1d1/0x380 [ 386.021901][T13500] ? kmem_cache_alloc_noprof+0x63/0x6a0 [ 386.023527][T13500] ? __lock_acquire+0xe15/0x1ec0 [ 386.024991][T13500] fs_reclaim_acquire+0xc4/0x100 [ 386.026544][T13500] ? kmem_cache_alloc_noprof+0x63/0x6a0 [ 386.028512][T13500] kmem_cache_alloc_noprof+0x63/0x6a0 [ 386.030610][T13500] ? __kernfs_iattrs+0x126/0x450 [ 386.032393][T13500] __kernfs_iattrs+0x126/0x450 [ 386.034051][T13500] ? __pfx___kernfs_iattrs+0x10/0x10 [ 386.035699][T13500] ? inode_newsize_ok+0x13d/0x200 [ 386.037294][T13500] __kernfs_setattr+0x4d/0x3c0 [ 386.038815][T13500] kernfs_iop_setattr+0xda/0x130 [ 386.040386][T13500] ? __pfx_kernfs_iop_setattr+0x10/0x10 [ 386.042125][T13500] notify_change+0xb25/0x1330 [ 386.043601][T13500] do_truncate+0x1df/0x240 [ 386.044992][T13500] ? __pfx_do_truncate+0x10/0x10 [ 386.046552][T13500] ? ima_iint_find+0xe9/0x130 [ 386.048082][T13500] path_openat+0x1e6d/0x2440 [ 386.049561][T13500] ? __pfx_path_openat+0x10/0x10 [ 386.051138][T13500] do_file_open+0x20e/0x430 [ 386.052558][T13500] ? __pfx_do_file_open+0x10/0x10 [ 386.054140][T13500] ? _raw_spin_unlock+0x28/0x50 [ 386.055641][T13500] ? alloc_fd+0x471/0x7a0 [ 386.057008][T13500] do_sys_openat2+0x10f/0x1e0 [ 386.058745][T13500] ? __pfx_do_sys_openat2+0x10/0x10 [ 386.060639][T13500] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 386.062806][T13500] __ia32_compat_sys_openat+0x12d/0x210 [ 386.064650][T13500] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 386.066553][T13500] ? fput+0x7c/0x100 [ 386.067804][T13500] ? ksys_write+0x1ac/0x250 [ 386.069234][T13500] ? __pfx_ksys_write+0x10/0x10 [ 386.070780][T13500] __do_fast_syscall_32+0x13a/0x8b0 [ 386.072463][T13500] ? lockdep_hardirqs_on+0x7d/0x110 [ 386.074092][T13500] do_fast_syscall_32+0x32/0x70 [ 386.075648][T13500] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 386.077689][T13500] RIP: 0023:0xf708efec [ 386.079023][T13500] Code: Unable to access opcode bytes at 0xf708efc2. [ 386.081240][T13500] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 386.083980][T13500] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 386.086563][T13500] RDX: 0000000000101200 RSI: 0000000000000008 RDI: 0000000000000000 [ 386.089063][T13500] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 386.091630][T13500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.094202][T13500] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 386.096678][T13500] [ 386.458607][ T5822] bridge_slave_1: left allmulticast mode [ 386.458665][ T5822] bridge_slave_1: left promiscuous mode [ 386.458842][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.485049][ T5822] bridge_slave_0: left allmulticast mode [ 386.485146][ T5822] bridge_slave_0: left promiscuous mode [ 386.486224][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.516820][ T7559] usb 11-1: reset high-speed USB device number 35 using dummy_hcd [ 386.646868][ T5744] Bluetooth: hci3: command 0x041b tx timeout [ 386.656913][ T7559] usb 11-1: device descriptor read/64, error -32 [ 386.813279][ T5822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 386.839035][ T5822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.847694][ T5822] bond0 (unregistering): Released all slaves [ 386.907101][ T7559] usb 11-1: reset high-speed USB device number 35 using dummy_hcd [ 386.910788][ T7743] wg2 speed is unknown, defaulting to 1000 [ 386.910836][ T7743] syz2: Port: 1 Link DOWN [ 386.920106][ T7743] wg2 speed is unknown, defaulting to 1000 [ 387.047833][ T7559] usb 11-1: device descriptor read/64, error -32 [ 387.251651][ T5822] hsr_slave_0: left promiscuous mode [ 387.254349][ T5822] hsr_slave_1: left promiscuous mode [ 387.254781][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.254792][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.257180][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.257194][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.264655][ T5822] veth1_macvtap: left promiscuous mode [ 387.264690][ T5822] veth0_macvtap: left promiscuous mode [ 387.264765][ T5822] veth1_vlan: left promiscuous mode [ 387.264810][ T5822] veth0_vlan: left promiscuous mode [ 387.333693][ T5822] team0 (unregistering): Port device team_slave_1 removed [ 387.339040][ T5822] team0 (unregistering): Port device team_slave_0 removed [ 387.353348][T12066] smc: removing ib device syz2 [ 387.367898][T12066] smbdirect: ib_dev[syz2] removed [ 387.792731][ T5822] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.863132][ T5822] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.930583][ T5822] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.937083][ T7560] usb 11-1: USB disconnect, device number 35 [ 387.981698][ T5822] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.040882][ T5822] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.102048][ T5822] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.150841][ T5448] 8021q: adding VLAN 0 to HW filter on device eth6 [ 388.182953][ T5822] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.262258][ T5822] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.269081][ T5448] 8021q: adding VLAN 0 to HW filter on device eth7 [ 388.339291][ T5822] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.378659][ T5448] 8021q: adding VLAN 0 to HW filter on device eth8 [ 388.384926][ T5822] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.442241][ T5822] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.503737][ T5448] 8021q: adding VLAN 0 to HW filter on device eth25 [ 388.510416][ T5822] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.575637][ T5822] bridge_slave_1: left allmulticast mode [ 388.577937][ T5822] bridge_slave_1: left promiscuous mode [ 388.578084][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.583492][ T5822] bridge_slave_0: left allmulticast mode [ 388.583542][ T5822] bridge_slave_0: left promiscuous mode [ 388.583847][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.590891][ T5822] bridge_slave_1: left allmulticast mode [ 388.590938][ T5822] bridge_slave_1: left promiscuous mode [ 388.591054][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.595565][ T5822] bridge_slave_0: left allmulticast mode [ 388.595582][ T5822] bridge_slave_0: left promiscuous mode [ 388.595661][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.617808][ T5822] bridge_slave_1: left allmulticast mode [ 388.617872][ T5822] bridge_slave_1: left promiscuous mode [ 388.618027][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.622360][ T5822] bridge_slave_0: left allmulticast mode [ 388.622390][ T5822] bridge_slave_0: left promiscuous mode [ 388.622500][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.726853][ T5929] usb 44-1: device descriptor read/8, error -110 [ 388.742056][ T5822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.750766][ T5822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.754413][ T5822] bond0 (unregistering): Released all slaves [ 388.756472][ T5822] bond1 (unregistering): Released all slaves [ 388.790346][ T5822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.794946][ T5822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.799702][ T5822] bond0 (unregistering): Released all slaves [ 388.845650][ T5822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.849751][ T5822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.852941][ T5822] bond0 (unregistering): Released all slaves [ 388.854238][ T5822] bond2 (unregistering): Released all slaves [ 388.859610][ T5448] 8021q: adding VLAN 0 to HW filter on device eth26 [ 388.983435][ T5822] IPVS: stopping master sync thread 10444 ... [ 389.046346][ T5448] 8021q: adding VLAN 0 to HW filter on device eth27 [ 389.129196][ T5929] usb usb44-port1: unable to enumerate USB device [ 389.182051][ T5448] 8021q: adding VLAN 0 to HW filter on device eth28 [ 389.291987][ T5448] 8021q: adding VLAN 0 to HW filter on device eth29 [ 389.388679][ T5822] hsr_slave_0: left promiscuous mode [ 389.391381][ T5822] hsr_slave_1: left promiscuous mode [ 389.394112][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.396819][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.398070][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.398081][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.409057][ T5822] hsr_slave_0: left promiscuous mode [ 389.411612][ T5822] hsr_slave_1: left promiscuous mode [ 389.411945][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.411956][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.418009][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.418024][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.425263][ T5822] hsr_slave_0: left promiscuous mode [ 389.427297][ T5822] hsr_slave_1: left promiscuous mode [ 389.429227][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.431553][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.434225][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.436529][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.443554][ T5822] veth1_macvtap: left promiscuous mode [ 389.443603][ T5822] veth0_macvtap: left promiscuous mode [ 389.443667][ T5822] veth1_vlan: left promiscuous mode [ 389.443689][ T5822] veth0_vlan: left promiscuous mode [ 389.451383][ T5822] veth1_macvtap: left promiscuous mode [ 389.451434][ T5822] veth0_macvtap: left promiscuous mode [ 389.451631][ T5822] veth1_vlan: left promiscuous mode [ 389.451656][ T5822] veth0_vlan: left promiscuous mode [ 389.459639][ T5822] veth1_macvtap: left promiscuous mode [ 389.459696][ T5822] veth0_macvtap: left promiscuous mode [ 389.459868][ T5822] veth1_vlan: left promiscuous mode [ 389.459931][ T5822] veth0_vlan: left promiscuous mode [ 389.582556][ T5822] team0 (unregistering): Port device team_slave_1 removed [ 389.586139][ T5822] team0 (unregistering): Port device team_slave_0 removed [ 389.671123][ T5822] team0 (unregistering): Port device team_slave_1 removed [ 389.674748][ T5822] team0 (unregistering): Port device team_slave_0 removed [ 389.739601][ T5822] team0 (unregistering): Port device team_slave_1 removed [ 389.743204][ T5822] team0 (unregistering): Port device team_slave_0 removed [ 389.766465][ T5448] 8021q: adding VLAN 0 to HW filter on device eth30 [ 389.910417][ T5448] 8021q: adding VLAN 0 to HW filter on device eth31 [ 390.050896][ T5448] 8021q: adding VLAN 0 to HW filter on device eth32 [ 390.201233][ T5448] 8021q: adding VLAN 0 to HW filter on device eth33